k8s.plaid.io
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:06:3e:c2:85:7f:26:e4:63:73:64:7d:d2:64:20:1d was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=k8s.plaid.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:06:3e:c2:85:7f:26:e4:63:73:64:7d:d2:64:20:1dSerial Number (int): 17312390647329293032648584460245409821
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e8:9d:b6:83:9a:5b:8a:1a:0d:e7:91:8e:d5:c9:64:5a:4c:f3:eb:4c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): d3:b3:cf:ea:aa:9e:7e:40:a3:77:cb:6e:7d:15:6a:9c:cf:bc:0c:63
Fingerprint (sha256): 03:c1:8a:90:ab:3d:a4:4c:39:01:86:04:89:66:2a:a3:24:34:5a:6c:bc:77:28:1a:43:be:3d:35:c9:02:fc:c0
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate k8s.plaid.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for k8s.plaid.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
k8s.plaid.io
*.k8s.plaid.io
*.k8s.plaid.io
Other certificates including the domain name plaid.io
(limited to 100 certificates)
*.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
k8s.plaid.io
*.tartan.ue1.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.k8s-batch-2.prod.ue1.plaid.io
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.sandbox.ue1.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
plaid.io
*.plaid.com
uw2.vpn.plaid.io
*.prod.ue1.plaid.com
*.plaid.com
k8s.plaid.io
*.prod.ue1.plaid.com
*.prod.ue1.plaid.com
*.util.ue1.plaid.com
*.prod.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
k8s-security.prod.ue1.plaid.io
*.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
dev.uw2.k8s.plaid.io
k8s-ilya-fixed.testing.ue1.plaid.io
*.testing.ue1.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
bar.util.ue1.plaid.io
*.tartan.ue1.plaid.com
*.testing.ue1.plaid.com
*.testing.ue1.plaid.com
oidc-k8s.tartan.ue1.plaid.io
dsi.ue1.k8s.plaid.io
*.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
security.ue1.k8s.plaid.io
k8s-fit.prod.ue1.plaid.io
*.plaid.com
*.prod.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
cluster7.util.ue1.plaid.io
k8s.sandbox.ue1.plaid.io
*.testing.ue1.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
ilya.util.ue1.plaid.io.util.ue1.plaid.io
*.plaid.com
*.plaid.com
*.util.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
k8s-cxp.prod.ue1.plaid.io
*.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
*.k8s-batch-2.prod.ue1.plaid.io
*.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
*.tartan.ue1.plaid.io
oidc-test-k8s.prod.ue1.plaid.io
*.k8s-3.testing.ue1.plaid.io
dev.uw2.k8s.plaid.io
*.prod.ue1.plaid.com
grafana-testing.plaid.io
*.plaid.com
oidc-test-k8s.sandbox.ue1.plaid.io
*.prod.ue1.plaid.com
*.plaid.com
*.sandbox.ue1.plaid.com
*.tartan.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.tartan.ue1.plaid.com
*.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
k8s.plaid.io
*.tartan.ue1.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.k8s-batch-2.prod.ue1.plaid.io
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.plaid.com
*.sandbox.ue1.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
plaid.io
*.plaid.com
uw2.vpn.plaid.io
*.prod.ue1.plaid.com
*.plaid.com
k8s.plaid.io
*.prod.ue1.plaid.com
*.prod.ue1.plaid.com
*.util.ue1.plaid.com
*.prod.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
k8s-security.prod.ue1.plaid.io
*.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
dev.uw2.k8s.plaid.io
k8s-ilya-fixed.testing.ue1.plaid.io
*.testing.ue1.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
bar.util.ue1.plaid.io
*.tartan.ue1.plaid.com
*.testing.ue1.plaid.com
*.testing.ue1.plaid.com
oidc-k8s.tartan.ue1.plaid.io
dsi.ue1.k8s.plaid.io
*.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
security.ue1.k8s.plaid.io
k8s-fit.prod.ue1.plaid.io
*.plaid.com
*.prod.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
cluster7.util.ue1.plaid.io
k8s.sandbox.ue1.plaid.io
*.testing.ue1.plaid.com
*.plaid.com
*.prod.ue1.plaid.com
ilya.util.ue1.plaid.io.util.ue1.plaid.io
*.plaid.com
*.plaid.com
*.util.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.testing.ue1.plaid.com
k8s-cxp.prod.ue1.plaid.io
*.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
*.plaid.com
*.plaid.com
*.k8s-batch-2.prod.ue1.plaid.io
*.plaid.com
*.testing.ue1.plaid.com
*.prod.ue1.plaid.com
*.tartan.ue1.plaid.io
oidc-test-k8s.prod.ue1.plaid.io
*.k8s-3.testing.ue1.plaid.io
dev.uw2.k8s.plaid.io
*.prod.ue1.plaid.com
grafana-testing.plaid.io
*.plaid.com
oidc-test-k8s.sandbox.ue1.plaid.io
*.prod.ue1.plaid.com
*.plaid.com
*.sandbox.ue1.plaid.com
*.tartan.ue1.plaid.com
*.testing.ue1.plaid.com
*.plaid.com
*.tartan.ue1.plaid.com
*.plaid.com
Certificate
The complete raw certificate details for k8s.plaid.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfjCCA2agAwIBAgIQDQY+woV/JuRjc2R90mQgHTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMTkwMDAwMDBaFw0yMDA0MTkx MjAwMDBaMBcxFTATBgNVBAMTDGs4cy5wbGFpZC5pbzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKa1M6W+5OwJJKRY8m7cdxIZkthQwW1yoaJiVZb3YdRd ASHiXlmiJbsFl5GGphyVRVrfSinVR2CLLcCfiD1r8OToyvk2dV++qwTSnFD1gkCz SEwsaXged4OHWIKvYWiHt6/hD3wKXt3PTs6r/TnXKb4ytz38N+Yy+we0ok8jajFQ J6zNiajqCAFdEH7fJ87PAtP2WzTUKYEmyHtqWml3ABzSlFtnTAwNo8TPfm0Pc9f1 6/wALegk+EeZSLYzAz+lC1de2VeViMVrq9jCfDesHOlvp1/0grHy/f2YgcO07mZU QHuQHED6kQI0TiM5bnRl1dxXp2ZemmbIIUJVWsvCWxMCAwEAAaOCAZUwggGRMB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTonbaDmluK Gg3nkY7VyWRaTPPrTDAnBgNVHREEIDAeggxrOHMucGxhaWQuaW+CDiouazhzLnBs YWlkLmlvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeB DAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNj YTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2Ex Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADxYz3kW+mcM9/UhBH4j 1K7KHxsmD/ydFkhr/VSqpnD4pnrAzZDlkqGcEv3pN2u0CUF4itQpZUkOOTueshrH 9vKK+JJVHx8EBccnkXLV8cOt31yK/2typwM1tWu7ZgNR8JANVFvg5XSVgTyH6Kqd Xc2dkH6Jo6bJ6KpzF/ULrPo5G4MVargZWlDqReIXcsEoXhKaTf8L6QIwDfiq7pLy JKGJFK5dZ6D2m7E56x5NraJxOfFlf7b6ECSLjZprvxWPFcgaWh+idNN1tG72xl23 3nfA2i4LpiQywmS2ddjn3TB1cqgrdqgjv0n4UXTI3xnk9EcWrnjMoa/FsMihyi+G nlI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprUzpb7k7AkkpFjybtx3 EhmS2FDBbXKhomJVlvdh1F0BIeJeWaIluwWXkYamHJVFWt9KKdVHYIstwJ+IPWvw 5OjK+TZ1X76rBNKcUPWCQLNITCxpeB53g4dYgq9haIe3r+EPfApe3c9Ozqv9Odcp vjK3Pfw35jL7B7SiTyNqMVAnrM2JqOoIAV0Qft8nzs8C0/ZbNNQpgSbIe2paaXcA HNKUW2dMDA2jxM9+bQ9z1/Xr/AAt6CT4R5lItjMDP6ULV17ZV5WIxWur2MJ8N6wc 6W+nX/SCsfL9/ZiBw7TuZlRAe5AcQPqRAjROIzludGXV3FenZl6aZsghQlVay8Jb EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17312390647329293032648584460245409821 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-19 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k8s.plaid.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21044912536485815739830832263214484876320066723653327503943425902543419238675031732119137043932028058545765292419061573575518467828160971678111921794992517336371731570397215393731811673800138374245984130467251047097069991822923427570088976487897095827253986441817563891019739329004557694403136409685514029806687410540550490776093009285620925058305892222875951353069386779054516072938597337051930278032328309246600992654142406509235478109675579614241151792489409313052524627913901387289882913205772716011772824764878401804144738507999131162891016929979429173675169874571927889398724273363385557747121669422661303950099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e89db6839a5b8a1a0de7918ed5c9645a4cf3eb4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8s.plaid.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.plaid.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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