systime.dk

Issued by Amazon

About this certificate

This digital certificate with serial number 01:0a:60:da:97:07:17:53:f1:03:ee:15:37:dd:25:6b was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=systime.dk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:0a:60:da:97:07:17:53:f1:03:ee:15:37:dd:25:6b
Serial Number (int): 1383115394172451945811664616644486507
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d4:bd:e3:27:32:8c:81:05:36:8c:c4:8a:5b:73:62:40:0f:d5:b0:02
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a3:27:ea:37:64:cb:aa:44:f6:d5:20:04:41:de:85:01:9e:fa:87:af
Fingerprint (sha256): 03:bd:14:62:31:49:e8:65:fe:07:a0:d6:63:bc:91:5c:7a:af:b5:5d:24:1a:6d:e0:18:cf:b1:f4:b5:01:bf:dc

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate systime.dk

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for systime.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

systime.dk
*.demo.systime.dk
ibibliotek.dk
read.cargosecuring.org
*.ibog.samfundslitteratur.dk
*.edupub.dk
*.ibog.forlagetcolumbus.dk
systimes.dk
*.external.systime.dk
*.bok.xn--lastskringsboken-znb.se
*.ibog.dk
*.ibog.dansklf.dk
*.devel.systime.dk
*.systime.dk
*.ibog.turteori.dk
*.hr.edupub.dk
bok.xn--lastskringsboken-znb.se
*.digi.munksgaard.dk
*.ibog.gyldendal.dk
*.ibog.nucleus.dk
*.mg.edupub.dk
*.sbok.nam.fo
*.vefbok.idnu.is
*.udgii.dk
*.nam.systime.dk
*.digi.hansreitzel.dk
ibog.dk
*.ibog.studybox.dk

Other certificates including the domain name systime.dk

(limited to 100 certificates)
standards-tools-status.ieee.org
systime.dk
systime.dk
systime.dk
itstatus.honegger.ch
shop.systime.dk
filo.dk
*.systime.dk
systime.dk
systime.dk
itstatus.honegger.ch
status.bigpicture.one
systime.dk
itstatus.honegger.ch
status.cayuse.com
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
shop.systime.dk
assets.systime.dk
systime.dk
shop.systime.dk
*.systime.dk
assets.systime.dk
rds.systime.dk
assets.systime.dk
itstatus.honegger.ch
*.services.systime.dk
*.api.systime.dk
systime.dk
*.systime.dk
itstatus.honegger.ch
status.cayuse.com
buildkitestatus.com
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
filo.dk
systime.dk
itstatus.honegger.ch
assets.systime.dk
itstatus.honegger.ch
*.systime.dk
systime.dk
*.systime.dk
systime.dk
*.systime.dk
systime.dk
ma.systime.dk
systime.dk
systime.dk
status.blakeschool.org
*.systime.dk
itstatus.honegger.ch
*.systime.dk
systime.dk
systime.dk
itstatus.honegger.ch
status.blakeschool.org
filo.dk
*.systime.dk
filo.dk
buildkitestatus.com
filo.dk
itstatus.honegger.ch
systime.dk
systime.dk
*.services.systime.dk
*.systime.dk
systime.dk
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
systime.dk
itstatus.honegger.ch
rds.systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.systime.dk
assets.systime.dk
*.systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
status.blakeschool.org
*.systime.dk
systime.dk
*.systime.dk
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
systime.dk
*.systime.dk
*.systime.dk
systime.dk
systime.dk
*.systime.dk

Certificate

The complete raw certificate details for systime.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHcjCCBlqgAwIBAgIQAQpg2pcHF1PxA+4VN90lazANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMzAwMDAwMDBaFw0yMTA0MzAx
MjAwMDBaMBUxEzARBgNVBAMTCnN5c3RpbWUuZGswggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqDx7BRuJhgHR1/lZXjxtGq5gzs9rLamwn8co/BYFN4XTt
0/sPk4Jpei0IkXZRoHwjQ0cV8UQi+yacZZnTlroU1ZCUAjykmHE7oE7uqn15BIFH
3uBvOKuZnvaXIjvuAY77h18naFZW+vU9+nrbtshCZrXYdrzkc2gHPb5odnnTXU9q
Ef2+8a8JZrnDt5ixKJOjjJVOKjcpXpoH7FSQiphPFya7Ec8alZCGeddGSKi/mQaq
8+ohqaLSWfJh0mD4IuwRcCaBr0OdQL5D4E3yMBN+uRVUrLwDK0nb2NyYByuzkdf0
oytjcX0JW2ZV3lKO8xm9TsBzOy+LAekLvmaJjNAzAgMBAAGjggSLMIIEhzAfBgNV
HSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU1L3jJzKMgQU2
jMSKW3NiQA/VsAIwggInBgNVHREEggIeMIICGoIKc3lzdGltZS5ka4IRKi5kZW1v
LnN5c3RpbWUuZGuCDWliaWJsaW90ZWsuZGuCFnJlYWQuY2FyZ29zZWN1cmluZy5v
cmeCHCouaWJvZy5zYW1mdW5kc2xpdHRlcmF0dXIuZGuCCyouZWR1cHViLmRrghoq
Lmlib2cuZm9ybGFnZXRjb2x1bWJ1cy5ka4ILc3lzdGltZXMuZGuCFSouZXh0ZXJu
YWwuc3lzdGltZS5ka4IhKi5ib2sueG4tLWxhc3Rza3JpbmdzYm9rZW4tem5iLnNl
ggkqLmlib2cuZGuCESouaWJvZy5kYW5za2xmLmRrghIqLmRldmVsLnN5c3RpbWUu
ZGuCDCouc3lzdGltZS5ka4ISKi5pYm9nLnR1cnRlb3JpLmRrgg4qLmhyLmVkdXB1
Yi5ka4IfYm9rLnhuLS1sYXN0c2tyaW5nc2Jva2VuLXpuYi5zZYIUKi5kaWdpLm11
bmtzZ2FhcmQuZGuCEyouaWJvZy5neWxkZW5kYWwuZGuCESouaWJvZy5udWNsZXVz
LmRrgg4qLm1nLmVkdXB1Yi5ka4INKi5zYm9rLm5hbS5mb4IQKi52ZWZib2suaWRu
dS5pc4IKKi51ZGdpaS5ka4IQKi5uYW0uc3lzdGltZS5ka4IVKi5kaWdpLmhhbnNy
ZWl0emVsLmRrggdpYm9nLmRrghIqLmlib2cuc3R1ZHlib3guZGswDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy
MDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j
cmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEB
BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3Qu
Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNv
bS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABcStgRj0AAAQD
AEgwRgIhAKSkpkbzC46qUK5Ci9m+pVtE8G2P7ZMaUj1jDlYWshLMAiEA3GbBiHTS
yj7Z/V1IuUySjXU0rEgTkZCiXBj6J2ktrJsAdgDuwJXujXJkD5Ljw7kbxxKjaWoJ
e0tqGhQ45keyy+3F+QAAAXErYEamAAAEAwBHMEUCIQD6cYDMnjg37EpKoBqvRyj1
31qSusUiNNmk2XxBc8WdywIgbIViTtCjY6nTPeA8tEcTu1axDGJYPdJ8yBUr5sdL
kycwDQYJKoZIhvcNAQELBQADggEBALBD1jt0b/R7SKUu3SbZShsoKHIbl9FsDe3e
evdQmxJ4dsKWJL1KRO8s2HmyHnLko+VQX2nM20wXIr0hrG7Rv82dI/mMpwFQO8ao
odCy0ME0AdLN5lDfqQG8b8AWFAmB0KIaIEmwbxlGjtIJK4lcRjGLxNJHvL84oC28
ZZbICi2D/aVnwjQfy421frOa1q7/21nmhnhLhbraVBXmMp7eljWyvZUSXTd8QNnt
uvEIejVh11UWHTJ47LZzMTt15j7MtCFt/jPmyqHpoQRvMf2uqmGj5t4dPgfx5Dz6
gccebgm/raFEhLJJfRRGcr4HJ37BStFsoh53BN84kYUrrajqUIY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g8ewUbiYYB0df5WV48b
RquYM7Pay2psJ/HKPwWBTeF07dP7D5OCaXotCJF2UaB8I0NHFfFEIvsmnGWZ05a6
FNWQlAI8pJhxO6BO7qp9eQSBR97gbzirmZ72lyI77gGO+4dfJ2hWVvr1Pfp627bI
Qma12Ha85HNoBz2+aHZ5011PahH9vvGvCWa5w7eYsSiTo4yVTio3KV6aB+xUkIqY
TxcmuxHPGpWQhnnXRkiov5kGqvPqIami0lnyYdJg+CLsEXAmga9DnUC+Q+BN8jAT
frkVVKy8AytJ29jcmAcrs5HX9KMrY3F9CVtmVd5SjvMZvU7AczsviwHpC75miYzQ
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1383115394172451945811664616644486507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'systime.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29547219379339916473351369014200046645824153146675819156790598196328362742706291936866071526956295495465538647082807442070533090898062596370030215973596386605964367880186974511645646575788948592998817191795123698725449328807757569111616974600309722948192567972351230086803592355654437088686634605564504890308331626924548782914827170162356872529043367409827960121942846781638760339166264261692149258435608014351045036677284994609906444773596255480117176182680456605499991867064783792040046678668091200982943070308979931214174811435876305252970447190428723881707816058654392252249911556765104750237379715683291614728243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4bde327328c8105368cc48a5b7362400fd5b002
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (542 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibibliotek.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.cargosecuring.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.samfundslitteratur.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edupub.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.forlagetcolumbus.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systimes.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bok.xn--lastskringsboken-znb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.dansklf.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devel.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.turteori.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hr.edupub.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bok.xn--lastskringsboken-znb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digi.munksgaard.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.gyldendal.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.nucleus.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mg.edupub.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbok.nam.fo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vefbok.idnu.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udgii.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nam.systime.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digi.hansreitzel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibog.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibog.studybox.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001712b60463d0000040300483046022100a4a4a646f30b8eaa50ae428bd9bea55b44f06d8fed931a523d630e5616b212cc022100dc66c18874d2ca3ed9fd5d48b94c928d7534ac48139190a25c18fa27692dac9b007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f9000001712b6046a60000040300473045022100fa7180cc9e3837ec4a4aa01aaf4728f5df5a92bac52234d9a4d97c4173c59dcb02206c85624ed0a363a9d33de03cb44713bb56b10c62583dd27cc8152be6c74b9327
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b043d63b746ff47b48a52edd26d94a1b2828721b97d16c0dedde7af7509b127876c29624bd4a44ef2cd879b21e72e4a3e5505f69ccdb4c1722bd21ac6ed1bfcd9d23f98ca701503bc6a8a1d0b2d0c13401d2cde650dfa901bc6fc016140981d0a21a2049b06f19468ed2092b895c46318bc4d247bcbf38a02dbc6596c80a2d83fda567c2341fcb8db57eb39ad6aeffdb59e686784b85bada5415e6329ede9635b2bd95125d377c40d9edbaf1087a3561d755161d3278ecb673313b75e63eccb4216dfe33e6caa1e9a1046f31fdaeaa61a3e6de1d3e07f1e43cfa81c71e6e09bfada14484b2497d144672be07277ec14ad16ca21e7704df3891852bada8ea5086