www.westpoint.edu

- US Military Academy -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:47:81:fd:49:00:e3:68:21:3b:dd:3c:29:e6:3d:b7 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

US Military Academy

Organization: US Military Academy
State / Province: New York
Locality: West Point
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:47:81:fd:49:00:e3:68:21:3b:dd:3c:29:e6:3d:b7
Serial Number (int): 9675885545607850661320350992886545847
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: dd:da:79:1e:82:45:fa:10:e5:79:8e:01:8c:50:d4:a0:92:be:38:f2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 53:c8:26:a5:ac:00:83:0c:c3:39:28:f4:b1:7c:89:13:2e:e4:10:00
Fingerprint (sha256): 75:24:07:6e:e6:49:a0:22:a2:a3:11:c3:be:71:6e:d9:b3:05:63:d7:51:64:19:d5:c3:70:79:e1:ca:4b:63:31

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate www.westpoint.edu

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.westpoint.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.westpoint.edu
westpoint.edu
www.usma.edu
usma.edu
my.westpoint.edu
fieldforce.westpoint.edu
fieldforce.usma.edu
apps.westpoint.edu
apps.usma.edu
cis.westpoint.edu
cis.usma.edu
survey.westpoint.edu
smtp.westpoint.edu
courses.westpoint.edu
nominations.westpoint.edu
nominations.usma.edu
candidate.westpoint.edu
candidate.usma.edu

Other certificates including the domain name westpoint.edu

(limited to 100 certificates)
www.westpoint.edu
oema.westpoint.edu
www.westpoint.edu
courses.westpoint.edu
help.westpoint.edu
www.westpoint.edu
NOMINATIONS.USMA.EDU
library.westpoint.edu
westpoint.edu
www.westpoint.edu
survey.westpoint.edu
westpoint.edu
help.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
help.westpoint.edu
westpoint.edu
westpoint.edu
graybooks.westpoint.edu
www.westpoint.edu
oema.westpoint.edu
graybooks.westpoint.edu
apply.westpoint.edu
graybooks.westpoint.edu
researcher.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
*.blackbelthelp.com
digitalcommons.westpoint.edu
digitalcommons.westpoint.edu
library.westpoint.edu
library.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
westpoint.edu
FIELDFORCE.WESTPOINT.EDU
westpoint.edu
eecscourses.westpoint.edu
www.westpoint.edu
oema.westpoint.edu
westpoint.edu
oema.army.mil
aimings.westpoint.edu
halo.westpoint.edu
www.westpoint.edu
www.westpoint.edu
apply.westpoint.edu
*.blackbelthelp.com
help.westpoint.edu
*.blackbelthelp.com
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
graybooks.westpoint.edu
westpoint.edu
eecscourses.westpoint.edu
survey.westpoint.edu
ninjio.westpoint.edu
www.westpoint.edu
westpoint.edu
library.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
help.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
www.westpoint.edu
nominations.usma.edu
www.westpoint.edu
westpoint.edu
www.westpoint.edu
www.westpoint.edu
ams-external.westpoint.edu
www.westpoint.edu
westpoint.edu
candidate.usma.edu
ninjio.westpoint.edu
westpoint.edu
westpoint.edu
ctc.westpoint.edu
athena.westpoint.edu
NOMINATIONS.USMA.EDU
FIELDFORCE.WESTPOINT.EDU
*.blackbelthelp.com
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
help.westpoint.edu
help.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
eecscourses.westpoint.edu
insiderthreat.westpoint.edu
westpoint.edu
digitalcommons.westpoint.edu
westpoint.edu
www.westpoint.edu
www.westpoint.edu

Certificate

The complete raw certificate details for www.westpoint.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZnO/rFQ0tU35pOuSIUS
QgzJ+aQRJYdk6rfVVQMAq/cKc/vym3qmN5vra2+IdAIBJJaQBNi+Dhn7qfTVZfDk
MvHQiXOg/Kvj+gxswxhsAxQfdRuizSUgxwROm77z41jpDfytw7ACvtWXFusjnOl0
ZF7oyRnBnjJ8PjXwvhHEVO1VsWIJK9lCXmtEQ/XeroQOHQ8BuEdMzDLSBjfSiHGL
R7AK2omvh26g9vBe4I1JAYDBd45/svhfnlAiBm+04FPMQLWfN8w/qesH9TXlxu/q
WxckWqG1NBVNJV1KaDtRKJ42SaCv2VH80d6g/afWO5xiFVY/ZiZg2MAVr5+JOKC5
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9675885545607850661320350992886545847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Point'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Military Academy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.westpoint.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27974511232053323773201714119359505185122673754882172049738555771968684821739891869650712151013824591773521416291702415306528387035626013214317218822524134658205088234245820849972746660536102403769322201210789843109516580795451417496197581779451194097347927307087555982140891606990072539686175671126519209202483245118942095527326185993640582224882312334745485931547263384021654775747316670003046947569411721658538482229567543302500663207594801287202396660809463023761779886629445556264381571412209075888987688815122382551575804602449300230835458805559979083212146929280362787003617359694339161802094093802039970675061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddda791e8245fa10e5798e018c50d4a092be38f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldforce.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldforce.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominations.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominations.usma.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candidate.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candidate.usma.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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