*.reviews.howstuffworks.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:5d:cc:ee:87:fe:46:5a:b6:4c:de:c7:c5:f7:49:48 was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.reviews.howstuffworks.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:5d:cc:ee:87:fe:46:5a:b6:4c:de:c7:c5:f7:49:48
Serial Number (int): 9791636088287849138519404843281893704
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a1:d8:31:a8:b7:11:4e:0e:93:fe:ef:b4:7a:41:9e:4c:b0:6a:cb:34
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 28:cd:63:3c:ca:3d:0c:32:e7:ca:40:cb:de:86:6e:5f:32:7e:2f:08
Fingerprint (sha256): 90:65:56:7e:55:e4:07:5a:4a:78:03:23:27:9e:5a:8a:68:96:c6:39:b0:a9:8c:1d:51:a4:87:19:ec:85:be:53

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.reviews.howstuffworks.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.reviews.howstuffworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.reviews.howstuffworks.com
blog.s1-sp.com
intelligentintent.net
*.searchthis.net
*.prod.blog.s1-sp.com
*.prod.askandsearch.com
*.searchthedeals.com
*.askandsearch.com
*.prod.startpage-cms.com
searchthis.net
*.forkly.com
*.prod.wealthversed.com
searchthedeals.com
*.blog.s1-sp.com
forkly.com
*.prod.searchthedeals.com
askandsearch.com
*.system1.com
*.prod.system1.com
*.intelligentintent.net
*.prod.searchthis.net
system1.com
*.prod.forkly.com
*.prod.intelligentintent.net
*.startpage-cms.com
reviews.howstuffworks.com
*.prod.reviews.howstuffworks.com
*.wealthversed.com

Other certificates including the domain name howstuffworks.com

(limited to 100 certificates)
*.howstuffworks.com
*.howstuffworks.com
stage.play.howstuffworks.com
carsgenius.com
howstuffworks.com
email.discovery.com
etb-dev-jc2-us-east-1.hswinternal.com
*.howstuffworks.com
*.howstuffworks.com
carsgenius.com
stage.play.howstuffworks.com
etb-stage-qa25-us-east-1.hswinternal.com
*.dating.howstuffworks.com
carsgenius.com
*.howstuffworks.com
stage.play.howstuffworks.com
*.howstuffworks.com
hsw-origin-dev-jc1-us-east-1.hswinternal.com
coupons.howstuffworks.com
hsw-origin-stage-lbates-us-east-1.hswinternal.com
*.howstuffworks.com
*.howstuffworks.com
stage.howstuffworks.com
*.howstuffworks.com
*.homesecurity.howstuffworks.com
hsw-origin-stage-qa25-us-east-1.hswinternal.com
hsw-origin-dev-lbates-us-east-1.hswinternal.com
*.howstuffworks.com
*.howstuffworks.com
hsw-origin-prod-us-east-1.hswinternal.com
*.howstuffworks.com
etb-stage-lbates-us-east-1.hswinternal.com
*.howstuffworks.com
carsgenius.com
howstuffworks.com
cdn-origin.hswinternal.com
*.howstuffworks.com
cdn-origin.hswinternal.com
hsw-origin-dev-lc2-us-east-1.hswinternal.com
carsgenius.com
*.homesecurity.howstuffworks.com
hsw-origin-dev-lbates-us-east-1.hswinternal.com
c.howstuffworks.com
carsgenius.com
*.streaming.howstuffworks.com
*.howstuffworks.com
hsw-origin-stage-lbates-us-east-1.hswinternal.com
ecsstage.play.howstuffworks.com
hsw-origin-dev-lbates-us-east-1.hswinternal.com
carsgenius.com
etb-dev-lbates-us-east-1.hswinternal.com
*.howstuffworks.com
hsw-origin-prod-us-east-1.hswinternal.com
carsgenius.com
carsgenius.com
hsw-origin-stage-cf1-us-east-1.hswinternal.com
carsgenius.com
*.howstuffworks.com
*.reviews.howstuffworks.com
cdn.now.howstuffworks.com
*.howstuffworks.com
carsgenius.com
carsgenius.com
blender.getxmlfeeds.com
hsw-origin-dev-lbates-us-east-1.hswinternal.com
etb-stage-lbates-us-east-1.hswinternal.com
carsgenius.com
*.homesecurity.howstuffworks.com
etb-dev-lbates-us-east-1.hswinternal.com
*.howstuffworks.com
hsw-origin-dev-us-east-1.hswinternal.com
*.howstuffworks.com
*.howstuffworks.com
hsw-origin-stage-qa2-us-east-1.hswinternal.com
etb-dev-jc4-us-east-1.hswinternal.com
carsgenius.com
carsgenius.com
*.homesecurity.howstuffworks.com
carsgenius.com
hsw-origin-stage-lbates-us-east-1.hswinternal.com
carsgenius.com
*.hswstatic.com
stage.play.howstuffworks.com
carsgenius.com
carsgenius.com
carsgenius.com
ecsstage.play.howstuffworks.com
pubwp-admin-prod.k.system1.company
carsgenius.com
howstuffworks.com
hsw-origin-dev-lbates-us-east-1.hswinternal.com
*.howstuffworks.com
*.howstuffworks.com
howstuffworks.com
*.streaming.howstuffworks.com
*.howstuffworks.com
hsw-origin-dev-lc2-us-east-1.hswinternal.com
*.howstuffworks.com
hsw-origin-dev-lc1-us-east-1.hswinternal.com
*.howstuffworks.com

Certificate

The complete raw certificate details for *.reviews.howstuffworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ukBVAjQlzMkr42nPS+
Ruz0ueWRQiHIiVebpDnbWrb759ziHLEFbS1Gn7r+DVVNGDHf2GhTXjQOw2K8UnFE
yHOsXg/m+3U3MUWtwPBojEHjxe07n2MGx+mFqqto/m5Fv/fvZsnMPcEUiupn1ybb
VCjd8NRkzR6sVHWPsKlyYG1bZL/2b+8G0E/ld6Xd6QbcKgcF7mEX1w6BwwfuZq9o
4qE3vtcjfOJC/HuY3O0j7n0eazRpa6RFXnrdUtindAA++wdqv435ifIWsNWgq4AR
VN9Q/HchmsVb1ghzbs72HHZeiYyKY43jRu/4njRQHBJNlNDwo8MgjiDUtNuYMZZ7
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9791636088287849138519404843281893704
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.reviews.howstuffworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18649559910780061494711674372775339075321701453739173479966527582549133238039018429404904605444136034058102443208022541074840409618497468853667400772503613347351369951511011955643399867138783195032820787396936839467991675874379712805491620981955042481642268668165763239868782746183794341266248935207277330565808706395359629545112525853785024844224693436112877731574968773338824222916141816985068829915432948800222691470304362667554433096005726301233514537270735375094406215709477267449857646065611074917769421888869878697064473082216644636783878269103335467794509088337938073679482138214216623882670421070257296145157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1d831a8b7114e0e93feefb47a419e4cb06acb34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviews.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.s1-sp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentintent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchthis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.blog.s1-sp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.askandsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchthedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askandsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.startpage-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchthis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forkly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.wealthversed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchthedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.s1-sp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forkly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.searchthedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askandsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.system1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.system1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelligentintent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.searchthis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.forkly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.intelligentintent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startpage-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.reviews.howstuffworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wealthversed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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