i.abcnews.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:d6:59:37:98:6a:d5:9b:b9:4d:0c:d0:db:56:71:aa was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=i.abcnews.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:d6:59:37:98:6a:d5:9b:b9:4d:0c:d0:db:56:71:aaSerial Number (int): 11746785033180319745324408006470169002
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 3b:fe:00:af:0d:38:f0:d0:26:a5:8e:5b:09:d1:f6:70:80:38:6d:58
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 61:40:44:a6:5f:70:c6:89:7f:27:9f:f5:8e:46:70:cf:89:ec:31:d9
Fingerprint (sha256): 07:e4:64:ba:b0:12:85:61:a9:ee:df:80:70:22:fd:06:f2:31:d9:9e:b3:40:07:2b:8e:1e:98:5a:68:85:ba:e0
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate i.abcnews.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for i.abcnews.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
i.abcnews.com
qa.i.abcnews.com
preview.i.abcnews.com
qa.i.abcnews.com
preview.i.abcnews.com
Other certificates including the domain name abcnews.com
(limited to 100 certificates)
editions.geo.hosted.abcotvs.com
s.abcnews.com
keyframe-cdn.abcnews.com
cdn1.edgedatg.com
i.abcnews.com
static.ddb.go.com
storyline.abcnews.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
keyframe-cdn.abcnews.com
editions.geo.hosted.abcotvs.com
s.abcnews.com
storyline.abcnews.com
static.ddb.go.com
accept.storyline.abcnews.com
editions.geo.hosted.abcotvs.com
a.abcnews.go.com
static.ddb.go.com
cdn1.edgedatg.com
static.ddb.go.com
storyline-standby.mws.disney.com
static.ddb.go.com
s.abcnews.com
qa.s.abcnews.com
cdn1.edgedatg.com
s.abcnews.com
static.ddb.go.com
static.ddb.go.com
keyframe-cdn.abcnews.com
static.ddb.go.com
s.abcnews.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
abcnews.com
a.abcnews.go.com
static.ddb.go.com
static.ddb.go.com
qa.s.abcnews.com
a.abcnews.go.com
cdn1.edgedatg.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
s.abcnews.com
*.mt.abcnews.com
static.ddb.go.com
static.ddb.go.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
s.abcnews.com
qa.s.abcnews.com
s.abcnews.com
a.abcnews.go.com
gc.abcnews.com
media.abcnews.com
qa.s.abcnews.com
s.abcnews.com
a.abcnews.go.com
static.ddb.go.com
ondemand.abcnews.com
a.abcnews.go.com
static.ddb.go.com
abcnews.com
cdn1.edgedatg.com
static.ddb.go.com
media.abcnews.com
editions.geo.hosted.abcotvs.com
qa.s.abcnews.com
s.abcnews.com
s.abcnews.com
abcnews.com
static.ddb.go.com
keyframe-cdn.abcnews.com
cdn1.edgedatg.com
editions.geo.hosted.abcotvs.com
cdn1.edgedatg.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
cdn1.edgedatg.com
s.abcnews.com
s.abcnews.com
s.abcnews.com
a.abcnews.go.com
i.abcnews.com
static.ddb.go.com
cdn1.edgedatg.com
storyline-standby.mws.disney.com
cdn1.edgedatg.com
a.abcnews.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
keyframe-cdn.abcnews.com
editions.geo.hosted.abcotvs.com
media.abcnews.com
editions.geo.hosted.abcotvs.com
media.abcnews.com
s.abcnews.com
keyframe-cdn.abcnews.com
cdn1.edgedatg.com
i.abcnews.com
static.ddb.go.com
storyline.abcnews.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
keyframe-cdn.abcnews.com
editions.geo.hosted.abcotvs.com
s.abcnews.com
storyline.abcnews.com
static.ddb.go.com
accept.storyline.abcnews.com
editions.geo.hosted.abcotvs.com
a.abcnews.go.com
static.ddb.go.com
cdn1.edgedatg.com
static.ddb.go.com
storyline-standby.mws.disney.com
static.ddb.go.com
s.abcnews.com
qa.s.abcnews.com
cdn1.edgedatg.com
s.abcnews.com
static.ddb.go.com
static.ddb.go.com
keyframe-cdn.abcnews.com
static.ddb.go.com
s.abcnews.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
abcnews.com
a.abcnews.go.com
static.ddb.go.com
static.ddb.go.com
qa.s.abcnews.com
a.abcnews.go.com
cdn1.edgedatg.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
s.abcnews.com
*.mt.abcnews.com
static.ddb.go.com
static.ddb.go.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
s.abcnews.com
qa.s.abcnews.com
s.abcnews.com
a.abcnews.go.com
gc.abcnews.com
media.abcnews.com
qa.s.abcnews.com
s.abcnews.com
a.abcnews.go.com
static.ddb.go.com
ondemand.abcnews.com
a.abcnews.go.com
static.ddb.go.com
abcnews.com
cdn1.edgedatg.com
static.ddb.go.com
media.abcnews.com
editions.geo.hosted.abcotvs.com
qa.s.abcnews.com
s.abcnews.com
s.abcnews.com
abcnews.com
static.ddb.go.com
keyframe-cdn.abcnews.com
cdn1.edgedatg.com
editions.geo.hosted.abcotvs.com
cdn1.edgedatg.com
static.ddb.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
cdn1.edgedatg.com
s.abcnews.com
s.abcnews.com
s.abcnews.com
a.abcnews.go.com
i.abcnews.com
static.ddb.go.com
cdn1.edgedatg.com
storyline-standby.mws.disney.com
cdn1.edgedatg.com
a.abcnews.go.com
editions.geo.hosted.abcotvs.com
static.ddb.go.com
keyframe-cdn.abcnews.com
editions.geo.hosted.abcotvs.com
media.abcnews.com
editions.geo.hosted.abcotvs.com
media.abcnews.com
Certificate
The complete raw certificate details for i.abcnews.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIQCNZZN5hq1Zu5TQzQ21ZxqjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMTAwMDAwMDBaFw0yMDAyMTAx MjAwMDBaMBgxFjAUBgNVBAMTDWkuYWJjbmV3cy5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQD8/29E7aODHK1pOvrKi2LqQnyPta/UMkAWN0E7l/yg EPwq57ck1Rvl4uJzWQHjXs2Cw5xumjJESbZuTo6yixaluO0tDrixLU7IHtoKEN7k ztZtMvNyweP5NGG2GweLkOGI/vxYx8W2kyY/OzaMymxnn6St2xjF3UxTGW02XmfO s3/t5TEHArz3+GMV9oIrQqYakOQmnW89aJFkyZg5fJUzL4hM6g+Bf59tSV/Qb8G7 GUUQnpNGKlt/nszOswabMxpo49mnSthBUdMwskAN9GLgFoHfmqy7lIRk36flxWbe hwpzrE7PP4ZwrFP+6/Bd60KiKCzIp8fVT4mPJTeTsvV7AgMBAAGjggKgMIICnDAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUO/4Arw04 8NAmpY5bCdH2cIA4bVgwQQYDVR0RBDowOIINaS5hYmNuZXdzLmNvbYIQcWEuaS5h YmNuZXdzLmNvbYIVcHJldmlldy5pLmFiY25ld3MuY29tMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g LIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAG A1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3J0MAwGA1UdEwEB/wQCMAAwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQCy HgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAWg49uuaAAAEAwBGMEQC IBb6pfv3kLyv+l8a/E0BX9BeWpqJ0zBTO7LpvfdPWsTyAiA8G0TtkMKoCUzD+Spq SxN99Dul4UXHK9dHRp/Ww8Bz5AB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG0 6v9eoIMPAAABaDj27F8AAAQDAEYwRAIgQBSrNcB98vzTVkoCV6jgZbohs7i+bD8i UjhPda06UYECIFwjkjeylyeR92MFu82IAXuWOO2iunlLxKsgBioOzeDZMA0GCSqG SIb3DQEBCwUAA4IBAQAxo464S+23gWbUqpFWXRn90FX7a3ktohqkgmdw9+suMApg 1cLhsToG6tCLRYNCvRAxOy9oT2oVP81V20wSJgya/rWdf1DgnukGrkH+NhvqSdgD cqtJAMsoWoEZ5Wf6P3/uzcTItGQJhMsyX4q8PYtwb9J5MGJ5YMDT120vEE+MdFOH /DdHSriSnG31Y3oDE6+eFfepsM4YEaLeZebMZWDnzBqQYFQCcEdQrvwQUaS7Ji0a qr0YGZxg6kERWDVpFqwUXhHDp8CydoYYSwtNpkp1awPr8QxES26KApBtlIKDB6MB xpKt50Gzd0NZY9cQNDmPp0hK7P8NleVLJE/fqGUA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/P9vRO2jgxytaTr6yoti 6kJ8j7Wv1DJAFjdBO5f8oBD8Kue3JNUb5eLic1kB417NgsOcbpoyREm2bk6OsosW pbjtLQ64sS1OyB7aChDe5M7WbTLzcsHj+TRhthsHi5DhiP78WMfFtpMmPzs2jMps Z5+krdsYxd1MUxltNl5nzrN/7eUxBwK89/hjFfaCK0KmGpDkJp1vPWiRZMmYOXyV My+ITOoPgX+fbUlf0G/BuxlFEJ6TRipbf57MzrMGmzMaaOPZp0rYQVHTMLJADfRi 4BaB35qsu5SEZN+n5cVm3ocKc6xOzz+GcKxT/uvwXetCoigsyKfH1U+JjyU3k7L1 ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11746785033180319745324408006470169002 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'i.abcnews.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31938012369724290118170047348089757701408716619018748502665631994925944284667587554270199918390745177796204062536870563033596069172538855124616347463957479543744005384440709391454919171542645850528132770016143985087679060362657685909530611603671706943328555491954018656995673312104128602254998161806759594916122999129973722551858540075915443429576248429928616143594188213213046694586524186365008161277086122237992518286692587473783863871893425526110949834802994761515118718549576390801282717592318013944889534612687229187936120266816153500115584276373963131441005527207553872725127371482017491560050270147258990392699 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3bfe00af0d38f0d026a58e5b09d1f67080386d58 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.abcnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.i.abcnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.i.abcnews.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016838f6eb9a0000040300463044022016faa5fbf790bcaffa5f1afc4d015fd05e5a9a89d330533bb2e9bdf74f5ac4f202203c1b44ed90c2a8094cc3f92a6a4b137df43ba5e145c72bd747469fd6c3c073e40075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016838f6ec5f000004030046304402204014ab35c07df2fcd3564a0257a8e065ba21b3b8be6c3f2252384f75ad3a518102205c239237b2972791f76305bbcd88017b9638eda2ba794bc4ab20062a0ecde0d9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0031a38eb84bedb78166d4aa91565d19fdd055fb6b792da21aa4826770f7eb2e300a60d5c2e1b13a06ead08b458342bd10313b2f684f6a153fcd55db4c12260c9afeb59d7f50e09ee906ae41fe361bea49d80372ab4900cb285a8119e567fa3f7feecdc4c8b4640984cb325f8abc3d8b706fd27930627960c0d3d76d2f104f8c745387fc37474ab8929c6df5637a0313af9e15f7a9b0ce1811a2de65e6cc6560e7cc1a90605402704750aefc1051a4bb262d1aaabd18199c60ea411158356916ac145e11c3a7c0b27686184b0b4da64a756b03ebf10c444b6e8a02906d94828307a301c692ade741b377435963d71034398fa7484aecff0d95e54b244fdfa86500