psbtp.micro-cosmos.internal.psb-stg.fsapi.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:6e:ba:6c:47:e9:ce:0a:63:c1:6f:35:18:1c:da:f4 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=psbtp.micro-cosmos.internal.psb-stg.fsapi.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:6e:ba:6c:47:e9:ce:0a:63:c1:6f:35:18:1c:da:f4
Serial Number (int): 1904161757307666075726245063244438260
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c3:0b:be:dd:d5:17:a0:6a:da:7b:88:8f:c8:fc:89:63:4c:c4:35:b4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cd:02:b7:5a:68:f1:31:e9:e2:ea:ce:dd:4b:5d:2c:6c:e0:6e:94:03
Fingerprint (sha256): 07:72:a1:2c:47:3e:d4:b8:35:1c:1f:51:69:b5:07:db:4b:e0:30:74:3e:c3:55:a2:4e:91:75:84:7e:fe:40:72

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate psbtp.micro-cosmos.internal.psb-stg.fsapi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psbtp.micro-cosmos.internal.psb-stg.fsapi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psbtp.micro-cosmos.internal.psb-stg.fsapi.com

Other certificates including the domain name fsapi.com

(limited to 100 certificates)
relay.stg.withsecure.com
us2.spi.psb.fsapi.com
lorsp.sc2.fsapi.com
*.sensesdk-ci.fsapi.com
lykaal-layer3.mind.pc-ci.fsapi.com
emea.psb-regional-gateway.psb.fsapi.com
psblive.reporting-service.internal.psb-stg.fsapi.com
bigdata-labs.ds.fsapi.com
stable.epp.elements-ci.fsapi.com
toucan.accounts-apac.fsapi.com
helrdomaster02.fi.f-secure.com
portal.radar.elements-stg.withsecure.com
gustvimaster.infra-dev-services.fsapi.com
ew1.doorman.ci.gw.fsapi.com
gustvi.infra-dev-services.fsapi.com
stable.psb-ci.fsapi.com
ew1-psb-ci-latest-ecs-internal.psb-ci.fsapi.com
public.prod.ane1.cosmos-prd.fsapi.com
eu1.psb.fsapi.com
update-karma.pc.fsapi.com
mobile-dl.sp.f-secure.com
*.accounts-emea-ci.fsapi.com
ddr-dev.sensesdk-ci.fsapi.com
accounts-stg.fsapi.com
latest.psb-regional-gateway.psb-ci.fsapi.com
jenkins-staging.fi.f-secure.com
eu1.reporting-service.internal.psb.fsapi.com
helcccpmaster01.fi.f-secure.com
guts2.sp.f-secure.com
jp3.psb.fsapi.com
influxdb-mindcontrol.pc-ci.fsapi.com
ulmaster01.internalsecure.com
famp-ci.fsapi.com
savaja-layer3.mind.pc-ci.fsapi.com
doorman.sp.f-secure.com
restmc.mind.sc2.fsapi.com
client-alb.musttu.guts2-ci.fsapi.com
alb.j4a.infra-dev-services.fsapi.com
api.prd.ew1.doorman.fsapi.com
ddr-dev2.sensesdk-ci.fsapi.com
token.accounts-apac-ci-integration.fsapi.com
obus.sc.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
client.sarkar.guts2-ci.fsapi.com
ntstr.pc.fsapi.com
psbtp.micro-cosmos.internal.psb-stg.fsapi.com
obus.eu-west-1.mind.pc-ci.fsapi.com
hydra.eu-west-1.mind.pc-ci.fsapi.com
ups.ups-prd.fsapi.com
lykaal-layer3.mind.pc-ci.fsapi.com
lorsp-karma.sc2.fsapi.com
eu1.spi.psb.fsapi.com
mind-bin-feature-ex.ap-southeast-1.mind.pc.fsapi.com
public.stable.ew1.cosmos-ci.fsapi.com
dds-dev3.sensesdk-ci.fsapi.com
alb.j4a.services-ci-infra-services.fsapi.com
bump.borgs-ci.fsapi.com
relay.withsecure.com
ddr-dev2.sensesdk-ci.fsapi.com
eu-smi-eu.spi.psb.fsapi.com
sandbox.dev-lehtjo.ci.gw.fsapi.com
dp-antial.ds-ci.fsapi.com
accounts-ci-integration.fsxt.net
sebe-lb-int.eu-west-1.ele.fsapi.com
famp.fsapi.com
staging.pete.ds.fsapi.com
psblive.psb-stg.fsapi.com
redirects.ele.fsapi.com
scanner.cloudprotection.fsapi.com
monitoring.savaja.sc.fsapi.com
ew1a-splunk-indexer.infra-dev-services.fsapi.com
alb.j4a.infra-dev-services.fsapi.com
ws-ci.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
sarkar.guts2-ci.fsapi.com
cpa.ci.ew1.entitlements-ci.fsapi.com
doorman.sp.f-secure.com
ntstr.eu-west-1.mind.pc-stg.fsapi.com
doorman-beta.sp.f-secure.com
salmi-s3-api.eu-west-1.sc-ci.fsapi.com
staging.pete.ds.fsapi.com
toucan.accounts-emea-ci-integration.fsapi.com
infra-auth-proxy.ds-ci.fsapi.com
token.accounts-emea.fsapi.com
ew1b-splunk-indexer.ci-infra-services.fsapi.com
influxdb-mindcontrol-lykaal.pc-ci.fsapi.com
toucan.accounts-apac-stg.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
push-na.fsapi.com
api.int.ci.ew1.entitlements-ci.fsapi.com
accounts-ci-integration.fsxt.net
atlas.ci.fsapi.com
admin.guts2-prd.fsapi.com
psb3.batch-password-protection.internal.psb.fsapi.com
jenkins-elements02.internalsecure.com
emea4.psb.fsapi.com
rexex.kaleeri.fsapi.com
sebe-tp.fsapi.com
stable.psb-ci.fsapi.com
admin.int.ci.ew1.guts2-ci.fsapi.com

Certificate

The complete raw certificate details for psbtp.micro-cosmos.internal.psb-stg.fsapi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIQAW66bEfpzgpjwW81GBza9DANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMjUwMDAwMDBaFw0yMDAyMjUx
MjAwMDBaMDgxNjA0BgNVBAMTLXBzYnRwLm1pY3JvLWNvc21vcy5pbnRlcm5hbC5w
c2Itc3RnLmZzYXBpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANpt84UXD4bZBOFJSDn4IiZ0JmIs9jtvOdqFHeE0zOVmQ8Bb9dp364RBfykGYZgN
2yXrjgIGme9yS4fEe6tyWSM5Xy7ebX7Zk5KxnHL97LEGH1WTKCYp0P5101o4DhnT
7PlEGK35/gRF3pBFstdXyZmEl/ZxS/OZTqsewoIFqpo/mVhxWrDS6EgU9Ym0IB8S
ILNwJBJn+zsdITCyfAnwVv4ixx0ogP5jYQRkjD7+m6t0B/ZtHRLFXJVKnfh8/nSU
OvowbVefSNogELB/WJwYnQT4pTTjb/vNA0OwJHPWbGAlCM7CpS405MN73uRI5lIT
1jn5UgIbhxwq9umm0HDfYucCAwEAAaOCAaYwggGiMB8GA1UdIwQYMBaAFFmkZgZS
oHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTDC77d1Regatp7iI/I/IljTMQ1tDA4
BgNVHREEMTAvgi1wc2J0cC5taWNyby1jb3Ntb3MuaW50ZXJuYWwucHNiLXN0Zy5m
c2FwaS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv
bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj
YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0RJ2mPCaJgd0GRu
Tus/RPScdSckDIcZbhZHbcphlNEOfpSeIMcQBYnf3CtGsLfqVqqZehiaVnylcYt6
dz2htXwF5wwZvxhuFyAiSF1Rmd1jKaQN0dsZ3JUl8ObUMb8WF9bO9nblEa4TTjSd
59a192HhG9zUfaBH9WtNOV2nhOeJav97xMBMjR3G/FgjqImO72NPdvy93M3RZZxi
is926GOYdjG/zLqfOFkS9TCD7C1xFllMk2Z5rhfo1mCvTYA+49pLU/GySEmjhQd+
MEufOBBNWIKVirAZ9THIRbSpn81KOhEtQfCkxlcBQ1KKKqUcAVSQbq31+lVqp27H
7rkq0g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m3zhRcPhtkE4UlIOfgi
JnQmYiz2O2852oUd4TTM5WZDwFv12nfrhEF/KQZhmA3bJeuOAgaZ73JLh8R7q3JZ
IzlfLt5tftmTkrGccv3ssQYfVZMoJinQ/nXTWjgOGdPs+UQYrfn+BEXekEWy11fJ
mYSX9nFL85lOqx7CggWqmj+ZWHFasNLoSBT1ibQgHxIgs3AkEmf7Ox0hMLJ8CfBW
/iLHHSiA/mNhBGSMPv6bq3QH9m0dEsVclUqd+Hz+dJQ6+jBtV59I2iAQsH9YnBid
BPilNONv+80DQ7Akc9ZsYCUIzsKlLjTkw3ve5EjmUhPWOflSAhuHHCr26abQcN9i
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1904161757307666075726245063244438260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psbtp.micro-cosmos.internal.psb-stg.fsapi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27574169464519793060667499028211279254802090105753181420766203013454881307970867091938374567362171790252555678520755989145760115727132247574364008415072962551038819208859168154773772858365969054152552793621977094627794725905660687721322240400941058117078962569758903909610147867376047270812317720718404641282302327939109125764229590945341990606682250091212275188320551029502759903564809206639915159249184399085066291913582639031888617971536456525971193523392365468466034151570171382164427298627980510841800221903597652576517757322622745652252999760461430303865313536185449799910532877630585158174294748598290710749927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c30bbeddd517a06ada7b888fc8fc89634cc435b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psbtp.micro-cosmos.internal.psb-stg.fsapi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003b4449da63c268981dd0646e4eeb3f44f49c7527240c87196e16476dca6194d10e7e949e20c7100589dfdc2b46b0b7ea56aa997a189a567ca5718b7a773da1b57c05e70c19bf186e172022485d5199dd6329a40dd1db19dc9525f0e6d431bf1617d6cef676e511ae134e349de7d6b5f761e11bdcd47da047f56b4d395da784e7896aff7bc4c04c8d1dc6fc5823a8898eef634f76fcbddccdd1659c628acf76e863987631bfccba9f385912f53083ec2d7116594c936679ae17e8d660af4d803ee3da4b53f1b24849a385077e304b9f38104d5882958ab019f531c845b4a99fcd4a3a112d41f0a4c6570143528a2aa51c0154906eadf5fa556aa76ec7eeb92ad2