cpt.cs.tomtom.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:98:ad:b0:dd:1e:a4:3c:35:8c:97:05:d4:5d:1d:3e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cpt.cs.tomtom.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:98:ad:b0:dd:1e:a4:3c:35:8c:97:05:d4:5d:1d:3e
Serial Number (int): 20731171928722296666472659824303480126
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 49:66:72:b1:06:db:68:14:4b:d8:58:a0:b2:d2:8d:8f:bc:0d:eb:34
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7c:18:75:d4:3e:a0:7b:c5:5e:f2:97:31:a6:5d:d6:6d:ef:e7:74:c2
Fingerprint (sha256): 03:ab:49:e2:6e:34:1d:c1:1d:79:2e:55:c7:80:33:e1:cc:2a:c1:bc:e1:43:72:b3:dc:ba:7a:f6:7b:2d:de:69

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate cpt.cs.tomtom.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpt.cs.tomtom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpt.cs.tomtom.com

Other certificates including the domain name tomtom.com

(limited to 100 certificates)
wadetrim.trubytraining.com
22773.discos.orbis.tomtom.com
tracker.engage.tomtom.com
ind06pr-890.maps-pu-poi.tomtom.com
s1.i.maverick.mep.tomtom.com
*.fcd-ingest.tomtom.com
atom-ws.27373.orbis.tomtom.com
*.tomtom.com
brandguide.tomtom.com
connect-us.tomtom.com
kenai-mod-11943-similar-jobs.preprod.marketing-az.tomtom.com
kenai-master.preprod.marketing-az.tomtom.com
11851.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
reportswithmaps.eu-west-1.maps-central.tomtom.com
fleetsecure.telematics.tomtom.com
6.discos.orbis.tomtom.com
airflow.inc-conf.prod.maps-amf.tomtom.com
bhsa.mysportsanalysis.com
28200.discos.orbis.tomtom.com
backend.pr-44.aqua.poi-dev.orbis.tomtom.com
ns-gss-wfs.inc-conf.dev.maps-amf.tomtom.com
usa06pr-843.maps-pu-poi.tomtom.com
matter-ws.22068.orbis.tomtom.com
fra2409test90-907.maps-pu-poi.tomtom.com
dev.mapexplorer.tomtom.com
atom-ws.67299.orbis.tomtom.com
academy.tomtom.com
atom-ws.20735.orbis.tomtom.com
*.tomtom.com
argo-discos.13999.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
cert00017-azurecdn.akamaized.net
kepler.ts.tomtom.com
mcodnkevtest-901.maps-pu-poi.tomtom.com
alertmanager.test-jk.connected-services.tomtom.com
preprod-vag-hcp3.acs.services.tomtom.com
caesgbitnosw06-844.maps-pu-poi.tomtom.com
wadetrim.trubytraining.com
*.navcloud.tomtom.com
farmviability.oahurcd.org
cert00017-azurecdn.akamaized.net
*.discovery.speech.tomtom.com
aqua-viewer.pr-58.aqua.poi-dev.orbis.tomtom.com
*.fcd-ingest.tomtom.com
alertmanager.prod-blue.connected-services.tomtom.com
api.roadcheck-dev.tomtom.com
backend.pr-47.aqua.poi-dev.orbis.tomtom.com
minerva-rest-api.test-chha.connected-services.tomtom.com
btsqas.tomtom.com
7.discos.orbis.tomtom.com
15408.discos.orbis.tomtom.com
backend.pr-46.aqua.poi-dev.orbis.tomtom.com
kenai-develop.preprod.marketing-az.tomtom.com
cert00017-azurecdn.akamaized.net
vertex.mep.tomtom.com
cert00017-azurecdn.akamaized.net
matter-ws.26195.orbis.tomtom.com
*.fcd-ingest.tomtom.com
*.adas-tile-service.mapcontent-dev.tomtom.com
kenai-mdev-1967-indigo-borders.preprod.marketing-az.tomtom.com
goldstream-develop.prod.marketing-az.tomtom.com
reportswithmaps.maps-central.tomtom.com
aqua-sampler-backend.released.aqua.poi-dev.orbis.tomtom.com
alertmanager.7777.discos-v2.orbis.tomtom.com
22867.discos.orbis.tomtom.com
fra06pr-883.maps-pu-poi.tomtom.com
matter-ws.11100.orbis.tomtom.com
brcachsg06pr-833.maps-pu-poi.tomtom.com
16770.discos-dev.orbis.tomtom.com
preprod-famar-ams.services.tomtom.com
feature-history.mep.tomtom.com
19680.discos.orbis.tomtom.com
ind06pr-889.maps-pu-poi.tomtom.com
brcachsg06pr-833.maps-pu-poi.tomtom.com
6.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
aqua-sampler-backend.pr-11.aqua.poi-dev.orbis.tomtom.com
kafka-bootstrap.prod-green.connected-services.tomtom.com
cpt.cs.tomtom.com
minerva-rest-api.test-lo.connected-services.tomtom.com
matter-ws.54879.orbis.tomtom.com
atom-ws.16233.orbis.tomtom.com
mock.preprod-ams.tomtom.com
22428.discos.orbis.tomtom.com
*.mapcontent-dev.tomtom.com
grafana.12772.discos-v2.orbis.tomtom.com
abddnktestev15-891.maps-pu-poi.tomtom.com
adas-tile-compiler-fca.mapcontent-dev.tomtom.com
preprod-fca-gsdp-sxm.services.tomtom.com
mep.tomtom.com
cert00017-azurecdn.akamaized.net
akamai-san18.exacttarget.com
api-blue.dev.horizon.tomtom.com
backend.pr-1.aqua.poi-dev.orbis.tomtom.com
preprod-kr-vag-hcp3.acs.services.tomtom.com
26587.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
atom-ws.16807.orbis.tomtom.com
17957.discos.orbis.tomtom.com

Certificate

The complete raw certificate details for cpt.cs.tomtom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEeDCCA2CgAwIBAgIQD5itsN0epDw1jJcF1F0dPjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMDYwMDAwMDBaFw0xOTEyMDYx
MjAwMDBaMBwxGjAYBgNVBAMTEWNwdC5jcy50b210b20uY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA649W48QgD/Nhoma4RmkftkSUO2GnMynN3Ihj
IW2nXGyGzvoIYN6wFDoKN+fQ/5qeleRY+6U2DSUTqtFNF1XNzW/dyi68GHoHCU5d
ww2YDH2fvqvvTLIVGKquH411fQTSxy4GmCl7Zm11SzLNMKPqYCJPieLPgSKoe9MT
E4Tj6bhJrmscUxIEHs4I1NuOYZJkKqOOIcg0DtjD26IPjpozNK6c/a2NVDSvUWbP
wTvAcoqJvFWGNRHTqZjUnERT6wGFoPcrKFFbZpp5BNQCjjZPSrAvj/MR4ak1yrpW
F384MEr/Fe6i2+3SeNpCmzBhwjelD4BqPe/4YHiRRIfTkmCKqwIDAQABo4IBijCC
AYYwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFElm
crEG22gUS9hYoLLSjY+8Des0MBwGA1UdEQQVMBOCEWNwdC5jcy50b210b20uY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5j
b20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1
BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFt
YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6
b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABywqzQdU9Op7xPU/fhifacsl6MX
8LIyr5mJ4vY88oNMGWqIw/OPkmG44nGjlvrLws2k7GXnBs7xpFHIDtgL2Jey6mqx
82R6IUmRSTDw8cVLEYZWluFl8AyKCdx2S6uDefcgcJ/yUZ7y8CaPu+WfQaGJsIqz
hRrgO3/XR8tBczdogwMNLx97PVeWnt2fiUcoFR7ffngx0eSu3yZ7tL21gHgqgkhv
VMAdU56cCNtmkL8x9PlBfpszi6+hbkTg7kxi68pblMJWk02HKu6Oq6gqX5O0nupN
pfIR7vY6NmE5kmeMfK9lzGH03v/EiR/i2/pzCKZHRTZmqUn+1HBrth9g9xo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA649W48QgD/Nhoma4Rmkf
tkSUO2GnMynN3IhjIW2nXGyGzvoIYN6wFDoKN+fQ/5qeleRY+6U2DSUTqtFNF1XN
zW/dyi68GHoHCU5dww2YDH2fvqvvTLIVGKquH411fQTSxy4GmCl7Zm11SzLNMKPq
YCJPieLPgSKoe9MTE4Tj6bhJrmscUxIEHs4I1NuOYZJkKqOOIcg0DtjD26IPjpoz
NK6c/a2NVDSvUWbPwTvAcoqJvFWGNRHTqZjUnERT6wGFoPcrKFFbZpp5BNQCjjZP
SrAvj/MR4ak1yrpWF384MEr/Fe6i2+3SeNpCmzBhwjelD4BqPe/4YHiRRIfTkmCK
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20731171928722296666472659824303480126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpt.cs.tomtom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29736684965944698241445053525976996921076888484424996546888637971678719165553660610478665072482304380778045081752632508528267134344121407265714513708277095400167072102617333447186064876041606669907238807377161937592526902924850762828677094396338970522720578800243379446852513024189564609625402673252385259239606001187428112572962808654902383141169821532271765545016154516280790012163198296320347768252473532742827266718413916072569560058355908371322392573366828499642827572476653979256487145618974332686864917510917210951692763009577554254073546961822324455483955699791120864734284666310611039311595799834121472084651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							496672b106db68144bd858a0b2d28d8fbc0deb34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpt.cs.tomtom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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