brsd-jb-radius.bordentown.k12.nj.us

- Bordentown Regional School District -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 07:dc:47:1a:d4:9f:e1:0b:90:9f:63:cb:11:8f:8c:e0 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bordentown Regional School District

Organization: Bordentown Regional School District
Organization unit: Bordentown Regional School District
State / Province: NJ
Locality: Bordentown
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:dc:47:1a:d4:9f:e1:0b:90:9f:63:cb:11:8f:8c:e0
Serial Number (int): 10448343456190261861314105177367612640
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 25:08:18:78:93:8a:fe:13:25:93:94:f4:cf:94:ed:9d:f3:34:71:80
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fa:52:cb:63:f9:e1:49:91:3d:c9:31:56:c1:dd:ad:4c:07:5a:e8:2f
Fingerprint (sha256): b1:6e:32:57:23:3f:63:d6:71:39:31:5c:f6:58:78:58:7d:a0:da:5a:7a:f3:b1:92:70:b1:ae:42:72:f4:cb:03

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate brsd-jb-radius.bordentown.k12.nj.us

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brsd-jb-radius.bordentown.k12.nj.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

password.bordentownschools.com
destiny.bordentownschools.com
vpn.bordentownschools.com
powerschool.bordentownschools.com
brsd-jb-radius.bordentown.k12.nj.us

Other certificates including the domain name bordentown.k12.nj.us

(limited to 100 certificates)
admin.acsc.net
admin.aceacademycharter.org
admin.acsc.net
admin.eceap.gsd.wednet.edu
academywest.hamadyhawks.net
bes.gobearsgo.net
password.bordentownschools.com
powerschool.bordentownschools.com
admin.ccs.coloma.org
gfes.comalisd.org
www.windham.k12.ct.us
bordentown.k12.nj.us
st.louisschool.org
bhs.ballingerisd.net
admin.eastvalleyelementary.evsd90.org
svms.comalisd.org
admin.fisher.southredford.org
admin.crma5.org
admin.aceacademycharter.org
admin.nes.mcduffie.k12.ga.us
sle.slvusd.org
ballingerisd.net
brhs.bordentown.k12.nj.us
bordentown.k12.nj.us
chs.comalisd.org
admin.acsc.net
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
admin.brms.bordentown.k12.nj.us
admin.lunadabay.pvpusd.net
cses.comalisd.org
admin.mes.mcduffie.k12.ga.us
acrma5.org
bordentown.k12.nj.us
academy.comalisd.org
admin.mvista.garvey.k12.ca.us
cdc.comalisd.org
admin.moxee.evsd90.org
svhs.comalisd.org
admin.acsc.net
admin.cbs.bordentown.k12.nj.us
ajshs.anacondaschools.org
acrma5.org
north.legacyprep.org
mail1.bordentown.k12.nj.us
mail1.bordentown.k12.nj.us
mail1.bordentown.k12.nj.us
vanalstyneisd.org
brms.bordentown.k12.nj.us
admin.cte.mpsdnow.org
admin.williampenn.bcsd.com
admin.acsc.net
admin.bhs.ballingerisd.net
admin.acsc.net
admin.aceacademycharter.org
bordentown.k12.nj.us
admin.mpsdnow.org
admin.burkburnettisd.org
admin.elkridge.whiteriver.wednet.edu
admin.brhs.bordentown.k12.nj.us
monessenschooldistrict.com
arete.prsd.us
admin.aceacademycharter.org
admin.vanalstyneisd.org
admin.bordentown.k12.nj.us
powerschool.bordentownschools.com
cdc.comalisd.org
bordentown.k12.nj.us
admin.acsc.net
lunadabay.pvpusd.net
acrma5.org
cv.k12.ca.us
chms.comalisd.org
admin.richardallenschools.com
www.ballingerisd.net
bbes.comalisd.org
elc.whiteriver.wednet.edu
admin.acsc.net
www.comalisd.org
admin.st.louisschool.org
admin.tes.mcduffie.k12.ga.us
mail1.bordentown.k12.nj.us
admin.aceacademycharter.org
admin.aceacademycharter.org
brsd-jb-radius.bordentown.k12.nj.us
bes.ballingerisd.net
admin.aceacademycharter.org
admin.benholtschool.org
admin.nes.mcduffie.k12.ga.us
eastvalleyelementary.evsd90.org
ses.comalisd.org
mail1.bordentown.k12.nj.us
admin.aceacademycharter.org
www.mtadams.wednet.edu
bordentown.k12.nj.us
admin.horizon.gobearsgo.net
stzes.comalisd.org
brsd-jb-radius.bordentown.k12.nj.us
www.lisaacademy.org
webadmin.pvpusd.net

Certificate

The complete raw certificate details for brsd-jb-radius.bordentown.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5rGPKbr6FLuu8f4RgwR
QdB1OkHVLbQIumcVf3+5n/v5NIhcAMwXXvbOEq4vYqUAEYEkn7VuEhGRckJkfQ+g
LT60ylUYBtYjYMEviovNPjUdI0XsCXe/Ny8wV9F7sQ3XhR/0e/o10T6/oGsywAd9
TB9nutozqAeeOEoRvJVDEfAiR3fr4kjBOE5snqeNsY4l2SpKlhrnqmeSydRpZZ9f
eda/CJ1NzASNlj232Hx8jWCLDHCwvEFzu4AAD2JPQYhCDTOrkpMTdOZBnREbzQQM
vzgmy9i2LXW22h6LK98vw/XLjraMQO3QJnN34DKnT7HgrKAMPSGx+AVKjKadQgYF
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10448343456190261861314105177367612640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NJ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bordentown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bordentown Regional School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bordentown Regional School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brsd-jb-radius.bordentown.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24187838331463965192476627081720681575643431987385276355252295377556777552289323508200931218359048746482575003836718696836644758114437689251748794763268214984793861661607158476849002216981447559746754301161088652607716212510883721372268118768980762549070146206112994650850759457289319956082211536284906239065192009206252358973949318518805845885586837072316070749186125404137846263528934912583406833845725843137434825676834884127806107509946321948935693617026128684806996718747946663088515993397702315639960266542073125852030729070443696063520356358684769554054218497646799528199001096471746713961199801499516014036241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25081878938afe13259394f4cf94ed9df3347180
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.bordentownschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destiny.bordentownschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.bordentownschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerschool.bordentownschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brsd-jb-radius.bordentown.k12.nj.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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