vpn.msd120.org

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 72:9d:4d:13:0f:ca:b3:38:10:00:b2:55 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vpn.msd120.org,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 72:9d:4d:13:0f:ca:b3:38:10:00:b2:55
Serial Number (int): 35471456447158071887449338453
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: cf:73:33:12:12:6b:a6:12:4f:f0:9a:e9:5c:cf:f4:44:0d:a0:76:41
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): d7:6a:c0:9a:54:f7:c9:0b:ec:9f:0f:a9:89:64:eb:37:67:a3:25:83
Fingerprint (sha256): 87:c6:26:8f:0c:fd:ea:2b:3a:fd:b9:4e:0b:d3:95:64:25:e9:79:04:7e:1d:a1:38:52:92:48:f9:68:4e:d1:c6

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate vpn.msd120.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.msd120.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.msd120.org

Other certificates including the domain name msd120.org

(limited to 100 certificates)
gutierrez.hcisd.org
bce.slvusd.org
ise02.msd120.org
exch120be.msd120.org
www.leavittms.net
admin.proctor.cv.k12.ca.us
admin.rowlettacademy.org
admin.aplusarts.com
admin.bowie.hcisd.org
www.msd120.org
firstodessaacademy.com
fremont.bcsd.com
www.rowlettacademy.org
*.msd120.org
wlan-webauth.msd120.org
admin.cv.k12.ca.us
admin.fuesd.org
admin.independent.cv.k12.ca.us
admin.austin.hcisd.org
www.wherelifehappens.org
portal.msd120.org
admin.cano.hcisd.org
ise02.msd120.org
admin.clarendon.sboe.org
dover.k12.nh.us
admin.milam.hcisd.org
admin.cve.cv.k12.ca.us
crockett.hcisd.org
admin.msd120.org
admin.bonham.hcisd.org
sses.rcsnc.org
www.glendorahigh.net
www.jonescollegeprep.org
ise02.msd120.org
admin.llc.lex3.org
glendorahigh.net
msd120.org
jonescollegeprep.org
slvusd.org
admin.sle.slvusd.org
echs.hcisd.org
admin.gutierrez.hcisd.org
admin.austin.hcisd.org
admin.austin.hcisd.org
charter.slvusd.org
admin.newpathways.hcisd.org
admin.blms.lex3.org
admin.chabot.cv.k12.ca.us
admin.echs.hcisd.org
admin.smithfieldelementaryschool.wearecms.com
mxs120be.msd120.org
elementary.msd120.org
ise01.msd120.org
hhs.hcisd.org
admin.marshall.cv.k12.ca.us
www.yeshivatnoam.org
onlineschool.msd120.org
mdcoa.org
admin.eastmecklenburghighschool.wearecms.com
www.youngachieversschool.org
admin.nichols.bcsd.com
admin.westcharlottehighschool.wearecms.com
admin.milam.hcisd.org
glendorahigh.net
admin.memorial.hcisd.org
admin.houston.hcisd.org
mxs120be.msd120.org
vpn.msd120.org
admin.wilson.hcisd.org
admin.aes.pgsd.ms
vannoy.cv.k12.ca.us
admin.austin.hcisd.org
admin.mtvernon.bcsd.com
portal.msd120.org
admin.msd120.org
admin.downtown.bcsd.com
admin.jefferson.hcisd.org
admin.highschool.snyderisd.net
admin.elementary.msd120.org
admin.hs.slvusd.org
admin.bce.slvusd.org
vpn.msd120.org
admin.blps.lex3.org
cano.hcisd.org
admin.aplusarts.com
admin.crockett.hcisd.org
milam.hcisd.org
admin.slvusd.org
bowie.hcisd.org
admin.brownacademyeagles.org
www.mabelpaine.org
admin.palomares.cv.k12.ca.us
www.woodsboro.pylusd.org
bes.gobearsgo.net
www.lex3.org
admin.coakley.hcisd.org
portal.msd120.org
admin.travisranchschool.org
admin.lincoln.district75.org
www.slvusd.org

Certificate

The complete raw certificate details for vpn.msd120.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIMcp1NEw/KszgQALJVMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE5MDgwNjE5MzgxMFoXDTIxMDgw
NjE5MzgxMFowPDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRcw
FQYDVQQDEw52cG4ubXNkMTIwLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAJsNtdUFtQb69LqQKAGCcThJqe4xbomjk+At5ldMvH6RJqyXLYb2UsC5
S8KJLMPnFQb+AlRIG+P9fg1Vz16UOADQ8HcOwq7GrfyMxC/h62B1h8Bc0TFH100O
CvGOCDCc4qx6sGTyCyKbEss3hkPbQoQTnGk3vnLlaTGQxY/3Dbp9G540BlL7cEBH
+ZW1X+xlGjXkhtD/GKfp2ulU8Y8cA+RQ419NCTJjDmtoJBWvx+V5NXiQNOG215nt
FUbGmd29okXfY+bBuK7J8aoXUQ2Uab2iiFYq1TATqr68i64uv6afy7AHaGFetvw5
v5oKMxjeTb4GieZ9PQk8z3po+EDCcuUCAwEAAaOCAdMwggHPMA4GA1UdDwEB/wQE
AwIFoDCBiQYIKwYBBQUHAQEEfTB7MEIGCCsGAQUFBzAChjZodHRwOi8vc2VjdXJl
Mi5hbHBoYXNzbC5jb20vY2FjZXJ0L2dzYWxwaGFzaGEyZzJyMS5jcnQwNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2FscGhhc2hhMmcy
MFcGA1UdIARQME4wQgYKKwYBBAGgMgEKCjA0MDIGCCsGAQUFBwIBFiZodHRwczov
L3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwCQYDVR0T
BAIwADA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY3JsMi5hbHBoYXNzbC5jb20v
Z3MvZ3NhbHBoYXNoYTJnMi5jcmwwGQYDVR0RBBIwEIIOdnBuLm1zZDEyMC5vcmcw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPXN1TwI
UPlqTzq3l9pWg+Zp0mj3MB0GA1UdDgQWBBTPczMSEmumEk/wmulcz/REDaB2QTAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNUpBXSkMjNR
EVukkMFZnKWmWef+K5sQsec2DdsIKpX8A80a/DMuALQswrsGXSMasUKDajDDcZnl
IbpmH6TVglEQWzduMWggX/3Y4HIFHFE3RBnW4ICVfb6OflApfa1t4GBIlZWwmyWl
dkGAfHZ30o4qWx13jfEABx9YpYMG5FXAHXj3BPFBjJ+mqrIlFVCPh6OZg9XcOV/u
Ds7zsb21owvV/etJvcyiLWN6PavIuRt3EEt1WlfrdGpuT+dbErb5NT5GF6GtKbq5
pLJtxHcQdtcWHGtDhuH4KVs7r48THZd84Nh6FzcSC7CrgHbHx6zwBdSZYgpvhKvw
sU5D/J6Fmw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw211QW1Bvr0upAoAYJx
OEmp7jFuiaOT4C3mV0y8fpEmrJcthvZSwLlLwoksw+cVBv4CVEgb4/1+DVXPXpQ4
ANDwdw7Crsat/IzEL+HrYHWHwFzRMUfXTQ4K8Y4IMJzirHqwZPILIpsSyzeGQ9tC
hBOcaTe+cuVpMZDFj/cNun0bnjQGUvtwQEf5lbVf7GUaNeSG0P8Yp+na6VTxjxwD
5FDjX00JMmMOa2gkFa/H5Xk1eJA04bbXme0VRsaZ3b2iRd9j5sG4rsnxqhdRDZRp
vaKIVirVMBOqvryLri6/pp/LsAdoYV62/Dm/mgozGN5NvgaJ5n09CTzPemj4QMJy
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35471456447158071887449338453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 19:38:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-06 19:38:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.msd120.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19573698061629557589079835120338711326884490250763623236091396399277728981716888371736238828778331366647610006238268278809159891807211126929561128358318461764139653311714494440026365334091759762106293722279919660459579967062515106166065168753810526200358755850515750417857451782574047183103872968749287946177414973870464722441027735364121280969087494845779798693219910152245976689096007063266964052598544726386100330720616042468017092251840762387123212190737189329978859637713127043711666618980508750853612485422677017367638943476339726007802313452284682570197006646051326168628191198903576229074521270394749062378213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.msd120.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf733312126ba6124ff09ae95ccff4440da07641
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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