ws.cupdapp.net

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G3

About this certificate

This digital certificate with serial number 0b:1d:54:47:93:78:f8:42:cc:b2:cd:5e:b9:b7:2b:2f was issued on by TrustAsia Technologies, Inc..

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: 上海市
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:1d:54:47:93:78:f8:42:cc:b2:cd:5e:b9:b7:2b:2f
Serial Number (int): 14773793955778369777467261444028836655
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9b:aa:47:f9:ce:cf:97:40:6a:97:6d:46:27:2f:a8:91:e3:49:6f:db
AuthorityKeyId: 9a:d9:0d:10:c9:c4:5f:4c:32:d2:e7:f0:1b:ad:4a:a6:2d:25:3b:d4

Fingerprint (sha1): cf:46:a8:10:4d:7f:b9:a2:90:73:d9:7f:51:1e:bf:c3:60:36:49:5e
Fingerprint (sha256): 92:92:8e:b2:ac:76:2b:40:a0:71:26:fb:2a:94:50:e3:12:e0:ab:4a:d6:a9:7c:c1:48:65:ea:51:9d:91:ac:2e

Issuing Certificate URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl

Check the revocation status for certificate ws.cupdapp.net

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws.cupdapp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws.cupdapp.net
gwkws.xzbc.com.cn
youcard.bankcz.com
ccapply.fjnx.com.cn
ws1.qzccbank.com
coas.jshbank.com
fbc.qlbchina.com
fraud.cupdapp.com
iws.ccabchina.com
ccoa.gsrcu.com
groupdeal.ynrcc.com
netapply.ynrcc.com
datacard.mintaibank.com
ysrlk.boubank.com
ccmms.grcbank.com
youcard.bankofrizhao.com.cn
xykapply.xrcbank.com.cn
apply.creditcard.xjrccb.com.cn
credit.zjrcbank.com
wscreditcard.jinzhoubank.com
xykapply.hnlyrcb.com
cupdapply.hkbea.com.cn
online.cbhb.com.cn
creditcardsq.trcbank.com.cn
wjws.bankofnx.com.cn
xykws.lj-bank.net
trip.cqcbank.com
ws.96262.com
yscredit.jybank.com.cn
ws.boimc.com

Other certificates including the domain name cupdapp.net

(limited to 100 certificates)
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net

Certificate

The complete raw certificate details for ws.cupdapp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtxXCq4O/K4Ai2u8MIl+
Ut9z/0awILp1HVxMJFy0WPIHtFVrRiEV1PlYfOpt2kweHuFx5L22gLWTYdzqBJLe
taoU7x5T5TWMrPV4fp7QdkXAvF5N8GelrxEbph7bVDgxZnj1xbQ50dBuSdYKa40Z
b/D5WvBUh5aib1PAtMTpkpdrbbCwWMofxwVS87WZcUBIbtjBbUPbgJxt2mT8uu2X
bEN9HDtki1BoFGjYFapCv7xFzRy6NreeNekE5UHk6Ahji9T+hrDMRpbV8ulOcny/
SW5lhbbrRiq5y5ASAobfHUblrIXnMVciO9x6Ex+yooPeGbdsD7hPUCcWQvRScCYp
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14773793955778369777467261444028836655
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws.cupdapp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21569165551119056098812878878980987301327604303728245453477590224285868357305896085178479468025117007698812507597252893282665756289173039345004216393192081578000099147832338001171102171552437891886254672294551073805278773974407483844969185209952289484621104265450656381278899498104318788655382381521027581645808165285554521331562186441214989581100368893905444937709898658015500519968971060994101310208250318780825814433046875735029317176841264169305170145902516268526186327360488485705564212590833292237318238519977949873504855684596138835098533970987907411889278774152850017806114004428987698827329289601001948850477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ad90d10c9c45f4c32d2e7f01bad4aa62d253bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9baa47f9cecf97406a976d46272fa891e3496fdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (635 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cupdapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwkws.xzbc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcard.bankcz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccapply.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws1.qzccbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coas.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbc.qlbchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraud.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iws.ccabchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccoa.gsrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupdeal.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netapply.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacard.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysrlk.boubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmms.grcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcard.bankofrizhao.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.xrcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.creditcard.xjrccb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit.zjrcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscreditcard.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.hnlyrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupdapply.hkbea.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.cbhb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardsq.trcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjws.bankofnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykws.lj-bank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip.cqcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.96262.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yscredit.jybank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.boimc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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