ramp.amazon.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:34:0d:97:f8:00:55:ad:c8:fe:c3:a6:ea:70:7d:f7 was issued on by Amazon.
With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ramp.amazon.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:34:0d:97:f8:00:55:ad:c8:fe:c3:a6:ea:70:7d:f7Serial Number (int): 13562555106023043933966718640002727415
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 23:b1:32:40:9c:67:98:26:62:70:e3:72:c3:1b:d1:4f:55:4b:7a:36
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): d9:a0:ab:15:d7:d4:9f:d4:49:13:f8:35:9c:b3:d1:42:be:ce:0c:41
Fingerprint (sha256): 04:59:77:42:95:6b:14:98:05:03:a0:7c:56:4d:b5:da:c7:90:02:fe:f9:59:c8:03:a7:e6:92:34:41:1c:22:9b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate ramp.amazon.com
38
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ramp.amazon.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
account-capa.amazon.com
account.kep.amazon.ca
account.kep.amazon.cn
account.kep.amazon.co.jp
account.kep.amazon.co.uk
account.kep.amazon.com
account.kep.amazon.com.au
account.kep.amazon.com.br
account.kep.amazon.com.mx
account.kep.amazon.de
account.kep.amazon.es
account.kep.amazon.fr
account.kep.amazon.in
account.kep.amazon.it
account.kep.amazon.nl
account.translation.amazon.com
ramp.amazon.com
account-gearbeta.amazon.com
account-merch.amazon.com
account-vdp.amazon.com
account-vdp.amazon.co.jp
account-swa.amazon.com
account.swa.amazon.com
account.videodirect.amazon.com
account.videodirect.amazon.co.jp
account.kdp.amazon.com
account.kdp.amazon.co.jp
account.videocentral.amazon.com
account.videocentral.amazon.co.jp
account-acr.amazon.com
account-manufacturing.amazon.com
vcaccount.videocentral.amazon.com
vcaccount.videocentral.amazon.co.jp
account-aps.amazon.com
account-cmxsubmit.amazon.com
account-kdp-edu.amazon.com
account-kindlepublishing.amazon.com
account-musiccentral.amazon.com
account.kep.amazon.ca
account.kep.amazon.cn
account.kep.amazon.co.jp
account.kep.amazon.co.uk
account.kep.amazon.com
account.kep.amazon.com.au
account.kep.amazon.com.br
account.kep.amazon.com.mx
account.kep.amazon.de
account.kep.amazon.es
account.kep.amazon.fr
account.kep.amazon.in
account.kep.amazon.it
account.kep.amazon.nl
account.translation.amazon.com
ramp.amazon.com
account-gearbeta.amazon.com
account-merch.amazon.com
account-vdp.amazon.com
account-vdp.amazon.co.jp
account-swa.amazon.com
account.swa.amazon.com
account.videodirect.amazon.com
account.videodirect.amazon.co.jp
account.kdp.amazon.com
account.kdp.amazon.co.jp
account.videocentral.amazon.com
account.videocentral.amazon.co.jp
account-acr.amazon.com
account-manufacturing.amazon.com
vcaccount.videocentral.amazon.com
vcaccount.videocentral.amazon.co.jp
account-aps.amazon.com
account-cmxsubmit.amazon.com
account-kdp-edu.amazon.com
account-kindlepublishing.amazon.com
account-musiccentral.amazon.com
Other certificates including the domain name amazon.com
(limited to 100 certificates)
fresh.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com
monitor-api-public.eu-central-1.amazonaws.com
aftx-eu.amazon.com
aea-console-canary.aea.amazon.com
photos.amazon.com
dcp.amazon.co.jp
skills-store-eu.amazon.com
securephotostorageservice-eu-external.amazon.com
account-jobs-fe.amazon.com
atig-appserver-gamma.us-east-1.amazon.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com
monitor-api-public.eu-central-1.amazonaws.com
aftx-eu.amazon.com
aea-console-canary.aea.amazon.com
photos.amazon.com
dcp.amazon.co.jp
skills-store-eu.amazon.com
securephotostorageservice-eu-external.amazon.com
account-jobs-fe.amazon.com
atig-appserver-gamma.us-east-1.amazon.com
aea-console-canary.aea.amazon.com
Certificate
The complete raw certificate details for ramp.amazon.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIZjCCB06gAwIBAgIQCjQNl/gAVa3I/sOm6nB99zANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTAxMjkwMDAwMDBaFw0yMjAxMjQy MzU5NTlaMBoxGDAWBgNVBAMTD3JhbXAuYW1hem9uLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMU0jpuQFqnNQ6ORFBDr5pcQE+TkDmSmsKpbj997 T6ddGNuAwHdd2M9V0ugs/Mm8cApA8Kp3lfaBOVR5Dh7iTr7cn00N0UkwqP5F5dTo mgnzk1Zfe+VPo11V2mpig1GtH2yxv/stdx/lUFFJ9bfnTX+F+fGMo2FCSaeQ++y9 5DxLnoHRT39pEItbtIxWR6/rL2DRZ00jlu4x9nq+C6D/bPvnlS+hEiRK9Ag/r0py iQaFT79QyDMYj5IY7tTTg4MVQ63QvBMAaMp1VpRQfVbGjng9+f+wnDw+K9pE1NGQ X+9Ru+fv+KIQz2zK1t/vqs+9/OUh5hPR2XAPwcJs9Lo6LTkCAwEAAaOCBXowggV2 MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQjsTJA nGeYJmJw43LDG9FPVUt6NjCCBBcGA1UdEQSCBA4wggQKghdhY2NvdW50LWNhcGEu YW1hem9uLmNvbYIVYWNjb3VudC5rZXAuYW1hem9uLmNhghVhY2NvdW50LmtlcC5h bWF6b24uY26CGGFjY291bnQua2VwLmFtYXpvbi5jby5qcIIYYWNjb3VudC5rZXAu YW1hem9uLmNvLnVrghZhY2NvdW50LmtlcC5hbWF6b24uY29tghlhY2NvdW50Lmtl cC5hbWF6b24uY29tLmF1ghlhY2NvdW50LmtlcC5hbWF6b24uY29tLmJyghlhY2Nv dW50LmtlcC5hbWF6b24uY29tLm14ghVhY2NvdW50LmtlcC5hbWF6b24uZGWCFWFj Y291bnQua2VwLmFtYXpvbi5lc4IVYWNjb3VudC5rZXAuYW1hem9uLmZyghVhY2Nv dW50LmtlcC5hbWF6b24uaW6CFWFjY291bnQua2VwLmFtYXpvbi5pdIIVYWNjb3Vu dC5rZXAuYW1hem9uLm5sgh5hY2NvdW50LnRyYW5zbGF0aW9uLmFtYXpvbi5jb22C D3JhbXAuYW1hem9uLmNvbYIbYWNjb3VudC1nZWFyYmV0YS5hbWF6b24uY29tghhh Y2NvdW50LW1lcmNoLmFtYXpvbi5jb22CFmFjY291bnQtdmRwLmFtYXpvbi5jb22C GGFjY291bnQtdmRwLmFtYXpvbi5jby5qcIIWYWNjb3VudC1zd2EuYW1hem9uLmNv bYIWYWNjb3VudC5zd2EuYW1hem9uLmNvbYIeYWNjb3VudC52aWRlb2RpcmVjdC5h bWF6b24uY29tgiBhY2NvdW50LnZpZGVvZGlyZWN0LmFtYXpvbi5jby5qcIIWYWNj b3VudC5rZHAuYW1hem9uLmNvbYIYYWNjb3VudC5rZHAuYW1hem9uLmNvLmpwgh9h Y2NvdW50LnZpZGVvY2VudHJhbC5hbWF6b24uY29tgiFhY2NvdW50LnZpZGVvY2Vu dHJhbC5hbWF6b24uY28uanCCFmFjY291bnQtYWNyLmFtYXpvbi5jb22CIGFjY291 bnQtbWFudWZhY3R1cmluZy5hbWF6b24uY29tgiF2Y2FjY291bnQudmlkZW9jZW50 cmFsLmFtYXpvbi5jb22CI3ZjYWNjb3VudC52aWRlb2NlbnRyYWwuYW1hem9uLmNv LmpwghZhY2NvdW50LWFwcy5hbWF6b24uY29tghxhY2NvdW50LWNteHN1Ym1pdC5h bWF6b24uY29tghphY2NvdW50LWtkcC1lZHUuYW1hem9uLmNvbYIjYWNjb3VudC1r aW5kbGVwdWJsaXNoaW5nLmFtYXpvbi5jb22CH2FjY291bnQtbXVzaWNjZW50cmFs LmFtYXpvbi5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrmuBEQxjPNHnhktOUYf7ssBGtG9AY Tp2Cswh0VN/k4s2TJxbIKcT5z1z9NM6Mo7ro3ln8u7paHPmnBSBoIweE/5FcMSSw J6/5WHp9UvccaW32Lq5rg/XwaKlYH2xoHRxj2T3XrjnZjCh6ouiaqtJchs7ZPxg1 097jAVEP9/ET4ZhMA0SrT7e8hzKW2Z6DOGqLjFFDfPeGqwf967DdYj4saAJExs0Z INEj1dLv+t/mmnBALK7UBovCKl0miTTzdbgkh8Lp85thWofyCmpkJ0xUKew+wKZt 5nc5+u1FPM4MNy0jRBwSxRB10bXBqZbxr3Jxa6Y4Um7NbmXII+19CQdj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTSOm5AWqc1Do5EUEOvm lxAT5OQOZKawqluP33tPp10Y24DAd13Yz1XS6Cz8ybxwCkDwqneV9oE5VHkOHuJO vtyfTQ3RSTCo/kXl1OiaCfOTVl975U+jXVXaamKDUa0fbLG/+y13H+VQUUn1t+dN f4X58YyjYUJJp5D77L3kPEuegdFPf2kQi1u0jFZHr+svYNFnTSOW7jH2er4LoP9s ++eVL6ESJEr0CD+vSnKJBoVPv1DIMxiPkhju1NODgxVDrdC8EwBoynVWlFB9VsaO eD35/7CcPD4r2kTU0ZBf71G75+/4ohDPbMrW3++qz7385SHmE9HZcA/Bwmz0ujot OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13562555106023043933966718640002727415 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ramp.amazon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24894862931125921604567573004981039604659042976578140399696118410940150771671597458403760735024045870300764571969577731189828888865225932849245496705555355850145783710939116587957106897945739833293070365879197759221103970026771606138948356876864703591428872543418185488712779814482784032395553103905504383501447107498380588165909834886265996335569549964017362616919722760390212729037102760865715298724329461142154694957489154613250485891505625903591665908845969688315517422274704663794952965757889335633152495719279351683326517938032969961423465038492600146492582865824340692049802327777524647613555392583975569075513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23b132409c6798266270e372c31bd14f554b7a36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1038 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-capa.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kep.amazon.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.translation.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramp.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-gearbeta.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-merch.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-vdp.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-vdp.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-swa.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.swa.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.videodirect.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.videodirect.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kdp.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.kdp.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.videocentral.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.videocentral.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-acr.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-manufacturing.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaccount.videocentral.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcaccount.videocentral.amazon.co.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-aps.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-cmxsubmit.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-kdp-edu.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-kindlepublishing.amazon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-musiccentral.amazon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006b9ae0444318cf3479e192d39461feecb011ad1bd0184e9d82b3087454dfe4e2cd932716c829c4f9cf5cfd34ce8ca3bae8de59fcbbba5a1cf9a7052068230784ff915c3124b027aff9587a7d52f71c696df62eae6b83f5f068a9581f6c681d1c63d93dd7ae39d98c287aa2e89aaad25c86ced93f1835d3dee301510ff7f113e1984c0344ab4fb7bc873296d99e83386a8b8c51437cf786ab07fdebb0dd623e2c680244c6cd1920d123d5d2effadfe69a70402caed4068bc22a5d268934f375b82487c2e9f39b615a87f20a6a64274c5429ec3ec0a66de67739faed453cce0c372d23441c12c51075d1b5c1a996f1af72716ba638526ecd6e65c823ed7d090763