demsofstate-main.edge.bluestate.digital
Issued by Amazon
About this certificate
This digital certificate with serial number 09:49:39:e4:2a:f8:04:52:28:93:c6:b1:4b:95:67:82 was issued on by Amazon.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=demsofstate-main.edge.bluestate.digital
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:49:39:e4:2a:f8:04:52:28:93:c6:b1:4b:95:67:82Serial Number (int): 12343263807403951091283891588305348482
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dc:75:45:a2:d1:15:92:63:94:50:98:16:46:7e:de:d4:1a:87:f2:ae
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 81:cc:59:22:bb:2d:af:04:a2:ad:88:68:fc:26:ac:bd:bc:63:60:28
Fingerprint (sha256): 04:6b:82:b3:34:7a:60:42:8c:e5:73:1a:8d:ca:08:e7:49:66:5a:e5:27:03:4a:94:dd:ce:42:71:6e:0c:53:46
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate demsofstate-main.edge.bluestate.digital
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for demsofstate-main.edge.bluestate.digital
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
demsofstate-main.edge.bluestate.digital
act.demsofstate.org
demsofstate.api.bsd.net
demsofstate.bluestatedigital.com
demsofstate.bsd.net
demsofstate.cp.bsd.net
main-demsofstate.api.bsd.net
main-demsofstate.bsd.net
main-demsofstate.cp.bsd.net
act.demsofstate.org
demsofstate.api.bsd.net
demsofstate.bluestatedigital.com
demsofstate.bsd.net
demsofstate.cp.bsd.net
main-demsofstate.api.bsd.net
main-demsofstate.bsd.net
main-demsofstate.cp.bsd.net
Other certificates including the domain name bluestate.digital
(limited to 100 certificates)
rockefeller-context.edge.bluestate.digital
biss-main.edge.bluestate.digital
dccc-stephaniemurphy.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
glsen-southernnevada.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
lkitchen-sandbox.edge.bluestate.digital
ymcala-santaclarita.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
winpac-main.edge.bluestate.digital
precisiondemo-main.edge.bluestate.digital
mrosata-oa.int.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
test4-test4.edge.bluestate.digital
warren-gusn.edge.bluestate.digital
freemarry-georgia.edge.bluestate.digital
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
seiumaster-fightfor15childcare.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
seodemo-main.edge.bluestate.digital
glsen-downeastmaine.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
*.esse-macros-demo-project-docker.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
glsen-austin.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
civicnation-bettermakeroom.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
stream-api-int.bluestate.digital
civicnation-allinchallenge.edge.bluestate.digital
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
fairness-floridadecides.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
nwica-sandbox.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
client-database-api-int.bluestate.digital
lonelywhale-main.edge.bluestate.digital
glsen-connecticut.edge.bluestate.digital
porter-main.edge.bluestate.digital
searchlondon-main.edge.bluestate.digital
glsen-columbus.edge.bluestate.digital
wagr-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
glsen-colliercounty.edge.bluestate.digital
freemarry-wyomingunites.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
hubproject-peoplegreater.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
test4-branch.edge.bluestate.digital
glsen-dallasglsen.edge.bluestate.digital
seiumaster-1199ne.edge.bluestate.digital
autoprov-api-int.bluestate.digital
papac-main.edge.bluestate.digital
nrdclive-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
framework-int.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
googlemiyagi-afen.edge.bluestate.digital
gwindham-main.edge.bluestate.digital
biss-main.edge.bluestate.digital
dccc-stephaniemurphy.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
glsen-southernnevada.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
lkitchen-sandbox.edge.bluestate.digital
ymcala-santaclarita.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
winpac-main.edge.bluestate.digital
precisiondemo-main.edge.bluestate.digital
mrosata-oa.int.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
test4-test4.edge.bluestate.digital
warren-gusn.edge.bluestate.digital
freemarry-georgia.edge.bluestate.digital
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
seiumaster-fightfor15childcare.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
seodemo-main.edge.bluestate.digital
glsen-downeastmaine.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
*.esse-macros-demo-project-docker.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
glsen-austin.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
civicnation-bettermakeroom.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
stream-api-int.bluestate.digital
civicnation-allinchallenge.edge.bluestate.digital
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
fairness-floridadecides.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
nwica-sandbox.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
client-database-api-int.bluestate.digital
lonelywhale-main.edge.bluestate.digital
glsen-connecticut.edge.bluestate.digital
porter-main.edge.bluestate.digital
searchlondon-main.edge.bluestate.digital
glsen-columbus.edge.bluestate.digital
wagr-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
glsen-colliercounty.edge.bluestate.digital
freemarry-wyomingunites.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
hubproject-peoplegreater.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
test4-branch.edge.bluestate.digital
glsen-dallasglsen.edge.bluestate.digital
seiumaster-1199ne.edge.bluestate.digital
autoprov-api-int.bluestate.digital
papac-main.edge.bluestate.digital
nrdclive-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
framework-int.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
googlemiyagi-afen.edge.bluestate.digital
gwindham-main.edge.bluestate.digital
Certificate
The complete raw certificate details for demsofstate-main.edge.bluestate.digital in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIQCUk55Cr4BFIok8axS5VngjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMjQwMDAwMDBaFw0yMDAyMjQx MjAwMDBaMDIxMDAuBgNVBAMTJ2RlbXNvZnN0YXRlLW1haW4uZWRnZS5ibHVlc3Rh dGUuZGlnaXRhbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKDtZ5Oe YTSgdqXKdn+1jQ/XetG/SvVlLiJOaXkDjvEYaMbmbkKI6VIRX7H30Q05iM01X/hh fk16UhTEV5zaapxad59hM555MYc1B+e9h+CVO3cxCeevITzCtI5cHA9KzjaadyFH ITUej3fVpLQRCCvgxMZvFg+zYyM7BinPw3bx6ynt7bIECYW8SsQdefNf7rBbXD/L tsNCwJnmZJLZib2yV9jpSchnTD34uW85mwoMierdUsVOo7T4jr5Dt4rnmTjl9fML yL9+j6SOfpYl4dkEBu5qcd2eVhvqWf9MvnlNJKVLZXYV8L4ZqzK6Z+dkb6l5MvgR J21LK2nDUMhG/7MCAwEAAaOCAnYwggJyMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyj lAcnlnRb+T3QMB0GA1UdDgQWBBTcdUWi0RWSY5RQmBZGft7UGofyrjCCAQYGA1Ud EQSB/jCB+4InZGVtc29mc3RhdGUtbWFpbi5lZGdlLmJsdWVzdGF0ZS5kaWdpdGFs ghNhY3QuZGVtc29mc3RhdGUub3JnghdkZW1zb2ZzdGF0ZS5hcGkuYnNkLm5ldIIg ZGVtc29mc3RhdGUuYmx1ZXN0YXRlZGlnaXRhbC5jb22CE2RlbXNvZnN0YXRlLmJz ZC5uZXSCFmRlbXNvZnN0YXRlLmNwLmJzZC5uZXSCHG1haW4tZGVtc29mc3RhdGUu YXBpLmJzZC5uZXSCGG1haW4tZGVtc29mc3RhdGUuYnNkLm5ldIIbbWFpbi1kZW1z b2ZzdGF0ZS5jcC5ic2QubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0 cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB /wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBACpc AYNt0DRdmLLMs3yFwkAHWdJmwnjTTOcGKDDVnM4+/sRkdQporQP2eMbA6vv/Mntb ryqbu2Tr9MK/egp9VpVx6aaTbmXg7iOk3hE6KwOO6ivEJgWD+OuQdLvXbNYVZLmk vINnHvtDcSClKkIflb5EqdG/7AMeX5vBz1p2jFtRab2GTgvFEI7orTu3RxFXlr8j sOfc9mR34HTYV8aXlUdKcyxbGinWvRg1L7ZT5IRHxwoDGn/9lATbLzGUJwTNxRXB B9BpmXQxJzZzGJLCCXQlt4Jve5BraR1cFEFkU49pzzalrJDgVHnhocgQpPJr8w5I ZhcfjEQuWsYehu+Z3ek= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO1nk55hNKB2pcp2f7WN D9d60b9K9WUuIk5peQOO8RhoxuZuQojpUhFfsffRDTmIzTVf+GF+TXpSFMRXnNpq nFp3n2EznnkxhzUH572H4JU7dzEJ568hPMK0jlwcD0rONpp3IUchNR6Pd9WktBEI K+DExm8WD7NjIzsGKc/DdvHrKe3tsgQJhbxKxB1581/usFtcP8u2w0LAmeZkktmJ vbJX2OlJyGdMPfi5bzmbCgyJ6t1SxU6jtPiOvkO3iueZOOX18wvIv36PpI5+liXh 2QQG7mpx3Z5WG+pZ/0y+eU0kpUtldhXwvhmrMrpn52RvqXky+BEnbUsracNQyEb/ swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12343263807403951091283891588305348482 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demsofstate-main.edge.bluestate.digital' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20315197364176798454488483840094202056314493874858784915995037894811702652995629116384019815110952890937087227333846507914661099532117636992597973228524292046897496381481990241548196398073035227466747671415031265975614932545774402091463049575761139757109514088095634086919612761554920397394203885485835083599713907870748258229057625882394072554889454518479297339464239706336378323647133611504923273242248931307599324300994090094517184807984843786731521614824557363815277125045219691367186726156020198391123219482435684475502939771248694285899538372445851992583990007667952435548314813920789631617577097949821851336627 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dc7545a2d115926394509816467eded41a87f2ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demsofstate-main.edge.bluestate.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.demsofstate.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demsofstate.api.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demsofstate.bluestatedigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demsofstate.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demsofstate.cp.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-demsofstate.api.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-demsofstate.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-demsofstate.cp.bsd.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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