renewmyplan-colorado.kaiserpermanente.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:ba:19:6f:14:6e:a0:d3:ee:c2:d3:a8:47:eb:ba:15 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=renewmyplan-colorado.kaiserpermanente.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ba:19:6f:14:6e:a0:d3:ee:c2:d3:a8:47:eb:ba:15
Serial Number (int): 19575475017565872059351358251706595861
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6e:4f:34:fb:46:df:bb:d5:e3:4b:7d:4f:a1:66:a9:da:30:ff:84:a6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2e:f4:4b:24:bc:34:b0:31:f6:ff:20:36:ac:93:da:c0:d3:ff:81:53
Fingerprint (sha256): 06:bd:b8:ad:25:e2:f5:ed:b7:85:ba:03:16:bd:cd:cc:90:fe:ac:61:9e:14:25:04:65:2d:f1:a7:b2:2e:a7:ad

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate renewmyplan-colorado.kaiserpermanente.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for renewmyplan-colorado.kaiserpermanente.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

renewmyplan-colorado.kaiserpermanente.org
www.renewmyplan-colorado.kaiserpermanente.org
kaiser-parq-prod1.pegacloud.net
kpco-prod.pegacloud.com

Other certificates including the domain name kaiserpermanente.org

(limited to 100 certificates)
national-implantregistries.kaiserpermanente.org
researchdatacollect-test.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
dev10.kaiserpermanente.org
www.scalclinicalops.kaiserpermanente.org
wa-producer.kaiserpermanente.org
fs010.kaiserpermanente.org
lookinside.kaiserpermanente.org
healthtrac.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
insider.kaiserpermanente.org
lookinside.kaiserpermanente.org
smu.kaiserpermanente.org
ss021.kaiserpermanente.org
neuroptresidency.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
virtualconnect.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
kpwit.kaiserpermanente.org
wa-clinician-dev.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
kpa-prod.kaiserpermanente.org
earlystart.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
fsso-ebiz.kaiserpermanente.org
academic.gsm.cornell.edu
insidekpncal.kaiserpermanente.org
mapri.kaiserpermanente.org
san-9-s7.tlsprovisioning.exacttarget.com
healthplans.kaiserpermanente.org
api.kaiserpermanente.org
earlystart.kaiserpermanente.org
divisionofresearchapp.kaiserpermanente.org
etpgeorgia.kaiserpermanente.org
hearingcenterhawaii.kaiserpermanente.org
kphealthconnectnews.kaiserpermanente.org
academic.gsm.cornell.edu
volunteer-ncal.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
northwest-hospitals.kaiserpermanente.org
apply-individual-family-dev-p01.appl.kaiserpermanente.org
somtitleix.kaiserpermanente.org
lookinside.kaiserpermanente.org
general-agencies-california.kaiserpermanente.org
fortherecord.kaiserpermanente.org
physiciancareers.kaiserpermanente.org
onelinkinfo.kaiserpermanente.org
insidecmi.kaiserpermanente.org
researchbank.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
renewmyplan-colorado.kaiserpermanente.org
mapri.kaiserpermanente.org
www.scal-gem.kaiserpermanente.org
rws.ns-cmd-nlp-dv.k8s.cmd.tpmg.kaiserpermanente.org
graduate-physicaltherapy-education.kaiserpermanente.org
fs10.kaiserpermanente.org
kpmatters-scal.kaiserpermanente.org
tro.kaiserpermanente.org
wa-momentum.kaiserpermanente.org
wa-member2.kaiserpermanente.org
equityinclusionanddiversity.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
garfieldcenter.kaiserpermanente.org
excellence-midatlantic.kaiserpermanente.org
scholarsacademy.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
insidecmi.kaiserpermanente.org
stage2.newsmedia.kaiserpermanente.org
quality-patient-safety.kaiserpermanente.org
volunteer-ncal.kaiserpermanente.org
fs050.kaiserpermanente.org
qa-staging.cmd.kaiserpermanente.org
dev10.kaiserpermanente.org
testmy.kaiserpermanente.org
pharmacyresidency.kaiserpermanente.org
individual-family-pp.kaiserpermanente.org
fd-ebiz.kaiserpermanente.org
cosmeticdermatology-midatlantic.kaiserpermanente.org
KAISER PERMANENTE
bariatric-northerncalifornia.kaiserpermanente.org
dev10.kaiserpermanente.org
divisionofresearch.kaiserpermanente.org
lookinside.kaiserpermanente.org
insidekpncal.kaiserpermanente.org
bariatric-northerncalifornia.kaiserpermanente.org
tridion.ns-cmd-mas-dmz-pr.k8s.cmd.tpmg.kaiserpermanente.org
fs010.kaiserpermanente.org
rt1.kaiserpermanente.org
hospice-ncal.kaiserpermanente.org
inthecommunity-ncal.kaiserpermanente.org
kpwit.kaiserpermanente.org
tpmgawards.kaiserpermanente.org
cancercare.kaiserpermanente.org
midatlanticapplicationtool.kaiserpermanente.org
national-implantregistries.kaiserpermanente.org
community.kp.org

Certificate

The complete raw certificate details for renewmyplan-colorado.kaiserpermanente.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIQDroZbxRuoNPuwtOoR+u6FTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMzAwMDAwMDBaFw0yNDAxMjgy
MzU5NTlaMDQxMjAwBgNVBAMTKXJlbmV3bXlwbGFuLWNvbG9yYWRvLmthaXNlcnBl
cm1hbmVudGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHWv
8UhUon6SHZe+MlQmdu4rFpGG9qrP+tV1MMI3C9k0k2x7yRHclicOeTdzHsHoQPFN
Y1bsUzxEb1QD7dTBQ183B4FUvg+UaWtgpNlU3KRZBhcsy4nCwFYO+qw1paaITYQd
Qcm1ggWjv65mRD+DIp2flnfPvlKNsUKNXsxPR+bIRiLmL/vLgWt0J0nDLuLwIL3O
rIWr3Gge0grHWhPQyUQtBbcrwL8qE0W6QXw8nGU9VGg1p00kh+kN6TuofFgJvedr
evJWkqvgI3jaGl/z6HMbT5V+wiP7wq50wGyJfMj82y/RyDZ6uykhNKy8wLTJmGCN
qy8kCG76GpUqtEyfmwIDAQABo4IDcDCCA2wwHwYDVR0jBBgwFoAUWaRmBlKge5WS
PKOUByeWdFv5PdAwHQYDVR0OBBYEFG5PNPtG37vV40t9T6Fmqdow/4SmMIGfBgNV
HREEgZcwgZSCKXJlbmV3bXlwbGFuLWNvbG9yYWRvLmthaXNlcnBlcm1hbmVudGUu
b3Jngi13d3cucmVuZXdteXBsYW4tY29sb3JhZG8ua2Fpc2VycGVybWFuZW50ZS5v
cmeCH2thaXNlci1wYXJxLXByb2QxLnBlZ2FjbG91ZC5uZXSCF2twY28tcHJvZC5w
ZWdhY2xvdWQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5zY2ExYi5h
bWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEw
dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5h
bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1h
em9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHW
eQIEAgSCAW4EggFqAWgAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1
mwAAAYVgs/ItAAAEAwBIMEYCIQCMZq+9O5kbAgdmRxvZqoDwl/9NYGXO7RXmYkdQ
9igXZwIhAN7GKcLv1n7HaLO8j1cPpqLLhE12WVLX+RIKuABYtxxsAHUAc9meiRtM
lnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGFYLPyOwAABAMARjBEAiBxfw++
by2pB56ur9A3hWd08jOOizbNIRN4duErAS2p6AIgSrtK/u480nwEhYAniGueB2DE
vB9G+kTTNXiODpZNLxoAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAYVgs/HKAAAEAwBHMEUCIDQiybpgVAzV1vWAIfaxoFtGvsuIYgeLevW+XwEy
Ex0wAiEArGpun04BED9DnJWOdCGWeU2zPXL27sxW3v4IQ/rshcwwDQYJKoZIhvcN
AQELBQADggEBAGhU9jLVCVP5yLUUcrzpdeO7rYId9cdp0PTiPC728Iha78W6mzGl
hd3NI6JY0kHttnxxgGJ7tu5hSYvACy+CL/rDWPBZDkXmhmNmd0t2tTzmIGApPawv
ZHlcgkXL+sFaBLbRvt+1gxCxh+csv5skD9HsXfkVr/RtdWmqzv8iHpncCmXlE4sk
geFrUyfUxMg3jBNZKZidT0hacXvp6f3HOUmc2GHVUnLXXar4vcV0uPXjbxnJssy/
YV9g7yx6Oz34jacwGMvhW4UIxsJZfLgbl+iuNC3tbiJjWvzDvluvDoxFtAsoQWv1
mx+kqM448QM/eT5cdMSfLM5ZMlGd1YhPqYQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHWv8UhUon6SHZe+MlQm
du4rFpGG9qrP+tV1MMI3C9k0k2x7yRHclicOeTdzHsHoQPFNY1bsUzxEb1QD7dTB
Q183B4FUvg+UaWtgpNlU3KRZBhcsy4nCwFYO+qw1paaITYQdQcm1ggWjv65mRD+D
Ip2flnfPvlKNsUKNXsxPR+bIRiLmL/vLgWt0J0nDLuLwIL3OrIWr3Gge0grHWhPQ
yUQtBbcrwL8qE0W6QXw8nGU9VGg1p00kh+kN6TuofFgJvedrevJWkqvgI3jaGl/z
6HMbT5V+wiP7wq50wGyJfMj82y/RyDZ6uykhNKy8wLTJmGCNqy8kCG76GpUqtEyf
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19575475017565872059351358251706595861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'renewmyplan-colorado.kaiserpermanente.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16721490013981775818869259916831073421113596788261116922246531800297392595914385184715597821576342121699281621821644702426605357630696766669822831317625861639219380682231492261800551173165724201637249382776221649972138462750576956191255345028373954514770077196119555454400735488196428319598497662665422760704471371277489990535434294318515414522716075234309840802150429991308604244108264627448226326982920511932510395112040149805433380448873748811350450309203677763579382453148458788805133505306122393485600077952439088838863536116250248035810259436530636984483838205032744808654828649981894108061387611399638020300699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e4f34fb46dfbbd5e34b7d4fa166a9da30ff84a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewmyplan-colorado.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renewmyplan-colorado.kaiserpermanente.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiser-parq-prod1.pegacloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpco-prod.pegacloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018560b3f22d00000403004830460221008c66afbd3b991b020766471bd9aa80f097ff4d6065ceed15e6624750f6281767022100dec629c2efd67ec768b3bc8f570fa6a2cb844d765952d7f9120ab80058b71c6c00750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b50000018560b3f23b00000403004630440220717f0fbe6f2da9079eaeafd037856774f2338e8b36cd21137876e12b012da9e802204abb4afeee3cd27c04858027886b9e0760c4bc1f46fa44d335788e0e964d2f1a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018560b3f1ca000004030047304502203422c9ba60540cd5d6f58021f6b1a05b46becb8862078b7af5be5f0132131d30022100ac6a6e9f4e01103f439c958e742196794db33d72f6eecc56defe0843faec85cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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