brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:9c:c9:76:ea:b3:d5:64:9f:6b:ff:52:7d:70:65:40 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:9c:c9:76:ea:b3:d5:64:9f:6b:ff:52:7d:70:65:40Serial Number (int): 11447908462101168502356842658848073024
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ec:2a:c8:b0:6d:c9:d2:d2:1b:17:69:c8:f9:47:d0:d7:f6:d6:c4:39
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 47:82:39:fa:f4:a8:90:5c:59:32:12:d6:e9:10:9e:8e:0c:e4:a0:7a
Fingerprint (sha256): 00:52:5e:cc:4e:11:ca:cb:c4:c9:65:33:0f:c1:e3:9e:59:ad:6b:27:8e:d4:ef:53:d4:0e:71:a7:5e:91:42:8e
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com
brass-graphql-agent.prod.identity-query.corp.a2z.com
brass-graphql-agent.prod.identity-query.corp.a2z.com
Other certificates including the domain name a2z.com
(limited to 100 certificates)
migration.symapiallegro.content-platform.a2z.com
sleiman.alpha.us-west-2.goshawk.aws.a2z.com
*.cloudcatalog.zappos.com
api.prod.pdx.data-service.backbone.networking.aws.a2z.com
b0d35.prod.ap-east-1.integtest.puller.iot.aws.a2z.com
public-writer.c-1.ap-northeast-2.cloudmap.aws.a2z.com
ap-southeast-1.prod.budgets.v1.bhvr.wheatley.aws.a2z.com
workflow.af-south-1.sso.aws.a2z.com
beta-api.us-east-1.smart-pixel.advertising.a2z.com
console.beta.zimbru.av-lr.a2z.com.beta.zimbru.av-lr.a2z.com
elb.ap-southeast-1.cs.boost.aws.a2z.com
api.eu-west-3.bifrost.beta.aura.acm.aws.a2z.com
ffsproxy.ring.devices.a2z.com
cea4b.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
alpha.us-west-2.workteam-management.crowdscale.aws.a2z.com
roleproxy.preprod.cn-northwest-1.ml-platform.aws.a2z.com
labeling.prod.eu-central-1.ml-platform.aws.a2z.com
api.crucible-beta.apn.a2z.com
gamma.catalog-entity-relationships.video.a2z.com
*.gc-rc-sr-158.8dl6bo.c1.kafka.us-east-1.sharabhi.people.a2z.com
replication.ruimi.us-west-2.duckhawk.a2z.com
ph.preprod.jobsatamazon.hvh.a2z.com
api.integ.pi.a2z.com
mds.prod.eu-central-1.ml-platform.aws.a2z.com
dataingestionservice.spektr.a2z.com
api.todo.frontend.s3.aws.a2z.com
ec.416278730961.dp.us-east-1.device-manager.a2z.com
*.rdlp-krang.av-lr.a2z.com
www.annotation.sandbox.nanook.lab126.a2z.com
smbatch.preprod.ca-west-1.ml-platform.aws.a2z.com
beta.inbound.rodeo.aft.a2z.com
staging.momentum.twitch.a2z.com
ease.gamma.ap-east-1.ml-platform.aws.a2z.com
service.prod.eu-north-1.ml.glue.aws.a2z.com
pub2.himanshj.desktop.us-east-1.canary.snapper.iot.aws.a2z.com
us-east-2-prod.mms.cloudtrail.aws.a2z.com
gamma.us-east-1.michigan.glue.aws.a2z.com
site.maanniss.variable-fee.video.a2z.com
api.pdxportal-beta.apn.a2z.com
*.gc-rc-sr-158.3wucrt.c1.kafka.us-east-1.sharabhi.people.a2z.com
1d0f8.beta.us-east-1.integtest.moonraker.iot.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.bw.peg.a2z.com
portal.beta.ocelot.outposts.aws.a2z.com
roleproxy.prod.eu-north-1.ml-platform.aws.a2z.com
mfarm-cms-presto.us-east-2c.us-east-2.athena.aws.a2z.com
*.replacementc.dpzbg8.c1.kafka.us-east-1.sharabhi.people.a2z.com
880e4.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
saml-runtime.sa-east-1.prod.apps-auth.aws.a2z.com
tomhm.alpha.tango-graphql.imdb.a2z.com
ms.155717691546.ap-northeast-1.mercury.rds.a2z.com
allegiance.legacy-event.insights.video.a2z.com
*.developers.alexa.a2z.com
syd52.prod.tinkerbell.ebs.aws.a2z.com
api.hkg.runbmc-prod.conan.a2z.com
api.serverless-demo-webapp.kaizen.shopbop.a2z.com
*.ashtohms-dev.us-west-2.factsorchestration.spectre.aws.a2z.com
clujason-ops.gamesparks.aws.a2z.com
gojam-test.content-platform.a2z.com
api.test.us-east-1.remotecommands.rds.a2z.com
us-east-1.development.case-api.support.aws.a2z.com
test-acm.derby.dev.cloudbrowse.a2z.com
*.rw-c-ss.prod.eu-north-1.canary.identity.iot.aws.a2z.com
*.d-c-ss.prod.ap-southeast-2.canary.identity.iot.aws.a2z.com
pre.ap-southeast-3.prod.isac.access.idaho.aws.a2z.com
verification.credential.business.a2z.com
portal.us-west-2.beta.ops.codedeploy.a2z.com
us-east-2.prod.ssm.v1.bhvr.wheatley.aws.a2z.com
ca-central-1.prod.console.elb.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.replacementc.pmojd6.c1.kafka.us-east-1.sharabhi.people.a2z.com
primary.us-west-2.beta.twitchbeefcake.services.twitch.a2z.com
testdomain2.173480755032.brelandm.a2z.com
alpha.dev-photo.eam.aws.a2z.com
gamma.ap-southeast-4.spectrograph.cloudwatch.aws.a2z.com
*.d-c-ss.prod.sa-east-1.canary.identity.iot.aws.a2z.com
demantradev2.robotics.a2z.com
alpha.griffonquery.roparikh.people.a2z.com
livetracking.prod.ap-northeast-2.hydratest.aws.a2z.com
vccordob.idq-hawk.a2z.com
database-service.beta.caracal.proserve.aws.a2z.com
us-west-1.development.317961243480.amux.support.aws.a2z.com
1752a.prod.me-central-1.integtest.snapper.iot.aws.a2z.com
bacon-splunk-shc.public.prod.ap-northeast-2.ses.aws.a2z.com
128ca.prod.ap-south-1.integtest.puller.iot.aws.a2z.com
canary.beta.us-west-1.boost.aws.a2z.com
*.d-c-ss.prod.us-east-1.canary.identity.iot.aws.a2z.com
cn-northwest-1.prod.niffler.scooby.ebs.aws.a2z.com
datacatalogv2.alpha.spektr.a2z.com
kiatkoo.beta.images-service.uifc.catalog.a2z.com
commodore.beta.datacenter.security.aws.a2z.com
api.jarrodtb.inbound.rodeo.aft.a2z.com
prod.arcwarden.live-video.a2z.com
alpha.taasselfserveonboard.muechen.jrd.people.a2z.com
us-east-1.gamma.registry.cloudformation.aws.a2z.com
cell-0.af-south-1.gamma.tangerinebox.console.aws.a2z.com
kainin.beta.credits.business-ops.aws.a2z.com
api.alpha.cpfunctionalhealthdash.jrd.people.a2z.com
835e7.prod.me-central-1.integtest.puller.iot.aws.a2z.com
beta.templui.exemptions.tax-platform.a2z.com
sleiman.alpha.us-west-2.goshawk.aws.a2z.com
*.cloudcatalog.zappos.com
api.prod.pdx.data-service.backbone.networking.aws.a2z.com
b0d35.prod.ap-east-1.integtest.puller.iot.aws.a2z.com
public-writer.c-1.ap-northeast-2.cloudmap.aws.a2z.com
ap-southeast-1.prod.budgets.v1.bhvr.wheatley.aws.a2z.com
workflow.af-south-1.sso.aws.a2z.com
beta-api.us-east-1.smart-pixel.advertising.a2z.com
console.beta.zimbru.av-lr.a2z.com.beta.zimbru.av-lr.a2z.com
elb.ap-southeast-1.cs.boost.aws.a2z.com
api.eu-west-3.bifrost.beta.aura.acm.aws.a2z.com
ffsproxy.ring.devices.a2z.com
cea4b.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
alpha.us-west-2.workteam-management.crowdscale.aws.a2z.com
roleproxy.preprod.cn-northwest-1.ml-platform.aws.a2z.com
labeling.prod.eu-central-1.ml-platform.aws.a2z.com
api.crucible-beta.apn.a2z.com
gamma.catalog-entity-relationships.video.a2z.com
*.gc-rc-sr-158.8dl6bo.c1.kafka.us-east-1.sharabhi.people.a2z.com
replication.ruimi.us-west-2.duckhawk.a2z.com
ph.preprod.jobsatamazon.hvh.a2z.com
api.integ.pi.a2z.com
mds.prod.eu-central-1.ml-platform.aws.a2z.com
dataingestionservice.spektr.a2z.com
api.todo.frontend.s3.aws.a2z.com
ec.416278730961.dp.us-east-1.device-manager.a2z.com
*.rdlp-krang.av-lr.a2z.com
www.annotation.sandbox.nanook.lab126.a2z.com
smbatch.preprod.ca-west-1.ml-platform.aws.a2z.com
beta.inbound.rodeo.aft.a2z.com
staging.momentum.twitch.a2z.com
ease.gamma.ap-east-1.ml-platform.aws.a2z.com
service.prod.eu-north-1.ml.glue.aws.a2z.com
pub2.himanshj.desktop.us-east-1.canary.snapper.iot.aws.a2z.com
us-east-2-prod.mms.cloudtrail.aws.a2z.com
gamma.us-east-1.michigan.glue.aws.a2z.com
site.maanniss.variable-fee.video.a2z.com
api.pdxportal-beta.apn.a2z.com
*.gc-rc-sr-158.3wucrt.c1.kafka.us-east-1.sharabhi.people.a2z.com
1d0f8.beta.us-east-1.integtest.moonraker.iot.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.bw.peg.a2z.com
portal.beta.ocelot.outposts.aws.a2z.com
roleproxy.prod.eu-north-1.ml-platform.aws.a2z.com
mfarm-cms-presto.us-east-2c.us-east-2.athena.aws.a2z.com
*.replacementc.dpzbg8.c1.kafka.us-east-1.sharabhi.people.a2z.com
880e4.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
saml-runtime.sa-east-1.prod.apps-auth.aws.a2z.com
tomhm.alpha.tango-graphql.imdb.a2z.com
ms.155717691546.ap-northeast-1.mercury.rds.a2z.com
allegiance.legacy-event.insights.video.a2z.com
*.developers.alexa.a2z.com
syd52.prod.tinkerbell.ebs.aws.a2z.com
api.hkg.runbmc-prod.conan.a2z.com
api.serverless-demo-webapp.kaizen.shopbop.a2z.com
*.ashtohms-dev.us-west-2.factsorchestration.spectre.aws.a2z.com
clujason-ops.gamesparks.aws.a2z.com
gojam-test.content-platform.a2z.com
api.test.us-east-1.remotecommands.rds.a2z.com
us-east-1.development.case-api.support.aws.a2z.com
test-acm.derby.dev.cloudbrowse.a2z.com
*.rw-c-ss.prod.eu-north-1.canary.identity.iot.aws.a2z.com
*.d-c-ss.prod.ap-southeast-2.canary.identity.iot.aws.a2z.com
pre.ap-southeast-3.prod.isac.access.idaho.aws.a2z.com
verification.credential.business.a2z.com
portal.us-west-2.beta.ops.codedeploy.a2z.com
us-east-2.prod.ssm.v1.bhvr.wheatley.aws.a2z.com
ca-central-1.prod.console.elb.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.replacementc.pmojd6.c1.kafka.us-east-1.sharabhi.people.a2z.com
primary.us-west-2.beta.twitchbeefcake.services.twitch.a2z.com
testdomain2.173480755032.brelandm.a2z.com
alpha.dev-photo.eam.aws.a2z.com
gamma.ap-southeast-4.spectrograph.cloudwatch.aws.a2z.com
*.d-c-ss.prod.sa-east-1.canary.identity.iot.aws.a2z.com
demantradev2.robotics.a2z.com
alpha.griffonquery.roparikh.people.a2z.com
livetracking.prod.ap-northeast-2.hydratest.aws.a2z.com
vccordob.idq-hawk.a2z.com
database-service.beta.caracal.proserve.aws.a2z.com
us-west-1.development.317961243480.amux.support.aws.a2z.com
1752a.prod.me-central-1.integtest.snapper.iot.aws.a2z.com
bacon-splunk-shc.public.prod.ap-northeast-2.ses.aws.a2z.com
128ca.prod.ap-south-1.integtest.puller.iot.aws.a2z.com
canary.beta.us-west-1.boost.aws.a2z.com
*.d-c-ss.prod.us-east-1.canary.identity.iot.aws.a2z.com
cn-northwest-1.prod.niffler.scooby.ebs.aws.a2z.com
datacatalogv2.alpha.spektr.a2z.com
kiatkoo.beta.images-service.uifc.catalog.a2z.com
commodore.beta.datacenter.security.aws.a2z.com
api.jarrodtb.inbound.rodeo.aft.a2z.com
prod.arcwarden.live-video.a2z.com
alpha.taasselfserveonboard.muechen.jrd.people.a2z.com
us-east-1.gamma.registry.cloudformation.aws.a2z.com
cell-0.af-south-1.gamma.tangerinebox.console.aws.a2z.com
kainin.beta.credits.business-ops.aws.a2z.com
api.alpha.cpfunctionalhealthdash.jrd.people.a2z.com
835e7.prod.me-central-1.integtest.puller.iot.aws.a2z.com
beta.templui.exemptions.tax-platform.a2z.com
Certificate
The complete raw certificate details for brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIQCJzJduqz1WSfa/9SfXBlQDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMDQwMDAwMDBaFw0yMTAzMDQx MjAwMDBaMEkxRzBFBgNVBAMTPmJyYXNzLWdyYXBocWwtYWdlbnQuZXUtd2VzdC0x LnByb2QuaWRlbnRpdHktcXVlcnkuY29ycC5hMnouY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEApVQqqJv+oO+/FgFlSvdYvvIRShbxdEQv+t1hypQF RiTu05i0l+l1iU7mL+ZYph9UPa/L8TbyIrevlz0ZjMNV8Rt1eqrnmpUDNGY8DktJ OygpKPKyx/4Lg7QN8WCP+1SoDXF1fBPYxStzcFVXc1zZDlSR8e/P+FXt62P73tlc FFXSWp5NSBCQStShwsvp/g6h8nTSZLww/eF5Iuv3LBbVYz9/Auzo31gZya5tkDcX TE0ZECE9kS37dPv2ii5qM22uf6HCodolzx1itcA9CrtDJydwknTtk1aaJwbiZJgk +ZUAXcrYTZp+8GuE+MX993CJLZnX44I1s122x37nH8o4+wIDAQABo4IB7TCCAekw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFOwqyLBt ydLSGxdpyPlH0Nf21sQ5MH8GA1UdEQR4MHaCPmJyYXNzLWdyYXBocWwtYWdlbnQu ZXUtd2VzdC0xLnByb2QuaWRlbnRpdHktcXVlcnkuY29ycC5hMnouY29tgjRicmFz cy1ncmFwaHFsLWFnZW50LnByb2QuaWRlbnRpdHktcXVlcnkuY29ycC5hMnouY29t MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5j b20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1 BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFt YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6 b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAB4rHIaZK+xLQWcDvAVdzIIP199w jctNKurH7/8UfVTVSP5Cj1Rh53Vm1EfCct7hr2vmxRzUjFNrfgMqSfrMrGZK3FfO OBWMKdMOmAy4Z3xuhv6yv4OmMs0Kvvi2U4plGMPWufY1Nr7U8qjvWkxf0nILQmb4 KLwjAN3S5FQfiDTYugPQcDyaUSDw/BD3CO++HjXa7wzMsCde0H73EBkdLwT9vTHC YBvqm3CnL5uodEH3kLU5tUxVkb6xsMkUgBx/uLlRiSLRynGUfm/WmDH6DiTSzwk7 23u7UrXmHs5VQVV8aXlLy3CWig0uwEFNSpQKmSc7GRi1BtAYuC6zzadpJEg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVQqqJv+oO+/FgFlSvdY vvIRShbxdEQv+t1hypQFRiTu05i0l+l1iU7mL+ZYph9UPa/L8TbyIrevlz0ZjMNV 8Rt1eqrnmpUDNGY8DktJOygpKPKyx/4Lg7QN8WCP+1SoDXF1fBPYxStzcFVXc1zZ DlSR8e/P+FXt62P73tlcFFXSWp5NSBCQStShwsvp/g6h8nTSZLww/eF5Iuv3LBbV Yz9/Auzo31gZya5tkDcXTE0ZECE9kS37dPv2ii5qM22uf6HCodolzx1itcA9CrtD JydwknTtk1aaJwbiZJgk+ZUAXcrYTZp+8GuE+MX993CJLZnX44I1s122x37nH8o4 +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11447908462101168502356842658848073024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20870824434133102035361752689996260000070024561501962295519879796271681996535794566573891287284241783955612444618354143993205929924941688826327887780416706954354728485434906489590429797237752137966671827372856167022881094627888950048955289222911238467797742606955205752616503285039812292591209570685300398220604052903824566216868075939370164878432971978480243969030604139910983400593457503314675541783351638101959921830982008106487072887202251479915931740885632341718861578718026671337836260606955238479762911606243971189929129273683933072987219444150726646036517834212885593389104480775699661471445453073328217143547 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec2ac8b06dc9d2d21b1769c8f947d0d7f6d6c439 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brass-graphql-agent.eu-west-1.prod.identity-query.corp.a2z.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brass-graphql-agent.prod.identity-query.corp.a2z.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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