services.jwplatform.com
Issued by Amazon
About this certificate
This digital certificate with serial number 01:45:8b:c8:7e:03:7d:61:cc:72:6d:87:84:1b:f6:a4 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=services.jwplatform.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:45:8b:c8:7e:03:7d:61:cc:72:6d:87:84:1b:f6:a4Serial Number (int): 1690331618590559529153672845926856356
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 4a:dc:c5:5d:19:05:ae:f9:62:29:d6:07:22:66:54:73:30:5e:3c:e1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 28:fe:8c:a6:ce:0a:60:16:14:74:cc:00:7c:98:52:e9:5d:cc:0f:94
Fingerprint (sha256): a7:b2:bd:94:0d:b4:98:5f:c8:bd:e8:7a:58:94:b0:e0:16:d7:9b:06:e1:89:2a:46:ec:cb:f1:3c:75:2b:37:9a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate services.jwplatform.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for services.jwplatform.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
services.jwplatform.com
*.services.jwplatform.com
*.services.jwplatform.com
Other certificates including the domain name jwplatform.com
(limited to 100 certificates)
jwplayer.com
jwplatform.com
jwplayer.com
example-portal.jwplatform.com
services.jwplatform.com
services.jwplatform.com
jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
jwplayer.com
jwplayer.com
services.jwplatform.com
jwplatform.com
jwplayer.com
services.cdn.jwplatform.com
jwplatform.com
jwplatform.com
*.services.jwplatform.com
jwplayer.com
services.cdn.jwplatform.com
jwplayer.com
*.jwplatform.com
*.jwplatform.com
*.jwplatform.com
jwplayer.com
*.jwplatform.com
jwplatform.com
services.jwplatform.com
jwplatform.com
services.cdn.jwplatform.com
services.jwplatform.com
jwplayer.com
services.jwplatform.com
jwplayer.com
*.jwplatform.com
*.services.jwplatform.com
services.jwplatform.com
jwplatform.com
*.jwplatform.com
services.cdn.jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
jwplayer.com
jwplatform.com
jwplayer.com
jwplatform.com
jwplatform.com
jwplatform.com
jwplatform.com
jwplayer.com
jwplatform.com
*.services.jwplatform.com
jwplayer.com
jwplayer.com
jwplatform.com
jwplayer.com
jwplatform.com
services.cdn.jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
services.jwplatform.com
jwplatform.com
jwplayer.com
services.cdn.jwplatform.com
jwplatform.com
services.jwplatform.com
jwplatform.com
jwplayer.com
jwplatform.com
jwplayer.com
*.jwplatform.com
jwplayer.com
*.jwplatform.com
*.services.jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
jwplatform.com
*.jwplatform.com
jwplayer.com
jwplayer.com
jwplayer.com
services.jwplatform.com
jwplayer.com
jwplayer.com
*.jwplatform.com
services.cdn.jwplatform.com
jwplayer.com
services.jwplatform.com
jwplatform.com
*.jwplatform.com
services.jwplatform.com
*.jwplatform.com
services.cdn.jwplatform.com
jwplayer.com
jwplatform.com
*.jwplatform.com
jwplayer.com
jwplayer.com
jwplayer.com
jwplatform.com
jwplatform.com
jwplayer.com
example-portal.jwplatform.com
services.jwplatform.com
services.jwplatform.com
jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
jwplayer.com
jwplayer.com
services.jwplatform.com
jwplatform.com
jwplayer.com
services.cdn.jwplatform.com
jwplatform.com
jwplatform.com
*.services.jwplatform.com
jwplayer.com
services.cdn.jwplatform.com
jwplayer.com
*.jwplatform.com
*.jwplatform.com
*.jwplatform.com
jwplayer.com
*.jwplatform.com
jwplatform.com
services.jwplatform.com
jwplatform.com
services.cdn.jwplatform.com
services.jwplatform.com
jwplayer.com
services.jwplatform.com
jwplayer.com
*.jwplatform.com
*.services.jwplatform.com
services.jwplatform.com
jwplatform.com
*.jwplatform.com
services.cdn.jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
jwplayer.com
jwplatform.com
jwplayer.com
jwplatform.com
jwplatform.com
jwplatform.com
jwplatform.com
jwplayer.com
jwplatform.com
*.services.jwplatform.com
jwplayer.com
jwplayer.com
jwplatform.com
jwplayer.com
jwplatform.com
services.cdn.jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
services.jwplatform.com
jwplatform.com
jwplayer.com
services.cdn.jwplatform.com
jwplatform.com
services.jwplatform.com
jwplatform.com
jwplayer.com
jwplatform.com
jwplayer.com
*.jwplatform.com
jwplayer.com
*.jwplatform.com
*.services.jwplatform.com
services.cdn.jwplatform.com
jwplatform.com
jwplatform.com
*.jwplatform.com
jwplayer.com
jwplayer.com
jwplayer.com
services.jwplatform.com
jwplayer.com
jwplayer.com
*.jwplatform.com
services.cdn.jwplatform.com
jwplayer.com
services.jwplatform.com
jwplatform.com
*.jwplatform.com
services.jwplatform.com
*.jwplatform.com
services.cdn.jwplatform.com
jwplayer.com
jwplatform.com
*.jwplatform.com
jwplayer.com
jwplayer.com
jwplayer.com
jwplatform.com
Certificate
The complete raw certificate details for services.jwplatform.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEnzCCA4egAwIBAgIQAUWLyH4DfWHMcm2HhBv2pDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA2MTkwMDAwMDBaFw0yMTA3MTkx MjAwMDBaMCIxIDAeBgNVBAMTF3NlcnZpY2VzLmp3cGxhdGZvcm0uY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBc5If8Y/Q0TrteM1XpiXcbHlzPD s98LIaAn/UCYeyRQf5zb95KOiFycnjvJ/rV6u4tY6yh8i2H99vPGhVyLNPRBp8bW 5JkBm/90n/35ghz4Sy2XmFnmt64bJJGs+TzK0MQ45DtxzoQEZHghgsBMBVfMLopu rscPkiMdwFtZ7r8a6g72KBOMH7W84/w/55Zg0MsufCCYAnK0N90ZJ01v7Wm2do8C dZfMsk9xLUNzKEOKAp8Te4Lqrr1r1xGNg9R6ElX9cIIngf7YuhREbADwg7lfIK0K n/fspxFYMwmDnBCNeVMbjM3KKgt0PQGs1/XblCk4p8ia1OFe001gIEKUQQIDAQAB o4IBqzCCAacwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O BBYEFErcxV0ZBa75YinWByJmVHMwXjzhMD0GA1UdEQQ2MDSCF3NlcnZpY2VzLmp3 cGxhdGZvcm0uY29tghkqLnNlcnZpY2VzLmp3cGxhdGZvcm0uY29tMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQw MjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu Y3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcB AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0 LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5j b20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAFNWbfRZZVmSdhf1W0uJ+N6zCOapBZNrQc0pSp5a wEYcN5SRMUaLdLlDPBnVpvORkm8aj07W32lG+DgAh7VOikRt2n9XadE+s56d+Nhu iHBhCba+ZdmrenLl/N5GwenJf2mPoITh9iRFTvy60q93PBPiBp+HWogB7myghD/P yv4p0R4G+bQEbJUBsjeEFZyCGuUV0G67gTFqcqq7bQlpS0HFVZUhs90iXBTxaouP Ha91UU6VkhDGzCXSORAxkq9caljIckdjaiT8mk4vTB7hmf/uoagn9Z5jzOSejAzR ztikhePBzDQIBOGt1dWCd24HeborkLxgWI/mClYU2qprSYo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBc5If8Y/Q0TrteM1Xpi XcbHlzPDs98LIaAn/UCYeyRQf5zb95KOiFycnjvJ/rV6u4tY6yh8i2H99vPGhVyL NPRBp8bW5JkBm/90n/35ghz4Sy2XmFnmt64bJJGs+TzK0MQ45DtxzoQEZHghgsBM BVfMLopurscPkiMdwFtZ7r8a6g72KBOMH7W84/w/55Zg0MsufCCYAnK0N90ZJ01v 7Wm2do8CdZfMsk9xLUNzKEOKAp8Te4Lqrr1r1xGNg9R6ElX9cIIngf7YuhREbADw g7lfIK0Kn/fspxFYMwmDnBCNeVMbjM3KKgt0PQGs1/XblCk4p8ia1OFe001gIEKU QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1690331618590559529153672845926856356 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services.jwplatform.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22734346668294084054900775533689725983361634755016280473860557095661009137038896023716326238078048147058932032317538414255280976140880108936201212457814155383331353776329356075593847261283064936264860168822015451362122030361100352431134381477082932692417942194194263850131380504242522646183043654356193499275794383474811781873737959799939964947982074082159440823374517308644272449043224582109762861318905457451523664363490974863853837941140534073510935541098535490869842113708440623728910928322166524558530832952466466212042005446451497424254166394257609615398651959162269830325458859688033978429725053945459352179777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4adcc55d1905aef96229d60722665473305e3ce1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.jwplatform.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.jwplatform.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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