web-frontend-staging.frontend-qa.xvtest.net

Issued by Amazon

About this certificate

This digital certificate with serial number 02:f1:12:c0:ee:4d:bd:2c:b6:2c:dd:0e:66:22:71:9c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web-frontend-staging.frontend-qa.xvtest.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f1:12:c0:ee:4d:bd:2c:b6:2c:dd:0e:66:22:71:9c
Serial Number (int): 3910179903408206650743477223771238812
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8e:85:c1:e8:df:29:0c:c0:bc:dc:68:c8:13:66:05:92:dc:38:ac:39
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fb:ad:db:87:7d:4e:e9:08:1a:d9:b0:98:d6:7a:b3:72:1b:c3:5b:58
Fingerprint (sha256): 06:b9:e1:3c:fa:7c:7a:aa:a4:4c:f6:d0:1b:f0:5c:49:c3:fa:6d:49:d3:ed:51:0c:44:27:40:29:3e:ad:93:3d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate web-frontend-staging.frontend-qa.xvtest.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web-frontend-staging.frontend-qa.xvtest.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web-frontend-staging.frontend-qa.xvtest.net
www.web-frontend-staging.frontend-qa.xvtest.net

Other certificates including the domain name xvtest.net

(limited to 100 certificates)
web-frontend-pr-8854.frontend-qa.xvtest.net
web-frontend-staging.frontend-qa.xvtest.net
xv-redirect.xvtest.net
web-frontend-pr-10886.frontend-qa.xvtest.net
web-frontend-pr-9414.frontend-qa.xvtest.net
pangt-4.pmgr.playground.xvtest.net
web-frontend-pr-10686.frontend-qa.xvtest.net
web-frontend-pr-11348.frontend-qa.xvtest.net
web-frontend-pr-10288.frontend-qa.xvtest.net
*.backend-qa.xvtest.net
web-frontend-pr-10658.frontend-qa.xvtest.net
datahub.splinter-staging.xvtest.net
*.xvtest.net
www.v2-1.apis-staging.xvtest.net
web-frontend-staging.frontend-qa.xvtest.net
staging.hydra-v2.xvtest.net
web-frontend-pr-10954.frontend-qa.xvtest.net
staging.hydra-v2.xvtest.net
affiliates.playground.backend-staging.xvtest.net
web-frontend-pr-10249.frontend-qa.xvtest.net
web-frontend-pr-10208.frontend-qa.xvtest.net
splinter-staging.xvtest.net
www.testing-marco.apis-staging.xvtest.net
web-frontend-pr-11008.frontend-qa.xvtest.net
web-frontend-pr-10252.frontend-qa.xvtest.net
fe-oregon-1.xvtest.net
web-frontend-pr-10149.frontend-qa.xvtest.net
web-frontend-pr-11063.frontend-qa.xvtest.net
web-frontend-pr-11476.frontend-qa.xvtest.net
backend-qa.xvtest.net
apis.yakubu.staging.backend-staging.xvtest.net
web-frontend-pr-11613.frontend-qa.xvtest.net
public.thomasl-payments.staging.backend-staging.xvtest.net
web-frontend-staging.frontend-qa.xvtest.net
web-frontend-staging.frontend-qa.xvtest.net
fe-singapore-3.web-staging.xvtest.net
web-frontend-pr-10500.frontend-qa.xvtest.net
web-frontend-pr-10830.frontend-qa.xvtest.net
hydra-v2.xvtest.net
test.kopenv-pg.xvtest.net
integration-test-issue-report.v2-staging-dennis.xvtest.net
web-frontend-pr-10227.frontend-qa.xvtest.net
web-frontend-pr-10949.frontend-qa.xvtest.net
serveradmin-1.serveradmin-staging.xvtest.net
kp-kopenv-acm.apis-staging.xvtest.net
web-frontend-pr-10553.frontend-qa.xvtest.net
web-frontend-pr-9716.frontend-qa.xvtest.net
*.web-staging.xvtest.net
web-frontend-pr-8980.frontend-qa.xvtest.net
www.v2-1.apis-staging.xvtest.net
integration.test.staging.backend-staging.xvtest.net
philipn-1.pmgr.playground.xvtest.net
web-frontend-pr-9918.frontend-qa.xvtest.net
web-frontend-pr-9991.frontend-qa.xvtest.net
web-frontend-pr-8896.frontend-qa.xvtest.net
web-frontend-pr-9226.frontend-qa.xvtest.net
hydra-v2.xvtest.net
prash.backend-qa.xvtest.net
web-frontend-pr-10905.frontend-qa.xvtest.net
web-frontend-pr-11471.frontend-qa.xvtest.net
web-frontend-pr-8492.frontend-qa.xvtest.net
be-okta.playground.backend-staging.xvtest.net
web-frontend-pr-11456.frontend-qa.xvtest.net
web-frontend-pr-10936.frontend-qa.xvtest.net
web-frontend-pr-8327.frontend-qa.xvtest.net
web-frontend-pr-11009.frontend-qa.xvtest.net
web-frontend-pr-8705.frontend-qa.xvtest.net
web-frontend-pr-8948.frontend-qa.xvtest.net
staging-eu-3.pmgr.xvtest.net
web-frontend-pr-11479.frontend-qa.xvtest.net
web-frontend-pr-10910.frontend-qa.xvtest.net
www.pia-v2-2.apis-staging.xvtest.net
ianc-3.pmgr.playground.xvtest.net
web-frontend-pr-10852.frontend-qa.xvtest.net
web-frontend-pr-11439.frontend-qa.xvtest.net
web-frontend-pr-10290.frontend-qa.xvtest.net
web-frontend-pr-10320.frontend-qa.xvtest.net
www.testing-marco.apis-staging.xvtest.net
*.xvtest.net
web-frontend-pr-10056.frontend-qa.xvtest.net
*.xvtest.net
web-frontend-pr-8383.frontend-qa.xvtest.net
auth0-test-heroku.playground.xvtest.net
*.api.xvtest.net
playground-issue-report.v2-staging-dennis.xvtest.net
web-frontend-pr-9207.frontend-qa.xvtest.net
web-frontend-pr-10870.frontend-qa.xvtest.net
web-frontend-pr-9226.frontend-qa.xvtest.net
web-frontend-staging.frontend-qa.xvtest.net
web-frontend-pr-9226.frontend-qa.xvtest.net
web-frontend-pr-10192.frontend-qa.xvtest.net
backend-test.xvtest.net
web-frontend-pr-10230.frontend-qa.xvtest.net
test2.backend-test.xvtest.net
web-frontend-pr-8979.frontend-qa.xvtest.net
web-frontend-pr-9125.frontend-qa.xvtest.net
web-frontend-pr-10873.frontend-qa.xvtest.net
internal.staging-2.apis-staging.xvtest.net
web-frontend-pr-9226.frontend-qa.xvtest.net
web-frontend-pr-9888.frontend-qa.xvtest.net

Certificate

The complete raw certificate details for web-frontend-staging.frontend-qa.xvtest.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIQAvESwO5NvSy2LN0OZiJxnDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA5MDEwMDAwMDBaFw0yMjA5MzAy
MzU5NTlaMDYxNDAyBgNVBAMTK3dlYi1mcm9udGVuZC1zdGFnaW5nLmZyb250ZW5k
LXFhLnh2dGVzdC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc
z2QS63KzfZQpgW3xf0KH8imwFP37CE6yXWgJzgX4XnW1DsdRa9+hXCfNt9Rwj7s7
DyiBX0S7mQZo4oFGB+8c9kobg9JaWCR0XEaDxBGY/4Tkxbc2gv7zsMz0joP9xEYQ
jhEDrjWEOiJB135j5KH8Dbt9tuToI/mw6GibzGgWS8knFcC6UsTb04SZXLYUKXr5
vcAW+M+7UZcpjODIgsUg8Tat6/sqthZOU5JYCRabn3dq0Zi/akVU5LvSPqXBadpz
YwSV7lfOExwMfjTmR0vsXeh3YzY/O/sBnGixh8C7daANjUjMnf6/11mNO6Gfe67p
teEHq8/Z6R7pdNGcMe3JAgMBAAGjggHIMIIBxDAfBgNVHSMEGDAWgBRZpGYGUqB7
lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUjoXB6N8pDMC83GjIE2YFktw4rDkwZwYD
VR0RBGAwXoIrd2ViLWZyb250ZW5kLXN0YWdpbmcuZnJvbnRlbmQtcWEueHZ0ZXN0
Lm5ldIIvd3d3LndlYi1mcm9udGVuZC1zdGFnaW5nLmZyb250ZW5kLXFhLnh2dGVz
dC5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRy
dXN0LmNvbS9zY2ExYi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUH
AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz
dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu
Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQAgn54N+s8C7pZt1T7PSSvDKENmGpkVM3IQy7bd
m1SG/QhL/GpkcJ/LjdRsuGE67KR2wiENQmXIGzS2igtTXniJon4oGZe4zabhptJj
x3QEVUsRTM0l+2bDjW5q6WBSgj7MITMImvixVE8yYckO89sFsQSq/Yo5dSMLMk6C
L0bmu+fMXEP5cVFvL+gklygwh86z+7k/Xy34bFyKl1KT8E/u6Xy+w/+YfW+yIv7x
2QD4j8y8Lk0zMVd2LyZr6bE6pR3bUh0EPgDAnvW9k7jPlOg4A7gf0+eIWoeVuICK
Qt4k58OxSHTKI1zTe6Gt5G9b20vgvH6Csg4asOThGib0j87h
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M9kEutys32UKYFt8X9C
h/IpsBT9+whOsl1oCc4F+F51tQ7HUWvfoVwnzbfUcI+7Ow8ogV9Eu5kGaOKBRgfv
HPZKG4PSWlgkdFxGg8QRmP+E5MW3NoL+87DM9I6D/cRGEI4RA641hDoiQdd+Y+Sh
/A27fbbk6CP5sOhom8xoFkvJJxXAulLE29OEmVy2FCl6+b3AFvjPu1GXKYzgyILF
IPE2rev7KrYWTlOSWAkWm593atGYv2pFVOS70j6lwWnac2MEle5XzhMcDH405kdL
7F3od2M2Pzv7AZxosYfAu3WgDY1IzJ3+v9dZjTuhn3uu6bXhB6vP2eke6XTRnDHt
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3910179903408206650743477223771238812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web-frontend-staging.frontend-qa.xvtest.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27874695363665085620663483889333320385256275941176484107228705285830248192637691622310337547127887261315306582898218833286045987049818487021329396858363564288770295471635002243854254106920146416837478707002067079663646042294461175071448843588048488591179574152497173902641989444276650570538865212973614276285539703368704566339257340766675654378597046562626138307003738031364704595057996184227878801869478393103327488066377904992670770978168128619809333364743342096566649935847239786822182739454658196623731910622271698764101222027090006081254279306120613554547346158708361561503885360307304426085636469533515652918729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e85c1e8df290cc0bcdc68c813660592dc38ac39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-frontend-staging.frontend-qa.xvtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web-frontend-staging.frontend-qa.xvtest.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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