api.rdf.watchabc.go.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:ab:5f:05:fc:3f:ff:91:ba:bc:c9:9d:6a:64:e7:7f was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.rdf.watchabc.go.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:ab:5f:05:fc:3f:ff:91:ba:bc:c9:9d:6a:64:e7:7fSerial Number (int): 16840546015349197172637915420926732159
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 13:d7:19:14:5d:b1:6e:86:8e:8d:c3:52:10:cd:78:79:2b:f1:91:7d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ca:bf:87:ab:9e:7e:53:75:b2:64:70:36:b1:17:10:6e:ff:33:e9:15
Fingerprint (sha256): 01:a1:00:87:41:ba:6e:4b:74:0c:d4:ff:ec:57:ad:c9:96:4a:02:a6:18:f0:13:2f:c2:55:05:83:62:2e:9e:6d
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api.rdf.watchabc.go.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.rdf.watchabc.go.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.rdf.watchabc.go.com
api.watchabc.go.com
api.watchabc.go.com
Other certificates including the domain name go.com
(limited to 100 certificates)
disneymovieclub.go.com
approvals.qa.pcm.go.com
video.disney.com
www.aws.espn.com
auth-mock.qa.pcm.go.com
DISNEYCRUISE.RESERVATIONS.DISNEY.GO.COM
forumadmin.disney.go.com
dns-vetting1-jeffg-noah.map.fastly.net
media.abcfamily.go.com
tredir.stage.go.com
disneyphotopass.go.com
dns-vetting1-mims-pawel.map.fastly.net
video.disney.com
espndeportes.espn.go.com
wdpromedia.disney.go.com
editions.geo.hosted.abcotvs.com
disneyland.disney.go.com
sslcertificate3.queue-it.net
beachresorts-sl.disney.go.com
r.abc.go.com
tredire-cloud.go.com
dns-vetting1-mims-pawel.map.fastly.net
mediakit.go.com
stg-unid.go.com
proxy.espn.go.com
cwc.dsi.go.com
disneyvacationaccount.disney.go.com
disneycruise.disney.go.com
room.oscar.go.com
abcnewsstore.go.com
m.disneyland.disney.go.com
v2.shared.global.fastly.net
tredire.perf.go.com
otvresponder.gns.go.com
r2.shared.global.fastly.net
mydcastqa.go.com
tredir.ppe.go.com
paymenthandlerstaging.go.com
reg.espn.go.com
vault-east.dev.ci.go.com
latest.disneyland.disney.go.com
disneyworld.disney.go.com
v2.shared.global.fastly.net
googlenow.abcnews.go.com
resorts.disney.go.com
api.rdf.watchabc.go.com
iregcs.go.com
qa.registerdisney.go.com
dns-vetting1-mims-pawel.map.fastly.net
api.go.com
disneycruise.disney.go.com
disneymovierewards.go.com
quickquote.disney.go.com
optout.go.com
abcnews-react-stage.aws.seabcnews.go.com
cms.disney.go.com
disneygoldenoak-sl.disney.go.com
event-registration-qa01.disneyparks.disney.go.com
assets.espncdn.com
preview.ddb.go.com
*.wdprdvc.segopub.engsvc.go.com
stg.n7.vp2.watchtvplus.go.com
api.dsitpr.go.com
r2.shared.global.fastly.net
stg.authorization.go.com
authorization.go.com
fg-vault.qa.pcm.go.com
stg.api.sweepstakes.go.com
dns-vetting1k.map.fastly.net
cdn.secure.espn.go.com
abcsports.go.com
sandbox.dev.ci.go.com
static.aws.abcfamily.go.com
secure.cdn.media.oscar.abc.com
wdprolt30-service.disney.go.com
gma-newsletter-tool.aws.seabcnews.go.com
api.mock.watchabc.go.com
api.disneymovieclub.go.com
video.disney.com
s.abcnews.com
r2.shared.global.fastly.net
test.gatekeeper.us-abc.symphony.edgedatg.com
env1.nge.api.go.com
*.api.contents.watchabc.go.com
load.disneycruise.wdprapps.disney.com
olaf-api.east.prod.us.seabc.go.com
abcsports.go.com
aglobal.go.com
disneymovieclub.go.com
queue.disneymovieclub.go.com
test.gatekeeper.us-abc.symphony.edgedatg.com
freeform.go.com
www.what-is-your-revolution.abc.go.com
dockerhub.ext.datg-abc-spark-west.us.seabc.go.com
watch.video.api.qa.espn.com
dns-vetting1-jeffg-noah.map.fastly.net
*.gatekeeper.us-abc.symphony.edgedatg.com
dwtsvote.abc.go.com
parksandresorts.wdpromedia-le.disney.go.com
disneyweddings.disney.go.com
approvals.qa.pcm.go.com
video.disney.com
www.aws.espn.com
auth-mock.qa.pcm.go.com
DISNEYCRUISE.RESERVATIONS.DISNEY.GO.COM
forumadmin.disney.go.com
dns-vetting1-jeffg-noah.map.fastly.net
media.abcfamily.go.com
tredir.stage.go.com
disneyphotopass.go.com
dns-vetting1-mims-pawel.map.fastly.net
video.disney.com
espndeportes.espn.go.com
wdpromedia.disney.go.com
editions.geo.hosted.abcotvs.com
disneyland.disney.go.com
sslcertificate3.queue-it.net
beachresorts-sl.disney.go.com
r.abc.go.com
tredire-cloud.go.com
dns-vetting1-mims-pawel.map.fastly.net
mediakit.go.com
stg-unid.go.com
proxy.espn.go.com
cwc.dsi.go.com
disneyvacationaccount.disney.go.com
disneycruise.disney.go.com
room.oscar.go.com
abcnewsstore.go.com
m.disneyland.disney.go.com
v2.shared.global.fastly.net
tredire.perf.go.com
otvresponder.gns.go.com
r2.shared.global.fastly.net
mydcastqa.go.com
tredir.ppe.go.com
paymenthandlerstaging.go.com
reg.espn.go.com
vault-east.dev.ci.go.com
latest.disneyland.disney.go.com
disneyworld.disney.go.com
v2.shared.global.fastly.net
googlenow.abcnews.go.com
resorts.disney.go.com
api.rdf.watchabc.go.com
iregcs.go.com
qa.registerdisney.go.com
dns-vetting1-mims-pawel.map.fastly.net
api.go.com
disneycruise.disney.go.com
disneymovierewards.go.com
quickquote.disney.go.com
optout.go.com
abcnews-react-stage.aws.seabcnews.go.com
cms.disney.go.com
disneygoldenoak-sl.disney.go.com
event-registration-qa01.disneyparks.disney.go.com
assets.espncdn.com
preview.ddb.go.com
*.wdprdvc.segopub.engsvc.go.com
stg.n7.vp2.watchtvplus.go.com
api.dsitpr.go.com
r2.shared.global.fastly.net
stg.authorization.go.com
authorization.go.com
fg-vault.qa.pcm.go.com
stg.api.sweepstakes.go.com
dns-vetting1k.map.fastly.net
cdn.secure.espn.go.com
abcsports.go.com
sandbox.dev.ci.go.com
static.aws.abcfamily.go.com
secure.cdn.media.oscar.abc.com
wdprolt30-service.disney.go.com
gma-newsletter-tool.aws.seabcnews.go.com
api.mock.watchabc.go.com
api.disneymovieclub.go.com
video.disney.com
s.abcnews.com
r2.shared.global.fastly.net
test.gatekeeper.us-abc.symphony.edgedatg.com
env1.nge.api.go.com
*.api.contents.watchabc.go.com
load.disneycruise.wdprapps.disney.com
olaf-api.east.prod.us.seabc.go.com
abcsports.go.com
aglobal.go.com
disneymovieclub.go.com
queue.disneymovieclub.go.com
test.gatekeeper.us-abc.symphony.edgedatg.com
freeform.go.com
www.what-is-your-revolution.abc.go.com
dockerhub.ext.datg-abc-spark-west.us.seabc.go.com
watch.video.api.qa.espn.com
dns-vetting1-jeffg-noah.map.fastly.net
*.gatekeeper.us-abc.symphony.edgedatg.com
dwtsvote.abc.go.com
parksandresorts.wdpromedia-le.disney.go.com
disneyweddings.disney.go.com
Certificate
The complete raw certificate details for api.rdf.watchabc.go.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmTCCA4GgAwIBAgIQDKtfBfw//5G6vMmdamTnfzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA2MjIwMDAwMDBaFw0xOTA3MjIx MjAwMDBaMCIxIDAeBgNVBAMTF2FwaS5yZGYud2F0Y2hhYmMuZ28uY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN3QIy11EQjL76y6cxizWroP55er Jup9Tv2rh96ml5ucKobTIrjq6c5MC5l/dQTbyhQHC9INbm/lo26iUh6E9O05N67N lD/7unq3mCnfyXgff64MKvhNd3+saalK9BYZzHdSjd3PFmlmKfQf/9/bFBvEBF8s U69HB0bAwiMB7Q/8uW232DlwLVLDEUchxug4PtxOgOPjSnciFFD4/9Cj3E+x3v/+ chrqZXuA0m1PcTvW1OIBGJ1LnBL70YsAaK6/Kq1s+zMNfdm2uxjo5ml/0Tu3x6ES s2Pcp0XouOrtSQ0vRZWbuYji2B7H7zDYx5WD9fbWd6OzrgkiB6edzUmfOwIDAQAB o4IBpTCCAaEwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O BBYEFBPXGRRdsW6Gjo3DUhDNeHkr8ZF9MDcGA1UdEQQwMC6CF2FwaS5yZGYud2F0 Y2hhYmMuZ28uY29tghNhcGkud2F0Y2hhYmMuZ28uY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g LIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAG A1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBADDwq9mBSZ2USU0pDi4v5cb9BuZLpXt+JsWtb+r+RZpzp9pQ /CtqA/1RUY46DBBUA844De1K4wRwRQ/3u2iINQ5SQvO4ClJ9RHfJ5N/QHGdDstxY bhEeUEpOGqm35YCs7dEJybpluDLjxxiBjMf72KoeZ8H4wuiGHy2cQxlxs1E1OZFi 037ShspgeOjXyYjW6inuwpyMIaJB5gqA9bNlr7gwUX0zGms8Vc+oz2pzPdKKCNzv 2esuJJj3RNWQu3dMpsexDFG5HewYrZ1eTVCNh6MxT19DqyAMWHq9wMBAv64vu45g PrGyZcoKmcTYjowVAQ4I4IEmArTRNgGZ84Kfn+g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN3QIy11EQjL76y6cxiz WroP55erJup9Tv2rh96ml5ucKobTIrjq6c5MC5l/dQTbyhQHC9INbm/lo26iUh6E 9O05N67NlD/7unq3mCnfyXgff64MKvhNd3+saalK9BYZzHdSjd3PFmlmKfQf/9/b FBvEBF8sU69HB0bAwiMB7Q/8uW232DlwLVLDEUchxug4PtxOgOPjSnciFFD4/9Cj 3E+x3v/+chrqZXuA0m1PcTvW1OIBGJ1LnBL70YsAaK6/Kq1s+zMNfdm2uxjo5ml/ 0Tu3x6ESs2Pcp0XouOrtSQ0vRZWbuYji2B7H7zDYx5WD9fbWd6OzrgkiB6edzUmf OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16840546015349197172637915420926732159 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.rdf.watchabc.go.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23842181418700468574527736035341193391685614582841829653519527704350011104441614297289875296966650281576316830534556845760451426933495047902883329195547921449194185099019843271473623375461974234882746104146455278836484080767996188499608113856242433585364235119279928363375514745726481986103810474201872248457852239850019570820373702399663338830548563860052554353079772731681089940120692582776301204261921091812684449959289861862387571821401887892351221391103152290919973658784182935561041443339392161341267424172430670983486124876601721443856519645079170060691510385904714912804868617481023059958082058312469818482491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13d719145db16e868e8dc35210cd78792bf1917d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.rdf.watchabc.go.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.watchabc.go.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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