vcapiint.associatedpress.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:da:c6:0d:95:2a:e7:67:00:28:a1:44:47:c8:88:c2 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vcapiint.associatedpress.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:da:c6:0d:95:2a:e7:67:00:28:a1:44:47:c8:88:c2Serial Number (int): 14428217666242520982725897533560228034
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 02:d0:67:63:30:4c:ab:08:be:ed:04:3f:e1:4f:bd:84:88:04:db:c3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 70:b4:cb:64:72:73:84:58:a9:71:b4:7c:38:7e:96:71:90:fe:f0:6d
Fingerprint (sha256): c0:f3:a5:a4:ab:8c:fd:ae:d1:81:80:57:42:ac:fc:b8:6e:f2:fd:19:0c:b7:6a:fb:97:71:61:d5:18:98:8a:83
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate vcapiint.associatedpress.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vcapiint.associatedpress.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vcapiint.associatedpress.com
Other certificates including the domain name associatedpress.com
(limited to 100 certificates)
ap.org
epix.ap.org
*.dne.associatedpress.com
salesagency.associatedpress.com
associatedpress.com
kibana.associatedpress.com
transref.associatedpress.com
*.dne.associatedpress.com
ppc.associatedpress.com
igmapi.associatedpress.com
*.associatedpress.com
ap.org
nrmailsvc-use1.associatedpress.com
binaryapi.associatedpress.com
associatedpress.com
nrmailsvc-usw2.associatedpress.com
*.dne.associatedpress.com
*.dne.associatedpress.com
*.associatedpress.com
kpapiv.associatedpress.com
fox.associatedpress.com
transref.associatedpress.com
*.associatedpress.com
*.associatedpress.com
apnsapi-use1-2.associatedpress.com
associatedpress.com
votecastint.associatedpress.com
origin-interactive.associatedpress.com
transref.associatedpress.com
newsdesk.associatedpress.com
binaryapi.associatedpress.com
ppcapi.associatedpress.com
fox.associatedpress.com
kibana.associatedpress.com
vcapi.associatedpress.com
interactives.associatedpress.com
*.dne.associatedpress.com
nrcartsvc-use1.associatedpress.com
ppcapiext.associatedpress.com
fox.associatedpress.com
apcbo.associatedpress.com
apcbo.associatedpress.com
nrmailsvc-usw2-2.associatedpress.com
vcapi.associatedpress.com
kibana.associatedpress.com
associatedpress.com
*.dne.associatedpress.com
*.dne.associatedpress.com
apnsapi-usw2-2.associatedpress.com
igmapi.associatedpress.com
transref.associatedpress.com
ppcapi.associatedpress.com
newsdesk.associatedpress.com
ppc.associatedpress.com
fox.associatedpress.com
vcapiint.associatedpress.com
kpapiv.associatedpress.com
hiveprod1.associatedpress.com
ppcapiext.associatedpress.com
origin-interactive.associatedpress.com
origin-interactive.associatedpress.com
kibana.associatedpress.com
associatedpress.com
*.associatedpress.com
epix.ap.org
*.associatedpress.com
sharingnetwork.associatedpress.com
*.associatedpress.com
igmapi.associatedpress.com
*.dne.associatedpress.com
ap.org
*.associatedpress.com
*.dne.associatedpress.com
kpapi.associatedpress.com
*.dne.associatedpress.com
ingestwf.associatedpress.com
nrmailsvc-use1-2.associatedpress.com
transref.associatedpress.com
associatedpress.com
epix.ap.org
*.dne.associatedpress.com
salesagency.associatedpress.com
associatedpress.com
kibana.associatedpress.com
transref.associatedpress.com
*.dne.associatedpress.com
ppc.associatedpress.com
igmapi.associatedpress.com
*.associatedpress.com
ap.org
nrmailsvc-use1.associatedpress.com
binaryapi.associatedpress.com
associatedpress.com
nrmailsvc-usw2.associatedpress.com
*.dne.associatedpress.com
*.dne.associatedpress.com
*.associatedpress.com
kpapiv.associatedpress.com
fox.associatedpress.com
transref.associatedpress.com
*.associatedpress.com
*.associatedpress.com
apnsapi-use1-2.associatedpress.com
associatedpress.com
votecastint.associatedpress.com
origin-interactive.associatedpress.com
transref.associatedpress.com
newsdesk.associatedpress.com
binaryapi.associatedpress.com
ppcapi.associatedpress.com
fox.associatedpress.com
kibana.associatedpress.com
vcapi.associatedpress.com
interactives.associatedpress.com
*.dne.associatedpress.com
nrcartsvc-use1.associatedpress.com
ppcapiext.associatedpress.com
fox.associatedpress.com
apcbo.associatedpress.com
apcbo.associatedpress.com
nrmailsvc-usw2-2.associatedpress.com
vcapi.associatedpress.com
kibana.associatedpress.com
associatedpress.com
*.dne.associatedpress.com
*.dne.associatedpress.com
apnsapi-usw2-2.associatedpress.com
igmapi.associatedpress.com
transref.associatedpress.com
ppcapi.associatedpress.com
newsdesk.associatedpress.com
ppc.associatedpress.com
fox.associatedpress.com
vcapiint.associatedpress.com
kpapiv.associatedpress.com
hiveprod1.associatedpress.com
ppcapiext.associatedpress.com
origin-interactive.associatedpress.com
origin-interactive.associatedpress.com
kibana.associatedpress.com
associatedpress.com
*.associatedpress.com
epix.ap.org
*.associatedpress.com
sharingnetwork.associatedpress.com
*.associatedpress.com
igmapi.associatedpress.com
*.dne.associatedpress.com
ap.org
*.associatedpress.com
*.dne.associatedpress.com
kpapi.associatedpress.com
*.dne.associatedpress.com
ingestwf.associatedpress.com
nrmailsvc-use1-2.associatedpress.com
transref.associatedpress.com
associatedpress.com
Certificate
The complete raw certificate details for vcapiint.associatedpress.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjjCCA3agAwIBAgIQCtrGDZUq52cAKKFER8iIwjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMTUwMDAwMDBaFw0yMTAyMTUx MjAwMDBaMCcxJTAjBgNVBAMTHHZjYXBpaW50LmFzc29jaWF0ZWRwcmVzcy5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComwwul9T3EieTK74iLOXc vlkbH28fQ1O8W4aWVEire0C4Ulbe1M808f6wL3Ftl7d/cSX0G4rTFaJZdKS1pejP ejUKN7NsBavyfPLJJ+/Om3DREF2x1lGPx5dPr625GGkgeFsvTjR39T3l3GspU3ZY FM0HiIEeWt2Xj0zDPA5w2k/ebggEA5G6Jbcw+Vss5a7QEc8PuzqtUZtbXxFJQEVU tDStr1LVnWmntvcfFnbRVd/Sc1328iWT1tlRfoqYaujr+ZGteLTRLusQRJAoiU/M F8ByY70/IvRuwKQ9BtUMtHMVAbrjpn8DquqM8nn+j35L/+QZBpdQ05FS3ASQXzF9 AgMBAAGjggGVMIIBkTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAd BgNVHQ4EFgQUAtBnYzBMqwi+7QQ/4U+9hIgE28MwJwYDVR0RBCAwHoIcdmNhcGlp bnQuYXNzb2NpYXRlZHByZXNzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsG CWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV HRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAb7eOi+VmT/vn8gy3Qg3r0R6XSiq3voBWFxGNJwr7WW0srUozDkoeY/DznSzUv g09bv9WBPCWIZmHt0eBBKCNWDKtllNOp9Z5kfjileJ1uVKlDZeWb/V/qHSIdxLkW Mfz0SQ4qyngAJtYoDUxvuzXc9pv85bf9iDLk+ZpSCt5Q0jy2zRYoIknu/JA54Djb xQ/OXqlEAygOptMlonDezVxW071xdbAmsR3cEt3fmz+WlX4RDMP8XVqi4QcxeR2m XIMl+sP43BV/1x3Uj3ssEjHwZn2h+/SDm87BkyvjQ5g5B/65fkzv9oShyc0meBfW QZUrWYbLKoCza4XwQOE5dTxS -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJsMLpfU9xInkyu+Iizl 3L5ZGx9vH0NTvFuGllRIq3tAuFJW3tTPNPH+sC9xbZe3f3El9BuK0xWiWXSktaXo z3o1CjezbAWr8nzyySfvzptw0RBdsdZRj8eXT6+tuRhpIHhbL040d/U95dxrKVN2 WBTNB4iBHlrdl49MwzwOcNpP3m4IBAORuiW3MPlbLOWu0BHPD7s6rVGbW18RSUBF VLQ0ra9S1Z1pp7b3HxZ20VXf0nNd9vIlk9bZUX6KmGro6/mRrXi00S7rEESQKIlP zBfAcmO9PyL0bsCkPQbVDLRzFQG646Z/A6rqjPJ5/o9+S//kGQaXUNORUtwEkF8x fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14428217666242520982725897533560228034 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcapiint.associatedpress.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21284492048516345987302596042597228607665635879469063400152697548035221705185067505773036188570152616281918814855646007872898911004243652339362659406020725053370454025171489426831452715193345053814331224306624999940004751119805621538118761574124667978371290534877781330405704642803426332768443953766951662308579334397213233465993502050909861225666562005507290956325025490645944265660722944500395078550715194457898648074617236012860041939757671790318483279259379315503038049201549092556660443951906009968544257000195343801884005217625591790794409146334831503688127029523848772627880783944849182329082385077962954191229 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 02d06763304cab08beed043fe14fbd848804dbc3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcapiint.associatedpress.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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