atlantis.system1.company

Issued by Amazon

About this certificate

This digital certificate with serial number 06:50:e5:2a:74:ff:c0:66:22:3d:a1:49:7a:37:ba:74 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=atlantis.system1.company

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:50:e5:2a:74:ff:c0:66:22:3d:a1:49:7a:37:ba:74
Serial Number (int): 8395399758983789081012215327114115700
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d2:78:dc:b9:7e:c0:e1:80:de:c3:8a:d4:ac:11:3a:2d:57:2b:79:78
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 76:ac:3d:7f:74:9a:09:c9:37:ab:b8:24:5a:03:00:b4:84:0a:4c:3f
Fingerprint (sha256): 76:fe:8d:7b:c4:47:ba:fe:16:fc:0c:a0:f8:b6:8a:10:11:ba:e7:a4:1d:b2:20:2e:3b:89:6f:a7:f1:0a:4a:4b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate atlantis.system1.company

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atlantis.system1.company

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlantis.system1.company

Other certificates including the domain name system1.company

(limited to 100 certificates)
stage.play.howstuffworks.com
jenkins-stage-jaimguer-us-west-2.system1.company
system1.company
stage.play.howstuffworks.com
system1.company
s1-sp.com
stage.play.howstuffworks.com
s1-sp.com
alertmanager-us-west-2.k8s-sandbox-stage.system1.company
*.howstuffworks.com
stage.howstuffworks.com
*.howstuffworks.com
howstuffworks.com
argocd-us-west-2.k8s-sandbox-stage.system1.company
s1-sp.com
grafana-us-west-2.k8s-sandbox-stage.system1.company
pubwp-origin-prod.k.system1.company
s1-sp.com
prometheus-us-west-2.k8s-sandbox-stage.system1.company
*.data-science-prod.system1.company
report-api-stage-cert-us-west-2.system1.company
atlantis.system1.company
system1.company
system1.company
pubwp-admin-prod.k.system1.company
makesparkv2-stage-us-west-2.system1.company
report-api-prod-us-west-2.system1.company
howstuffworks.com
pubwp-origin-stage-terry1.k.system1.company
howstuffworks.com
atlantis.system1.company
system1.company
howstuffworks.com
argocd-us-west-2.platform-stage.system1.company
argoworkflows-eu-west-1.platform-prod.system1.company
grafana-us-west-2.k8s-sandbox-stage.system1.company
s1-sp.com
stage.play.howstuffworks.com
s1-sp.com
*.play.howstuffworks.com
argoworkflows-us-west-2.k8s-sandbox-stage.system1.company
argocd-eu-west-1.platform-prod.system1.company
alertmanager-us-west-2.k8s-sandbox-stage.system1.company
argocd-us-west-2.k8s-sandbox-stage.system1.company
system1.company
*.howstuffworks.com
argocd-us-west-2.k8s-sandbox-stage.system1.company
argoworkflows-us-west-2.k8s-sandbox-stage.system1.company
makesparkv2-stage-us-west-2.system1.company
system1.company
argoworkflows-us-west-2.platform-prod.system1.company
argocd-us-east-1.platform-prod.system1.company
s1-sp.com
s1-sp.com
argoworkflows-us-west-2.k8s-sandbox-stage.system1.company
howstuffworks.com
system1.company
platform-api-us-west-2.platform-stage.system1.company
argocd-us-west-2.k8s-sandbox-stage.system1.company
*.howstuffworks.com
s1-sp.com
*.howstuffworks.com
alertmanager-us-west-2.k8s-sandbox-stage.system1.company
openmail.com
report-api-stage-us-west-2.system1.company
prometheus-us-west-2.k8s-sandbox-stage.system1.company
s1-sp.com
search-us-east-1.platform-prod.system1.company
alertmanager-us-west-2.k8s-sandbox-stage.system1.company
argocd-us-west-2.k8s-sandbox-stage.system1.company
argocd-eu-west-1.platform-prod.system1.company
layout-makespark-stage.system1.company
prometheus-us-west-2.k8s-sandbox-stage.system1.company
grafana-us-west-2.k8s-sandbox-stage.system1.company
atlantis.system1.company
pubwp-admin-stage.k.system1.company
prometheus-us-west-2.k8s-sandbox-stage.system1.company
s1-sp.com
system1.company
argoworkflows-us-west-2.k8s-sandbox-stage.system1.company
alfred-prod-us-west-2.system1.company
system1.company
system1.company
makesparkv2-prod-us-west-2.system1.company
prometheus-us-west-2.k8s-sandbox-stage.system1.company
howstuffworks.com
alertmanager-us-west-2.k8s-sandbox-stage.system1.company
jenkins-stage-us-west-2.srpc-s.system1.company
stage.howstuffworks.com
makesparkv2-canary-us-west-2.system1.company
alertmanager-us-west-2.k8s-sandbox-stage.system1.company
alertmanager-us-west-2.k8s-sandbox-stage.system1.company
prometheus-us-west-2.k8s-sandbox-stage.system1.company
platform-api-us-west-2.platform-prod.system1.company
atlantis.system1.company
argocd-us-west-2.k8s-sandbox-stage.system1.company
makesparkv2-canary-us-west-2.system1.company
*.data-science-prod.system1.company
grafana-us-west-2.k8s-sandbox-stage.system1.company
argoworkflows-us-west-2.k8s-sandbox-stage.system1.company

Certificate

The complete raw certificate details for atlantis.system1.company in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEhjCCA26gAwIBAgIQBlDlKnT/wGYiPaFJeje6dDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MTEwMDAwMDBaFw0yMDEwMTEx
MjAwMDBaMCMxITAfBgNVBAMTGGF0bGFudGlzLnN5c3RlbTEuY29tcGFueTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMbgBNmR1gusEURNTcghOZB+8OKJ
Ajah4fUok+yaDlLx++WT71fBwqgPYEUNpcMthvYyUL9Tmx1Qdvi0M3Ot8/s3JofE
YuV9N1/zHteqyEbt2+NrT7flMz757Iu9nhQG3+8eIIFUrek1HVjsj9HG2wPrM9+f
OiFiGVAH1YKVfg1jkKXrj3olb+C2W8wx0Jj7EaVG/ERkSHjuNOFMdUksU+TfUB6A
YRug5rybHSgcomSkoFuH30VsK81kCYhYSl74aT+Zjvn59EHknNcKDcFZaBUZP2Md
MNqeuO2tgFqxL04J92exfjQ5Bw20huqB9Kix8i4ROj7xttyc6wb5DJi30YMCAwEA
AaOCAZEwggGNMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud
DgQWBBTSeNy5fsDhgN7DitSsETotVyt5eDAjBgNVHREEHDAaghhhdGxhbnRpcy5z
eXN0ZW0xLmNvbXBhbnkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFi
LmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1s
AQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov
L29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v
Y3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIw
ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnR2A/3M
kC2yv/30w1fb1/pGEEmWLWFohCk6MOr43Nb59ovkun+XaFmbXnbnwDUbSQLgCWmg
euA25yDgRs2+/uCoN38ig1JtLzHeDZ+ICuy07jlu2v5odE/Xywl/dQC09K4wYNMf
x8aukUtT6fIILky/s+fAYfNBPplBiOy7zAoxoCW0lRP25EyTXB++qShSDg0nltTI
jCCIm2BCcAIr90Yq0EQvpXBnTZdt6zOCcz1OeBytjw95oCtqaeuDoAnAbe0SgYbZ
QemEZcoD7ZHeCgfyXMgovG1GL7Cn+mNVIJe5ITfJTHvCR14GOYOjHElzXvAn/cDn
AwFwfMiij6XxcQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuAE2ZHWC6wRRE1NyCE5
kH7w4okCNqHh9SiT7JoOUvH75ZPvV8HCqA9gRQ2lwy2G9jJQv1ObHVB2+LQzc63z
+zcmh8Ri5X03X/Me16rIRu3b42tPt+UzPvnsi72eFAbf7x4ggVSt6TUdWOyP0cbb
A+sz3586IWIZUAfVgpV+DWOQpeuPeiVv4LZbzDHQmPsRpUb8RGRIeO404Ux1SSxT
5N9QHoBhG6DmvJsdKByiZKSgW4ffRWwrzWQJiFhKXvhpP5mO+fn0QeSc1woNwVlo
FRk/Yx0w2p647a2AWrEvTgn3Z7F+NDkHDbSG6oH0qLHyLhE6PvG23JzrBvkMmLfR
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8395399758983789081012215327114115700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atlantis.system1.company'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25105652242178496641937793259146143875972783409205554629676635784390143602366054737835636047423369095302739378407189462711352654992821320334181344218057445098373606623007718852338087348755079239037408382228746192608245668269259701890758271399949632973570286218955706139034310616578566556259197944912485811564668460838981065624995202285033537200267694074358215232668265644133931333266684179043704108000540544934460658638309414748768955643969758076802503880294207334377793944549299224450020825508963638063807248468231346524007906729377939550827220653904078353355853065137369468520606216663310503324901653705492904006019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d278dcb97ec0e180dec38ad4ac113a2d572b7978
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis.system1.company'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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