domains.clickmeter.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:ec:f2:f3:bc:d2:09:6a:32:1b:c8:47:1e:25:28:2c was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=domains.clickmeter.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ec:f2:f3:bc:d2:09:6a:32:1b:c8:47:1e:25:28:2c
Serial Number (int): 2559537708403810592509497080975534124
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 09:dd:b7:8c:a7:49:b4:9c:36:57:39:25:72:78:01:1a:1b:ce:eb:27
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1e:96:ee:7d:d4:2e:67:ae:19:2e:08:8b:b8:a3:31:57:b9:0b:91:c5
Fingerprint (sha256): 03:85:e1:18:19:1b:0b:c9:50:49:3d:36:31:dc:59:55:e5:cc:3c:c3:44:92:80:0b:e2:6a:d4:a9:23:6a:1f:37

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate domains.clickmeter.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for domains.clickmeter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

domains.clickmeter.com
hoodline.com
*.hoodline.com
tpfg.io
*.tpfg.io
go.thealternativedaily.com
vape-link.us
*.vape-link.us
vpr.life
*.vpr.life
i.ikano
*.i.ikano
links.crunchtime.com
go.wickedweasel.com
click.simon.com

Other certificates including the domain name clickmeter.com

(limited to 100 certificates)
clstatus.irth.com
domains.clickmeter.com
clstatus.irth.com
domains.clickmeter.com
blog.clickmeter.com
blog.clickmeter.com
clstatus.irth.com
clstatus.irth.com
domains.clickmeter.com
www.blog.clickmeter.com
blog.clickmeter.com
clstatus.irth.com
clstatus.irth.com
domains2.clickmeter.com
clstatus.irth.com
9nl.com
clstatus.irth.com
blog.clickmeter.com
*.clickmeter.com
9nl.com
clstatus.irth.com
9nl.com
domains.clickmeter.com
www.blog.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
rebrandly.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
domains.clickmeter.com
domains.clickmeter.com
support.clickmeter.com
clstatus.irth.com
clstatus.irth.com
domains.clickmeter.com
clstatus.irth.com
support.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
domains.clickmeter.com
domains.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
support.clickmeter.com
clstatus.irth.com
www.blog.clickmeter.com
clstatus.irth.com
*.clickmeter.com
clstatus.irth.com
*.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
domains.clickmeter.com
*.clickmeter.com
support.clickmeter.com
clstatus.irth.com
support.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
domains.clickmeter.com
clstatus.irth.com
clstatus.irth.com
domains.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
support.clickmeter.com
clstatus.irth.com
domains.clickmeter.com
clstatus.irth.com
9nl.com
clstatus.irth.com
domains.clickmeter.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
domains.clickmeter.com
*.clickmeter.com
support.clickmeter.com
domains.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
*.clickmeter.com
domains.clickmeter.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
clstatus.irth.com
support.clickmeter.com
domains.clickmeter.com

Certificate

The complete raw certificate details for domains.clickmeter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgIQAezy87zSCWoyG8hHHiUoLDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MTEwMDAwMDBaFw0xOTEwMTEx
MjAwMDBaMCExHzAdBgNVBAMTFmRvbWFpbnMuY2xpY2ttZXRlci5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk8TUuEzDtj2LMGvuuP6ovYNOgJkaM
nmKOEWSvAeWzEN83piDc9O0RBQJrtXAa4nQG7wO2fPsiS+89Dj4mvJnLzal2k+DP
KmCNhDizTF2KGtGGfJYK6e+ENgUHX0S9E+2b2rwYWRGDqvAv167wtkCAAwaIdjSE
Rl+EtKRBDDHS7L2ISUqa60SUD2G6jXMeUyJIBmS7rW213gBKdnGX0ZGVW8nMM0+S
vKIRDMJEJq+IdBds/OQhU9K6/Vfox25prdMqQQInLJuUW+DErlGg0HnmK34wB430
v+w+sz2Su6k3px+23I9A+zXrTZijuZw/sRt7uduFrcUXcm1t1BivuPPXAgMBAAGj
ggNXMIIDUzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E
FgQUCd23jKdJtJw2VzklcngBGhvO6ycwgfUGA1UdEQSB7TCB6oIWZG9tYWlucy5j
bGlja21ldGVyLmNvbYIMaG9vZGxpbmUuY29tgg4qLmhvb2RsaW5lLmNvbYIHdHBm
Zy5pb4IJKi50cGZnLmlvghpnby50aGVhbHRlcm5hdGl2ZWRhaWx5LmNvbYIMdmFw
ZS1saW5rLnVzgg4qLnZhcGUtbGluay51c4IIdnByLmxpZmWCCioudnByLmxpZmWC
B2kuaWthbm+CCSouaS5pa2Fub4IUbGlua3MuY3J1bmNodGltZS5jb22CE2dvLndp
Y2tlZHdlYXNlbC5jb22CD2NsaWNrLnNpbW9uLmNvbTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyG
Kmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNV
HSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G
CCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYI
KwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNydDAMBgNVHRMBAf8EAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYApLkJ
kLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFlySPaYwAABAMARzBFAiEA
kzdQRBjKj0RrUloouBMqPXhOn1FvNBD3NmSKPnkKzNICIC/RJVANRuFEMPUXFhnO
N1yi3LIEG0TcJYvfLoSBM+/aAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq
/16ggw8AAAFlySPbTQAABAMARzBFAiBJPu0SRzj7cWgAugsjMAnoHwi1YlWAOnXK
bW3YuR5RfgIhAPYZNTleqF6q/a8E9s8EdDszhZxtgW4QYxoO2Nia2psVMA0GCSqG
SIb3DQEBCwUAA4IBAQAEoJAwB1jblZ1JN4NDGNJvzGOyg2ZKXKzgRIs5XWnLQJ6X
Js/eN7cdwYbrzgXw6qhs16CMCPoQmEV4jt2j4znb9Bw6OPjY1EAIj9NtXkx2wuvV
PnedXoCg/LK6WjFcFqL5+62VUnL3EdtkNKG8yqT/Ws14E90gogRuA2F7JfGly7Nr
i5cGOxzdr2v6PqCT2Zdf8PwAe2yHCJDVR2bFzACsuwVVDKmi0ZK27eCMPEpu2dWZ
VP9ETXoMgJNKq68+2/yCO9OncNi3bPQ+okX0FvmZU1kWVLCV5/47kNjhN48rQBBs
X6SSS4p1k44Ek3w5U37gOjmSa8oiIK0CmVXazNXL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PE1LhMw7Y9izBr7rj+q
L2DToCZGjJ5ijhFkrwHlsxDfN6Yg3PTtEQUCa7VwGuJ0Bu8Dtnz7IkvvPQ4+JryZ
y82pdpPgzypgjYQ4s0xdihrRhnyWCunvhDYFB19EvRPtm9q8GFkRg6rwL9eu8LZA
gAMGiHY0hEZfhLSkQQwx0uy9iElKmutElA9huo1zHlMiSAZku61ttd4ASnZxl9GR
lVvJzDNPkryiEQzCRCaviHQXbPzkIVPSuv1X6Mduaa3TKkECJyyblFvgxK5RoNB5
5it+MAeN9L/sPrM9krupN6cfttyPQPs1602Yo7mcP7Ebe7nbha3FF3JtbdQYr7jz
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2559537708403810592509497080975534124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domains.clickmeter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28901277499146152257485295324963790303931338563583026512427243818754499671958647435027532723241818724806878882315226988180328550135192901081925401870635368460732688767688448301914118322993486148353060604537568183888610655700450792137753443876574400150737585092879156642568052799392592455765033907026760393275447122654327698618411268094524785495345300780384008984627725535098138133212033773004411579946545977501744923249922604491799541235596696512683902072425759337744298669231712975775319627145638619403609579774561804647934071117348168441706088919254907992439362448573505394653233960800600145543128723512331528106967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09ddb78ca749b49c365739257278011a1bceeb27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domains.clickmeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoodline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpfg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tpfg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.thealternativedaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vape-link.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vape-link.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpr.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vpr.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.ikano'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i.ikano'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.crunchtime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.wickedweasel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.simon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165c923da6300000403004730450221009337504418ca8f446b525a28b8132a3d784e9f516f3410f736648a3e790accd202202fd125500d46e14430f5171619ce375ca2dcb2041b44dc258bdf2e848133efda0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165c923db4d00000403004730450220493eed124738fb716800ba0b233009e81f08b56255803a75ca6d6dd8b91e517e022100f61935395ea85eaafdaf04f6cf04743b33859c6d816e10631a0ed8d89ada9b15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004a090300758db959d4937834318d26fcc63b283664a5cace0448b395d69cb409e9726cfde37b71dc186ebce05f0eaa86cd7a08c08fa109845788edda3e339dbf41c3a38f8d8d440088fd36d5e4c76c2ebd53e779d5e80a0fcb2ba5a315c16a2f9fbad955272f711db6434a1bccaa4ff5acd7813dd20a2046e03617b25f1a5cbb36b8b97063b1cddaf6bfa3ea093d9975ff0fc007b6c870890d54766c5cc00acbb05550ca9a2d192b6ede08c3c4a6ed9d59954ff444d7a0c80934aabaf3edbfc823bd3a770d8b76cf43ea245f416f99953591654b095e7fe3b90d8e1378f2b40106c5fa4924b8a75938e04937c39537ee03a39926bca2220ad029955daccd5cb