client-v3wire.relaystaging.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:cd:de:b9:4c:78:24:d9:f6:f2:3e:49:70:2e:a4:38 was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=client-v3wire.relaystaging.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:cd:de:b9:4c:78:24:d9:f6:f2:3e:49:70:2e:a4:38
Serial Number (int): 2398166227592737217196311492265157688
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: dc:3d:34:ed:83:95:ee:d7:a4:8e:f7:1e:08:8d:a7:12:d8:41:21:6f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 20:72:e3:bf:30:41:a8:c7:c7:0a:84:b6:5d:dd:87:ad:36:24:f2:d6
Fingerprint (sha256): 00:3c:c5:41:97:72:f0:aa:95:3d:97:4a:c0:b6:68:91:69:53:5e:14:0c:c6:3e:89:a6:ee:6e:13:86:4a:8b:29

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate client-v3wire.relaystaging.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for client-v3wire.relaystaging.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

client-v3wire.relaystaging.com
assistant-stg.hellofurther.com
staging-sms.bluecrossmalink.com
stg-engage.credenceblue.com
staging.ghtconnection.com
staging-msg.bluecrossmn.com
staging.humanaspec.com
stg-msg.bluebyadt.com
stg-engage.bcbsla.com
staging-txt.hap.org
msg-staging.freseniusrx.com
staging-sms.amerigas.com
ocpet-staging.curanthealth.com
staging-myadvocate.aetna.com
stg-msg.blueskyspecialtypharmacy.com
staging.wowmessages.com

Other certificates including the domain name relaystaging.com

(limited to 100 certificates)
client-v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
v3wire.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
v3wire.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
rapid7.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
v3portal.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
client-v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com
v3wire.relaystaging.com
client-v3wire.relaystaging.com
*.relaystaging.com
*.relaystaging.com
*.relaystaging.com

Certificate

The complete raw certificate details for client-v3wire.relaystaging.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnTCCBoWgAwIBAgIQAc3euUx4JNn28j5JcC6kODANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA5MDkwMDAwMDBaFw0yMjEwMDgy
MzU5NTlaMCkxJzAlBgNVBAMTHmNsaWVudC12M3dpcmUucmVsYXlzdGFnaW5nLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJRicpWYVcj1k1++vaYQ
IdyOdfajESA3A6R+Jf5pnspROg+rXOwU05yuE1s6APItwuzzNXWQpBXeWjKv3Fj9
HyKkRPX4GA4ivPrFr/D6eJcRLvh3hpoq5jkTl1cFOLS6M2FmuDIp+ltaDliEnk8a
g37AMwfEYce0vYNs8SArYshkV5k4Se8GEviPhUrWWd+htgHNzBXmgaNcj0jqY6R5
livkOu6HJQICdL8VcbHIoVQGp7svEnFRiMCWPCPG6Yfa1Giw7g1DewwE8NEpsE0X
REhXKkUQTSXdhkW10+hXqRFPtMI2PvPp3DnL9Ahx344yMf1/oxLnCIDtuQ1s5DoF
LPUCAwEAAaOCBKIwggSeMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q
MB0GA1UdDgQWBBTcPTTtg5Xu16SO9x4IjacS2EEhbzCCAdIGA1UdEQSCAckwggHF
gh5jbGllbnQtdjN3aXJlLnJlbGF5c3RhZ2luZy5jb22CHmFzc2lzdGFudC1zdGcu
aGVsbG9mdXJ0aGVyLmNvbYIfc3RhZ2luZy1zbXMuYmx1ZWNyb3NzbWFsaW5rLmNv
bYIbc3RnLWVuZ2FnZS5jcmVkZW5jZWJsdWUuY29tghlzdGFnaW5nLmdodGNvbm5l
Y3Rpb24uY29tghtzdGFnaW5nLW1zZy5ibHVlY3Jvc3Ntbi5jb22CFnN0YWdpbmcu
aHVtYW5hc3BlYy5jb22CFXN0Zy1tc2cuYmx1ZWJ5YWR0LmNvbYIVc3RnLWVuZ2Fn
ZS5iY2JzbGEuY29tghNzdGFnaW5nLXR4dC5oYXAub3Jnghttc2ctc3RhZ2luZy5m
cmVzZW5pdXNyeC5jb22CGHN0YWdpbmctc21zLmFtZXJpZ2FzLmNvbYIeb2NwZXQt
c3RhZ2luZy5jdXJhbnRoZWFsdGguY29tghxzdGFnaW5nLW15YWR2b2NhdGUuYWV0
bmEuY29tgiRzdGctbXNnLmJsdWVza3lzcGVjaWFsdHlwaGFybWFjeS5jb22CF3N0
YWdpbmcud293bWVzc2FnZXMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny
bC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj
YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAX4G
CisGAQQB1nkCBAIEggFuBIIBagFoAHYAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5
TV0mXCVdx4QAAAF7y+DsjQAABAMARzBFAiAHHwWndC9I50nAREDwaZbPN1g24aUG
kSQMqhJzgnNe8wIhAN+qmnvWGluLFSweReXTYJCLh8ubOQcD3QZ8bIkjmL0RAHYA
UaOw9f0BeZxWbbg3eI8MpHrMGyfL956IQpoN/tSLBeUAAAF7y+Ds4wAABAMARzBF
AiEAtMDMCRCbbQj+ctf1trS9GXrl2Eod7Y/Qu+hZuaJBAdsCIA3CltKF6cHJpca4
b6ef6M9/onDQ8m1+ZOLM8W0UfuJhAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tL
x2jwkGKWBvYAAAF7y+DsagAABAMARzBFAiB+Cu1fuW6aQQk3afGhEtDA3SlVvS0V
3QnaoLiwT8zfzAIhAP6LF8tkkbnOzD59zB0KPXWF+K7EDAoOEhOkYYLeiFBUMA0G
CSqGSIb3DQEBCwUAA4IBAQCP+HXf/cPP/Y1bInQxYKRGMgK/O4K6S5GfgbHoTi76
0UDxMxy2kMO/yk79BewAzWDWZMH9YRRvQ22LsZ4LNhQXIV1CBqPUqNxNPtGj5xFf
Fn03VIIU7ijjU9MDrbM3IQ378EYgRPkchQkJPD+N3yEczwqNEDFlRkcJjNv+Y2zW
reHNeqIkAMw1eTTonq4EF7+gSKc20Ua0h2AMvbYQGVBa9ttpZT306KU6ZanTdbcH
tKqTfNh8iWtbAhL1wp8BC/2K1c/FnZjZxLY5rbgxBL3BN5TYLiVH4IW4llexT3mD
IQfhDwUTVvhg4JlIi5txlf+1A4x90WNdo46RrC/K8h1G
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGJylZhVyPWTX769phAh
3I519qMRIDcDpH4l/mmeylE6D6tc7BTTnK4TWzoA8i3C7PM1dZCkFd5aMq/cWP0f
IqRE9fgYDiK8+sWv8Pp4lxEu+HeGmirmOROXVwU4tLozYWa4Min6W1oOWISeTxqD
fsAzB8Rhx7S9g2zxICtiyGRXmThJ7wYS+I+FStZZ36G2Ac3MFeaBo1yPSOpjpHmW
K+Q67oclAgJ0vxVxscihVAanuy8ScVGIwJY8I8bph9rUaLDuDUN7DATw0SmwTRdE
SFcqRRBNJd2GRbXT6FepEU+0wjY+8+ncOcv0CHHfjjIx/X+jEucIgO25DWzkOgUs
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2398166227592737217196311492265157688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'client-v3wire.relaystaging.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18731815453486007818574675986092468105141056199400948196326485688882816561588578323811376931463703178914616057682123956052589649110609604895043034828312871623690032995135861474384984421127806042213569130008091221929045031563346063081173471832728189885710784304148645963850225822013146233816868146312802443858439764948536130123730137648702679116638191739981021032643962222057563936136861167255976702296095916597122365913353894373285016399479178737032506157189628363877158894915296438408248736417454119814242670392772459112018797261209464194923741806099027426795843179518365787179715380210517506787428275742516994977013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc3d34ed8395eed7a48ef71e088da712d841216f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (457 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client-v3wire.relaystaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistant-stg.hellofurther.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-sms.bluecrossmalink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-engage.credenceblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.ghtconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-msg.bluecrossmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.humanaspec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-msg.bluebyadt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-engage.bcbsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-txt.hap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msg-staging.freseniusrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-sms.amerigas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocpet-staging.curanthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-myadvocate.aetna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-msg.blueskyspecialtypharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.wowmessages.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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