mywedding.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:49:04:5e:72:20:8e:04:6c:a0:64:83:7c:36:be:f8 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mywedding.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:49:04:5e:72:20:8e:04:6c:a0:64:83:7c:36:be:f8Serial Number (int): 5696038266219044259543300476222488312
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f3:72:4f:dc:47:50:a1:7b:34:56:46:0f:23:fe:d1:d7:a3:f2:e1:51
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 25:ac:34:01:f4:46:2b:05:84:0c:df:ec:e0:40:c6:8d:88:1d:7a:94
Fingerprint (sha256): 01:12:7d:05:27:37:75:6a:03:a7:b7:d5:89:e9:56:4b:e2:20:d7:7a:6e:cf:d5:94:b2:4c:67:73:00:99:ec:3c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate mywedding.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mywedding.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mywedding.com
*.mywedding.com
*.mywedding.com
Other certificates including the domain name mywedding.com
(limited to 100 certificates)
pcissl001.insnw.net
pcissl001.insnw.net
mywedding.com
pcissl001.insnw.net
*.secure.meredith.com
secure.meredith.com
my.meredith.com
www.mytestwedding.com
pcissl001.insnw.net
hncldg.mywedding.com
*.mywedding.com
s5.wac.edgecastcdn.net
*.mywedding.com
pcissl001.insnw.net
ssl453656.cloudflaressl.com
s5.wac.edgecastcdn.net
pcissl001.insnw.net
*.meredithperformancemarketing.com
pcissl001.insnw.net
s11.wac.edgecastcdn.net
*.agriculture.com
dev.secure.meredith.com
*.meredithperformancemarketing.com
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
mywedding.com
secure.meredith.com
mywedding.com
mdp.api.meredith.com
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
secure.meredith.com
s5.wac.edgecastcdn.net
ssl453658.cloudflaressl.com
pcissl001.insnw.net
ssl453658.cloudflaressl.com
test.secure.meredith.com
s5.wac.edgecastcdn.net
pcissl001.insnw.net
pcissl001.insnw.net
s5.wac.edgecastcdn.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
mail.mywedding.com
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
*.secure.meredith.com
secure.meredith.com
pcissl001.insnw.net
hncldg.mywedding.com
vpn.den.mywedding.com
pcissl001.insnw.net
s5.wac.edgecastcdn.net
api.meredith.com
s5.wac.edgecastcdn.net
s5.wac.edgecastcdn.net
hncldg.mywedding.com
*.secure.meredith.com
secure.meredith.com
pcissl001.insnw.net
*.meredithperformancemarketing.com
my.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
secure.meredith.com
s5.wac.edgecastcdn.net
pcissl001.insnw.net
secure.meredith.com
s5.wac.edgecastcdn.net
mywedding.com
*.agriculture.com
hncldg.mywedding.com
mywedding.com
pcissl001.insnw.net
*.secure.meredith.com
pcissl001.insnw.net
*.familycircle.com
s5.wac.edgecastcdn.net
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
*.health.com
ssl001-reval.insnw.net
s5.wac.edgecastcdn.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
mywedding.com
pcissl001.insnw.net
*.secure.meredith.com
secure.meredith.com
my.meredith.com
www.mytestwedding.com
pcissl001.insnw.net
hncldg.mywedding.com
*.mywedding.com
s5.wac.edgecastcdn.net
*.mywedding.com
pcissl001.insnw.net
ssl453656.cloudflaressl.com
s5.wac.edgecastcdn.net
pcissl001.insnw.net
*.meredithperformancemarketing.com
pcissl001.insnw.net
s11.wac.edgecastcdn.net
*.agriculture.com
dev.secure.meredith.com
*.meredithperformancemarketing.com
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
mywedding.com
secure.meredith.com
mywedding.com
mdp.api.meredith.com
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
secure.meredith.com
s5.wac.edgecastcdn.net
ssl453658.cloudflaressl.com
pcissl001.insnw.net
ssl453658.cloudflaressl.com
test.secure.meredith.com
s5.wac.edgecastcdn.net
pcissl001.insnw.net
pcissl001.insnw.net
s5.wac.edgecastcdn.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
mail.mywedding.com
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
*.secure.meredith.com
secure.meredith.com
pcissl001.insnw.net
hncldg.mywedding.com
vpn.den.mywedding.com
pcissl001.insnw.net
s5.wac.edgecastcdn.net
api.meredith.com
s5.wac.edgecastcdn.net
s5.wac.edgecastcdn.net
hncldg.mywedding.com
*.secure.meredith.com
secure.meredith.com
pcissl001.insnw.net
*.meredithperformancemarketing.com
my.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
secure.meredith.com
s5.wac.edgecastcdn.net
pcissl001.insnw.net
secure.meredith.com
s5.wac.edgecastcdn.net
mywedding.com
*.agriculture.com
hncldg.mywedding.com
mywedding.com
pcissl001.insnw.net
*.secure.meredith.com
pcissl001.insnw.net
*.familycircle.com
s5.wac.edgecastcdn.net
secure.meredith.com
pcissl001.insnw.net
pcissl001.insnw.net
*.health.com
ssl001-reval.insnw.net
s5.wac.edgecastcdn.net
pcissl001.insnw.net
pcissl001.insnw.net
pcissl001.insnw.net
Certificate
The complete raw certificate details for mywedding.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIQBEkEXnIgjgRsoGSDfDa++DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAzMTAwMDAwMDBaFw0yMzA0MDgy MzU5NTlaMBgxFjAUBgNVBAMTDW15d2VkZGluZy5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDlHosLC5Ho5dyqaFxb1fDr4FkKkjv8QJMCM1lPTCkp ZTSMIatR9HaKP7iShK9KS1LtUgXruzy/tyw1I/Shrlz7+waV+9JSg3p7bJU36Id+ 2J6bjFuL8nFAztYcN78TOYDbNterOlWJRsxCUjFeW34gHnyDPfI3XXEyVXV9cjPg MyHz26Qj5EKzT1GqkwCIPnVPMu1DE0XbucI2IRMHsA5GYB17EHm7X4Yd7a7NmkLO E/lZJIjo0IoXpNk+vpqcKSqVIZjW/Nr3BP+zU79f9B5m3rPfQBc+h2sPHM+oYJmG emjbsc4C/JpAY1Q4eR8m9Qm0kyYAS2jGbMTQ6/vdp2BTAgMBAAGjggL5MIIC9TAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU83JP3EdQ oXs0VkYPI/7R16Py4VEwKQYDVR0RBCIwIIINbXl3ZWRkaW5nLmNvbYIPKi5teXdl ZGRpbmcuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6 b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIE AgSCAW4EggFqAWgAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAA AX9xufbYAAAEAwBHMEUCIC6whkiGcdPgpbIwiDCglOZl3C/U0pLaOywTLnsbdw6B AiEAx5yqOlPt8tzdpCqK5VYCIRdOJNYPuoBGJy8A+jDY7mYAdgA1zxkbv7FsV78P rUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAX9xufbtAAAEAwBHMEUCIEuR2cw9p4gG PqYR0aECr0/9TF6CdBXTYQzWYKBzxvdnAiEA6Ax5KwgUf1N8YEr5RICPk9Bfo9X1 zYBFY29HH8DZUuAAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAA AX9xufclAAAEAwBHMEUCIHp0LGF/I6rGX2B5nyz2IEwYKdsuFtHODQI9D6FW0lO+ AiEAqBLvEulnSikr7b/d4Ycrul+35N9H1ZWuumQ3su9FNAswDQYJKoZIhvcNAQEL BQADggEBAF5qVYtaioV2qK/yGRBYsJMOxpvTbsmhaCbZ8QW+CsSbE44XYCjJlEDo Qe32KH8xjx6qgKqa7rx1OqLpnA8Usp+gV7/n7BZyIY8akHER52f0DnpSY32miyRX zK6yZHzBrl/hfEaadgMJyql2J8VFI7M62wSwbIXJKSLOxEYqQ1wJEjhwRgV4CVNt X8S51YR+ju7ezItfxCYAStLJtW0gakw0ka6cW6zCkZREsraRn6dbKJLzWq61MTOB Oi4JAkxuiZsdx5pvi/n/4D/VUf1SEf4J7AQe49mGMSzCjQpxvlpvJD//F2IBvJ6G Hal0qclSffi6Bo3M9Riy2Rrpx5qrJB4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R6LCwuR6OXcqmhcW9Xw 6+BZCpI7/ECTAjNZT0wpKWU0jCGrUfR2ij+4koSvSktS7VIF67s8v7csNSP0oa5c +/sGlfvSUoN6e2yVN+iHftiem4xbi/JxQM7WHDe/EzmA2zbXqzpViUbMQlIxXlt+ IB58gz3yN11xMlV1fXIz4DMh89ukI+RCs09RqpMAiD51TzLtQxNF27nCNiETB7AO RmAdexB5u1+GHe2uzZpCzhP5WSSI6NCKF6TZPr6anCkqlSGY1vza9wT/s1O/X/Qe Zt6z30AXPodrDxzPqGCZhnpo27HOAvyaQGNUOHkfJvUJtJMmAEtoxmzE0Ov73adg UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5696038266219044259543300476222488312 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mywedding.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28923633219568707779448426304929753414452940493155376805668096327099185399621202940084522099751211519385682034734700790821973385860031336973708661398205786033075529381032289952141620534182309471306998901209806542010722025592328786044784756641012428978946080505027683329434496646736195953429400796463495726752125788697536837172942946470543411500403643285117988338360525055637180029661611120354580985394118380373216622248207590694343013562481119998821021057779114427289461132458718151771485948997754402558043182129711533720098718645969207100571547351624292623871020563350164466171698425008787944496147868024746799489107 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f3724fdc4750a17b3456460f23fed1d7a3f2e151 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywedding.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywedding.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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