naturalmotion.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:69:e9:84:db:fb:be:45:40:5b:bb:c0:c1:22:71:a1 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=naturalmotion.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:69:e9:84:db:fb:be:45:40:5b:bb:c0:c1:22:71:a1
Serial Number (int): 11183751464062142665019935624146350497
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:4e:19:99:8d:a0:fa:cf:21:3d:b7:0c:fa:36:53:8b:16:bc:0c:df
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cb:08:ae:63:12:60:ef:bc:11:fb:c4:9f:88:77:67:40:fe:82:11:1d
Fingerprint (sha256): 05:35:2f:69:b4:e5:4e:5c:da:87:d1:f8:1b:9b:22:4b:c6:fc:f1:54:7e:00:d5:e9:cf:df:b7:78:2a:46:08:9d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate naturalmotion.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naturalmotion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naturalmotion.com
*.naturalmotion.com
naturalmotiongames.com
*.naturalmotiongames.com
naturalmotion.co.uk
*.naturalmotion.co.uk

Other certificates including the domain name naturalmotion.com

(limited to 100 certificates)
ssl277858.cloudflaressl.com
accessallareas.naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
files.naturalmotion.com
naturalmotion.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
jira.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
exchange.naturalmotion.com
jira.naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
accessallareas.naturalmotion.com
ssl277856.cloudflaressl.com
naturalmotion.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
testrail.naturalmotion.com
testrail.naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
naturalmotion.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
naturalmotion.com
accessallareas.naturalmotion.com
ssl277858.cloudflaressl.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
docs.naturalmotion.com
fb.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl277858.cloudflaressl.com
support.naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
accessallareas.naturalmotion.com
*.naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391882.cloudflaressl.com
accessallareas.naturalmotion.com

Certificate

The complete raw certificate details for naturalmotion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIQCGnphNv7vkVAW7vAwSJxoTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MjIwMDAwMDBaFw0yMDA5MjIx
MjAwMDBaMBwxGjAYBgNVBAMTEW5hdHVyYWxtb3Rpb24uY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2E9SmzUAYnI+4qXcNMb3R1GetVPzBnu4s2y
14o73RMwXsKf0GapoxL5ZAsun52giLGg48g0O+FNjmRKd7lCuECrnSlHChSRKAmZ
UQLPy/yVUvgLuyhApuhh5hS5OqoTvEH2Ij8KHOilXbmJkISZq9Glv+dHps5EOiC/
sl2DX78uUnAabEz3Aq1ca5+NTsFU23XMgmbGbHwVwPyaNGjG/2W9LALrsCMw/rUM
vOsq7noKSrBEqR+ZWKxkGngR/drg2wAWTXlqq3fT13KAE9+DZRl+Ldu0KG5pvfjD
hAEtSDa8TD+Ks+OGNN6ilxkUsHe5p+NbDevDi50TWmWO0xyudQIDAQABo4IC8zCC
Au8wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFJNO
GZmNoPrPIT23DPo2U4sWvAzfMIGRBgNVHREEgYkwgYaCEW5hdHVyYWxtb3Rpb24u
Y29tghMqLm5hdHVyYWxtb3Rpb24uY29tghZuYXR1cmFsbW90aW9uZ2FtZXMuY29t
ghgqLm5hdHVyYWxtb3Rpb25nYW1lcy5jb22CE25hdHVyYWxtb3Rpb24uY28udWuC
FSoubmF0dXJhbG1vdGlvbi5jby51azAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j
cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsG
CWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB
hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG
Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV
HRMBAf8EAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAu9nfvB+KcbWTlCOX
qpJ7RzhXlQqrUugakJZkNo4e0YUAAAFsttsi6AAABAMARzBFAiB/kMLXQ//bTYes
5YrX9ekRmR5ISCcUJViG3u/moOHHgwIhAO1gjDtPr7LQhaWYJ08yBDwJQuSkocId
tijuy+xBsPaTAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFs
ttsjLwAABAMARzBFAiEAuSBzfNYsz2EIOgWyaEeDkJkJM4ecskprqt0JNlyGlLwC
IFh/4IqQ/wPwkIpxjf+YmV/pXblIeTFY3SCvQA8INwrZMA0GCSqGSIb3DQEBCwUA
A4IBAQAVC5QSXMxlq5Okwakk8UwYeRXslszWbXn6p9Dkq3sFhgb8olJxZQQn4ocm
ErLqp0HwvWumIndUSG+Bb4Crhx9mFQA+RV7aK0k7O4x3fdUPFYUVBEKKLgAh/wQy
4YtRclNPvfOIcgc/A+wzKPOxyWnVxIFyfSh8trza2dC+clokZrcd/tVV1Xc6RA+k
htpqzFM4LEoG1azmSV9xQbGzBO4VYx8c3g3X9/qF2fagpgqAz0On6ieei2JWsqGU
xanY+yOnmdDmCGIXZWPXroiEDULX/ay8MagDxNvDh5z9U+aDrx9e1h7YFwQi09JI
7knu+m3z573TCb8geWMtMifOSDO4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2E9SmzUAYnI+4qXcNMb
3R1GetVPzBnu4s2y14o73RMwXsKf0GapoxL5ZAsun52giLGg48g0O+FNjmRKd7lC
uECrnSlHChSRKAmZUQLPy/yVUvgLuyhApuhh5hS5OqoTvEH2Ij8KHOilXbmJkISZ
q9Glv+dHps5EOiC/sl2DX78uUnAabEz3Aq1ca5+NTsFU23XMgmbGbHwVwPyaNGjG
/2W9LALrsCMw/rUMvOsq7noKSrBEqR+ZWKxkGngR/drg2wAWTXlqq3fT13KAE9+D
ZRl+Ldu0KG5pvfjDhAEtSDa8TD+Ks+OGNN6ilxkUsHe5p+NbDevDi50TWmWO0xyu
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11183751464062142665019935624146350497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturalmotion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23654513572261203000318764039322365978697650922975939102051977661122160133461967103032723033949925050653077647841483253213510758767267764760102842895604731948334720265094048973036051785446185912914649085653796206498285383269992376602278599369076167658238117228257833425763707791670581318405548210344583253923504986335093109762472288014731685145046711298749698618231873904555329615389502976385985156308008908471246165866480553165198346143069052749759143617317063757521035172465422795243648326874342766174058277853439911208867182419735774793708597341744180772554124230588509911276726394564415769369454292264863783497333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							934e19998da0facf213db70cfa36538b16bc0cdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotion.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016cb6db22e8000004030047304502207f90c2d743ffdb4d87ace58ad7f5e911991e48482714255886deefe6a0e1c783022100ed608c3b4fafb2d085a598274f32043c0942e4a4a1c21db628eecbec41b0f6930076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cb6db232f0000040300473045022100b920737cd62ccf61083a05b268478390990933879cb24a6baadd09365c8694bc0220587fe08a90ff03f0908a718dff98995fe95db948793158dd20af400f08370ad9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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