sercalendar-app-int-east.stage.browse.bestbuy.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:3f:a3:82:7e:9c:c0:35:aa:93:dd:6f:bd:2d:26:2a was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sercalendar-app-int-east.stage.browse.bestbuy.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:3f:a3:82:7e:9c:c0:35:aa:93:dd:6f:bd:2d:26:2a
Serial Number (int): 18939623014687649787576629644411872810
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ae:94:bf:01:82:cc:34:a7:f4:8d:b2:a1:23:1d:e8:26:e4:cd:d3:62
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ff:34:db:68:92:53:08:1c:97:4a:fe:08:a7:d4:1d:cc:c2:5c:fa:be
Fingerprint (sha256): 01:78:92:d7:3b:23:0c:66:20:16:d2:ed:d4:2b:16:2f:3d:1f:01:f8:74:85:64:18:ed:d0:ec:22:2a:c6:12:b9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate sercalendar-app-int-east.stage.browse.bestbuy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sercalendar-app-int-east.stage.browse.bestbuy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sercalendar-app-int-east.stage.browse.bestbuy.com

Other certificates including the domain name bestbuy.com

(limited to 100 certificates)
san.bestbuy.com
attechapi-app-int-east.stage.browse.bestbuy.com
kibana.test.monitoring.bestbuy.com
bttnview-njs-int-east.test.browse.bestbuy.com
advsmlssrvc-app-int-west.prod.browse.bestbuy.com
swift1.prod.skyblue.bestbuy.com
access.bestbuy.com
pricevw-njs-ext-west.prod.browse.bestbuy.com
ofrsvapi-app-ext-east.test.browse.bestbuy.com
commerce-api.test.bestbuy.com
apid-app-west-int.prod.browse.bestbuy.com
identity-ingress-global.dev.gcp.bestbuy.com
apex-configservice-global.test.gcp.bestbuy.com
mexico-web-west.prod.browse.bestbuy.com
platmanpb-app-int-west.prod.browse.bestbuy.com
accessfedpl.bestbuy.com
lstsrvces-app-ext-east.test.browse.bestbuy.com
bestbuyconnect.com
drwsmpanntwlv-app-int-east.test.cgraph.bestbuy.com
priceviewn-app-ext-east.test.browse.bestbuy.com
profulfil-web-east.test.browse.bestbuy.com
bbytagservices.bestbuy.com
tableau-qa.na.bestbuy.com
dhodawkthrtne-app-int-east.prod.browse.bestbuy.com
marf-app-int-east.prod.browse.bestbuy.com
bryntstpplctn-app-int-east.prod.browse.bestbuy.com
trnrsksrv-app-int-west.prod.browse.bestbuy.com
airwatch-linux.bestbuy.com
ugc-slr-east.prod.browse.bestbuy.com
*.bestbuy.com
ordrhstrpblsh-app-int-west.prod.browse.bestbuy.com
leviathanapi-app-ext-east.stage.aws.bestbuy.com
aw.bestbuy.com
sherlock-core-stage.test.gcp.bestbuy.com
trk.email.bestbuy.com
sidcs-app-east.stage.browse.bestbuy.com
*.bestbuy.com
span-api-east-int.prod.browse.bestbuy.com
secure03.lithium.com
ggleassrt-app-int-east.stage.browse.bestbuy.com
fulfview-njs-int-east.test.browse.bestbuy.com
cartagg-app-int-east.test.browse.bestbuy.com
sercalendar-app-int-east.stage.browse.bestbuy.com
sentry-app-int-east.stage.cgraph.bestbuy.com
plt-images-ssl-pls.stage.bestbuy.com
psccreturns-app-int-east.stage.browse.bestbuy.com
remixslr-app-int-east.test.browse.bestbuy.com
sts.bestbuy.com
mexico-web-east.prod.browse.bestbuy.com
dhodawkthrtne-app-int-west.prod.browse.bestbuy.com
bttnstate-app-int-east.prod.browse.bestbuy.com
MPOSDEV.na.bestbuy.com
lstsrvces-app-ext-east.stage.browse.bestbuy.com
pdmpblshr-app-int-east.test.browse.bestbuy.com
appdirectory.bestbuy.com
drwsmpanmthrt-app-int-east.test.cgraph.bestbuy.com
payments-prod.actdvc.bestbuy.com
shipping-app-int-east.test.browse.bestbuy.com
images-ssl.bestbuy.com
mexco-njs-ext-west.prod.cgraph.bestbuy.com
ostmonitor-app-int-east.stage.browse.bestbuy.com
shipping-api-east-int.test.browse.bestbuy.com
hub.bestbuy.com
pl.bestbuy.com
dhdatrggerrex-app-int-west.prod.browse.bestbuy.com
ext.location-west.prod.browse.bestbuy.com
fulfview-njs-int-west.prod.browse.bestbuy.com
bestbuybusiness.com
actdvcs-app-east.test.browse.bestbuy.com
vpt-slr-int-east.stage.browse.bestbuy.com
ofrsvapi-app-int-east.prod.browse.bestbuy.com
csi-app-ext-west.prod.browse.bestbuy.com
cap-pt-spring-use.bestbuy.com
secure03.lithium.com
esd-pl1.bestbuy.com
aaa.bestbuy.com
vpt-slr-int-east.test.browse.bestbuy.com
pl.bestbuy.com
cfgread-app-west.prod.browse.bestbuy.com
dhdarelsrfdaf-app-ext-east.prod.browse.bestbuy.com
search-slr-east.stage.browse.bestbuy.com
solrindex-app-int-east.stage.browse.bestbuy.com
suggest-web-east.prod.browse.bestbuy.com
aquisview-njs-int-east.prod.browse.bestbuy.com
BBYSTAR-HP-DEV.bestbuy.com
jwaller-app-int-east.test.cgraph.bestbuy.com
carbonaggaws-njs-int-west.prod.cgraph.bestbuy.com
cx-ccai-dfcx-api-stage.prod.gcp.bestbuy.com
searchruleslr-app-int-west.prod.browse.bestbuy.com
pdmingest-app-int-west.prod.browse.bestbuy.com
scheddelvsrvc-app-ext-west.prod.browse.bestbuy.com
payments-stage.actdvc.bestbuy.com
epro-qa.bestbuybusiness.com
stscld-app-ext-east.prod.browse.bestbuy.com
pl.bestbuy.com
suggest-web-east-int.stage.browse.bestbuy.com
gglepaidm-app-int-east.test.browse.bestbuy.com
mytlc.bestbuy.com
zkagentsvc-app-int-east.test.browse.bestbuy.com
profulfil-web-east.prod.browse.bestbuy.com

Certificate

The complete raw certificate details for sercalendar-app-int-east.stage.browse.bestbuy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIQDj+jgn6cwDWqk91vvS0mKjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMDIwMDAwMDBaFw0yMDAyMDIx
MjAwMDBaMDwxOjA4BgNVBAMTMXNlcmNhbGVuZGFyLWFwcC1pbnQtZWFzdC5zdGFn
ZS5icm93c2UuYmVzdGJ1eS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4Tt782axJ2NAvMBTBjcOVjTW2vpGNjV0Pq9YAnbVaXlNr8L36V42gDnGK
WRC+4joq/RgQRx9X5sJU+IAzyKWgMAxgGV+AQvSa07uzsipbZ9pL1e1NA2a0Rw1Q
ObzU9FFDoWQkd6mei6pVhcg+VPYgMsOSnyPKM7A2Q2MduB6bk/zulMLodeyCa9Zn
H6/wJH8Aj6uERSX/ID/Z2Jppy/AeMg2KtHQOUsFY1ir8VvOYe+ZLBReCP92Z9lOs
YBwwlX/rRFwLD8V9akmVE0EdIgg9U3nZ5dvP9QjcctKtfN7dH1t5eT29B09eNGyX
pZl4q5m3xW3xjzbClpPWwzdenx8LAgMBAAGjggGqMIIBpjAfBgNVHSMEGDAWgBRZ
pGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUrpS/AYLMNKf0jbKhIx3oJuTN
02IwPAYDVR0RBDUwM4Ixc2VyY2FsZW5kYXItYXBwLWludC1lYXN0LnN0YWdlLmJy
b3dzZS5iZXN0YnV5LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2Nh
MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG
/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRw
Oi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6
Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8E
AjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASJbzK
onQ+xC0t093KkSsCU2hiUxXZY3AC6P3fet1fS/GxDCzKcXSrlklbkZfdExxz3Vxf
YuFeoQdvZhscjLjkIAZWuyAtow2rD8JqV7iyXaQ8ZuemGSE2vUxBtncn6ATzYPOy
eUDISn8VECBu7QkM7o1Luw7cETiMEvpQinqgML6lXXaR1wdBnUSi8SJWYc7q9tKS
ljQZlTJtT5rKEn2VnXcI/jgbWjVUNsTQh2cbkghnFXIarVU72WG5pcjXJyexmS9i
gq+8j5LsoVu+I1ixY5V1BsaBP3JobmYx1J5HLFWTNawqcBprurPbTesPVz9sJrLq
CtOsqgLZVShZWMWu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE7e/NmsSdjQLzAUwY3D
lY01tr6RjY1dD6vWAJ21Wl5Ta/C9+leNoA5xilkQvuI6Kv0YEEcfV+bCVPiAM8il
oDAMYBlfgEL0mtO7s7IqW2faS9XtTQNmtEcNUDm81PRRQ6FkJHepnouqVYXIPlT2
IDLDkp8jyjOwNkNjHbgem5P87pTC6HXsgmvWZx+v8CR/AI+rhEUl/yA/2diaacvw
HjINirR0DlLBWNYq/FbzmHvmSwUXgj/dmfZTrGAcMJV/60RcCw/FfWpJlRNBHSII
PVN52eXbz/UI3HLSrXze3R9beXk9vQdPXjRsl6WZeKuZt8Vt8Y82wpaT1sM3Xp8f
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18939623014687649787576629644411872810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sercalendar-app-int-east.stage.browse.bestbuy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23266740875937211665058167383233874686225441673753962957991197900218483325601620910915986389339580672538831460130547243547548528478760597206856999516212249569446395119071619392328921779592451705223651461187968237164490022012059312636990177377340837772398027359041844782872436235736957092042803325967545544507288508662606450286037110624045440807271159169974827086577485230401001714133735447885398453371472940268467575390061286303027853454558687761883429839839485517731084027497212661632141555732704032645394179776398966696494740412247574995361864496813247215089763343870144753897465429767348473095798095918939271798539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae94bf0182cc34a7f48db2a1231de826e4cdd362
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sercalendar-app-int-east.stage.browse.bestbuy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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