keycloak.digitaldealer.prod.aws.scania.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:52:40:ab:c3:6a:3d:5b:d5:86:ab:14:f7:a7:aa:d4 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=keycloak.digitaldealer.prod.aws.scania.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:40:ab:c3:6a:3d:5b:d5:86:ab:14:f7:a7:aa:d4
Serial Number (int): 4414764012463039940796561133213821652
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 1c:06:d3:d0:f5:8b:d5:9d:de:85:06:e1:57:84:a9:e0:c4:2f:45:98
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 49:6f:60:d7:be:29:ea:7f:81:36:74:f5:66:8c:4e:18:59:3b:5b:9c
Fingerprint (sha256): 02:3a:a5:70:25:fc:50:15:1b:5a:6b:4b:a0:40:c4:ea:b6:9d:00:49:da:65:bc:93:e1:84:ad:b3:b9:4d:9c:c3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate keycloak.digitaldealer.prod.aws.scania.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keycloak.digitaldealer.prod.aws.scania.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keycloak.digitaldealer.prod.aws.scania.com
prod.digitaldealer.prod.aws.scania.com
prod.apps187.digitaldealer.prod.aws.scania.com
cp.digitaldealer.prod.aws.scania.com
cp.apps187.digitaldealer.prod.aws.scania.com
digitaldealer.prod.aws.scania.com
dealer.scania.com
keycloak.dealer.scania.com

Other certificates including the domain name scania.com

(limited to 100 certificates)
www.shopb2b.scania.com
rsc.cdn77.org
spii.scania.com
sparta.devtest.aws.scania.com
backend.omega.onappcdn.com
scaniaconfluence.prod.aws.scania.com
mobat.scania.com
standardsapi.tdquredev.devtest.aws.scania.com
webuyanyscania.uk.devtest.aws.scania.com
one.stage.scania.com
ws.conversion-dev.devtest.aws.scania.com
corporate-intranet.scania.com
ambari.streaming.prod.aws.scania.com
*.r.worldssl.net
myebapp.clad-playground.devtest.aws.scania.com
internal-equipmentusage.apivp.cs.scania.com
api.integration-dev.devtest.aws.scania.com
*.module.cava-staging.prod.aws.scania.com
web.cvss-dev.devtest.aws.scania.com
saps.dce.scania.com
ddmadmin.testdiagnosticinformation.cs.scania.com
api.prins.devtest.aws.scania.com
static.clad.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
*.cava-dev.devtest.aws.scania.com
rfms2-status.testapies.cs.scania.com
chatbot.sfl.devtest.aws.scania.com
proxora-dev.cloud01-np.cd.scania.com
polarion-rms.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
sparta.devtest.aws.scania.com
homepage.devtools.devtest.aws.scania.com
fact.ema.prod.aws.scania.com
pre-comptool.scania.com
invoice-api.conversion-preprod.devtest.aws.scania.com
accounts.clad.devtest.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
frontend.alden.cola-techreports-llm.devtest.gf.aws.scania.com
sp-maintenancereportemailservice-api.apisp.cs.scania.com
test.calsium.devtest.aws.scania.com
rsc.cdn77.org
backend.omega.onappcdn.com
selfbilling.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
apicf.cs.scania.com
apim.devtest.aws.scania.com
identity.iron.cd.scania.com
polarion-rms.scania.com
identity.team-torch.devtest.aws.scania.com
oliver.pii-dev.devtest.aws.scania.com
adminlocalization.testapicd.cs.scania.com
ocs.scania.com
auth.clad.devtest.aws.scania.com
sgws.scania.com
win.caos.devtest.aws.scania.com
test.coc.devtest.aws.scania.com
apivp.cs.scania.com
calsiumhistory.scania.com
*.salesportal.prod.aws.scania.com
saps.np-dce.scania.com
keycloak.digitaldealer.prod.aws.scania.com
slapool01.scania.com
complete.scania.com
gbdesktop.scania.com
sp-grafana.apisp.cs.scania.com
monaws.np-dce.scania.com
preprod.jira-greenfield.prod.aws.scania.com
orderdiagnosticreadout.testdiagnosticinformation.cs.scania.com
apisp.cs.scania.com
ecs.apicd.cs.scania.com
mock.sws-dev.devtest.aws.scania.com
win.dev.aws.scania.com
puppet.sws-dev.devtest.aws.scania.com
*.scania.com
demo.sws-test.devtest.aws.scania.com
reflex-test.scania.com
testapird.cs.scania.com
saps.np-dce.scania.com
puppet-master.sws-prod.prod.aws.scania.com
saps.dce.scania.com
testclient.dcode.devtest.aws.scania.com
fmp-help.test.cs.scania.com
*.ccp.devtest.aws.scania.com
backend.omega.onappcdn.com
crp.prod.aws.scania.com
cloud.scania.com
complete.scania.com
saps.np-dce.scania.com
slapool01.scania.com
gitlab-dashboard.test.cs.scania.com
connect.shadow.devtest.aws.scania.com
dev.coc.devtest.aws.scania.com
fleetmonitor.scania.com
*.ithelp.scania.com
saps.dce.scania.com
uploadservice.diagnosticinformation.cs.scania.com
premacperiodicoptimizer.scania.com
saps.dce.scania.com

Certificate

The complete raw certificate details for keycloak.digitaldealer.prod.aws.scania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgIQA1JAq8NqPVvVhqsU96eq1DANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMjAwMDAwMDBaFw0yMDA0MjAx
MjAwMDBaMDUxMzAxBgNVBAMTKmtleWNsb2FrLmRpZ2l0YWxkZWFsZXIucHJvZC5h
d3Muc2NhbmlhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANE+
SdhJCIrXcjF0iNaWxWxK6cPX+JbwB9z0II9H2rN/fCv5P6RoEhDS9j+XKHtIGQkv
XZ7u+QcJc/xw2i192k99tpYtfNJzU2w9Q1lBgHUOypOFBZai4sINnXVHJe01ASrY
2WX63JU2SHCuEcawSLloSYoYgYH0tFSOuGCF07hPXCFtfaoVbjtgLc8jinZfMcS3
t2nb6JltKQfbY2GwyAIGcUGTmr7eyfJPBZ6jETm+BR9sYTJn/JAx7sqkUubh+aWN
QkXq+PqHVnOZVnM6VuDcRFyp7sGDbVwtDFQrAJZVhmOOXzMO/jm1+DhsKB5efuX7
uWkSOZBZOF4pA1yPPYcCAwEAAaOCA5wwggOYMB8GA1UdIwQYMBaAFFmkZgZSoHuV
kjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQcBtPQ9YvVnd6FBuFXhKngxC9FmDCCATcG
A1UdEQSCAS4wggEqgiprZXljbG9hay5kaWdpdGFsZGVhbGVyLnByb2QuYXdzLnNj
YW5pYS5jb22CJnByb2QuZGlnaXRhbGRlYWxlci5wcm9kLmF3cy5zY2FuaWEuY29t
gi5wcm9kLmFwcHMxODcuZGlnaXRhbGRlYWxlci5wcm9kLmF3cy5zY2FuaWEuY29t
giRjcC5kaWdpdGFsZGVhbGVyLnByb2QuYXdzLnNjYW5pYS5jb22CLGNwLmFwcHMx
ODcuZGlnaXRhbGRlYWxlci5wcm9kLmF3cy5zY2FuaWEuY29tgiFkaWdpdGFsZGVh
bGVyLnByb2QuYXdzLnNjYW5pYS5jb22CEWRlYWxlci5zY2FuaWEuY29tghprZXlj
bG9hay5kZWFsZXIuc2NhbmlhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j
cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsG
CWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB
hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG
Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV
HRMBAf8EAjAAMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFpmzBRBAAABAMASDBGAiEAoWNCN/cMTtUW
yM1pwFNAp5pC2alPCp4/5egOfZGx/jUCIQDkTHhiRN3U1jsgrcRqRC4I9MVA8//G
lRNYHovsGrlYkgB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAAB
aZswUnIAAAQDAEgwRgIhAJeo+lbCwEdvl0Lp9OkkD2XUvv48wp7P8EdWEmmDWRso
AiEAyx0S14wFKinFXyCnpju9eD/hLZcnX+TiZQnFt2oWwlIwDQYJKoZIhvcNAQEL
BQADggEBAKKB95H2tVq+feKEpV5i+6GUvIRJhmcmz7R22a8lPLihGeTSLrImC1S7
lzMWL+21JXMbQ/3tbK66hswnau0ZUOgigiMjlqJX9RBmXYlOSsnZvhd+lY8cPdS3
QUb+gBWbZYYFqd0J/HlulS5ESNl7G6RiYUbb3qtyxRoy6XouN9R9nIDOUV4q43nw
7N0CZpWvnU/XoHk4a3fiqO40DFkN+u4YcsclhMY2EVFYm0aBrFGUMSgWtiM/hm04
oDvUi385ya/nSiN5e6Dmgy9L1sX0Se1/N4Sit6mNYS1IGD17Lzv8HV/sXCfeaCuw
7aw5DC32VBzwjAYl10v64kLjtLtr55A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T5J2EkIitdyMXSI1pbF
bErpw9f4lvAH3PQgj0fas398K/k/pGgSENL2P5coe0gZCS9dnu75Bwlz/HDaLX3a
T322li180nNTbD1DWUGAdQ7Kk4UFlqLiwg2ddUcl7TUBKtjZZfrclTZIcK4RxrBI
uWhJihiBgfS0VI64YIXTuE9cIW19qhVuO2AtzyOKdl8xxLe3advomW0pB9tjYbDI
AgZxQZOavt7J8k8FnqMROb4FH2xhMmf8kDHuyqRS5uH5pY1CRer4+odWc5lWczpW
4NxEXKnuwYNtXC0MVCsAllWGY45fMw7+ObX4OGwoHl5+5fu5aRI5kFk4XikDXI89
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4414764012463039940796561133213821652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keycloak.digitaldealer.prod.aws.scania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26414521320592618074423225376386221471923263253968668000474338179839739782735134050881352099055859718643732350287746406797545915322418551507559594613657306967372623045341332390081895691313115947000374171166745530163069041215851590088637157831304259855713617030600966366971887389421057025780569197806481611440727290011390170475727065090303794435190941535265474092140015624969030268048448492885724532229964911723007966652635179812942333743933232381588836174256516712313574193676317696974082799746792738912848125825774665236216146473027563292536094075855092871154605910916640285026911373164147726244290194795478951869831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c06d3d0f58bd59dde8506e15784a9e0c42f4598
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keycloak.digitaldealer.prod.aws.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.digitaldealer.prod.aws.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.apps187.digitaldealer.prod.aws.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.digitaldealer.prod.aws.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.apps187.digitaldealer.prod.aws.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldealer.prod.aws.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keycloak.dealer.scania.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001699b3051040000040300483046022100a1634237f70c4ed516c8cd69c05340a79a42d9a94f0a9e3fe5e80e7d91b1fe35022100e44c786244ddd4d63b20adc46a442e08f4c540f3ffc69513581e8bec1ab958920077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001699b305272000004030048304602210097a8fa56c2c0476f9742e9f4e9240f65d4befe3cc29ecff04756126983591b28022100cb1d12d78c052a29c55f20a7a63bbd783fe12d97275fe4e26509c5b76a16c252
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a281f791f6b55abe7de284a55e62fba194bc8449866726cfb476d9af253cb8a119e4d22eb2260b54bb9733162fedb525731b43fded6caeba86cc276aed1950e82282232396a257f510665d894e4ac9d9be177e958f1c3dd4b74146fe80159b658605a9dd09fc796e952e4448d97b1ba4626146dbdeab72c51a32e97a2e37d47d9c80ce515e2ae379f0ecdd026695af9d4fd7a079386b77e2a8ee340c590dfaee1872c72584c6361151589b4681ac5194312816b6233f866d38a03bd48b7f39c9afe74a23797ba0e6832f4bd6c5f449ed7f3784a2b7a98d612d48183d7b2f3bfc1d5fec5c27de682bb0edac390c2df6541cf08c0625d74bfae242e3b4bb6be790