co-ci.ops.rappi.com
Issued by Amazon
About this certificate
This digital certificate with serial number 05:9e:7c:c8:55:55:ee:f2:88:e0:73:0c:a4:c0:9e:16 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=co-ci.ops.rappi.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:9e:7c:c8:55:55:ee:f2:88:e0:73:0c:a4:c0:9e:16Serial Number (int): 7469053773406550716506514706179071510
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e9:9a:41:c8:43:a0:81:d7:9f:fe:68:d4:e0:cd:95:3d:94:8c:d8:03
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 3c:51:d4:29:94:65:f6:b5:2d:a6:d1:89:23:be:af:bb:05:b6:0a:4b
Fingerprint (sha256): 00:db:38:52:71:16:e6:f0:e6:71:85:86:13:86:b6:b5:9b:b2:ae:2a:e9:e2:21:8f:15:3b:07:23:c4:51:24:e3
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate co-ci.ops.rappi.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for co-ci.ops.rappi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
co-ci.ops.rappi.com
jenkins.ops.rappi.com
jenkins.ops.rappi.com
Other certificates including the domain name rappi.com
(limited to 100 certificates)
auth.4business.dev.rappi.com
*.mxgrability.rappi.com
politicasinternas.rappi.com
co-ci.ops.rappi.com
nxt.camp
devops-devops.jhub.dev.rappi.com
*.dev.rappi.com
rappiscore.rappi.com
travel.rappi.com
rappiscore.rappi.com
status.rappi.com
login-integrations-manager.rappi.com
dev.rappi.com
*.rappi.com
promos.rappi.com
liamwalls.co.uk
promos.rappi.com
*.rappi.com
cpgs-ds.jhub.dev.rappi.com
cpgs-ds.jhub.dev.rappi.com
retool.rappi.com
*.rappi.com
rappiuniverse.rappi.com
promos.rappi.com
promos.rappi.com
astro.dev.rappi.com
*.security.rappi.com
citibank-se.dev.rappi.com
ops.wp.dev.rappi.com
login-integrations-manager.rappi.com
rappiscore.rappi.com
www.redmotoshn.com
negocios.kanjea.app
al-bitcoin.com
*.staging.rappi.com
rappiscore.rappi.com
auth.4business.dev.rappi.com
*.grability.rappi.com
devops-devops.jhub.dev.rappi.com
www.nate-fleming.com
politicasinternas.rappi.com
*.grability.rappi.com
myplaylist.info
citibank-se.dev.rappi.com
*.dev.rappi.com
rappi.com
promos.rappi.com
legal.rappi.com
design.rappi.com
promos.rappi.com
co-ci.ops.rappi.com
design.rappi.com
www.mdoch.com
retool.rappi.com
*.grability.rappi.com
magical-lab.com
*.grability.rappi.com
rappi.com
promos.rappi.com
sre-stress-testing.dev.rappi.com
legal.rappi.com
fs.security.rappi.com
go.rappi.com
*.staging.entrega.rappi.com
darkstore-api.dev.rappi.com
vpn.rappi.com
login-integrations-manager.rappi.com
login-integrations-manager.rappi.com
*.rappi.com
fluttery.co
*.staging.entrega.rappi.com
status.rappi.com
retool.rappi.com
*.dev.rappi.com
citibank.dev.rappi.com
dev.rappi.com
promos.rappi.com
wonderroot.musterd.io
*.rappi.com
demo.guestx.com
rappiscore.rappi.com
banein.com
games.2sgamix.com
sre-stress-testing.dev.rappi.com
promos.rappi.com
tiranga.realityreach.com
exito-billing.dev.rappi.com
citibank-se.rappi.com
rappiscore.rappi.com
politicasinternas.rappi.com
astro.dev.rappi.com
politicasinternas.rappi.com
promos.rappi.com
cpgs-ds.jhub.dev.rappi.com
help.partners.rappi.com
mykoriak.com
auth.4business.dev.rappi.com
switch.mangologic.com
www.sqco.app
retool.rappi.com
*.mxgrability.rappi.com
politicasinternas.rappi.com
co-ci.ops.rappi.com
nxt.camp
devops-devops.jhub.dev.rappi.com
*.dev.rappi.com
rappiscore.rappi.com
travel.rappi.com
rappiscore.rappi.com
status.rappi.com
login-integrations-manager.rappi.com
dev.rappi.com
*.rappi.com
promos.rappi.com
liamwalls.co.uk
promos.rappi.com
*.rappi.com
cpgs-ds.jhub.dev.rappi.com
cpgs-ds.jhub.dev.rappi.com
retool.rappi.com
*.rappi.com
rappiuniverse.rappi.com
promos.rappi.com
promos.rappi.com
astro.dev.rappi.com
*.security.rappi.com
citibank-se.dev.rappi.com
ops.wp.dev.rappi.com
login-integrations-manager.rappi.com
rappiscore.rappi.com
www.redmotoshn.com
negocios.kanjea.app
al-bitcoin.com
*.staging.rappi.com
rappiscore.rappi.com
auth.4business.dev.rappi.com
*.grability.rappi.com
devops-devops.jhub.dev.rappi.com
www.nate-fleming.com
politicasinternas.rappi.com
*.grability.rappi.com
myplaylist.info
citibank-se.dev.rappi.com
*.dev.rappi.com
rappi.com
promos.rappi.com
legal.rappi.com
design.rappi.com
promos.rappi.com
co-ci.ops.rappi.com
design.rappi.com
www.mdoch.com
retool.rappi.com
*.grability.rappi.com
magical-lab.com
*.grability.rappi.com
rappi.com
promos.rappi.com
sre-stress-testing.dev.rappi.com
legal.rappi.com
fs.security.rappi.com
go.rappi.com
*.staging.entrega.rappi.com
darkstore-api.dev.rappi.com
vpn.rappi.com
login-integrations-manager.rappi.com
login-integrations-manager.rappi.com
*.rappi.com
fluttery.co
*.staging.entrega.rappi.com
status.rappi.com
retool.rappi.com
*.dev.rappi.com
citibank.dev.rappi.com
dev.rappi.com
promos.rappi.com
wonderroot.musterd.io
*.rappi.com
demo.guestx.com
rappiscore.rappi.com
banein.com
games.2sgamix.com
sre-stress-testing.dev.rappi.com
promos.rappi.com
tiranga.realityreach.com
exito-billing.dev.rappi.com
citibank-se.rappi.com
rappiscore.rappi.com
politicasinternas.rappi.com
astro.dev.rappi.com
politicasinternas.rappi.com
promos.rappi.com
cpgs-ds.jhub.dev.rappi.com
help.partners.rappi.com
mykoriak.com
auth.4business.dev.rappi.com
switch.mangologic.com
www.sqco.app
retool.rappi.com
Certificate
The complete raw certificate details for co-ci.ops.rappi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkzCCA3ugAwIBAgIQBZ58yFVV7vKI4HMMpMCeFjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMjgwMDAwMDBaFw0xOTEyMjgx MjAwMDBaMB4xHDAaBgNVBAMTE2NvLWNpLm9wcy5yYXBwaS5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmLWocT9EX8G0fqlBG7b/yuJNaBloZ81x 7dpiTNShfyUrnJMEZp/tU85uqQm0J8oMYiqCMFn3yu4M6Tqo7tgoJLQEaXnOOv2+ 4SdwjgLeqs1Gw+PEGx4gqb6tlmTxe8n9d1676jl1G9EbmlDnamOrgKXVWQCK7WA3 I3J2YQGoX9ArGzPMYuBNSPBQNqaSjUAkDDUgXuHBwu30e/DxFwjRZA6UJt2EapMN V3J64F+u+9O1SDi7RKrxncYFZyl6UyC8+f+Pw6tagPm/dv4rUr81C4IZovnoN+Sp 2ER6RKrw2AvzJQAuezqxeEPmkgkS1pJHAhXwzfk5aHPIZxmo2j+5AgMBAAGjggGj MIIBnzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU 6ZpByEOggdef/mjU4M2VPZSM2AMwNQYDVR0RBC4wLIITY28tY2kub3BzLnJhcHBp LmNvbYIVamVua2lucy5vcHMucmFwcGkuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0 cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZ MBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0 MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAItBMmQstZyH/kJHlnCFDDQIjUOmfo3Uq3E0wQkhVWLv5oUkKV0OvrM+ kBym/v//7ML/BPuaUnkQS8tj7J2+//Rbi0dus0mmp+htK/rHZJT7d7uqYv7mSfXZ B1KQMT7cSpIoHAa9ZJB8SVYRa5Zgtm8R2+4846UVf4voIYYTsgrgLkYolbE/5SUS cP/GLVdWOSpPrZqLFPuV4XxzkgqU/NyxnP1sfIYWbbSyUYtYWrGpELxHc9/1oKaa OV2SNEy85h396VqRuuG+kZrm1wdjvocVkkUbLuxaN4cxLGDBI+iXb5kXRKzSA+OW F7iwuIdCWVbfTdTtTK5YZ9JOfnC5jOE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pi1qHE/RF/BtH6pQRu2 /8riTWgZaGfNce3aYkzUoX8lK5yTBGaf7VPObqkJtCfKDGIqgjBZ98ruDOk6qO7Y KCS0BGl5zjr9vuEncI4C3qrNRsPjxBseIKm+rZZk8XvJ/Xdeu+o5dRvRG5pQ52pj q4Cl1VkAiu1gNyNydmEBqF/QKxszzGLgTUjwUDamko1AJAw1IF7hwcLt9Hvw8RcI 0WQOlCbdhGqTDVdyeuBfrvvTtUg4u0Sq8Z3GBWcpelMgvPn/j8OrWoD5v3b+K1K/ NQuCGaL56DfkqdhEekSq8NgL8yUALns6sXhD5pIJEtaSRwIV8M35OWhzyGcZqNo/ uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7469053773406550716506514706179071510 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'co-ci.ops.rappi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26585347953975633190166971643764706790022202282955875714502047025895156658600497070917690117140960984207097303305770098853657821294978921336825243993821843396242230066954401040635150782323822707421344233948026595499988167201496699723069420851166380077042018086671342743982964422449043177053860675407296130982849538948599040868187857470786326239030874382796796245635705698029874116419413555629250893651617804755385196372782826666866681294080019950108055281800667789555174777767539389157320414069523316435905836643963063018198950950159911640229024142920699276136201847621820719297619016974997914407027959287500603277241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e99a41c843a081d79ffe68d4e0cd953d948cd803 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co-ci.ops.rappi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.ops.rappi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008b4132642cb59c87fe42479670850c34088d43a67e8dd4ab7134c109215562efe68524295d0ebeb33e901ca6feffffecc2ff04fb9a5279104bcb63ec9dbefff45b8b476eb349a6a7e86d2bfac76494fb77bbaa62fee649f5d9075290313edc4a92281c06bd64907c4956116b9660b66f11dbee3ce3a5157f8be8218613b20ae02e462895b13fe5251270ffc62d5756392a4fad9a8b14fb95e17c73920a94fcdcb19cfd6c7c86166db4b2518b585ab1a910bc4773dff5a0a69a395d92344cbce61dfde95a91bae1be919ae6d70763be871592451b2eec5a3787312c60c123e8976f991744acd203e39617b8b0b887425956df4dd4ed4cae5867d24e7e70b98ce1