app.clari.com
Issued by Amazon
About this certificate
This digital certificate with serial number 09:73:33:73:ff:10:96:0b:05:0b:4d:c6:a9:a9:9f:47 was issued on by Amazon.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=app.clari.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:73:33:73:ff:10:96:0b:05:0b:4d:c6:a9:a9:9f:47Serial Number (int): 12561209693862952284812626747533664071
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c8:d9:7a:f5:c5:cf:ca:61:27:e1:f5:35:58:bb:43:19:f8:fa:a7:48
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 74:21:74:70:13:be:cd:b2:d2:42:a0:02:e4:68:6f:8f:f0:02:eb:51
Fingerprint (sha256): 07:30:a2:77:ad:8c:54:b4:9d:2a:0c:68:78:84:51:44:a4:90:34:9f:17:a9:22:07:9f:68:e6:bf:73:e5:51:af
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate app.clari.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.clari.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.clari.com
productionworker.clari.io
developer.clari.com
internal-tools.clari.io
productioncore.clari.io
productionmoco.clari.io
gateway-internal.clari.com
api-manager.clari.com
ds-api.clari.com
app-test.clari.com
nexus.clari.com
api.clari.com
production-analytics.clari.io
nexus-production-internal.clari.com
productionconductor.clari.io
gateway.clari.com
api-admin.clari.com
admin.clari.com
internal-tools.clari.com
autoqa-production.clari.io
productionworker.clari.io
developer.clari.com
internal-tools.clari.io
productioncore.clari.io
productionmoco.clari.io
gateway-internal.clari.com
api-manager.clari.com
ds-api.clari.com
app-test.clari.com
nexus.clari.com
api.clari.com
production-analytics.clari.io
nexus-production-internal.clari.com
productionconductor.clari.io
gateway.clari.com
api-admin.clari.com
admin.clari.com
internal-tools.clari.com
autoqa-production.clari.io
Other certificates including the domain name clari.com
(limited to 100 certificates)
ssl2793.cloudflare.com
nexus-staging.clari.com
login-sandbox.clari.com
ssl3103.cloudflare.com
app-builder-totodile.clari.com
engage.clari.com
www.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.dev.groove.clari.com
www.konggateway.clari.com
integration-staging.clari.com
sni217978.cloudflaressl.com
clari.com
sni.cloudflaressl.com
gateway-steelix.clari.com
backend.dev3.copilot.clari.com
ds-steelixapi.clari.com
sni217978.cloudflaressl.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
internal-gateway.clari.com
app-builder-bulbasaur.clari.com
backend.dev4.copilot.clari.com
webhooks.dev.copilot.clari.com
konggateway-steelix-internal.clari.com
app.clari.com
app.clari.com
admin.clari.com
login-sandbox.clari.com
download.clari.com
app-builder-hack1.clari.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
stage-scan.clari.com
beta.status.veracode.com
nexus-test-staging.clari.com
sni217978.cloudflaressl.com
hello.clari.com
nexus-steelix.clari.com
login.clari.com
sni217978.cloudflaressl.com
proservices.api.clari.com
sni217978.cloudflaressl.com
pages.clari.com
app.clari.com
integrations.clari.com
outreach.clari.com
hecate.clari.com
*.clari.com
login.clari.com
sni217978.cloudflaressl.com
beta.status.veracode.com
backend.wingman.clari.com
*.dev.wingman.clari.com
clari.com
rest-api.dev4.copilot.clari.com
pages.clari.com
compass.clari.com
partners.clari.com
engage.clari.com
sni217978.cloudflaressl.com
login-steelix.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
ol-www-craft.clari.com
production.clari.com
community.clari.com
pages.clari.com
app.clari.com
nexus-steelix.clari.com
app-builder-cyndaquil.clari.com
clari.com
integration-steelix.clari.com
integration-staging.clari.com
ssl2793.cloudflare.com
sni217978.cloudflaressl.com
app-builder-charmander.clari.com
nexus-staging.clari.com
nexus-staging.clari.com
app.dev.groove.clari.com
*.staging.clari.com
beta.status.veracode.com
*.sandbox.copilot.clari.com
sni217978.cloudflaressl.com
app-builder-hack6.clari.com
service-us.clari.com
sni217978.cloudflaressl.com
ssl3103.cloudflare.com
*.dev1.copilot.clari.com
prestaging.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.clari.com
beta.status.veracode.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
*.dev4.copilot.clari.com
sni.cloudflaressl.com
nexus-staging.clari.com
login-sandbox.clari.com
ssl3103.cloudflare.com
app-builder-totodile.clari.com
engage.clari.com
www.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.dev.groove.clari.com
www.konggateway.clari.com
integration-staging.clari.com
sni217978.cloudflaressl.com
clari.com
sni.cloudflaressl.com
gateway-steelix.clari.com
backend.dev3.copilot.clari.com
ds-steelixapi.clari.com
sni217978.cloudflaressl.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
internal-gateway.clari.com
app-builder-bulbasaur.clari.com
backend.dev4.copilot.clari.com
webhooks.dev.copilot.clari.com
konggateway-steelix-internal.clari.com
app.clari.com
app.clari.com
admin.clari.com
login-sandbox.clari.com
download.clari.com
app-builder-hack1.clari.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
stage-scan.clari.com
beta.status.veracode.com
nexus-test-staging.clari.com
sni217978.cloudflaressl.com
hello.clari.com
nexus-steelix.clari.com
login.clari.com
sni217978.cloudflaressl.com
proservices.api.clari.com
sni217978.cloudflaressl.com
pages.clari.com
app.clari.com
integrations.clari.com
outreach.clari.com
hecate.clari.com
*.clari.com
login.clari.com
sni217978.cloudflaressl.com
beta.status.veracode.com
backend.wingman.clari.com
*.dev.wingman.clari.com
clari.com
rest-api.dev4.copilot.clari.com
pages.clari.com
compass.clari.com
partners.clari.com
engage.clari.com
sni217978.cloudflaressl.com
login-steelix.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
ol-www-craft.clari.com
production.clari.com
community.clari.com
pages.clari.com
app.clari.com
nexus-steelix.clari.com
app-builder-cyndaquil.clari.com
clari.com
integration-steelix.clari.com
integration-staging.clari.com
ssl2793.cloudflare.com
sni217978.cloudflaressl.com
app-builder-charmander.clari.com
nexus-staging.clari.com
nexus-staging.clari.com
app.dev.groove.clari.com
*.staging.clari.com
beta.status.veracode.com
*.sandbox.copilot.clari.com
sni217978.cloudflaressl.com
app-builder-hack6.clari.com
service-us.clari.com
sni217978.cloudflaressl.com
ssl3103.cloudflare.com
*.dev1.copilot.clari.com
prestaging.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.clari.com
beta.status.veracode.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
*.dev4.copilot.clari.com
sni.cloudflaressl.com
Certificate
The complete raw certificate details for app.clari.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIQCXMzc/8QlgsFC03GqamfRzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA4MDUwMDAwMDBaFw0yMjA5MDMy MzU5NTlaMBgxFjAUBgNVBAMTDWFwcC5jbGFyaS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCzYO/7o01kCVkrs1wV0pFXyJ7jQBtRBDnm0sxwsFHJ NspYVqciaGqcQKj7HFyqkQUuOGpO4OXAAtCpp1qrMbiCGalXmeLvzxINkVsEruFP FzDnGccVxExVHMOju7M3JJfyqL13AjCmFr0INyWbxdESbTG6qeFdjO89nIj0wMaa TQ2zDJovtqWmH/+acMcGGY1gKPn87pBM0SPM/CcWBxjl+rn+39sF37u75/81A4YL Jannoyna92ANk5irfLmGoIZWyZloSBc5AU4TNzWPq9EfOcaCb3MOAFw9qL0rsMDd TaLHkX3pqLwhz2NF3nmxnK9ijYlY1WmfT4Q5FEESi3eNAgMBAAGjggNEMIIDQDAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUyNl69cXP ymEn4fU1WLtDGfj6p0gwggHhBgNVHREEggHYMIIB1IINYXBwLmNsYXJpLmNvbYIZ cHJvZHVjdGlvbndvcmtlci5jbGFyaS5pb4ITZGV2ZWxvcGVyLmNsYXJpLmNvbYIX aW50ZXJuYWwtdG9vbHMuY2xhcmkuaW+CF3Byb2R1Y3Rpb25jb3JlLmNsYXJpLmlv ghdwcm9kdWN0aW9ubW9jby5jbGFyaS5pb4IaZ2F0ZXdheS1pbnRlcm5hbC5jbGFy aS5jb22CFWFwaS1tYW5hZ2VyLmNsYXJpLmNvbYIQZHMtYXBpLmNsYXJpLmNvbYIS YXBwLXRlc3QuY2xhcmkuY29tgg9uZXh1cy5jbGFyaS5jb22CDWFwaS5jbGFyaS5j b22CHXByb2R1Y3Rpb24tYW5hbHl0aWNzLmNsYXJpLmlvgiNuZXh1cy1wcm9kdWN0 aW9uLWludGVybmFsLmNsYXJpLmNvbYIccHJvZHVjdGlvbmNvbmR1Y3Rvci5jbGFy aS5pb4IRZ2F0ZXdheS5jbGFyaS5jb22CE2FwaS1hZG1pbi5jbGFyaS5jb22CD2Fk bWluLmNsYXJpLmNvbYIYaW50ZXJuYWwtdG9vbHMuY2xhcmkuY29tghphdXRvcWEt cHJvZHVjdGlvbi5jbGFyaS5pbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDATBgNVHSAEDDAKMAgGBmeB DAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNj YTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2Ex Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADksBzoE3AZSTgF2r+bY 9W4IHJur7dB2bSSQXZNoAuAEiCVJHvsZp3mRLQn95Kn7mFb6lD776p6T09AvHMq3 /P3G2Vl/4OPFfZt/krBgT3lOq6MrkqDYLEM2J5Oc76VG5b1UdOcOIfOgrbywB5e0 ebl2o+ObmDhAxkxMgzjKR5v6gpyggkxRoM4eU4PxgWfziemkN8NAHy0eEZJPWGMO KBCN4gyoXE0UUKBVLyqmueoqtvuvejqTCGDOygGAVGhJtwtR4eZjwCFJYH6xOIx4 6mBp7+/a3qRE+Txr9q4NfnGj3fMzmP5whhnLsO76Pf4O+SarFhggfUvBwxT7Qki8 PZo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Dv+6NNZAlZK7NcFdKR V8ie40AbUQQ55tLMcLBRyTbKWFanImhqnECo+xxcqpEFLjhqTuDlwALQqadaqzG4 ghmpV5ni788SDZFbBK7hTxcw5xnHFcRMVRzDo7uzNySX8qi9dwIwpha9CDclm8XR Em0xuqnhXYzvPZyI9MDGmk0NswyaL7alph//mnDHBhmNYCj5/O6QTNEjzPwnFgcY 5fq5/t/bBd+7u+f/NQOGCyWp56Mp2vdgDZOYq3y5hqCGVsmZaEgXOQFOEzc1j6vR HznGgm9zDgBcPai9K7DA3U2ix5F96ai8Ic9jRd55sZyvYo2JWNVpn0+EORRBEot3 jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12561209693862952284812626747533664071 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.clari.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22644458218944724295814734235765091996892664757344934799692370444069500408916990678204767083318656628043367563255528264393561396663599493324450931741401361225162477083815062548018729480687388891525813590442128457170992325776934408132674615159547462156048196357085142956186473617470274214949026551433063588378676576175512779290138723303619043395056639376217139215382981853900306931866200800077962534693437775628006372335990911483637188222519868849863956505605223253472157799877453102407147943053836055560052945338275038767550295135962147663128681335354671117332210271185504574116153888798433679152210712044450167355277 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c8d97af5c5cfca6127e1f53558bb4319f8faa748 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (472 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionworker.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-tools.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productioncore.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionmoco.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-internal.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-manager.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds-api.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-test.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-analytics.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus-production-internal.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionconductor.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-admin.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-tools.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoqa-production.clari.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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