frankel-main.edge.bluestate.digital
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:09:1c:2d:f8:b6:89:49:72:b9:cc:3d:a9:51:9d:74 was issued on by Amazon.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=frankel-main.edge.bluestate.digital
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:09:1c:2d:f8:b6:89:49:72:b9:cc:3d:a9:51:9d:74Serial Number (int): 19985722158209722184831715835636718964
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8a:07:22:a4:03:4f:7c:3d:70:df:82:82:a7:17:e4:d6:b2:6b:4f:0c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 33:a3:05:d8:87:93:5a:9e:73:ee:e0:03:0b:9e:24:16:41:54:2c:3f
Fingerprint (sha256): 04:50:ab:d7:d4:d1:21:ee:f8:4a:1c:ab:fa:4e:6a:cc:27:22:b0:30:27:7b:62:a8:3a:eb:b6:43:5a:c9:74:16
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate frankel-main.edge.bluestate.digital
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for frankel-main.edge.bluestate.digital
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
frankel-main.edge.bluestate.digital
main-frankel.cp.bsd.net
act.loisfrankelforcongress.com
frankel.bsd.net
frankel.bluestatedigital.com
donate.loisfrankelforcongress.com
digital.loisfrankelforcongress.com
main-frankel.bsd.net
frankel.api.bsd.net
frankel.cp.bsd.net
main-frankel.api.bsd.net
main-frankel.cp.bsd.net
act.loisfrankelforcongress.com
frankel.bsd.net
frankel.bluestatedigital.com
donate.loisfrankelforcongress.com
digital.loisfrankelforcongress.com
main-frankel.bsd.net
frankel.api.bsd.net
frankel.cp.bsd.net
main-frankel.api.bsd.net
Other certificates including the domain name bluestate.digital
(limited to 100 certificates)
rockefeller-context.edge.bluestate.digital
biss-main.edge.bluestate.digital
dccc-stephaniemurphy.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
glsen-southernnevada.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
lkitchen-sandbox.edge.bluestate.digital
ymcala-santaclarita.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
winpac-main.edge.bluestate.digital
precisiondemo-main.edge.bluestate.digital
mrosata-oa.int.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
test4-test4.edge.bluestate.digital
warren-gusn.edge.bluestate.digital
freemarry-georgia.edge.bluestate.digital
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
seiumaster-fightfor15childcare.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
seodemo-main.edge.bluestate.digital
glsen-downeastmaine.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
*.esse-macros-demo-project-docker.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
glsen-austin.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
civicnation-bettermakeroom.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
stream-api-int.bluestate.digital
civicnation-allinchallenge.edge.bluestate.digital
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
fairness-floridadecides.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
nwica-sandbox.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
client-database-api-int.bluestate.digital
lonelywhale-main.edge.bluestate.digital
glsen-connecticut.edge.bluestate.digital
porter-main.edge.bluestate.digital
searchlondon-main.edge.bluestate.digital
glsen-columbus.edge.bluestate.digital
wagr-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
glsen-colliercounty.edge.bluestate.digital
freemarry-wyomingunites.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
hubproject-peoplegreater.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
test4-branch.edge.bluestate.digital
glsen-dallasglsen.edge.bluestate.digital
seiumaster-1199ne.edge.bluestate.digital
autoprov-api-int.bluestate.digital
papac-main.edge.bluestate.digital
nrdclive-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
framework-int.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
googlemiyagi-afen.edge.bluestate.digital
gwindham-main.edge.bluestate.digital
biss-main.edge.bluestate.digital
dccc-stephaniemurphy.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
glsen-southernnevada.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
lkitchen-sandbox.edge.bluestate.digital
ymcala-santaclarita.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
winpac-main.edge.bluestate.digital
precisiondemo-main.edge.bluestate.digital
mrosata-oa.int.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
test4-test4.edge.bluestate.digital
warren-gusn.edge.bluestate.digital
freemarry-georgia.edge.bluestate.digital
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
seiumaster-fightfor15childcare.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
seodemo-main.edge.bluestate.digital
glsen-downeastmaine.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
*.esse-macros-demo-project-docker.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
glsen-austin.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
civicnation-bettermakeroom.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
stream-api-int.bluestate.digital
civicnation-allinchallenge.edge.bluestate.digital
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
fairness-floridadecides.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
nwica-sandbox.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
client-database-api-int.bluestate.digital
lonelywhale-main.edge.bluestate.digital
glsen-connecticut.edge.bluestate.digital
porter-main.edge.bluestate.digital
searchlondon-main.edge.bluestate.digital
glsen-columbus.edge.bluestate.digital
wagr-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
glsen-colliercounty.edge.bluestate.digital
freemarry-wyomingunites.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
hubproject-peoplegreater.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
test4-branch.edge.bluestate.digital
glsen-dallasglsen.edge.bluestate.digital
seiumaster-1199ne.edge.bluestate.digital
autoprov-api-int.bluestate.digital
papac-main.edge.bluestate.digital
nrdclive-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
framework-int.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
googlemiyagi-afen.edge.bluestate.digital
gwindham-main.edge.bluestate.digital
Certificate
The complete raw certificate details for frankel-main.edge.bluestate.digital in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIQDwkcLfi2iUlyucw9qVGddDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA2MDQwMDAwMDBaFw0yMDA3MDQx MjAwMDBaMC4xLDAqBgNVBAMTI2ZyYW5rZWwtbWFpbi5lZGdlLmJsdWVzdGF0ZS5k aWdpdGFsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLz0on31JMhG sdjmAfZ7gnJhictfocoQuvJOZWb6hy1UCpBDIbKmx12dS0pahNVHrPyqo3QRXAwR YyCQ2vvsWpVGb7vUf0Wpz1PkJpZ0NvmkyKSSQ4zpuI8CrMVCEwtDgg6+R7xrTjBa bdf8gdMB8XQ3oy1CGjVEH8m2XDg12eoXfEILmiVGXJ6lxKJx497aVwzLHWQJouOd VkKgtO90bRtkV3D1ErdbEUhVlcGWQl/6ix8OpEUGNOGIpROWV8wx5HQX2UOoe1FS 5o7rh9tuBHHzuBU7Tt53Ea5Ac4xKJaT8TRb+h0+i3pD+z5NWv3/Xa0PmjGJs53gS ettxgxLdZwIDAQABo4ICqjCCAqYwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeW dFv5PdAwHQYDVR0OBBYEFIoHIqQDT3w9cN+CgqcX5Naya08MMIIBOgYDVR0RBIIB MTCCAS2CI2ZyYW5rZWwtbWFpbi5lZGdlLmJsdWVzdGF0ZS5kaWdpdGFsghdtYWlu LWZyYW5rZWwuY3AuYnNkLm5ldIIeYWN0LmxvaXNmcmFua2VsZm9yY29uZ3Jlc3Mu Y29tgg9mcmFua2VsLmJzZC5uZXSCHGZyYW5rZWwuYmx1ZXN0YXRlZGlnaXRhbC5j b22CIWRvbmF0ZS5sb2lzZnJhbmtlbGZvcmNvbmdyZXNzLmNvbYIiZGlnaXRhbC5s b2lzZnJhbmtlbGZvcmNvbmdyZXNzLmNvbYIUbWFpbi1mcmFua2VsLmJzZC5uZXSC E2ZyYW5rZWwuYXBpLmJzZC5uZXSCEmZyYW5rZWwuY3AuYnNkLm5ldIIYbWFpbi1m cmFua2VsLmFwaS5ic2QubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0 cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB /wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKKL VimCS1Ddx7Q+Pn9CMO+URKwAX76KnbM0eCxdOCsiSnso5/NcnzVf54WVh0CU+bb9 5hKio7GCkfNOgOp5cbHKlAIsCMs0l5dV8Cx2QOObJJ26l55KUoaWBw1G2O14250j AKirziILFCDig7rwxKSUZA5LmhMmE8hBSVKyzY0QxO8K5iUU/du27+36xGhA/FAh 2GO/vSILhnYmtKhff4TnCa/K6ekbHKSSyWhpCQ4OA1iPq7khnyflvApn/tkASmTj lvDEcW/W+GzL0VF2JQRgpN+ml5pzTx8OqMCITCTeTIZsvOnDpYEGEjmqwgG37vNT ttmtN7PFBCou2OLY20s= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLz0on31JMhGsdjmAfZ7 gnJhictfocoQuvJOZWb6hy1UCpBDIbKmx12dS0pahNVHrPyqo3QRXAwRYyCQ2vvs WpVGb7vUf0Wpz1PkJpZ0NvmkyKSSQ4zpuI8CrMVCEwtDgg6+R7xrTjBabdf8gdMB 8XQ3oy1CGjVEH8m2XDg12eoXfEILmiVGXJ6lxKJx497aVwzLHWQJouOdVkKgtO90 bRtkV3D1ErdbEUhVlcGWQl/6ix8OpEUGNOGIpROWV8wx5HQX2UOoe1FS5o7rh9tu BHHzuBU7Tt53Ea5Ac4xKJaT8TRb+h0+i3pD+z5NWv3/Xa0PmjGJs53gSettxgxLd ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19985722158209722184831715835636718964 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frankel-main.edge.bluestate.digital' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22816072375208004460280512817665892495070647348292581115209888784279658817156857087147382912488208062171164953059770287101477860352976070101802717681724178566546655616456578166946900062480190066779947972256540894244651319748785377236164829716016246500904087561083321212914833101947827731231039413153287378415959507526121261318845490926940531539265441220507854304593743057242516184953374558218602323020575447909539280310391199686751452088438032318466760410914828537629426864196326973906864393986026018911146383272078683697087844700074310185765350299026415963977686853399999844873460253891872024783549669527589143895399 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a0722a4034f7c3d70df8282a717e4d6b26b4f0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (305 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankel-main.edge.bluestate.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-frankel.cp.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.loisfrankelforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankel.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankel.bluestatedigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.loisfrankelforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.loisfrankelforcongress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-frankel.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankel.api.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankel.cp.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-frankel.api.bsd.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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