vault-euw1.wdprapps.disney.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:b4:ba:f4:f1:ae:eb:ed:f4:1e:25:22:b9:a3:86:85 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vault-euw1.wdprapps.disney.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:b4:ba:f4:f1:ae:eb:ed:f4:1e:25:22:b9:a3:86:85
Serial Number (int): 14230685327040714998520251856015558277
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c0:11:f2:94:72:8b:4a:29:80:29:f6:c2:7d:a9:1a:da:66:13:29:bc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 36:3e:76:62:32:04:5e:7f:6e:69:16:83:50:a6:ea:72:d2:9f:7f:5a
Fingerprint (sha256): 00:c4:1b:27:57:b7:0f:2b:94:d1:17:49:e4:96:17:c3:ea:62:1c:e6:92:2c:d9:8a:f0:cf:e1:9f:fc:e0:6c:86

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate vault-euw1.wdprapps.disney.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vault-euw1.wdprapps.disney.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vault-euw1.wdprapps.disney.com
consul-euw1.wdprapps.disney.com

Other certificates including the domain name disney.com

(limited to 100 certificates)
sf-prod-dr-az.media.disney.com
ppm-dev.disney.com
studiocloseup.disney.com
dev1.tbx-gim-rest-inv-dlr.wdprapps.disney.com
zenoss.disid.disney.com
shtktefafc-qa.apac.wdpr.disney.com
load.origin.castmeas-api.wdprapps.disney.com
productpoller.dahetd.studio.disney.com
stage.enttl-devicemgmt.wdprapps.disney.com
dc00011131n0616.corp.disney.com
stage.dlp-content.wdprapps.disney.com
*.studio.disney.com
latest.dvc-si-rsapi.wdprapps.disney.com
latest.sched-activity-order-svc.dlp.wdprapps.disney.com
*.stg.ensemble.disney.com
use1lq401.edp.disney.com
fas.wdprapps.disney.com
stage.tbx-core-api-roomrate.dlr.wdprapps.disney.com
DCLLABPOSRPTX.dcl.wdpr.disney.com
ocportal.disney.com
VWMS.shanghaidisneyresort.com.cn
airflow-flower.wdprapps.disney.com
vs-frmv-wa255.emea.wdpr.disney.com
ahws-agent.wdprapps.disney.com
video.disney.com
latest.cappiiapi.wdprapps.disney.com
mportal.intl.disney.com
testraadpmt-rmq-latest.wdpr.disney.com
latest.routing-svc.wdprapps.disney.com
latest.tbx-client-setup-dlp-use1.wdprapps.disney.com
load.tbx-supplier-setup.dlr.wdprapps.disney.com
test.dccr.disney.com
ngeapi-web.wdprapps.disney.com
shotguntools.fas.fa.disney.com
weekly.disney.com
latest.rrms-spa.wdprapps.disney.com
latest.origin-commerce-binding-web.shanghaidisneyresort.com
payment-reference-svc.dlp.wdprapps.disney.com
riley.disney.com
Booksdev.disney.com
viki.disney.com
heydis-storage-public.wdprapps.disney.com
crf.disney.com
simba-gg.wdprapps.disney.com
redirect.disneyinternational.com
video.disney.com
felix.disneyanimation.com
ops.nonprod.tech.disney.com
dlp-microservice-latest.wdprapps.disney.com
latest.quote-svc-internal.dlp.wdprapps.disney.com
stage.member-dvc.wdprapps.disney.com
origin.latest.wdw.nap7.wdpro.disney.com
entl-pkg-order-svc.dlp.wdprapps.disney.com
destiny.minio-operator.dcl.wdpr.disney.com
origin.load.product.service.wdprapps.disney.com
sandbox.sb-acm-test.wdpr-sandbox.disney.com
latest.tbx-api-shop-dlp-use1.wdprapps.disney.com
nemo0-ec-pa.wdw.attractions.disney.com
dmcqa.disney.com
eeudlp-gni-c9800-wlc.net.disney.com
*.spa.studio.disney.com
monitoring.nonprod.tech.disney.com
prod.merch-backend.wdprapps.disney.com
shadow.tbx-document-setup.dlr.wdprapps.disney.com
iscdml.disney.com
load.origin.arrwui-api-dlr.wdprapps.disney.com
stage.core-sales-validator.wdprapps.disney.com
raportal-k8s.ra-sandbox.disney.com
latest.pmaevntjb.wdprapps.disney.com
stage.rmdp-reference-data-slave.wdprapps.disney.com
heeuddjap01.wds.disney.com
latest.tbx-recommendation.wdw.wdprapps.disney.com
load.non-disney-addon-adapter-wdw.wdprapps.disney.com
stage.use1.mobile-notification-ha.gam-test.wdprapps.disney.com
load.csbspa.wdprapps.disney.com
vault-euw1.wdprapps.disney.com
shtktefw-qa-ro.apac.wdpr.disney.com
latest.dme-svc.wdprapps.disney.com
latest.tbx-master-setup.wdprapps.disney.com
dcpclmqa.disney.com
UCwebn7ext.disney.com
xbms-fin-batch.wdprapps.disney.com
stage.anonymizer-batch.wdprapps.disney.com
latest.pms-psl-tbx-su.wdprapps.disney.com
latest.01323-notifysvc.wdprapps.disney.com
bespin.disney.com
matchinggifts.disney.com
latest.tbx-flight-setup-dlp-use1.wdprapps.disney.com
stage.ssl-automation.wdprapps.disney.com
stage.tdls.studiotech.disney.com
stage.event-broker-service.wdw.wdprapps.disney.com
latest.tim-svc.wdprapps.disney.com
contentsecurity.disney.com
f5.disneyanimation.com
laod.dlp-is.wdprapps.disney.com
latest.internal.pbcsmodel.wdprapps.disney.com
latest.ore-m.wdprapps.disney.com
www.espnwwos.com
load.wdw-photopass-ui.wdprapps.disney.com
SPP1-DEV.disney.com

Certificate

The complete raw certificate details for vault-euw1.wdprapps.disney.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEszCCA5ugAwIBAgIQCrS69PGu6+30HiUiuaOGhTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMTYwMDAwMDBaFw0yMTAzMTYx
MjAwMDBaMCkxJzAlBgNVBAMTHnZhdWx0LWV1dzEud2RwcmFwcHMuZGlzbmV5LmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK7YEWtdFfYOnDGCexez
lPjlFK0VIlY9ohC3o+V+lxyxt4c7w9S9xCD6MLunYvCwdSToT+EyGGr6rcPN/HA7
2f7yfo9oxruQ5hM2zrbbf+7EiDT+0qa9T0COicMrtMhr/v8Pj0LRWHf42bYevTct
UsF2+B4X/mMnrVSNg8BRoB73TePcUOoMf8GM3/hBVsASpCQKxkixMZ+QkLq/4kTZ
PxGwNvRPREhJ09vBizdmi2VysoQgANrxqprxBQmaZX+pbbqWjBQNFbaR3Bzcq9eJ
9euxKH37u16AaNBimYgqTUS9NeWyU7U9lUP+n2ITAKkrAqmp3FAqzVfF0aSzzD29
7tUCAwEAAaOCAbgwggG0MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q
MB0GA1UdDgQWBBTAEfKUcotKKYAp9sJ9qRraZhMpvDBKBgNVHREEQzBBgh52YXVs
dC1ldXcxLndkcHJhcHBzLmRpc25leS5jb22CH2NvbnN1bC1ldXcxLndkcHJhcHBz
LmRpc25leS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFt
YXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIw
CAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j
c3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0
LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzYeMLALtiUk
hjFnJSLpX3e8e2ibjB86V8KwMkCTpJLqwviY9kGSpN2SssqfzqtWercTqI72ToNx
fHsOEmt70FUgcgu27AmA3HXfp9bUKLeztyzdsvyRKCcAnxUgaBwnmZuHI9MAhDkk
LUXfXtkPrLI7jj2edKkNUOWqBhz+O+Swfg6ELPfPkZKimuBk8Z/c/FzQcwwBRsa0
iHyK0JgDJlNni9VRDm7pLMhKKFCGrl/RNEY9hHLyZt2UYvl6GeR5lQadqYJ1kOXq
kOGbYgoLI/tTmZan+uy366JLsblvp2hEq2/VxsdgVtacg6VAJdCzlzPJtOxP0E/j
uQuXGsHrjA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtgRa10V9g6cMYJ7F7OU
+OUUrRUiVj2iELej5X6XHLG3hzvD1L3EIPowu6di8LB1JOhP4TIYavqtw838cDvZ
/vJ+j2jGu5DmEzbOttt/7sSINP7Spr1PQI6Jwyu0yGv+/w+PQtFYd/jZth69Ny1S
wXb4Hhf+YyetVI2DwFGgHvdN49xQ6gx/wYzf+EFWwBKkJArGSLExn5CQur/iRNk/
EbA29E9ESEnT28GLN2aLZXKyhCAA2vGqmvEFCZplf6ltupaMFA0VtpHcHNyr14n1
67Eoffu7XoBo0GKZiCpNRL015bJTtT2VQ/6fYhMAqSsCqancUCrNV8XRpLPMPb3u
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14230685327040714998520251856015558277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vault-euw1.wdprapps.disney.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22072012187897301390363743138735997382197829148904208258745719667325950550545578255432532146090397903824295710967371518542723030030054551479028706824429126859138277312869731499932518546243184013529788929826807944851556370038843308050918027044754651937548154498999689238969797266306892648856543018216282435756367159867232625036493420732191231072063821085696082234395911163653026360634117530366412254023257748369796844724857955349151289455574036813834456223000332051220641626198475114395335922815983142254230000564043897340674389062199522712025636276632728685550699618795490453381432417704861554652368197397005834514133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c011f294728b4a298029f6c27da91ada661329bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault-euw1.wdprapps.disney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consul-euw1.wdprapps.disney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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