api.hi.fi
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 2e:69:80:00:7a:cc:01:98:5b:00:07:4a:a5:dc:d2:00 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=api.hi.fi
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 2e:69:80:00:7a:cc:01:98:5b:00:07:4a:a5:dc:d2:00Serial Number (int): 61692275162685354066619406019832107520
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): ff:06:90:21:3f:f0:06:1a:f5:0b:92:6a:c1:af:3c:80:33:54:a9:f9
Fingerprint (sha256): d7:c2:2d:89:b9:1d:c5:8c:5d:79:d4:ea:f2:09:31:66:9c:78:8f:87:8f:1d:2e:10:35:f9:0b:f5:e6:bc:a8:81
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate api.hi.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.hi.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.hi.fi
Other certificates including the domain name hi.fi
(limited to 100 certificates)
api.hi.fi
www.hi.fi
greencheddar.earth
v2.waitwhile.com
www.techmust.com
www.guide.skhomebuyersguide.ca
dolanc.xyz
api.hi.fi
cubepb.com
*.sandbox.hi.fi
sethnuzum.com
storybook.warranty-keeper.com
app.staging.allthelife.io
www.cheffie.app
hi.fi
www.wondermimi.com
sovik.dev
c2.sidelinehd.com
atlas.hi.fi
api.hi.fi
*.atlas.hi.fi
www.come-to-egypt.co
walkandtrot.in
api.hi.fi
www.vaye.app
grilltimer.schaubschlaeger.de
text.denkizakana.com
api.hi.fi
www.mjtlures.com
nagayama.dev
cashflow.hi.fi
lounastaja.app
www.vipindev.com
testcode.co
dolanc.xyz
www.introvertshideaway.com
walkandtrot.in
link.makana.plazah.com
lumarcolors.it
seasons.mismith.io
kuepper-kollegen.fastdocs.de
www.mjtlures.com
www.admin-stage.circonomy.co
www.co-influencer.com
sell.kidsconsignit.com
app.dogfydiet.com
api.hi.fi
www.hi.fi
hi.fi
promocion-plis.metroarea.com.co
app.topicdna.com
widgets.dev.medapp.nl
hi.fi
sarabeth.for.dinii.jp
www.mpalodiaiscouverture.fr
www.introvertshideaway.com
golofi.com
northlanenft.com
employees.ummnh.com
boulier.pierian.co
sarabeth.for.dinii.jp
hi.fi
www.fotoramausa.com
nehas-hotel-and-restaurant.nehvika.in
smartmod.com.ve
jsatom.everytale.uk
gentwitterkensakuurl.romantique.jp
leafapp.fr
gift.neoufitness.com
*.atlas.hi.fi
www.nucleodatascience.com.br
www.atepja.com.br
www.pestrackservices.in
clinic.curotech.ca
louiskishfy.com
refer.playship.com
bgbuilding23.com
uploop.pro
akinsoftizmir.org
trendzy.fr
www.dus-directionaldrilling.com
app.navcolo.space
noisybull.com
www.olynk.app
www.sinki.cc
www.sinki.cc
levis.appshare.com.br
cruzdelsur.com.pe
bigpapa.paperwebsite.com
hi.fi
api.hi.fi
www.crai.no
www.adamskoullos.com
sethnuzum.com
www.aasthahospital.co.in
choosy.us
tradenowwithus.in
www.ridefairapp.com
www.filiapolis.org
hi.fi
www.hi.fi
greencheddar.earth
v2.waitwhile.com
www.techmust.com
www.guide.skhomebuyersguide.ca
dolanc.xyz
api.hi.fi
cubepb.com
*.sandbox.hi.fi
sethnuzum.com
storybook.warranty-keeper.com
app.staging.allthelife.io
www.cheffie.app
hi.fi
www.wondermimi.com
sovik.dev
c2.sidelinehd.com
atlas.hi.fi
api.hi.fi
*.atlas.hi.fi
www.come-to-egypt.co
walkandtrot.in
api.hi.fi
www.vaye.app
grilltimer.schaubschlaeger.de
text.denkizakana.com
api.hi.fi
www.mjtlures.com
nagayama.dev
cashflow.hi.fi
lounastaja.app
www.vipindev.com
testcode.co
dolanc.xyz
www.introvertshideaway.com
walkandtrot.in
link.makana.plazah.com
lumarcolors.it
seasons.mismith.io
kuepper-kollegen.fastdocs.de
www.mjtlures.com
www.admin-stage.circonomy.co
www.co-influencer.com
sell.kidsconsignit.com
app.dogfydiet.com
api.hi.fi
www.hi.fi
hi.fi
promocion-plis.metroarea.com.co
app.topicdna.com
widgets.dev.medapp.nl
hi.fi
sarabeth.for.dinii.jp
www.mpalodiaiscouverture.fr
www.introvertshideaway.com
golofi.com
northlanenft.com
employees.ummnh.com
boulier.pierian.co
sarabeth.for.dinii.jp
hi.fi
www.fotoramausa.com
nehas-hotel-and-restaurant.nehvika.in
smartmod.com.ve
jsatom.everytale.uk
gentwitterkensakuurl.romantique.jp
leafapp.fr
gift.neoufitness.com
*.atlas.hi.fi
www.nucleodatascience.com.br
www.atepja.com.br
www.pestrackservices.in
clinic.curotech.ca
louiskishfy.com
refer.playship.com
bgbuilding23.com
uploop.pro
akinsoftizmir.org
trendzy.fr
www.dus-directionaldrilling.com
app.navcolo.space
noisybull.com
www.olynk.app
www.sinki.cc
www.sinki.cc
levis.appshare.com.br
cruzdelsur.com.pe
bigpapa.paperwebsite.com
hi.fi
api.hi.fi
www.crai.no
www.adamskoullos.com
sethnuzum.com
www.aasthahospital.co.in
choosy.us
tradenowwithus.in
www.ridefairapp.com
www.filiapolis.org
hi.fi
Certificate
The complete raw certificate details for api.hi.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEYzCCA0ugAwIBAgIQLmmAAHrMAZhbAAdKpdzSADANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MTAwNzAwMDAwMFoXDTIwMTAyMDIzNTk1 OVowFDESMBAGA1UEAwwJYXBpLmhpLmZpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA5urly052rUYBa9lY2Y2RAYOQSNH4IiPbYaEDU/9ZFL3xWqZPhHJM aYyEH19JFGez5J5rvVInx54hohF9Y9cCdnH+AMOGNAKTvFtgfN3Ngg9UH1vtJCVa S8qCNC9u/s4AaQIC6a2BY2fBZqsrEeFDO+nO8tOrUM9L2uxm3c0fkjtFliZ6XXKZ c/CyOx2GFoPI91RzLZ0J4uQdSSScVWZAjpfpb5EvaFibjrY4BQmHP/mfg3txJeiL kv0Eq/1sLF07SX6kpOqcpQUPZEkVB75RR1fXAyeCPHGDLK+xXnWesUubNKZi2Eck fpYr5XCAKMavpe6flytskEr7jUyaXTeFrQIDAQABo4IBgTCCAX0wFAYDVR0RBA0w C4IJYXBpLmhpLmZpMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDov L2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYDVR0gBGgwZjBkBgZngQwBAgEwWjAqBggr BgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMCwGCCsGAQUF BwICMCAMHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAfBgNVHSMEGDAW gBSXwidQnsLJ7AyIMsh8reKmAU/abzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcw AYYTaHR0cDovL2dwLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dwLnN5 bWNiLmNvbS9ncC5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBABzIa3xcytT+WEsXca1Xgh0sKV+KP8Jr0sAYM3z1wPgA3tXxPYVQpzZm zzVsV2Q4wJZwQO+qc6DHnl6zJEPx2rNbWvchymcz3KN9Vu2ikWdtR0kGkNCJKUpe JWOPqI1SCXFAmUig9RTsPBRA1UCH+Lsy7tLKFhATkkIjv3PCtvPsJaGxmJJae/X/ veNm62jYLEnn/cM05HL6Sp4FvQFCkA9J/FnBdEY84h/vz8oGEgHGJ/Lx7NQyCvXU +BSB+OuMNYsVAW5xLToZ+4jdjmRmD1JbfK+xMFTxaEPK8dA1XyAJRG4wO3x0YrAq h+7we/+SAY9Rr09MQwp5vCu1BOt39no= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5urly052rUYBa9lY2Y2R AYOQSNH4IiPbYaEDU/9ZFL3xWqZPhHJMaYyEH19JFGez5J5rvVInx54hohF9Y9cC dnH+AMOGNAKTvFtgfN3Ngg9UH1vtJCVaS8qCNC9u/s4AaQIC6a2BY2fBZqsrEeFD O+nO8tOrUM9L2uxm3c0fkjtFliZ6XXKZc/CyOx2GFoPI91RzLZ0J4uQdSSScVWZA jpfpb5EvaFibjrY4BQmHP/mfg3txJeiLkv0Eq/1sLF07SX6kpOqcpQUPZEkVB75R R1fXAyeCPHGDLK+xXnWesUubNKZi2EckfpYr5XCAKMavpe6flytskEr7jUyaXTeF rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 61692275162685354066619406019832107520 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.hi.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29150642482383529371718302555127354902910037743217690470863928043505199425358805427771912990776512631882720677347383944631428004917745856873295200887344596213891267868792978656596886115954214379088863580557382346902942390398886631149192102758628328146667084781829507771144236361192826514800776567767827434376036590037399260393979421098257600286331585911282768923165935667941743286826767003764716272571869282824939341335942224411523604554819756749357553660185631057576578414702588237283980150502582169478888577548990737395291298161061863969980158345817330267829444647729033432092286908564469996965912886061431535404461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.hi.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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