1This is an otherwise valid TBSCertificate, except the extensions is an OCTET
2STRING rather than a SEQUENCE.
3
4
5$ openssl asn1parse -i < [TBS CERTIFICATE]
6    0:d=0  hl=2 l=  67 cons: SEQUENCE
7    2:d=1  hl=2 l=   3 cons:  cont [ 0 ]
8    4:d=2  hl=2 l=   1 prim:   INTEGER           :02
9    7:d=1  hl=2 l=   1 prim:  INTEGER           :01
10   10:d=1  hl=2 l=   3 cons:  SEQUENCE
11   12:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:01
12   15:d=1  hl=2 l=   3 cons:  SEQUENCE
13   17:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:05
14   20:d=1  hl=2 l=  30 cons:  SEQUENCE
15   22:d=2  hl=2 l=  13 prim:   UTCTIME           :121018031200Z
16   37:d=2  hl=2 l=  13 prim:   UTCTIME           :131018145959Z
17   52:d=1  hl=2 l=   3 cons:  SEQUENCE
18   54:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:83
19   57:d=1  hl=2 l=   3 cons:  SEQUENCE
20   59:d=2  hl=2 l=   1 prim:   OCTET STRING      [HEX DUMP]:F3
21   62:d=1  hl=2 l=   5 cons:  cont [ 3 ]
22   64:d=2  hl=2 l=   3 prim:   OCTET STRING      [HEX DUMP]:0401DD
23-----BEGIN TBS CERTIFICATE-----
24MEOgAwIBAgIBATADBAEBMAMEAQUwHhcNMTIxMDE4MDMxMjAwWhcNMTMxMDE4MTQ1OTU5WjADBAG
25DMAMEAfOjBQQDBAHd
26-----END TBS CERTIFICATE-----
27