api.azdiotest2.dpa0.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:a3:74:a6:e5:e9:52:99:3f:7b:50:98:52:ce:b9:85 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.azdiotest2.dpa0.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a3:74:a6:e5:e9:52:99:3f:7b:50:98:52:ce:b9:85
Serial Number (int): 15470218324118389493077573360021322117
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 91:e8:24:e4:83:9f:ce:31:73:27:ee:d3:0c:a0:15:1a:0b:49:c0:70
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 24:17:ae:a9:55:90:13:8d:49:aa:a4:a6:1f:d3:05:7f:ca:c2:e6:8b
Fingerprint (sha256): 00:37:af:24:9a:58:d1:c3:1e:86:4a:33:8a:de:ec:23:18:56:a8:ad:72:3a:02:25:97:48:b8:54:1e:5c:32:4d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate api.azdiotest2.dpa0.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.azdiotest2.dpa0.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.azdiotest2.dpa0.org
auth.azdiotest2.dpa0.org
config.azdiotest2.dpa0.org
eventproxy.azdiotest2.dpa0.org
history.azdiotest2.dpa0.org
kibana-auth.azdiotest2.dpa0.org
kibana.azdiotest2.dpa0.org
snapshot.azdiotest2.dpa0.org

Other certificates including the domain name dpa0.org

(limited to 100 certificates)
storage.dailydeploy.dpa0.org
storage.perf3.dpa0.org
morev01.dpa0.org
api.azdiotest2.dpa0.org
*.dailydeploy.dpa0.org
*.internal.geofftest.dpa0.org
api.perf1.dpa0.org
api.devsandbox.dpa0.org
*.dailydeploy.dpa0.org
dailydeploy.dpa0.org
*.internal.geofftest.dpa0.org
*.dailydeploy.dpa0.org
miwilliams01.dpa0.org
storage.azdiotest2.dpa0.org
storage.devsandbox.dpa0.org
miwilliams01.dpa0.org
storage.geofftest.dpa0.org
azdiotest2.dpa0.org
storage.geofftest.dpa0.org
*.internal.perf1.dpa0.org
api.chkumar.dpa0.org
*.internal.geofftest.dpa0.org
api.miwilliams01.dpa0.org
nbachkethi01.dpa0.org
storage.miwilliams01.dpa0.org
storage.staging.dpa0.org
*.internal.azdiotest2.dpa0.org
miwilliams01.dpa0.org
api.azdiotest2.dpa0.org
*.azdiotest2.dpa0.org
storage.pvk.dpa0.org
morev01.dpa0.org
api.azdiotest.dpa0.org
*.internal.jbackus02.dpa0.org
api.dailydeploy.region.dpa0.org
dailydeploy.dpa0.org
storage.dailydeploy.dpa0.org
api.perf2.dpa0.org
storage.vkumarhc.dpa0.org
api.azdiotest2.dpa0.org
*.internal.jbackus02.dpa0.org
api.perf1.dpa0.org
api.azdiotest.dpa0.org
api.dailydeploy.region.dpa0.org
*.internal.geofftest.dpa0.org
*.internal.morev02.dpa0.org
perf2.dpa0.org
api.pcheung.dpa0.org
api.geofftest2.dpa0.org
*.dailydeploy.dpa0.org
dailydeploy.dpa0.org
*.internal.chkumar.dpa0.org
api.geofftest2.dpa0.org
api.nbachkethi01.dpa0.org
api.perf3.dpa0.org
*.internal.morev01.dpa0.org
api.presandbox.region.dpa0.org
*.perf2.dpa0.org
storage.azdiotest.dpa0.org
*.internal.azdiotest.dpa0.org
*.internal.geofftest.dpa0.org
syslog.perf3.dpa0.org
api.geofftest.dpa0.org
api.chkumar.dpa0.org
syslog.vkumarhc.dpa0.org
api.azdiotest.dpa0.org
storage.perf1.dpa0.org
syslog.vkumarhc.dpa0.org
*.devsandbox.dpa0.org
*.crash.internal.dailydeploy.dpa0.org
api.azdiotest2.dpa0.org
storage.azdiotest.dpa0.org
api.rpanchal.dpa0.org
api.devsandbox.dpa0.org
dailydeploy.dpa0.org
*.crash.internal.chkumar.dpa0.org
storage.vkumarhc.dpa0.org
dailydeploy.dpa0.org
api.geofftest.dpa0.org
azdiotest2.dpa0.org
devsandbox.dpa0.org
automationtesting.dev.dpa0.org
api.jbackus02.dpa0.org
storage.perf2.dpa0.org
*.internal.ap2.dpa0.org
none.azdiotest2.dpa0.org
*.internal.perf3.dpa0.org
api.delta.prototype.dpa0.org
storage.jbackus02.dpa0.org
*.internal.miwilliams01.dpa0.org
*.internal.pvk.dpa0.org
*.dailydeploy.dpa0.org
storage.beta.prototype.dpa0.org
syslog.delta.prototype.dpa0.org
*.internal.jbackus01.dpa0.org
storage.playground.dpa0.org
api.jbackus01.dpa0.org
preprod.dpa0.org
*.internal.pvk.dpa0.org
storage.pvk.dpa0.org

Certificate

The complete raw certificate details for api.azdiotest2.dpa0.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIQC6N0puXpUpk/e1CYUs65hTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MTIwMDAwMDBaFw0xOTEwMTIx
MjAwMDBaMCIxIDAeBgNVBAMTF2FwaS5hemRpb3Rlc3QyLmRwYTAub3JnMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeMri5h45HApG0fnGxqyY31vQGB8
B3f3nzKHwygPX9cX6s1oQp43yqjb3oME4MCG5I/KLkU+UcuSaFhh2845lByCukI0
tVQtQrCdICBlQmTDAA2WYCwCcE5X3ZTDo3IArhwALHnpk5vsHqaCExUeTwNHL9z8
vsdShNV5FU/dwcoUXP2MGweZBaIZkYePa8hLMFQsyjZM1KdqVZaIMnpaaqm+g7Ua
AXuP7/rYHpgsb5T8FJQ2sOFKfNnQW5znhROzBIwe9F6Q+mpXD3jx8pCLO/5sgBgU
Cmd2ORn6ujHM8JdGupNBq4BT6x3Ezt4Vh5Xf8CrErwhaa8D+PtxtsxCP1QIDAQAB
o4ICYTCCAl0wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O
BBYEFJHoJOSDn84xcyfu0wygFRoLScBwMIHyBgNVHREEgeowgeeCF2FwaS5hemRp
b3Rlc3QyLmRwYTAub3JnghhhdXRoLmF6ZGlvdGVzdDIuZHBhMC5vcmeCGmNvbmZp
Zy5hemRpb3Rlc3QyLmRwYTAub3Jngh5ldmVudHByb3h5LmF6ZGlvdGVzdDIuZHBh
MC5vcmeCG2hpc3RvcnkuYXpkaW90ZXN0Mi5kcGEwLm9yZ4Ifa2liYW5hLWF1dGgu
YXpkaW90ZXN0Mi5kcGEwLm9yZ4Iaa2liYW5hLmF6ZGlvdGVzdDIuZHBhMC5vcmeC
HHNuYXBzaG90LmF6ZGlvdGVzdDIuZHBhMC5vcmcwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo
dHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0g
BBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr
BgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsG
AQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j
cnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAu1RoX/ID+di6gOk3ekZA8ep+1IskSCGGkrWLfDOS1QNkwTBRo1Yy
39eDYF78r1aJ463eUdQOfqmF/6ADYYraz5adUT6xljnq7Q+9CryMD3ONmJtxowvL
tnyiDQwdYYj8Ku82qk3ZT+I8Hs1xlpFjhIe8k/Ta3coMIwZM72aUbFBT/EuUA8s4
Yqdmiu6ld9kiB4edE7nTe62RfuDQ/gM/7uf8tudPIX5EVUP3r3szKh6loDA5nI1X
l5JHRUl1jUAF+Pjd3NU3pR/c3LrYxyn/iRh2bfTO44a0tMbgFsh3ktBUYV78Xm3M
T5FHhEL9u2ciACJWpaDzhqp5V094LkitAA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeMri5h45HApG0fnGxqy
Y31vQGB8B3f3nzKHwygPX9cX6s1oQp43yqjb3oME4MCG5I/KLkU+UcuSaFhh2845
lByCukI0tVQtQrCdICBlQmTDAA2WYCwCcE5X3ZTDo3IArhwALHnpk5vsHqaCExUe
TwNHL9z8vsdShNV5FU/dwcoUXP2MGweZBaIZkYePa8hLMFQsyjZM1KdqVZaIMnpa
aqm+g7UaAXuP7/rYHpgsb5T8FJQ2sOFKfNnQW5znhROzBIwe9F6Q+mpXD3jx8pCL
O/5sgBgUCmd2ORn6ujHM8JdGupNBq4BT6x3Ezt4Vh5Xf8CrErwhaa8D+PtxtsxCP
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15470218324118389493077573360021322117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.azdiotest2.dpa0.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25990874268872926792323780797914820889682159943307652985670088018900392612234965277376057105394674066673958136731656900015725446849701651732959860078639116158907068829138453879612952596652521848568601448789744315482853215664713091808885161468855891244011662337021508512865043063414605813347786631972449835411416600703043375162613960977423501648634759768930254302316981294601361308550318876955418884797046572104107593866973664099271829596660382326348538265024882194771234308645897593321459249167029070735248086734038654747488032956877445824816216114268678697023615549989924477050557751937494122172930620393411681750997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91e824e4839fce317327eed30ca0151a0b49c070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventproxy.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'history.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana-auth.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshot.azdiotest2.dpa0.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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