nonprofitcentral.amazon.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:ad:e4:57:10:0c:3f:63:06:ac:89:f7:0b:92:fd:61 was issued on by Amazon.
With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=nonprofitcentral.amazon.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:ad:e4:57:10:0c:3f:63:06:ac:89:f7:0b:92:fd:61Serial Number (int): 14195178601582021833401768768328367457
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a5:ed:49:4a:c9:81:65:89:9f:bd:0a:7a:32:eb:d1:ac:3b:a4:a8:0c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 63:ae:8e:93:ed:bc:3f:d9:d5:9e:74:2b:ff:4d:d6:8f:67:b5:27:4d
Fingerprint (sha256): 01:07:88:1e:7e:4a:54:6e:24:5d:9c:d4:39:2c:d1:74:14:91:83:da:07:aa:2d:e8:df:9f:fd:2a:66:e8:4c:4b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate nonprofitcentral.amazon.com
85
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nonprofitcentral.amazon.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nonprofitcentral.amazon.com
www.sothebys.amazon.com
amazonservices.de
www.livebid.com
localamazon.com
zshops.com
toronto.amazon.com
amazongamesstudio.com
toronto.amazon.ca
amazon.livebid.com
www.warehouse-deals.com
associates-blog.amazon.de
nonprofit.amazon.com
yourstore.amazon.com
honorsystem.com
booksurgepages.net
associates-blog.amazon.com
www.amapedia.com
www.livebid.amazon.com
www.localamazon.com
kaidian.amazon.com
honoursystem.amazon.com
www.mturk.amazon.com
www.amazongamestudios.com
livebid.amazon.com
gregmanning.amazon.com
affiliate-blog.amazon.com
www.filmfinders.com
www.kdp.com
filmfinders.com
www.honorsystem.amazon.com
www.booksurgepages.net
www.amazonservices.de
www.amazongamesstudios.com
requestor.mturk.amazon.com
www.honorsystem.com
partenaires-blog.amazon.fr
amazondcn.com
www.honoursystem.amazon.com
warehouse-deals.com
fba.amazon.co.jp
amazongamestudios.com
amazongamesstudios.com
www.orgcentral.amazon.com
feeds.amazon.com
www.charities.amazon.com
www.amazonlocal.com
orgs.amazon.com
livebid.com
www.mechturk.com
www.fba.amazon.com
nonprofits.amazon.com
amazongamestudio.com
amazonlocal.com
warehousedeals.amazon.com
www.amazongamestudio.com
organization.amazon.com
honorsystem.amazon.com
mturk.amazon.com
mechturk.com
www.amazongamesstudio.com
www.nonprofits.amazon.com
sothebysauction.amazon.com
associates-blog.amazon.fr
www.charitycentral.amazon.com
orgcentral.amazon.com
requester.mturk.amazon.com
kdp.com
partner-blog.amazon.de
zshops.amazon.com
vancouver.amazon.ca
mechanicalturk.com
zshop.com
www.fba.amazon.co.jp
partnerprogramm-blog.amazon.de
vancouver.amazon.com
www.nonprofit.amazon.com
ats.amazon.com
www.organizations.amazon.com
sothebyssearch.amazon.com
organizations.amazon.com
fba.amazon.com
www.gregmanning.amazon.com
sothebys.amazon.com
fba.amazon.jp
www.sothebys.amazon.com
amazonservices.de
www.livebid.com
localamazon.com
zshops.com
toronto.amazon.com
amazongamesstudio.com
toronto.amazon.ca
amazon.livebid.com
www.warehouse-deals.com
associates-blog.amazon.de
nonprofit.amazon.com
yourstore.amazon.com
honorsystem.com
booksurgepages.net
associates-blog.amazon.com
www.amapedia.com
www.livebid.amazon.com
www.localamazon.com
kaidian.amazon.com
honoursystem.amazon.com
www.mturk.amazon.com
www.amazongamestudios.com
livebid.amazon.com
gregmanning.amazon.com
affiliate-blog.amazon.com
www.filmfinders.com
www.kdp.com
filmfinders.com
www.honorsystem.amazon.com
www.booksurgepages.net
www.amazonservices.de
www.amazongamesstudios.com
requestor.mturk.amazon.com
www.honorsystem.com
partenaires-blog.amazon.fr
amazondcn.com
www.honoursystem.amazon.com
warehouse-deals.com
fba.amazon.co.jp
amazongamestudios.com
amazongamesstudios.com
www.orgcentral.amazon.com
feeds.amazon.com
www.charities.amazon.com
www.amazonlocal.com
orgs.amazon.com
livebid.com
www.mechturk.com
www.fba.amazon.com
nonprofits.amazon.com
amazongamestudio.com
amazonlocal.com
warehousedeals.amazon.com
www.amazongamestudio.com
organization.amazon.com
honorsystem.amazon.com
mturk.amazon.com
mechturk.com
www.amazongamesstudio.com
www.nonprofits.amazon.com
sothebysauction.amazon.com
associates-blog.amazon.fr
www.charitycentral.amazon.com
orgcentral.amazon.com
requester.mturk.amazon.com
kdp.com
partner-blog.amazon.de
zshops.amazon.com
vancouver.amazon.ca
mechanicalturk.com
zshop.com
www.fba.amazon.co.jp
partnerprogramm-blog.amazon.de
vancouver.amazon.com
www.nonprofit.amazon.com
ats.amazon.com
www.organizations.amazon.com
sothebyssearch.amazon.com
organizations.amazon.com
fba.amazon.com
www.gregmanning.amazon.com
sothebys.amazon.com
fba.amazon.jp
Other certificates including the domain name amazon.com
(limited to 100 certificates)
fresh.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
routingtools-jlb-l-dub.dub.proxy.amazon.com
us-west-1.awsc-integ.aws.amazon.com
aea-console-canary.aea.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
aea-console-canary.aea.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
aea-console-canary.aea.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
emf-operator-console-prod-sin-cell2.corp.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
ap-east-1.signin.aws
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
edge-customer-troubleshooting.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
foxhound.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
emf-operator-console-prod-sin-cell3.corp.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
routingtools-jlb-l-dub.dub.proxy.amazon.com
us-west-1.awsc-integ.aws.amazon.com
aea-console-canary.aea.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
aea-console-canary.aea.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
aea-console-canary.aea.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
emf-operator-console-prod-sin-cell2.corp.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
ap-east-1.signin.aws
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
edge-customer-troubleshooting.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
foxhound.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
emf-operator-console-prod-sin-cell3.corp.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com
Certificate
The complete raw certificate details for nonprofitcentral.amazon.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINMDCCDBigAwIBAgIQCq3kVxAMP2MGrIn3C5L9YTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAxMjgwMDAwMDBaFw0yMzAyMjYy MzU5NTlaMCYxJDAiBgNVBAMTG25vbnByb2ZpdGNlbnRyYWwuYW1hem9uLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM7BD81dJLcBEUn1nwHwk8+Y SmjZbIQ0Mf7Zz5N0Sjiufa4BguJuSjzOGQaY38iwVbFPqPkqj9i7VVXxU1QgzAc1 pmS/J1kvafwN+dLiyqVWy0wAfBrq5fA9flPXfflycF4t9DcxGrj1iUjqoFweEyer gcSNSvAJT5FivV0Pz/66NCXnaB47n15wEpl4JzrAv3QBwCDeGuISiLq6fSZaNobl LvfOw/TV+ScjjmMjIvfZspbdQp1c9b0m5h4CkjA/7aH+0EP8DQu9X7NetT1EDlrp GOvcQwgDAfsXEiq14np1COnuMbGz1Um5J925fjnnRom+njYBzTucgEbBXtlr+t8C AwEAAaOCCjgwggo0MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0G A1UdDgQWBBSl7UlKyYFliZ+9Cnoy69GsO6SoDDCCB2gGA1UdEQSCB18wggdbghtu b25wcm9maXRjZW50cmFsLmFtYXpvbi5jb22CF3d3dy5zb3RoZWJ5cy5hbWF6b24u Y29tghFhbWF6b25zZXJ2aWNlcy5kZYIPd3d3LmxpdmViaWQuY29tgg9sb2NhbGFt YXpvbi5jb22CCnpzaG9wcy5jb22CEnRvcm9udG8uYW1hem9uLmNvbYIVYW1hem9u Z2FtZXNzdHVkaW8uY29tghF0b3JvbnRvLmFtYXpvbi5jYYISYW1hem9uLmxpdmVi aWQuY29tghd3d3cud2FyZWhvdXNlLWRlYWxzLmNvbYIZYXNzb2NpYXRlcy1ibG9n LmFtYXpvbi5kZYIUbm9ucHJvZml0LmFtYXpvbi5jb22CFHlvdXJzdG9yZS5hbWF6 b24uY29tgg9ob25vcnN5c3RlbS5jb22CEmJvb2tzdXJnZXBhZ2VzLm5ldIIaYXNz b2NpYXRlcy1ibG9nLmFtYXpvbi5jb22CEHd3dy5hbWFwZWRpYS5jb22CFnd3dy5s aXZlYmlkLmFtYXpvbi5jb22CE3d3dy5sb2NhbGFtYXpvbi5jb22CEmthaWRpYW4u YW1hem9uLmNvbYIXaG9ub3Vyc3lzdGVtLmFtYXpvbi5jb22CFHd3dy5tdHVyay5h bWF6b24uY29tghl3d3cuYW1hem9uZ2FtZXN0dWRpb3MuY29tghJsaXZlYmlkLmFt YXpvbi5jb22CFmdyZWdtYW5uaW5nLmFtYXpvbi5jb22CGWFmZmlsaWF0ZS1ibG9n LmFtYXpvbi5jb22CE3d3dy5maWxtZmluZGVycy5jb22CC3d3dy5rZHAuY29tgg9m aWxtZmluZGVycy5jb22CGnd3dy5ob25vcnN5c3RlbS5hbWF6b24uY29tghZ3d3cu Ym9va3N1cmdlcGFnZXMubmV0ghV3d3cuYW1hem9uc2VydmljZXMuZGWCGnd3dy5h bWF6b25nYW1lc3N0dWRpb3MuY29tghpyZXF1ZXN0b3IubXR1cmsuYW1hem9uLmNv bYITd3d3Lmhvbm9yc3lzdGVtLmNvbYIacGFydGVuYWlyZXMtYmxvZy5hbWF6b24u ZnKCDWFtYXpvbmRjbi5jb22CG3d3dy5ob25vdXJzeXN0ZW0uYW1hem9uLmNvbYIT d2FyZWhvdXNlLWRlYWxzLmNvbYIQZmJhLmFtYXpvbi5jby5qcIIVYW1hem9uZ2Ft ZXN0dWRpb3MuY29tghZhbWF6b25nYW1lc3N0dWRpb3MuY29tghl3d3cub3JnY2Vu dHJhbC5hbWF6b24uY29tghBmZWVkcy5hbWF6b24uY29tghh3d3cuY2hhcml0aWVz LmFtYXpvbi5jb22CE3d3dy5hbWF6b25sb2NhbC5jb22CD29yZ3MuYW1hem9uLmNv bYILbGl2ZWJpZC5jb22CEHd3dy5tZWNodHVyay5jb22CEnd3dy5mYmEuYW1hem9u LmNvbYIVbm9ucHJvZml0cy5hbWF6b24uY29tghRhbWF6b25nYW1lc3R1ZGlvLmNv bYIPYW1hem9ubG9jYWwuY29tghl3YXJlaG91c2VkZWFscy5hbWF6b24uY29tghh3 d3cuYW1hem9uZ2FtZXN0dWRpby5jb22CF29yZ2FuaXphdGlvbi5hbWF6b24uY29t ghZob25vcnN5c3RlbS5hbWF6b24uY29tghBtdHVyay5hbWF6b24uY29tggxtZWNo dHVyay5jb22CGXd3dy5hbWF6b25nYW1lc3N0dWRpby5jb22CGXd3dy5ub25wcm9m aXRzLmFtYXpvbi5jb22CGnNvdGhlYnlzYXVjdGlvbi5hbWF6b24uY29tghlhc3Nv Y2lhdGVzLWJsb2cuYW1hem9uLmZygh13d3cuY2hhcml0eWNlbnRyYWwuYW1hem9u LmNvbYIVb3JnY2VudHJhbC5hbWF6b24uY29tghpyZXF1ZXN0ZXIubXR1cmsuYW1h em9uLmNvbYIHa2RwLmNvbYIWcGFydG5lci1ibG9nLmFtYXpvbi5kZYIRenNob3Bz LmFtYXpvbi5jb22CE3ZhbmNvdXZlci5hbWF6b24uY2GCEm1lY2hhbmljYWx0dXJr LmNvbYIJenNob3AuY29tghR3d3cuZmJhLmFtYXpvbi5jby5qcIIecGFydG5lcnBy b2dyYW1tLWJsb2cuYW1hem9uLmRlghR2YW5jb3V2ZXIuYW1hem9uLmNvbYIYd3d3 Lm5vbnByb2ZpdC5hbWF6b24uY29tgg5hdHMuYW1hem9uLmNvbYIcd3d3Lm9yZ2Fu aXphdGlvbnMuYW1hem9uLmNvbYIZc290aGVieXNzZWFyY2guYW1hem9uLmNvbYIY b3JnYW5pemF0aW9ucy5hbWF6b24uY29tgg5mYmEuYW1hem9uLmNvbYIad3d3Lmdy ZWdtYW5uaW5nLmFtYXpvbi5jb22CE3NvdGhlYnlzLmFtYXpvbi5jb22CDWZiYS5h bWF6b24uanAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1Bggr BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpv bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQC BIIBbASCAWgBZgB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAAB fqMSeJcAAAQDAEcwRQIhAIERE1j3a9F9dZv0rNIkc6s12gy0fAgSM0VH/ds2tyzZ AiATzLNwk1qmx2H1f8fn5FlnTJ1TOMjU0mWRuy7PF/ISsAB1ADXPGRu/sWxXvw+t TG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABfqMSeKkAAAQDAEYwRAIgGDP7Sb63oAP0 OtAh2w9On5teR6cpOd2MIYPhnTs+BlICIB/KB8pC7k5mwXDO8F30Nt0opi3KdGC4 sWuTBgvEtwZVAHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAF+ oxJ4nwAABAMARjBEAiAU8TgbYsncEy6Y232GtKn9B0oqMVKAZzi/oQ2khWiQwQIg KEFRTiWzZMhp/P6m/EqkJIZhLhz3ZStWE+UAxAjJ34wwDQYJKoZIhvcNAQELBQAD ggEBADBsvjsKfHOxqQGh8KTGsM88ldOZZ+Dgoazyd89dsgDEAuSvLDRCJjOPfW0U U2uSvWmOnzdP/X8isbRnBJTgQ4kQbF4kb8o3/eTE2RdHIhFgHW4bL5m6wntnZ0sB KtWwPnWvB3m86wuO6BK4+V6L9loAg8nncXapZTccKPYi4E3bqMGrJxLdQqmS5HrH SqzHeEPx7sf5pc1ZF+oOWYehKf6/rmdG6OKM9BSA1UYQdgQTAO6u0LI+SJFmMrzB 0/8xh0Y/3+yrgcMVHGx/PxJESj21u7v2pJV5a1xVkSalYjX49y7Qh1hWLo9J9VvN 9Vfj4iVZ58/qewsiGmcNM4AVE+M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsEPzV0ktwERSfWfAfCT z5hKaNlshDQx/tnPk3RKOK59rgGC4m5KPM4ZBpjfyLBVsU+o+SqP2LtVVfFTVCDM BzWmZL8nWS9p/A350uLKpVbLTAB8Gurl8D1+U9d9+XJwXi30NzEauPWJSOqgXB4T J6uBxI1K8AlPkWK9XQ/P/ro0JedoHjufXnASmXgnOsC/dAHAIN4a4hKIurp9Jlo2 huUu987D9NX5JyOOYyMi99mylt1CnVz1vSbmHgKSMD/tof7QQ/wNC71fs161PUQO WukY69xDCAMB+xcSKrXienUI6e4xsbPVSbkn3bl+OedGib6eNgHNO5yARsFe2Wv6 3wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14195178601582021833401768768328367457 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprofitcentral.amazon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26100293109003896527714627401017913797078388806767378962037095230010282893274812994195844698792470850972292726961362384603884772788704935191025902671142817801801233178935015407413930384423001834694437883187681343317476757708467931753075126893823555244821909856866182827923814422651713336669055771458518727189538974675111383250753449208927582726751751386981358772025019047909913270054168466397269228671570998229636921971932244296353776031193080931977686450362514208200257967015833897342295197039218233324653587909306480419077955415144149715218074837036819180441009102520479500622774758257643270042864226648733946477279 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a5ed494ac98165899fbd0a7a32ebd1ac3ba4a80c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1887 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofitcentral.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sothebys.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonservices.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localamazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshops.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamesstudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.amazon.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.livebid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warehouse-deals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofit.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourstore.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksurgepages.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amapedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebid.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localamazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaidian.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honoursystem.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mturk.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamestudios.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebid.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregmanning.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate-blog.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmfinders.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmfinders.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorsystem.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksurgepages.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonservices.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamesstudios.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestor.mturk.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires-blog.amazon.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazondcn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honoursystem.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouse-deals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamestudios.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamesstudios.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgcentral.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charities.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonlocal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgs.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechturk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fba.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofits.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamestudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonlocal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehousedeals.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamestudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organization.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorsystem.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mturk.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechturk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamesstudio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprofits.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebysauction.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charitycentral.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requester.mturk.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-blog.amazon.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshops.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouver.amazon.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalturk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fba.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerprogramm-blog.amazon.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouver.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprofit.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ats.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organizations.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebyssearch.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organizations.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gregmanning.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebys.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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