mirror.cms.carsome.my
Issued by Amazon
About this certificate
This digital certificate with serial number 02:a2:d3:77:45:19:21:4c:08:52:25:ad:cc:b6:5e:c8 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mirror.cms.carsome.my
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:a2:d3:77:45:19:21:4c:08:52:25:ad:cc:b6:5e:c8Serial Number (int): 3503897120615029585354423928029077192
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 5a:71:f5:a7:aa:09:de:4e:52:2d:ea:61:c9:88:f3:89:11:76:9d:75
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 7f:56:74:99:88:b0:e4:73:a4:17:e9:2e:3c:ed:a6:cb:40:80:68:d4
Fingerprint (sha256): 96:91:8e:c2:aa:c0:65:82:18:bb:c8:ba:09:d6:c6:b6:1c:8c:82:f1:fb:f8:69:fc:2b:be:bd:8a:c2:da:39:3c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate mirror.cms.carsome.my
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mirror.cms.carsome.my
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mirror.cms.carsome.my
Other certificates including the domain name carsome.my
(limited to 100 certificates)
dev.revamp.carsome.my
carsome.my
staging-dev.api.carsome.my
x.bidding.carsome.my
financing.carsome.my
cms.carsome.my
plate.carsome.my
www.carsome.my
x.www.carsome.my
ws.carsome.my
staging-dev.api.carsome.my
bug.carsome.my
api.carsome.my
staging-dev.api.carsome.my
devcsc.carsome.my
dev.bidding.carsome.my
mirror.carsome.my
carsome.my
bidding.carsome.my
carsome.my
poc.as.carsome.my
staging-dev.api.carsome.my
insp.carsome.my
cms.carsome.my
uat.www.carsome.my
dev.carsome.my
cms.carsome.my
carsome.my
dev.carsome.my
carsome.my
poc-bastion.carsome.my
staging-dev.api.carsome.my
mirror.bidding.carsome.my
sls.carsome.my
ws.carsome.my
carsome.my
bidding.carsome.my
sni.cloudflaressl.com
apsls.carsome.my
carsome.my
apsls.carsome.my
devfinancing.carsome.my
*.carsome.my
dev.revamp.v2.carsome.my
dev.api.carsome.my
api-lb.carsome.my
*.carsome.my
test.carsome.my
widget.carsome.my
beta.carsome.my
dev.bidding.carsome.my
cms.poc.carsome.my
carsome.my
*.carsome.my
bidding.v3.carsome.my
dev.carsome.my
mirror.bidding.carsome.my
cron.carsome.my
new.bidding.carsome.my
www.carsome.my
carsome.my
staging-dev.api.carsome.my
mirror.carsome.my
cms-test.carsome.my
dev.cron.carsome.my
dev.cms.carsome.my
api.carsome.my
devcsc.carsome.my
uat-paths.carsome.dev
api.carsome.my
staging-dev.api.carsome.my
devcsc.carsome.my
test.v3.bidding.carsome.my
uat.carsome.my
master.carsome.my
x.www.carsome.my
api.carsome.my
wiki-1.carsome.my
uat.carsome.my
cron.carsome.my
devcsc.carsome.my
x.poc-bastion.carsome.my
mirror.carsome.my
ws.carsome.my
dev.carsome.my
dev.bidding.carsome.my
mirror.cms.carsome.my
dev.carsome.my
www.carsome.my
api.carsome.my
ws.carsome.my
dev.bidding.carsome.my
ws.carsome.my
cms.carsome.my
dev.carsome.my
dev.carsome.my
x.bidding.carsome.my
dev.carsome.my
dev.revamp.v2.carsome.my
dev.cms.carsome.my
carsome.my
staging-dev.api.carsome.my
x.bidding.carsome.my
financing.carsome.my
cms.carsome.my
plate.carsome.my
www.carsome.my
x.www.carsome.my
ws.carsome.my
staging-dev.api.carsome.my
bug.carsome.my
api.carsome.my
staging-dev.api.carsome.my
devcsc.carsome.my
dev.bidding.carsome.my
mirror.carsome.my
carsome.my
bidding.carsome.my
carsome.my
poc.as.carsome.my
staging-dev.api.carsome.my
insp.carsome.my
cms.carsome.my
uat.www.carsome.my
dev.carsome.my
cms.carsome.my
carsome.my
dev.carsome.my
carsome.my
poc-bastion.carsome.my
staging-dev.api.carsome.my
mirror.bidding.carsome.my
sls.carsome.my
ws.carsome.my
carsome.my
bidding.carsome.my
sni.cloudflaressl.com
apsls.carsome.my
carsome.my
apsls.carsome.my
devfinancing.carsome.my
*.carsome.my
dev.revamp.v2.carsome.my
dev.api.carsome.my
api-lb.carsome.my
*.carsome.my
test.carsome.my
widget.carsome.my
beta.carsome.my
dev.bidding.carsome.my
cms.poc.carsome.my
carsome.my
*.carsome.my
bidding.v3.carsome.my
dev.carsome.my
mirror.bidding.carsome.my
cron.carsome.my
new.bidding.carsome.my
www.carsome.my
carsome.my
staging-dev.api.carsome.my
mirror.carsome.my
cms-test.carsome.my
dev.cron.carsome.my
dev.cms.carsome.my
api.carsome.my
devcsc.carsome.my
uat-paths.carsome.dev
api.carsome.my
staging-dev.api.carsome.my
devcsc.carsome.my
test.v3.bidding.carsome.my
uat.carsome.my
master.carsome.my
x.www.carsome.my
api.carsome.my
wiki-1.carsome.my
uat.carsome.my
cron.carsome.my
devcsc.carsome.my
x.poc-bastion.carsome.my
mirror.carsome.my
ws.carsome.my
dev.carsome.my
dev.bidding.carsome.my
mirror.cms.carsome.my
dev.carsome.my
www.carsome.my
api.carsome.my
ws.carsome.my
dev.bidding.carsome.my
ws.carsome.my
cms.carsome.my
dev.carsome.my
dev.carsome.my
x.bidding.carsome.my
dev.carsome.my
dev.revamp.v2.carsome.my
dev.cms.carsome.my
Certificate
The complete raw certificate details for mirror.cms.carsome.my in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgDCCA2igAwIBAgIQAqLTd0UZIUwIUiWtzLZeyDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA1MDQwMDAwMDBaFw0xOTA2MDQx MjAwMDBaMCAxHjAcBgNVBAMTFW1pcnJvci5jbXMuY2Fyc29tZS5teTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJj0muxohoWnRpfHSB3gN9SryO810vIC rTy57cNMAdqaIF1b1jXXYPOByEZK79sTYOf/cUExKycgHbNo0tupux00SdbbmfKD 5XhvDfVgOqUcUVl5xmBPntMUZNCfBudq7SrBqEwtPLjsJIZ6pnmf5wdfNUjv8Nxf jdPJjxVxrOyaTVuo0SAZKVUi9llccEVRqpcbRxHNNGEUtDytA/bWgu5iTFLlC1o+ s/R2ZYfyH7tSNpqoyReX2QlUTA9xqSn/QCjDnWNVoalyyohklfgWOfqDahX5tJ5l 809l52Kijg+kN+KMmTctYmgZtHHUY1RLjyQWzcERRE9Rcf535fQEwy8CAwEAAaOC AY4wggGKMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBRacfWnqgneTlIt6mHJiPOJEXaddTAgBgNVHREEGTAXghVtaXJyb3IuY21zLmNh cnNvbWUubXkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2Z1djglceUm8yt7 pZ9kqntrE8NAv2tSlReUGAq0gM7aVuPCTsjpl6OWSqiQ+o6WN+S1EVv1AmS29ck9 REfg5ZXgBZZ3leDA/DUT9Bm7NUZ10VAv1qNKdOgBv5BThy5IeUqqQ79eP1DkbrjE CD4htaTzrM8pAzTV9kLBJ4bJeRWUhmaudivBW3i2hkSlUu0Ku2bhxG+kXEvX/nFd DTHVgfEuofr8nmQApCDK4RDnSueDBAR6X7nN30DxEZLz3bbTDxq/f0/pJ7RcftX+ 9czBSPjiNjiWCIggqYJqrhamULG6d8Vq6pji5uErCACfIg21EKHOyEHCH0cygdSb NIBX+Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPSa7GiGhadGl8dIHeA3 1KvI7zXS8gKtPLntw0wB2pogXVvWNddg84HIRkrv2xNg5/9xQTErJyAds2jS26m7 HTRJ1tuZ8oPleG8N9WA6pRxRWXnGYE+e0xRk0J8G52rtKsGoTC08uOwkhnqmeZ/n B181SO/w3F+N08mPFXGs7JpNW6jRIBkpVSL2WVxwRVGqlxtHEc00YRS0PK0D9taC 7mJMUuULWj6z9HZlh/Ifu1I2mqjJF5fZCVRMD3GpKf9AKMOdY1WhqXLKiGSV+BY5 +oNqFfm0nmXzT2XnYqKOD6Q34oyZNy1iaBm0cdRjVEuPJBbNwRFET1Fx/nfl9ATD LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3503897120615029585354423928029077192 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mirror.cms.carsome.my' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19308841659614524892990708305036090258263834249320540663263852409049028991654996296318188192511876105839254870320293614556273465560394383870306089639168193526461913259840770475170518781050301772055620928289856627770443795198287660953870028396747332613917830802657877726999204131869763976047801793132858407462153987884774954934610064689522011469860424193171323386540004162140949566615093598257612416324013557552392171668332665563775859856989077374076901973796335828485546554633851150858454047125198341277911372500596358400557246383863512734154754034213939911324059748971167332683442651280757630562602324154046759617327 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a71f5a7aa09de4e522dea61c988f38911769d75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.cms.carsome.my' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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