TSB Bank Plc

- TSB Bank Plc -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 05:a0:34:a9:e7:a2:f1:1d:0d:66:20:58:72:59:9b:28 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

TSB Bank Plc

Company registration number: SC095237
Organization: TSB Bank Plc
Address: Henry Duncan House, 120 George Street
Locality: Edinburgh
Country: GB

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a0:34:a9:e7:a2:f1:1d:0d:66:20:58:72:59:9b:28
Serial Number (int): 7477975622837028460370738538236975912
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b8:85:41:6a:85:2b:99:5b:93:34:78:f5:4c:10:d9:66:c0:89:ca:c2
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): e9:93:cd:a3:9d:fd:20:14:08:fc:9d:69:54:f2:de:b6:93:00:54:fb
Fingerprint (sha256): c1:11:05:86:38:fc:ba:9c:08:3e:c5:ec:dd:4c:6f:4f:d9:dd:61:02:15:93:69:47:07:58:14:98:77:16:1d:88

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate TSB Bank Plc

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TSB Bank Plc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tsb.co.uk

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for TSB Bank Plc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub9UjGPfQdDbuiqIvNh+
5IXREZMqu12Wac29FOLHAdu54heTWaWmxRZ2ISpy8ReHD51rY/Cm5OAg2eubpqoC
j2dMMiyW96n+TG1w26MSYhDEuUfat3HUv+g8JYJp0/AsZkuVRN6evegsYG88Zar0
0sVS24x5ibDJ4HugERownXybrgpER4JyZ5vRnRtwuKVrPoQ70JiRQ+2vL0rLp1c8
sZ1MiMbw3ikkf5wGhc9GUxvxn/oDySdA5eqNaGINpKBJCgkSMBhDfvsTb6x1Ij4Q
aQ4ZU+4tiY1pR3e1ripLo7fsTq4FJj8T1mHNV2m1PaYpI4GOfz7AWSogMTuRtOJR
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7477975622837028460370738538236975912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SC095237'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Henry Duncan House, 120 George Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TSB Bank Plc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TSB Bank Plc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UK00917363136'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23448434889884611232357278197240710668654425204475716392661276003023522546964624122397720634766012539428749773369935028677154918809768060283250993004808278121417558334952657075107051389414581900534239178455812081946313381872009831387802875219708659739695214502113973952685973530056069114355824413559876289409032712936181583297102138654864924801527616840411091496253167838428189801141992197017101277606831010466829588417336869652093815438529697007080029429786917077121918623055625405460662074761619867654856781818307412346495298882584908054164440392804000124909203321367138383711978521463225438611264663410465222840679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b885416a852b995b933478f54c10d966c089cac2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsb.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															8175700cfbf88cb82435011ec6f7669a6b8073ec
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00b785bae6a30a085e1615aad12900c2ef3df822dbfe691084620eba1db62076b92c3c653aab4a42849b32517b6bca5189ba13cef51774bae4d1dc009d7b3a4ebc572a208cd4c6bba47cc519a48f89d99ef196061f7f30943875e36047c2bdefd1fc75a7457da1ddd68168fc0a5d631039144593ff9bb7c66b918902cac71e23c1bf810ccd46a1b51309494252b368f518b85c184a2af917ba34d98ace8eaaf79a52b6499de717d0d4407cbeeaf220cdd0c1a8d55c1a8831539faa019424aba6a4c35b775e1901eedf2efb053faee9bc3cb2005d2549e20ec9943e0de4db1c420b50d4d04c5e853922ce7d0616205e5f5039708a4951a4657fb083be74232e3502b02e295c0a32280c548f462b2f081d60257fbd604ec8927520426f9761edad461fcadf94729c56e155755471a01dd6f3889f4e19240a2a61cfdd79ac1a99817467eb65710b1feb358e464c51517a34be2118e5695da1e3588564585d657cdb32452275aabf5e7ac00a40bd66474f87cd5d85f264bfda742ea79cdbed4d7f9ae4740dc8d56182c703f2d7164e6ed4e619aed76f50323b7eeac1d31157dded581128c8e951dd19ea9120ee7e815baa2c33b8acbe8d674db029e659c28f29d2f9a270df2aa70c80f005631bc11a8a49e0c06b54f96c00d19558274993c1a324476ba3654275859ed57c95ebc3a9caec6cdd1fe31d135b104b5e8fe989ec25f9d74d