spectrum.pitneybowes.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:91:5a:c8:47:15:79:55:c2:31:59:ab:d5:a5:8c:41 was issued on by Amazon.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=spectrum.pitneybowes.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:91:5a:c8:47:15:79:55:c2:31:59:ab:d5:a5:8c:41Serial Number (int): 19363916269972599857834039469354093633
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: be:36:ab:4d:34:3a:4a:ca:c4:c3:f6:5a:a1:37:d2:ba:44:3b:eb:9d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 68:b1:09:85:e6:3d:b0:5f:06:78:27:62:b3:a5:45:e4:a9:df:a4:64
Fingerprint (sha256): 07:33:be:5e:cc:41:f9:4d:d2:e6:af:b5:85:3e:b3:76:45:18:e0:b2:59:0d:08:f8:d5:bf:ed:4f:c0:07:71:84
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate spectrum.pitneybowes.com
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spectrum.pitneybowes.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spectrum.pitneybowes.com
spectrum.pbondemand.com
staging.g1.com
*.spectrum.pitneybowes.com
*.spectrum.pitneybowes.eu
spectrum.pbinsight.eu
*.spectrum.pitneybowes.com.au
spectrum.g1.com
spectrum.pitneybowes.com.au
spectrum.pitneybowes.eu
spectrum.pbinsight.com.au
spectrum.pbondemand.com
staging.g1.com
*.spectrum.pitneybowes.com
*.spectrum.pitneybowes.eu
spectrum.pbinsight.eu
*.spectrum.pitneybowes.com.au
spectrum.g1.com
spectrum.pitneybowes.com.au
spectrum.pitneybowes.eu
spectrum.pbinsight.com.au
Other certificates including the domain name pitneybowes.com
(limited to 100 certificates)
leapfrog-ssl-5.gcs-web.com
statuspage.io
apistatus.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
api-sandbox.pitneybowes.com
www.pb.com
*.tracking.pitneybowes.com
*.sendsuite.pitneybowes.com
*.gcs.pitneybowes.com
statuspage.io
statuspage.io
statuspage.io
*.sendsuitetracking.pitneybowes.com
api-sandbox.pitneybowes.com
statuspage.io
*.sending.us.pitneybowes.com
confirm.pitneybowes.com
pbs-access.pitneybowes.com
*.guam.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
5729564890234880-fe4.pantheonsite.io
*.omnipath.pitneybowes.com
statuspage.io
relayhub.eu.pitneybowes.com
statuspage.io
incapsula.com
statuspage.io
incapsula.com
statuspage.io
*.shippingapi.pitneybowes.com
statuspage.io
*.client.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
www.pb.com
*.designer-uk.converse.pitneybowes.com
statuspage.io
client.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
apistatus.pitneybowes.com
statuspage.io
statuspage.io
support.pitneybowes.com
*.gcs.pitneybowes.com
incapsula.com
spectrum.pitneybowes.com
careers.pitneybowes.com
*.pitneybowes.com
welcome.pitneybowes.com
*.vitalsignsbi.pitneybowes.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dr.pb.com
qa-developer2.pitneybowes.com
statuspage.io
statuspage.io
leapfrog-ssl-5.gcs-web.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
*.mp.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
*.sendsuitetracking.pitneybowes.com
*.gtm.gcs.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
akamai-san13.exacttarget.com
sendtech-api.pitneybowes.com
apistatus.pitneybowes.com
*.shippingapi.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
*.kyc.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
*.shippingapi.pitneybowes.com
www.pb.com
careers.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
presort-xtra.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
api-sandbox.pitneybowes.com
www.pb.com
*.tracking.pitneybowes.com
*.sendsuite.pitneybowes.com
*.gcs.pitneybowes.com
statuspage.io
statuspage.io
statuspage.io
*.sendsuitetracking.pitneybowes.com
api-sandbox.pitneybowes.com
statuspage.io
*.sending.us.pitneybowes.com
confirm.pitneybowes.com
pbs-access.pitneybowes.com
*.guam.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
5729564890234880-fe4.pantheonsite.io
*.omnipath.pitneybowes.com
statuspage.io
relayhub.eu.pitneybowes.com
statuspage.io
incapsula.com
statuspage.io
incapsula.com
statuspage.io
*.shippingapi.pitneybowes.com
statuspage.io
*.client.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
www.pb.com
*.designer-uk.converse.pitneybowes.com
statuspage.io
client.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
apistatus.pitneybowes.com
statuspage.io
statuspage.io
support.pitneybowes.com
*.gcs.pitneybowes.com
incapsula.com
spectrum.pitneybowes.com
careers.pitneybowes.com
*.pitneybowes.com
welcome.pitneybowes.com
*.vitalsignsbi.pitneybowes.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dr.pb.com
qa-developer2.pitneybowes.com
statuspage.io
statuspage.io
leapfrog-ssl-5.gcs-web.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
statuspage.io
*.sendproanywhere.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
statuspage.io
leapfrog-ssl-5.gcs-web.com
*.mp.pitneybowes.com
statuspage.io
apistatus.pitneybowes.com
*.sendsuitetracking.pitneybowes.com
*.gtm.gcs.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
akamai-san13.exacttarget.com
sendtech-api.pitneybowes.com
apistatus.pitneybowes.com
*.shippingapi.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
*.kyc.pitneybowes.com
statuspage.io
5729564890234880-fe4.pantheonsite.io
*.shippingapi.pitneybowes.com
www.pb.com
careers.pitneybowes.com
leapfrog-ssl-5.gcs-web.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
presort-xtra.pitneybowes.com
Certificate
The complete raw certificate details for spectrum.pitneybowes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIQDpFayEcVeVXCMVmr1aWMQTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEyMzEwMDAwMDBaFw0yMTAxMzEx MjAwMDBaMCMxITAfBgNVBAMTGHNwZWN0cnVtLnBpdG5leWJvd2VzLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuf9tIWwFqPHKHtZxWnD9NPk+CI KE9TYFPKOat1NHFNry3bJCHGHxg3z43dZsOjV64lVTMC0IanyCwsyxRlgizCGl2l 08m473CzJD5naqnlQhe42uoe5dCCnUuCSefKmKQEP/NggHva4Gzxy7ui12Jd/53S ewI/eKig4x/Zw9krN97kzx9XJImG+1bwHXWNGnn+SElBNzS+w/uXn6fpYZQPB/4W MLUFtOhefsBchLOTVPB0Ueis7eGkVgx0eUVYcHpPnnt7AOLWlFn8S80J7HoDD7vT BLtcH/XeEKxMqSXYIhP9K/mcfFZ7jJBl900E584whqlqe9VYfUqAUeh4+TECAwEA AaOCA4IwggN+MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud DgQWBBS+NqtNNDpKysTD9lqhN9K6RDvrnTCCAR8GA1UdEQSCARYwggESghhzcGVj dHJ1bS5waXRuZXlib3dlcy5jb22CF3NwZWN0cnVtLnBib25kZW1hbmQuY29tgg5z dGFnaW5nLmcxLmNvbYIaKi5zcGVjdHJ1bS5waXRuZXlib3dlcy5jb22CGSouc3Bl Y3RydW0ucGl0bmV5Ym93ZXMuZXWCFXNwZWN0cnVtLnBiaW5zaWdodC5ldYIdKi5z cGVjdHJ1bS5waXRuZXlib3dlcy5jb20uYXWCD3NwZWN0cnVtLmcxLmNvbYIbc3Bl Y3RydW0ucGl0bmV5Ym93ZXMuY29tLmF1ghdzcGVjdHJ1bS5waXRuZXlib3dlcy5l dYIZc3BlY3RydW0ucGJpbnNpZ2h0LmNvbS5hdTAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0 dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAE GTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsG AQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYB BQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy dDAMBgNVHRMBAf8EAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYApLkJkLQY WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFvXA/U6AAABAMARzBFAiAXLmzt G/AcdoKOAIkyTA89XM12NzW45sPCsGB16tsGyQIhAMuUOtpwRq4902+QWqn4LDwT mKZnDVp62E3SfHS66+y0AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g gw8AAAFvXA/VrQAABAMARzBFAiEAsczihk5hGZrWU86llijGobDyvXIVz50AyoCs p8vFVwkCID7ilW698m02aCK574SIZpphW3yjL0F+e+Ah2jcH7lCSMA0GCSqGSIb3 DQEBCwUAA4IBAQC5EgwrEvPaPnxcViA8hsoxv1Bu9N7CqZUuWrkxy0N3MrknvmkS 6jfrWgDOTQgg9WI6B19crxxzJpn2bST2YWuSkvdTCoMYJwHX2u6FgdnVUpJ+RWNZ SUz8PD7bxeNmiKoLAvUWPrNpcG9Ke63MMAgqvsSmdZN6okpcAvBnvr2SxYRL0yH/ aA4NZ1HBUZ3lKHxyiAq8VL3P/ijOWn5GDxtVpkE0Kcn69aaRFgcZaKRiYQvAY9R8 nR+fCauQw75zRHZxKOIB1kIpPWxw+DgvJ3lQulq1OCcBSX5kK3JkpKQRF1YC0E/7 PPoSobAXKaWN3vvlbeOyplbbiycUzYaJnWvg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5/20hbAWo8coe1nFacP 00+T4IgoT1NgU8o5q3U0cU2vLdskIcYfGDfPjd1mw6NXriVVMwLQhqfILCzLFGWC LMIaXaXTybjvcLMkPmdqqeVCF7ja6h7l0IKdS4JJ58qYpAQ/82CAe9rgbPHLu6LX Yl3/ndJ7Aj94qKDjH9nD2Ss33uTPH1ckiYb7VvAddY0aef5ISUE3NL7D+5efp+lh lA8H/hYwtQW06F5+wFyEs5NU8HRR6Kzt4aRWDHR5RVhwek+ee3sA4taUWfxLzQns egMPu9MEu1wf9d4QrEypJdgiE/0r+Zx8VnuMkGX3TQTnzjCGqWp71Vh9SoBR6Hj5 MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19363916269972599857834039469354093633 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-31 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spectrum.pitneybowes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23685444287610548243745201240399039860926506448508032449567978441528689851950672708377571614145016169236682215746943750328825351920115896745437073283222877911995487300994920028920224205152878911677168842660493524170625769167813863150172322652172707878418792363292552217404801726075642181775311747917640754862034240758155561145127961936834096995266041615875768971344238105956991323658352886328771712635014092898577356856863654622900684938384708892354245135095993326227054377576869144176556296258000588577826313424241535146273928711510678530864695945775322011021464619760970036834643909450865063470342681886653922474289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) be36ab4d343a4acac4c3f65aa137d2ba443beb9d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (278 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.pitneybowes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.pbondemand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.g1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrum.pitneybowes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrum.pitneybowes.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.pbinsight.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrum.pitneybowes.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.g1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.pitneybowes.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.pitneybowes.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrum.pbinsight.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f5c0fd4e800000403004730450220172e6ced1bf01c76828e0089324c0f3d5ccd763735b8e6c3c2b06075eadb06c9022100cb943ada7046ae3dd36f905aa9f82c3c1398a6670d5a7ad84dd27c74baebecb40076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f5c0fd5ad0000040300473045022100b1cce2864e61199ad653cea59628c6a1b0f2bd7215cf9d00ca80aca7cbc5570902203ee2956ebdf26d366822b9ef8488669a615b7ca32f417e7be021da3707ee5092 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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