about.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:4c:06:35:01:d6:d0:0d:5f:87:83:81:d6:fa:38:97 was issued on by Amazon.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=about.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:4c:06:35:01:d6:d0:0d:5f:87:83:81:d6:fa:38:97Serial Number (int): 11028564421647386683169811050280925335
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 06:83:6a:e1:82:26:32:95:3d:63:73:d6:fc:89:c0:d9:f7:21:5c:ed
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 30:6f:40:a6:d9:d3:49:d1:75:a9:25:e2:58:96:7d:42:a6:df:20:84
Fingerprint (sha256): 05:18:d7:62:63:6c:0b:3a:c0:00:fa:ff:f7:17:e9:93:ec:45:8c:91:13:b6:d8:f1:ff:21:c5:01:85:70:e8:2a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate about.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for about.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
about.com
*.about.com
dataeng.aws.about.com
*.dataeng.aws.about.com
dotdash.com
*.dotdash.com
dataeng.aws.dotdash.com
*.dataeng.aws.dotdash.com
*.about.com
dataeng.aws.about.com
*.dataeng.aws.about.com
dotdash.com
*.dotdash.com
dataeng.aws.dotdash.com
*.dataeng.aws.dotdash.com
Other certificates including the domain name about.com
(limited to 100 certificates)
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
index.investopedia.com
dotdash.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
wildcardsan.askmediagroup.com
ssl003.insnw.net
pe-adhoc-4.app.qa.aws.about.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
a-ue1.dotdash.com
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
*.index.about.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
dotdash.map.fastly.net
about.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.about.com
wildcardsan.askmediagroup.com
pe-adhoc-4.app.qa.aws.about.com
b2-alt.shared.global.fastly.net
persistent.app.qa.aws.about.com
wildcardsan.askmediagroup.com
index.investopedia.com
disposable.app.qa.aws.about.com
dns-vetting1-mims-pawel.map.fastly.net
continual.app.qa.aws.about.com
continual.app.qa.aws.about.com
a-ue1.dotdash.com
wildcardsan.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
a-uw2.dotdash.com
b2-alt.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
cdncert.askmediagroup.com
wildcardsan.askmediagroup.com
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
persistent.app.qa.aws.about.com
ssl003.insnw.net
*.index.about.com
*.about.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
*.about.com
b2-alt.shared.global.fastly.net
dotdash.map.fastly.net
cdncert.askmediagroup.com
cdncert.askmediagroup.com
*.about.ask.com
*.about.ask.com
cdncert.askmediagroup.com
index.investopedia.com
dns-vetting1-mims-pawel.map.fastly.net
link.about.com
*.about.com
a-ue1.dotdash.com
*.about.com
ssl003.insnw.net
cdncert.askmediagroup.com
pe-adhoc-3.app.qa.aws.about.com
about.com
b2-alt.shared.global.fastly.net
pe-adhoc-2.app.qa.aws.about.com
outlook.mindspark.com
cdncert.askmediagroup.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
*.about.com
dns-vetting1-mims-pawel.map.fastly.net
armssl.about.com
wildcardsan.askmediagroup.com
ssl003.insnw.net
b2-alt.shared.global.fastly.net
cdncert.askmediagroup.com
continual.app.qa.aws.about.com
cdncert.askmediagroup.com
cdncert.askmediagroup.com
index.investopedia.com
cdncert.askmediagroup.com
ssl003.insnw.net
a-uw2.dotdash.com
continual.app.prod.aws.about.com
g.ssl.fastly.net
wildcardsan.askmediagroup.com
cdncert.askmediagroup.com
Certificate
The complete raw certificate details for about.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIQCEwGNQHW0A1fh4OB1vo4lzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMTMwMDAwMDBaFw0yMTAyMTMx MjAwMDBaMBQxEjAQBgNVBAMTCWFib3V0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAN9ICMg5vIvJDaNPZLMadJ5hyeHCw1XX0vgwQpPjbJ56HGRs VX0YQv1v+zhdDJ3kMEkMtCEm8t5KCnkjguXDyI+vfoVCa+G6M/6mnL1/P17ttaxj mjU7dgiJPyrlEPplTzyZAgd728yDjBnIC/laJebinnCHs1kOfQo2+SdLzfgsLNep RnBiqn86Cm7cgtEXSOv/tD8dCJ6O0ELMpy5VxoJO/UjAYqvEc7DRq2ZdHUguJsKJ QYmyVnCEIFGs5WOzNzOLBD49NbkUdWCCC/lxLls+8pwz2Dm4cawJVItyzfZgQ+sR YFKNs0K3GuYColKkB4lDlXHF+afTbNQ1RyMWeuUCAwEAAaOCAhIwggIOMB8GA1Ud IwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQGg2rhgiYylT1j c9b8icDZ9yFc7TCBowYDVR0RBIGbMIGYgglhYm91dC5jb22CCyouYWJvdXQuY29t ghVkYXRhZW5nLmF3cy5hYm91dC5jb22CFyouZGF0YWVuZy5hd3MuYWJvdXQuY29t ggtkb3RkYXNoLmNvbYINKi5kb3RkYXNoLmNvbYIXZGF0YWVuZy5hd3MuZG90ZGFz aC5jb22CGSouZGF0YWVuZy5hd3MuZG90ZGFzaC5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYD VR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAt BggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYG CCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex Yi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAZ54HZza8205L2iaWM3wk2tb4/gK7374q3WW/9IE6EcqDa3lq qhT+FAhs5jDCG48Eajlj8UFKPj+0o6xEcVaRkkBy4uRaEkLKk4BIbHiG5VkLhEiU w2Jjx5GLVNHHUPlZs3vPoNubbs+JEBmOJwRwszzsFUNDBi+1R3YgrhW8UMKtD4cf r1cTnuzXhw0RQbPOojQsY76ymSKgm+krSlusqvuGcQIrbOEs+rbg0M81OavZ8WQs YovNWM11a8DofDYCNIQN9Y5KgXWirUsStHjjHKvqznfoha3QOpKpY7HQVGw6DQOi Zc81DuEXeh4cFcPVJOMdWFkxO9CD69G5lMBvlA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30gIyDm8i8kNo09ksxp0 nmHJ4cLDVdfS+DBCk+NsnnocZGxVfRhC/W/7OF0MneQwSQy0ISby3koKeSOC5cPI j69+hUJr4boz/qacvX8/Xu21rGOaNTt2CIk/KuUQ+mVPPJkCB3vbzIOMGcgL+Vol 5uKecIezWQ59Cjb5J0vN+Cws16lGcGKqfzoKbtyC0RdI6/+0Px0Ino7QQsynLlXG gk79SMBiq8RzsNGrZl0dSC4mwolBibJWcIQgUazlY7M3M4sEPj01uRR1YIIL+XEu Wz7ynDPYObhxrAlUi3LN9mBD6xFgUo2zQrca5gKiUqQHiUOVccX5p9Ns1DVHIxZ6 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11028564421647386683169811050280925335 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-13 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'about.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28186663447226978200070008839935481548519737162205050522337169990950191510630150220062772603777997298254047328028396353768960986624291840727936457377056783611913793089366623425535646119893642814916838632142103032920370214417877089136704269629522758939483548595549465845005325611481860213188495010117444461450703624046133646980636925996321044566115908299655058762902259440860025709199049571811494850976672597822344819976291557816147142217555999164467684654804498948297693632287442443160985728343532905784206809596641427558922389283544157649595191568503677437826239270289317536083515517173946904355156655048381638802149 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06836ae1822632953d6373d6fc89c0d9f7215ced . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.about.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataeng.aws.about.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dataeng.aws.about.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataeng.aws.dotdash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dataeng.aws.dotdash.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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