api.nixchallenge.nl
Issued by Amazon
About this certificate
This digital certificate with serial number 07:59:1d:b0:85:4b:ca:32:3b:83:b4:d2:d2:22:de:2b was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.nixchallenge.nl
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:59:1d:b0:85:4b:ca:32:3b:83:b4:d2:d2:22:de:2bSerial Number (int): 9767312566192249765596779299343621675
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 4c:ac:ae:a2:39:fa:5e:f1:7a:6e:be:f5:0a:e3:6b:0e:b5:9b:b4:f3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ef:cf:66:03:dd:e3:d5:f7:13:54:af:40:69:a7:03:65:9a:03:2e:50
Fingerprint (sha256): 6c:b5:d7:8b:d9:ff:52:d8:dd:90:99:8d:06:28:93:fe:98:9a:3a:4a:f5:b7:eb:be:99:15:90:19:c3:ea:20:c6
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api.nixchallenge.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.nixchallenge.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.nixchallenge.nl
Other certificates including the domain name nixchallenge.nl
(limited to 100 certificates)
lokals.co.uk
digitalgoose.io
link.eco99-prod.moveodevelop.com
suludev.corp-internal.rxo.com
www.preguntaz.com
www.countingdowntocoble.com
schnelltest.care
01010000.tech
redthemes.net
mutcho.app
gaplite.redsos.com.ar
www.quehry.com
events-september-2022.amfa.net.au
www.nixchallenge.nl
nixchallenge.nl
www.federicofumo.com
premiocapitolium-roma.it
rustfish.com
www.gotakeout.ca
www.findhamza.xyz
firebase.hendrasaputra.com
www.federicofumo.com
inh-elgrancatire.elinmejorable.com
www.naoztd.com
e-learning.nixchallenge.nl
livego-stg.vonder.io
www.stissingtheatreguild.org
www.nixchallenge.nl
biotechhoney.com
dranna.takeaction.co
www.naoztd.com
beta.motormerchants.com.au
badassxxx.com
badassxxx.com
biotechhoney.com
blog.wharfstreetstudios.com
nixchallenge.nl
www.findhamza.xyz
gall-gall-finale.nixchallenge.nl
ozturkmakina.com.tr
liberty-live.anevent.co.za
moku-jp.com
www.oakwavephotography.com
comptametrics.com
subscription.timeyrd.com
www.quehry.com
lemonbox.nl
new.eestec.ro
www.nixchallenge.nl
e-learning.nixchallenge.nl
www.carvalhoneves.com.br
cgc.maresto.id
api.nixchallenge.nl
short.mimic.eu.org
ovellocapital.com
www.hellovia.id
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
www.honest.poker
naoto.bando.page
hub.veamstudios.com
info.2cl.com.br
www.lighthousetowels.com
admin.golfinity-app.com
inh-creamburguer.elinmejorable.com
eymir.zeplinx.com
www.jesplumbing.com
products.candbdev.com
vestedinterest.app
vishalsingh.xyz
yadidi.donyaplatform.com
links.selectcitywalk.com
nicolatiani.com
bombayspice.com.au
admin.ppdb.edutech.web.id
ayaandhir.com
www.nixchallenge.nl
hello.glmachado.com
windupmusic.ca
comptametrics.com
www.jamieson.app
s-kino.cedricmeyer.eu
mgemipartner.com
www.countingdowntocoble.com
antiguacatcafe.com
www.nixchallenge.nl
www.epsmachineindia.com
hillcharts.speedledger.net
www.nixchallenge.nl
www.nixchallenge.nl
sandy.chabbaman.com
falcodev.com.br
www.hellovia.id
www.jamieson.app
digitalgoose.io
link.eco99-prod.moveodevelop.com
suludev.corp-internal.rxo.com
www.preguntaz.com
www.countingdowntocoble.com
schnelltest.care
01010000.tech
redthemes.net
mutcho.app
gaplite.redsos.com.ar
www.quehry.com
events-september-2022.amfa.net.au
www.nixchallenge.nl
nixchallenge.nl
www.federicofumo.com
premiocapitolium-roma.it
rustfish.com
www.gotakeout.ca
www.findhamza.xyz
firebase.hendrasaputra.com
www.federicofumo.com
inh-elgrancatire.elinmejorable.com
www.naoztd.com
e-learning.nixchallenge.nl
livego-stg.vonder.io
www.stissingtheatreguild.org
www.nixchallenge.nl
biotechhoney.com
dranna.takeaction.co
www.naoztd.com
beta.motormerchants.com.au
badassxxx.com
badassxxx.com
biotechhoney.com
blog.wharfstreetstudios.com
nixchallenge.nl
www.findhamza.xyz
gall-gall-finale.nixchallenge.nl
ozturkmakina.com.tr
liberty-live.anevent.co.za
moku-jp.com
www.oakwavephotography.com
comptametrics.com
subscription.timeyrd.com
www.quehry.com
lemonbox.nl
new.eestec.ro
www.nixchallenge.nl
e-learning.nixchallenge.nl
www.carvalhoneves.com.br
cgc.maresto.id
api.nixchallenge.nl
short.mimic.eu.org
ovellocapital.com
www.hellovia.id
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
www.honest.poker
naoto.bando.page
hub.veamstudios.com
info.2cl.com.br
www.lighthousetowels.com
admin.golfinity-app.com
inh-creamburguer.elinmejorable.com
eymir.zeplinx.com
www.jesplumbing.com
products.candbdev.com
vestedinterest.app
vishalsingh.xyz
yadidi.donyaplatform.com
links.selectcitywalk.com
nicolatiani.com
bombayspice.com.au
admin.ppdb.edutech.web.id
ayaandhir.com
www.nixchallenge.nl
hello.glmachado.com
windupmusic.ca
comptametrics.com
www.jamieson.app
s-kino.cedricmeyer.eu
mgemipartner.com
www.countingdowntocoble.com
antiguacatcafe.com
www.nixchallenge.nl
www.epsmachineindia.com
hillcharts.speedledger.net
www.nixchallenge.nl
www.nixchallenge.nl
sandy.chabbaman.com
falcodev.com.br
www.hellovia.id
www.jamieson.app
Certificate
The complete raw certificate details for api.nixchallenge.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIQB1kdsIVLyjI7g7TS0iLeKzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA1MjAwMDAwMDBaFw0yMDA2MjAx MjAwMDBaMB4xHDAaBgNVBAMTE2FwaS5uaXhjaGFsbGVuZ2UubmwwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrunlqjpq0AD82qV/+Rz16wJ2vCPt7qP5J LQnFzb++1w8w/ig8gkKvLWj3maVWuOPVKtJ/mc/AVyqAtJjKye6+050J57Fzmodt 651/2VfaXfxecclxVh2hPobUbUAXhSEMuRfLYjqG2v5iQqN+lNQ6ojNsaYVOchE6 MPMHq8bEoDXmUMFZhPayM6By9vyQrkF7iV7VnriKBV3IUxGGcF0opEpESJBL2ZNb iAMs3a9Qg/cQGs9IduSivKtyFynypiLDP3Cfrh2uFKN0rEAHSRF6F2uKuztPf5yt wzVgg+pjdOYCXRW70Wy9QMQNdHpU6d8yduksOSYWSMlI4BG7VgetAgMBAAGjggGM MIIBiDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU TKyuojn6XvF6br71CuNrDrWbtPMwHgYDVR0RBBcwFYITYXBpLm5peGNoYWxsZW5n ZS5ubDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBts/qMiAlTQrstSXEInKPy C4wmpGc2B8rKV8Ys70SdPOIOHHllYOdax9iG8fugk4Zo1xitgBCXwrEyecsuoOuY 400P5I2M7A/+jqwn1SnYFHmpXjxTG3KX0mGEAX3AZmfwhO+CCWHO69cFEyL7475W P7zHiBky37etlRrbU1NbbuyKu1Z/4WA8O6TCkgbScuHbqZr02NI1M/cyVkQ+8KFo PIQoUneQYHYKDfB0Ln+OJ4JwJ7VMNYRV0Q4O4KuDmlBjnrwPy3JQ8fnxZMYri3Kg OblY40smMaTQC46ivh9S16FAKNdObdBoPLQj/wDthCkJnxmpa8DHWoDlH/9N413g -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7p5ao6atAA/Nqlf/kc9 esCdrwj7e6j+SS0Jxc2/vtcPMP4oPIJCry1o95mlVrjj1SrSf5nPwFcqgLSYysnu vtOdCeexc5qHbeudf9lX2l38XnHJcVYdoT6G1G1AF4UhDLkXy2I6htr+YkKjfpTU OqIzbGmFTnIROjDzB6vGxKA15lDBWYT2sjOgcvb8kK5Be4le1Z64igVdyFMRhnBd KKRKREiQS9mTW4gDLN2vUIP3EBrPSHbkoryrchcp8qYiwz9wn64drhSjdKxAB0kR ehdrirs7T3+crcM1YIPqY3TmAl0Vu9FsvUDEDXR6VOnfMnbpLDkmFkjJSOARu1YH rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9767312566192249765596779299343621675 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.nixchallenge.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21678704044908358663216602612600154433254318979712260883399660690699464494094091177236663542792905859549535307224429644420334348299009608513384464491117340304476971105295192509859327423205006259929828582772347454652068995347474640738304903435987252672704912663609609486106023276510307105905794172493581120775927286269458274395798275668413288925426710030576784967636732756808510358777697082058451082434827741620149209925453204775160357070461215694997188770012246210538681327935322200112493690748963724637908517329174744054890345932856429085814663589404283457886997466265466187387770754295260253692985752414762290251693 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4cacaea239fa5ef17a6ebef50ae36b0eb59bb4f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nixchallenge.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006db3fa8c88095342bb2d4971089ca3f20b8c26a4673607caca57c62cef449d3ce20e1c796560e75ac7d886f1fba0938668d718ad801097c2b13279cb2ea0eb98e34d0fe48d8cec0ffe8eac27d529d81479a95e3c531b7297d26184017dc06667f084ef820961ceebd7051322fbe3be563fbcc7881932dfb7ad951adb53535b6eec8abb567fe1603c3ba4c29206d272e1dba99af4d8d23533f73256443ef0a1683c842852779060760a0df0742e7f8e27827027b54c358455d10e0ee0ab839a50639ebc0fcb7250f1f9f164c62b8b72a039b958e34b2631a4d00b8ea2be1f52d7a14028d74e6dd0683cb423ff00ed8429099f19a96bc0c75a80e51fff4de35de0