snapfinance.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:e3:4f:06:3b:af:c9:b8:b0:fe:a6:23:d3:ef:03:ec was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=snapfinance.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:e3:4f:06:3b:af:c9:b8:b0:fe:a6:23:d3:ef:03:ecSerial Number (int): 21118674127860937733292745354204087276
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ac:d7:74:aa:5a:0e:84:95:d1:fa:2e:93:82:e9:64:2f:e1:52:43:fe
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 93:8b:ae:af:e2:00:38:18:6f:4c:95:31:59:33:8d:c7:00:da:b3:e5
Fingerprint (sha256): 06:e1:7f:fb:03:73:3c:50:df:50:4a:de:ea:0e:7f:f2:70:e8:2f:72:e0:d8:03:b7:87:d1:16:33:f9:50:3c:9b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate snapfinance.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for snapfinance.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
snapfinance.com
Other certificates including the domain name snapfinance.com
(limited to 100 certificates)
knowledge.snapfinance.com
platform.api-spec.snapfinance.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
jenkins.snapfinance.com
training-m.snapfinance.com
mt-edge-b.3scale.net
jenkins.snapfinance.com
bankjagostatus.mambu.com
cloud-marketplace.status.broadcom.com
learn.snapfinance.com
*.qa.snapfinance.com
media.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
*.snapfinance.com
mt-edge-b.3scale.net
rm-websolution.snapfinance.com
ssl372524.cloudflaressl.com
fsus-27a.freshservice.com
auth-sandbox.snapfinance.com
media.snapfinance.com
mt-edge-b.3scale.net
ssl372524.cloudflaressl.com
vpnawsus.snapfinance.com
cloud-marketplace.status.broadcom.com
ssl372523.cloudflaressl.com
resourcemanagement.snapfinance.com
snapfinance.com
jenkins.snapfinance.com
cloud-marketplace.status.broadcom.com
rancher2.snapfinance.com
airflow-light.snapfinance.com
*.snapfinance.com
orders.luckystar.co.za
*.snapfinance.com
legacy.api-spec.snapfinance.com
ssl372525.cloudflaressl.com
ssl372523.cloudflaressl.com
rancher2.snapfinance.com
legacy.api-spec.snapfinance.com
fdus-73.freshdesk.com
bc.networkthinking.com
orders.luckystar.co.za
rancher-eks.snapfinance.com
content21.snapfinance.com
rancher2.snapfinance.com
platform.api-spec.snapfinance.com
shiny.snapfinance.com
askpx.snapfinance.com
sni194479.cloudflaressl.com
content21.snapfinance.com
snapfinance.com
resourcemanagement.snapfinance.com
ssl372524.cloudflaressl.com
resourcemanagement.snapfinance.com
amlp-ui-qa.snapfinance.com
checkout.api-spec.snapfinance.com
datashare.api-spec.snapfinance.com
*.usnls.snapfinance.com
bitbucket.snapfinance.com
datashare.api-spec.snapfinance.com
platform.api-spec.snapfinance.com
ssl372524.cloudflaressl.com
ssl372523.cloudflaressl.com
shiny.snapfinance.com
fsus-27a.freshservice.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
shiny.snapfinance.com
*.snapfinance.com
cloud-marketplace.status.broadcom.com
orders.luckystar.co.za
media.snapfinance.com
mt-edge-b.3scale.net
learn.snapfinance.com
mt-edge-b.3scale.net
kibana-enterprise-dashboard.snapfinance.com
resourcemanagement.snapfinance.com
rancher-qa.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
shiny.snapfinance.com
dew23ru98r2949283r9d.profitbricks.de
bankjagostatus.mambu.com
snapfinance.com
ssl372524.cloudflaressl.com
rancher2.snapfinance.com
cloud-marketplace.status.broadcom.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
airflow-light.snapfinance.com
qa1.snapfinance.com
observabilitypoc.snapfinance.com
dr.snapfinance.com
ssl372524.cloudflaressl.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
snapfinance.com
resourcemanagement.snapfinance.com
snapfinance.com
dew23ru98r2949283r9d.profitbricks.de
platform.api-spec.snapfinance.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
jenkins.snapfinance.com
training-m.snapfinance.com
mt-edge-b.3scale.net
jenkins.snapfinance.com
bankjagostatus.mambu.com
cloud-marketplace.status.broadcom.com
learn.snapfinance.com
*.qa.snapfinance.com
media.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
*.snapfinance.com
mt-edge-b.3scale.net
rm-websolution.snapfinance.com
ssl372524.cloudflaressl.com
fsus-27a.freshservice.com
auth-sandbox.snapfinance.com
media.snapfinance.com
mt-edge-b.3scale.net
ssl372524.cloudflaressl.com
vpnawsus.snapfinance.com
cloud-marketplace.status.broadcom.com
ssl372523.cloudflaressl.com
resourcemanagement.snapfinance.com
snapfinance.com
jenkins.snapfinance.com
cloud-marketplace.status.broadcom.com
rancher2.snapfinance.com
airflow-light.snapfinance.com
*.snapfinance.com
orders.luckystar.co.za
*.snapfinance.com
legacy.api-spec.snapfinance.com
ssl372525.cloudflaressl.com
ssl372523.cloudflaressl.com
rancher2.snapfinance.com
legacy.api-spec.snapfinance.com
fdus-73.freshdesk.com
bc.networkthinking.com
orders.luckystar.co.za
rancher-eks.snapfinance.com
content21.snapfinance.com
rancher2.snapfinance.com
platform.api-spec.snapfinance.com
shiny.snapfinance.com
askpx.snapfinance.com
sni194479.cloudflaressl.com
content21.snapfinance.com
snapfinance.com
resourcemanagement.snapfinance.com
ssl372524.cloudflaressl.com
resourcemanagement.snapfinance.com
amlp-ui-qa.snapfinance.com
checkout.api-spec.snapfinance.com
datashare.api-spec.snapfinance.com
*.usnls.snapfinance.com
bitbucket.snapfinance.com
datashare.api-spec.snapfinance.com
platform.api-spec.snapfinance.com
ssl372524.cloudflaressl.com
ssl372523.cloudflaressl.com
shiny.snapfinance.com
fsus-27a.freshservice.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
shiny.snapfinance.com
*.snapfinance.com
cloud-marketplace.status.broadcom.com
orders.luckystar.co.za
media.snapfinance.com
mt-edge-b.3scale.net
learn.snapfinance.com
mt-edge-b.3scale.net
kibana-enterprise-dashboard.snapfinance.com
resourcemanagement.snapfinance.com
rancher-qa.snapfinance.com
snapfinance.com
ssl372525.cloudflaressl.com
shiny.snapfinance.com
dew23ru98r2949283r9d.profitbricks.de
bankjagostatus.mambu.com
snapfinance.com
ssl372524.cloudflaressl.com
rancher2.snapfinance.com
cloud-marketplace.status.broadcom.com
dew23ru98r2949283r9d.profitbricks.de
ssl372524.cloudflaressl.com
airflow-light.snapfinance.com
qa1.snapfinance.com
observabilitypoc.snapfinance.com
dr.snapfinance.com
ssl372524.cloudflaressl.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
snapfinance.com
resourcemanagement.snapfinance.com
snapfinance.com
dew23ru98r2949283r9d.profitbricks.de
Certificate
The complete raw certificate details for snapfinance.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdDCCA1ygAwIBAgIQD+NPBjuvybiw/qYj0+8D7DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTExMTgwMDAwMDBaFw0yMDEyMTgx MjAwMDBaMBoxGDAWBgNVBAMTD3NuYXBmaW5hbmNlLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAOaBfNskSDGNhg4yA0fJFB8yqSpPKfd/0FX0log/ gzvpg4Q/4ksXMjkbYFl1ysO5PgbjaUfQsCHUQqgr0J6rxfZWy+ZFN0vd9FMT30Yb lOyY/d+r/e8RWc0kfl9HdvDPUWNzYRxIoVjVJJYGKnsutA9QwRXK3M68OCgvCSxT j7jyEpBEMttFMcFoLlktb1seltDrj/VpNdUBfAJMM3OQvKdCbp/Dqb8YFH3cdEaz GPj+laBv5NadQZsMiC7nlMUsJhzCVbn6sHhZ/6zhpUbljfTdQcIIIAVwzL3jTD3W Dj3YWQ8dG9i5gUssrL82QrC8OwxFK3oZQf1qLOJlXpyuZ5kCAwEAAaOCAYgwggGE MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSs13Sq Wg6EldH6LpOC6WQv4VJD/jAaBgNVHREEEzARgg9zbmFwZmluYW5jZS5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z Y2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsG AQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9u dHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRy dXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwYNzf0m0/H5wKic1/WgihmAVotbFJHY /u+IYNs7o5eUYmpP1a4sCgtBopWPVWQ1Nx8Y8vMJmESQ0dGJwzBWuxKN8Rfdtya+ WQXWf2snWDn+8pBskFrgrNe5Ni29XVoq92LyUS6QxI8M+QlugVExbtcfFcnFgnjz ch4mUBLIIBJY10M8p11fMiDcDmCUxHJvHHzX902L1QF+7YHl56U7UJdv66aUcebL SCBCCgDeLzUFyHK8xiuwmaqa/3SlvfKcrp5EklYS9plfyxkqG0pjP0AZECEd4buo /citqMjZR65sOJeNlzk3LWVTiq+YXOZNaDUEHTKFUqjoT09664ASLw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oF82yRIMY2GDjIDR8kU HzKpKk8p93/QVfSWiD+DO+mDhD/iSxcyORtgWXXKw7k+BuNpR9CwIdRCqCvQnqvF 9lbL5kU3S930UxPfRhuU7Jj936v97xFZzSR+X0d28M9RY3NhHEihWNUklgYqey60 D1DBFcrczrw4KC8JLFOPuPISkEQy20UxwWguWS1vWx6W0OuP9Wk11QF8Akwzc5C8 p0Jun8OpvxgUfdx0RrMY+P6VoG/k1p1BmwyILueUxSwmHMJVufqweFn/rOGlRuWN 9N1BwgggBXDMveNMPdYOPdhZDx0b2LmBSyysvzZCsLw7DEUrehlB/Wos4mVenK5n mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21118674127860937733292745354204087276 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'snapfinance.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29098662916177672684026049126507112004916678841989887189871234532074654370759807440793112692176547291448650695151287421478003769530963218274806645800040020723614847916081977058281770295873988895155453733023027982667211064224228010586461663765803847725447941601152582872649886630147036404593910374089491987619311321803284799061309434538885265731399258097398957716422988478925865159125137479147105485686710580245748081666471441233279748613400181599467986738943636589516621908022022871722461895092075315238185110975358847641678678110046770881483060478658318235173573512904598714462939095818344082865674171153204875519897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) acd774aa5a0e8495d1fa2e9382e9642fe15243fe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapfinance.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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