tidemark-upweb-sbx.awsvetech.veolia.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:eb:be:60:42:1a:6b:4a:08:dc:3d:ac:c0:2d:69:f2 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tidemark-upweb-sbx.awsvetech.veolia.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:eb:be:60:42:1a:6b:4a:08:dc:3d:ac:c0:2d:69:f2Serial Number (int): 9199419020651424295314404417282599410
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 71:14:72:09:8a:1f:6e:42:5a:62:74:fb:27:e1:59:4f:85:56:a3:91
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 6d:2a:50:43:a6:8e:8d:8f:8f:0e:c4:68:95:25:78:75:1e:83:7e:5b
Fingerprint (sha256): 03:0b:6e:19:30:e7:24:b5:de:79:1f:10:92:57:c5:17:06:a7:1b:b1:92:95:39:75:e4:9f:3f:7a:71:d9:d1:88
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate tidemark-upweb-sbx.awsvetech.veolia.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tidemark-upweb-sbx.awsvetech.veolia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tidemark-upweb-sbx.awsvetech.veolia.com
Other certificates including the domain name veolia.com
(limited to 100 certificates)
globalreport.veolia.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
teammate.veolia.com
ssl5.ipaper.io
sni.cloudflaressl.com
pp-nova.veolia.com
aub.sbc1.veolia.com
ssl4.ipaper.io
bms.fmis.veolia.com
vesta.veolia.com
ads.veolia.com
ssl2.ipaper.io
www.veolia.com
v0-vr2wd.agora.awsvesa.veolia.com
nextfiles-archive.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
*.campus.veolia.com
ssl.ipaper.io
gorecapp.com
filetransfer.veolia.com
ssl1.ipaper.io
ssl5.ipaper.io
www.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
tidemark-upweb-sbx.awsvetech.veolia.com
ssl.ipaper.io
ssl.ipaper.io
nps.proprete.prod.veolia.com
www.campus-questionnaire.veolia.com
ssl2.ipaper.io
ssl.ipaper.io
sni.cloudflaressl.com
tidemark-upweb-ppd.veolia.com
*.awsvesa.veolia.com
acquia-sites.com
ssl.ipaper.io
www.campus-questionnaire.veolia.com
acquia-sites.com
odyssee.veolia.com
ssl4.ipaper.io
ssl1.ipaper.io
apm.veolia.com
bms.fmis.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
apm.veolia.com
finaris.veolia.com
*.awsvesa.veolia.com
next.veolia.com
qa-ipaas.veolia.com
ssl3.ipaper.io
nextwebdev.veolia.com
reporting01.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
ssl5.ipaper.io
ssl.ipaper.io
ssl1.ipaper.io
rpa.veolia.com
teammate.veolia.com
ssl6.ipaper.io
acquia-sites.com
www.veolia.com
tls.automattic.com
acquia-sites.com
ssl.ipaper.io
acquia-sites.com
ssl1.ipaper.io
ssl.ipaper.io
portail.diag-server.veolia.com
rec-crm-contact.veolia.com
datalease-sbx.awsvetech.veolia.com
ads.veolia.com
bsh2o.veolia.com
ssl.ipaper.io
acquia-sites.com
*.industries.veolia.com
nextsft.veolia.com
sni.cloudflaressl.com
www.cat.veolia.com
globalreport.veolia.com
dss.veolia.com
*.ipapercms.dk
www.campus-questionnaire.veolia.com
sbc1.veolia.com
ssl1.ipaper.io
nps.energie.prod.veolia.com
ssl3.ipaper.io
vac-import.veolia.com
ssl4.ipaper.io
nps.portal.prod.veolia.com
ssl4.ipaper.io
ssl4.ipaper.io
acquia-sites.com
ssl2.ipaper.io
crm-contact.veolia.com
acquia-sites.com
acquia-sites.com
sni.cloudflaressl.com
teammate.veolia.com
ssl5.ipaper.io
sni.cloudflaressl.com
pp-nova.veolia.com
aub.sbc1.veolia.com
ssl4.ipaper.io
bms.fmis.veolia.com
vesta.veolia.com
ads.veolia.com
ssl2.ipaper.io
www.veolia.com
v0-vr2wd.agora.awsvesa.veolia.com
nextfiles-archive.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
*.campus.veolia.com
ssl.ipaper.io
gorecapp.com
filetransfer.veolia.com
ssl1.ipaper.io
ssl5.ipaper.io
www.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
tidemark-upweb-sbx.awsvetech.veolia.com
ssl.ipaper.io
ssl.ipaper.io
nps.proprete.prod.veolia.com
www.campus-questionnaire.veolia.com
ssl2.ipaper.io
ssl.ipaper.io
sni.cloudflaressl.com
tidemark-upweb-ppd.veolia.com
*.awsvesa.veolia.com
acquia-sites.com
ssl.ipaper.io
www.campus-questionnaire.veolia.com
acquia-sites.com
odyssee.veolia.com
ssl4.ipaper.io
ssl1.ipaper.io
apm.veolia.com
bms.fmis.veolia.com
sni.cloudflaressl.com
ssl1.ipaper.io
apm.veolia.com
finaris.veolia.com
*.awsvesa.veolia.com
next.veolia.com
qa-ipaas.veolia.com
ssl3.ipaper.io
nextwebdev.veolia.com
reporting01.veolia.com
ssl.ipaper.io
sni.cloudflaressl.com
ssl5.ipaper.io
ssl.ipaper.io
ssl1.ipaper.io
rpa.veolia.com
teammate.veolia.com
ssl6.ipaper.io
acquia-sites.com
www.veolia.com
tls.automattic.com
acquia-sites.com
ssl.ipaper.io
acquia-sites.com
ssl1.ipaper.io
ssl.ipaper.io
portail.diag-server.veolia.com
rec-crm-contact.veolia.com
datalease-sbx.awsvetech.veolia.com
ads.veolia.com
bsh2o.veolia.com
ssl.ipaper.io
acquia-sites.com
*.industries.veolia.com
nextsft.veolia.com
sni.cloudflaressl.com
www.cat.veolia.com
globalreport.veolia.com
dss.veolia.com
*.ipapercms.dk
www.campus-questionnaire.veolia.com
sbc1.veolia.com
ssl1.ipaper.io
nps.energie.prod.veolia.com
ssl3.ipaper.io
vac-import.veolia.com
ssl4.ipaper.io
nps.portal.prod.veolia.com
ssl4.ipaper.io
ssl4.ipaper.io
acquia-sites.com
ssl2.ipaper.io
crm-contact.veolia.com
Certificate
The complete raw certificate details for tidemark-upweb-sbx.awsvetech.veolia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEpDCCA4ygAwIBAgIQBuu+YEIaa0oI3D2swC1p8jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MDEwMDAwMDBaFw0yMDA5MDEx MjAwMDBaMDIxMDAuBgNVBAMTJ3RpZGVtYXJrLXVwd2ViLXNieC5hd3N2ZXRlY2gu dmVvbGlhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALcQp5v5 3thNEFHf4jnF6sJCvEDDbuwo69aKTnqCqVreyYVJVpJXASLJsPZELkulmW9PPtKG VvJG1sHJIf6/+hnwyjINfCGS341H2UtXA7Fwaja/b+kND6j75r1/TQcS3TIiVPxN U/DykGWHhcS3f1LBYIBSY5CGb6tql4J0dvPQIcrqrw06mAmhgFh9iVFGiKXKQHFH mpLL21X3z4ikZSCdz00b4QV/ZGJOue5VRwIwCLWMUgYHEK+KTwPO6PZ6LQe0cPZG HG4BYDOkDeVuQ/hwN7sosvsQPo62eCvK9uES3lS8eX3ro6U+2x/PVW9i/lrgPjRL rEf5q/E09CGILfMCAwEAAaOCAaAwggGcMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyj lAcnlnRb+T3QMB0GA1UdDgQWBBRxFHIJih9uQlpidPsn4VlPhVajkTAyBgNVHREE KzApgid0aWRlbWFyay11cHdlYi1zYnguYXdzdmV0ZWNoLnZlb2xpYS5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z Y2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsG AQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9u dHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRy dXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0GUlr0Qkz+7MCspk+kabNIy2dhHy+25 MwYiJCc8lvgqkofyLUXw3jmtHDqs8ZN2Xsc2/2VkFjFEsLNCKTV/sxIuG2DGcMn+ KEhG2s/q3rYFTufB2mKEW5WjM5YNA5StfnCCacxx4Fjq1S1/iSb4eraoi3wMcv5b DWIv2DBUOYAE9m0cNE4ommZ05YoiIc4waRH9Xwtel4VjQjiJ8xlQdsxnawB4hH27 443OvRYxuT4cz9fPCND3va2MOebhAZwODjTLvOlH+fvtdRD+D/IPMUzP8TulBcS9 iSVhWRYG4Kowq7erfKAVfT44YT6i/oDVCTx22dpYm18FFW5skwrYNw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxCnm/ne2E0QUd/iOcXq wkK8QMNu7Cjr1opOeoKpWt7JhUlWklcBIsmw9kQuS6WZb08+0oZW8kbWwckh/r/6 GfDKMg18IZLfjUfZS1cDsXBqNr9v6Q0PqPvmvX9NBxLdMiJU/E1T8PKQZYeFxLd/ UsFggFJjkIZvq2qXgnR289AhyuqvDTqYCaGAWH2JUUaIpcpAcUeaksvbVffPiKRl IJ3PTRvhBX9kYk657lVHAjAItYxSBgcQr4pPA87o9notB7Rw9kYcbgFgM6QN5W5D +HA3uyiy+xA+jrZ4K8r24RLeVLx5feujpT7bH89Vb2L+WuA+NEusR/mr8TT0IYgt 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9199419020651424295314404417282599410 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tidemark-upweb-sbx.awsvetech.veolia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23109822559166084792090903638743592954921069614748258911456162251659818048935336904363875587000515966222304477491117410741093284726336428951828013584652694580619373295416719715926295847865677032188916617549813126557548908406376859211094268091048613685295419177909396134394781656185842859834817267750288914048530565459033085774804179405601734353185517768020759436662471239007086437800425953842748850701650395737712894600276445058860183942328212198474626958548131123410596473745358600964302520742584888895541619649355388728779644791382920382318618212750537196484826071084274553171267075787231404724300299212960517598707 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 711472098a1f6e425a6274fb27e1594f8556a391 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tidemark-upweb-sbx.awsvetech.veolia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001f419496bd10933fbb302b2993e91a6cd232d9d847cbedb933062224273c96f82a9287f22d45f0de39ad1c3aacf193765ec736ff6564163144b0b34229357fb3122e1b60c670c9fe284846dacfeadeb6054ee7c1da62845b95a333960d0394ad7e708269cc71e058ead52d7f8926f87ab6a88b7c0c72fe5b0d622fd83054398004f66d1c344e289a6674e58a2221ce306911fd5f0b5e978563423889f3195076cc676b0078847dbbe38dcebd1631b93e1ccfd7cf08d0f7bdad8c39e6e1019c0e0e34cbbce947f9fbed7510fe0ff20f314ccff13ba505c4bd892561591606e0aa30abb7ab7ca0157d3e38613ea2fe80d5093c76d9da589b5f05156e6c930ad837