pehcanvas.digitalpfizer.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:eb:10:05:c0:05:8f:db:3b:7c:9c:e4:c2:21:47:8d was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pehcanvas.digitalpfizer.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:eb:10:05:c0:05:8f:db:3b:7c:9c:e4:c2:21:47:8dSerial Number (int): 21158934672651739441637045959674382221
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 36:04:af:a8:09:6d:c3:4d:4f:03:28:ae:5c:02:36:6f:20:41:1a:12
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 53:41:45:25:2f:28:72:32:4c:ee:48:a9:d1:b8:51:89:b6:29:02:2a
Fingerprint (sha256): 07:05:b0:cd:3a:b5:41:40:c7:58:77:38:13:12:1f:4a:5f:98:5a:25:11:3c:94:6c:e9:ef:a6:77:3c:b0:c1:12
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate pehcanvas.digitalpfizer.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pehcanvas.digitalpfizer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pehcanvas.digitalpfizer.com
Other certificates including the domain name digitalpfizer.com
(limited to 100 certificates)
sni.cloudflaressl.com
*.us.digitalpfizer.com
*.us3.digitalpfizer.com
ssl802888.cloudflaressl.com
docs.gcs.digitalpfizer.com
*.eu2.digitalpfizer.com
*.sf4.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
*.apac3.digitalpfizer.com
*.sf2.digitalpfizer.com
sni.cloudflaressl.com
*.sf2.digitalpfizer.com
ssl802890.cloudflaressl.com
*.eu2.digitalpfizer.com
*.sf3.digitalpfizer.com
sni.cloudflaressl.com
*.us2.digitalpfizer.com
*.us8.digitalpfizer.com
*.us4.digitalpfizer.com
*.sf3.digitalpfizer.com
cdn.digitalpfizer.com
dse.digitalpfizer.com
*.sf2.digitalpfizer.com
help.digitalpfizer.com
ssl802888.cloudflaressl.com
*.sf3.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vendorhub.map.digitalpfizer.com
*.eu5.digitalpfizer.com
*.pfizergardens.com
*.eu6.digitalpfizer.com
*.us4.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
pehcanvas.digitalpfizer.com
*.apac3.digitalpfizer.com
*.us7.digitalpfizer.com
cn.digitalpfizer.com
cn.digitalpfizer.com
*.sf4.digitalpfizer.com
ssl802889.cloudflaressl.com
*.apac.digitalpfizer.com
ssl802888.cloudflaressl.com
*.cat.digitalpfizer.com
email-dev.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
us.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.redirect.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
*.sf2.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.euhcp2.digitalpfizer.com
*.eu.digitalpfizer.com
dse.digitalpfizer.com
eu.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
*.eu.digitalpfizer.com
ssl802889.cloudflaressl.com
*.sf2.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
ssl802890.cloudflaressl.com
eu.digitalpfizer.com
*.sf2.digitalpfizer.com
secure5s.scene7.com
digitalpfizer.com
*.us12.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
*.eu.digitalpfizer.com
us.digitalpfizer.com
*.us2.digitalpfizer.com
*.sf2.digitalpfizer.com
ssl802889.cloudflaressl.com
sni.cloudflaressl.com
*.eu2.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure5s.scene7.com
sni.cloudflaressl.com
*.us10.digitalpfizer.com
ssl802888.cloudflaressl.com
ssl802888.cloudflaressl.com
*.sf4.digitalpfizer.com
*.eu8.digitalpfizer.com
us.digitalpfizer.com
*.us.digitalpfizer.com
*.us3.digitalpfizer.com
ssl802888.cloudflaressl.com
docs.gcs.digitalpfizer.com
*.eu2.digitalpfizer.com
*.sf4.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
*.apac3.digitalpfizer.com
*.sf2.digitalpfizer.com
sni.cloudflaressl.com
*.sf2.digitalpfizer.com
ssl802890.cloudflaressl.com
*.eu2.digitalpfizer.com
*.sf3.digitalpfizer.com
sni.cloudflaressl.com
*.us2.digitalpfizer.com
*.us8.digitalpfizer.com
*.us4.digitalpfizer.com
*.sf3.digitalpfizer.com
cdn.digitalpfizer.com
dse.digitalpfizer.com
*.sf2.digitalpfizer.com
help.digitalpfizer.com
ssl802888.cloudflaressl.com
*.sf3.digitalpfizer.com
*.eu.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
vendorhub.map.digitalpfizer.com
*.eu5.digitalpfizer.com
*.pfizergardens.com
*.eu6.digitalpfizer.com
*.us4.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
pehcanvas.digitalpfizer.com
*.apac3.digitalpfizer.com
*.us7.digitalpfizer.com
cn.digitalpfizer.com
cn.digitalpfizer.com
*.sf4.digitalpfizer.com
ssl802889.cloudflaressl.com
*.apac.digitalpfizer.com
ssl802888.cloudflaressl.com
*.cat.digitalpfizer.com
email-dev.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
us.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.redirect.digitalpfizer.com
sni.cloudflaressl.com
ssl802890.cloudflaressl.com
*.sf2.digitalpfizer.com
*.apac2.digitalpfizer.com
sni.cloudflaressl.com
*.euhcp2.digitalpfizer.com
*.eu.digitalpfizer.com
dse.digitalpfizer.com
eu.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
*.eu.digitalpfizer.com
ssl802889.cloudflaressl.com
*.sf2.digitalpfizer.com
eu.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
ssl802890.cloudflaressl.com
eu.digitalpfizer.com
*.sf2.digitalpfizer.com
secure5s.scene7.com
digitalpfizer.com
*.us12.digitalpfizer.com
sni.cloudflaressl.com
us2.digitalpfizer.com
*.eu.digitalpfizer.com
us.digitalpfizer.com
*.us2.digitalpfizer.com
*.sf2.digitalpfizer.com
ssl802889.cloudflaressl.com
sni.cloudflaressl.com
*.eu2.digitalpfizer.com
sni.cloudflaressl.com
sni.cloudflaressl.com
secure5s.scene7.com
sni.cloudflaressl.com
*.us10.digitalpfizer.com
ssl802888.cloudflaressl.com
ssl802888.cloudflaressl.com
*.sf4.digitalpfizer.com
*.eu8.digitalpfizer.com
us.digitalpfizer.com
Certificate
The complete raw certificate details for pehcanvas.digitalpfizer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjDCCA3SgAwIBAgIQD+sQBcAFj9s7fJzkwiFHjTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEyMTcwMDAwMDBaFw0yMTAxMTcx MjAwMDBaMCYxJDAiBgNVBAMTG3BlaGNhbnZhcy5kaWdpdGFscGZpemVyLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKcVLIyNufFiVGYFXEgwOVFA lxwBy03bAYXOvaZgYeyTbH2FQGVP32a3JpBc8E8+TcgXy0zWI8GtYKhOWr9vgC4k 5so3ha3vLioRkV+vFfmbkIYXuHIJST7+lktgQzYxp94xhaKISdLu1hYzKMZ7ppLl 26DRlvPvTDpCyUTTVsrnH8dj5q43ZaXi3FeN/iQJBy6yrJAJoIoxmu7bzhuoZ5l9 J8hvSctvRsPr70VMQHYNPKuKAGJTvWbBKzk3SjJGVPcdkMQXm5FSW35da0jRLFB7 ZA7BaoQfZlR4BAvq5fJ4FAiXfrUn1AcKyvN0lKZxpTgiNhDrzkaLG5vY4wsvyCcC AwEAAaOCAZQwggGQMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0G A1UdDgQWBBQ2BK+oCW3DTU8DKK5cAjZvIEEaEjAmBgNVHREEHzAdghtwZWhjYW52 YXMuZGlnaXRhbHBmaXplci5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglg hkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYh aHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipo dHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0T AQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA clsY1BE+h0YPYhSlU4Rq/Oqd/LgiUWLOov2ISWNTTQFnbgD9Cgt21EIEMnAK59z/ cwqZiVvEJVGLf5JAvSxzvXanRgP2P9/FqLakbx5mbGTrqzp9TRZMgfexPAR2ml6q lMmgNjwyRbExNucTFPP5sHStLsPE3VKsLuHSNtjNsqUPo6AW3yXmX7QPrUbS/L/4 xy7xWOxdz3KIJwcD8F0jPLH/GoymkqJY3Se5t8Yq/eD4YOw5j0piYPn2izpRUYIO FzIHprbJDWzQvMW5+72Kf+7BkisGZKdYyuKQpb+z41OzA4mtzRV1iz27GcDgGavm Hp7f/hw7s+V6FsvP8AdjdA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxUsjI258WJUZgVcSDA5 UUCXHAHLTdsBhc69pmBh7JNsfYVAZU/fZrcmkFzwTz5NyBfLTNYjwa1gqE5av2+A LiTmyjeFre8uKhGRX68V+ZuQhhe4cglJPv6WS2BDNjGn3jGFoohJ0u7WFjMoxnum kuXboNGW8+9MOkLJRNNWyucfx2PmrjdlpeLcV43+JAkHLrKskAmgijGa7tvOG6hn mX0nyG9Jy29Gw+vvRUxAdg08q4oAYlO9ZsErOTdKMkZU9x2QxBebkVJbfl1rSNEs UHtkDsFqhB9mVHgEC+rl8ngUCJd+tSfUBwrK83SUpnGlOCI2EOvORosbm9jjCy/I JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21158934672651739441637045959674382221 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pehcanvas.digitalpfizer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21092238227587535309552178349675439709056965897407558459480668745766134757659054858554436380675306227582216343761421391547795425206003700671503255203146281978401802155212773086707075324700101520155314540091923573424277972863126767328619675694065962268994644872171093702293319857636877760269180988874311028764134786817647668601271027127269901081774324006545991448372413279163226552774227086450061995274036346826527433973751935323563694273846479187219985921595638692968389267548022591377175039349366169507278936467673223304127796532343819201524928847163941642305586484372602747796052491257636155505079412285340166113319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3604afa8096dc34d4f0328ae5c02366f20411a12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pehcanvas.digitalpfizer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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