prod-enrichment.frdstr.com
Issued by Amazon
About this certificate
This digital certificate with serial number 02:3b:91:ad:a8:8b:c7:0c:07:dd:c6:aa:ee:f5:01:83 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=prod-enrichment.frdstr.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:3b:91:ad:a8:8b:c7:0c:07:dd:c6:aa:ee:f5:01:83Serial Number (int): 2967756214250493347603041949058400643
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 05:48:15:11:a0:b8:36:8f:35:53:04:55:fb:88:be:d6:94:c4:62:7c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 07:85:56:64:eb:1f:2e:a0:97:41:ad:56:c7:3a:f3:39:d0:f7:64:cd
Fingerprint (sha256): 08:5e:35:5e:d2:c0:6a:f7:5d:cc:ff:eb:9f:99:b3:b7:7a:a8:02:9d:23:a7:26:20:ec:85:08:80:68:13:fa:4a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate prod-enrichment.frdstr.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prod-enrichment.frdstr.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prod-enrichment.frdstr.com
Other certificates including the domain name frdstr.com
(limited to 100 certificates)
redash.frdstr.com
prod-accounts-es-writer.frdstr.com
orizon.coleta.relatoweb.com.br
monitor.frdstr.com
storm.frdstr.com
rfpxer.frdstr.com
stagingportal.frdstr.com
hq.frdstr.com
artifactory.frdstr.com
cr0n.frdstr.com
three-ds-new.frdstr.com
sites.use.frdstr.com
tableau.frdstr.com
dev.atlas.frdstr.com
prod-enrichment.frdstr.com
squid.frdstr.com
prodreindex.es.frdstr.com
*.es.frdstr.com
toolbox.frdstr.com
docu.frdstr.com
hq.frdstr.com
prod-sessions-es-writer-f.frdstr.com
squid.frdstr.com
spectator.frdstr.com
ptrend.frdstr.com
chuck.usw.frdstr.com
prod-sessions-es-writer-l.frdstr.com
monitor.usw.frdstr.com
geocodio.frdstr.com
estest.frdstr.com
redash.frdstr.com
hq.frdstr.com
sessions-persistence.frdstr.com
prod-enrichment.frdstr.com
sites.usw.frdstr.com
cr0n.frdstr.com
prodintents-euw.es.frdstr.com
artifactory.frdstr.com
cr0n.usw.frdstr.com
cr0n.frdstr.com
rugatkins.use.frdstr.com
stagingportal.frdstr.com
prod-vault-helm.pcimon.frdstr.com
prod-vault-helm.euw.frdstr.com
accounts-storm-realtime.frdstr.com
historun-enrichment-google-proxy.frdstr.com
prodfp.usw.frdstr.com
academy.frdstr.com
portal.frdstr.com
docu.frdstr.com
dev-consul-api-gwsame-vpc.frdstr.com
claims.frdstr.com
prod-consul-api-gwsame-vpc.frdstr.com
dev-vault-k8s.frdstr.com
monitor.frdstr.com
prod-sessions-es-writer-l.frdstr.com
confetti-ui.use.frdstr.com
squid.frdstr.com
tableau.frdstr.com
prod-kafka-rest-proxy.frdstr.com
techradar.frdstr.com
dev-confetti.frdstr.com
artifactory.frdstr.com
cr0n.use.frdstr.com
smart-logic-policy-payload-maintainer.frdstr.com
develop-netservices.frdstr.com
stagingportal.usw.frdstr.com
dali.lightstream.euw.frdstr.com
gozer2.frdstr.com
thanos-querier.use.frdstr.com
gozer.frdstr.com
adaptive-auth.frdstr.com
prodintents-euw.es.frdstr.com
sigmund.frdstr.com
logging-kibana-public.frdstr.com
prod-tasks-md-writer-high.frdstr.com
redactor-staging.frdstr.com
enrichments.frdstr.com
sigmund.use.frdstr.com
batchman.frdstr.com
confetti.frdstr.com
squid.frdstr.com
*.es.frdstr.com
o11y-cert-frdstr.frdstr.com
pushgateway.use.frdstr.com
stagingportal.frdstr.com
dev-cyber-ip-enrichment.frdstr.com
status.use.frdstr.com
portal.frdstr.com
historun-enrichment-google-proxy.frdstr.com
prod-eh-a-tp-es-portal-w.frdstr.com
heimdall-dashboard.frdstr.com
alertmanager.use.frdstr.com
stagingportal.frdstr.com
prod-consul-api-gw-okta.frdstr.com
stagingportal.use.frdstr.com
stagingportal.frdstr.com
dev-consul-api-gw.frdstr.com
redash.frdstr.com
stagingportal.frdstr.com
prod-accounts-es-writer.frdstr.com
orizon.coleta.relatoweb.com.br
monitor.frdstr.com
storm.frdstr.com
rfpxer.frdstr.com
stagingportal.frdstr.com
hq.frdstr.com
artifactory.frdstr.com
cr0n.frdstr.com
three-ds-new.frdstr.com
sites.use.frdstr.com
tableau.frdstr.com
dev.atlas.frdstr.com
prod-enrichment.frdstr.com
squid.frdstr.com
prodreindex.es.frdstr.com
*.es.frdstr.com
toolbox.frdstr.com
docu.frdstr.com
hq.frdstr.com
prod-sessions-es-writer-f.frdstr.com
squid.frdstr.com
spectator.frdstr.com
ptrend.frdstr.com
chuck.usw.frdstr.com
prod-sessions-es-writer-l.frdstr.com
monitor.usw.frdstr.com
geocodio.frdstr.com
estest.frdstr.com
redash.frdstr.com
hq.frdstr.com
sessions-persistence.frdstr.com
prod-enrichment.frdstr.com
sites.usw.frdstr.com
cr0n.frdstr.com
prodintents-euw.es.frdstr.com
artifactory.frdstr.com
cr0n.usw.frdstr.com
cr0n.frdstr.com
rugatkins.use.frdstr.com
stagingportal.frdstr.com
prod-vault-helm.pcimon.frdstr.com
prod-vault-helm.euw.frdstr.com
accounts-storm-realtime.frdstr.com
historun-enrichment-google-proxy.frdstr.com
prodfp.usw.frdstr.com
academy.frdstr.com
portal.frdstr.com
docu.frdstr.com
dev-consul-api-gwsame-vpc.frdstr.com
claims.frdstr.com
prod-consul-api-gwsame-vpc.frdstr.com
dev-vault-k8s.frdstr.com
monitor.frdstr.com
prod-sessions-es-writer-l.frdstr.com
confetti-ui.use.frdstr.com
squid.frdstr.com
tableau.frdstr.com
prod-kafka-rest-proxy.frdstr.com
techradar.frdstr.com
dev-confetti.frdstr.com
artifactory.frdstr.com
cr0n.use.frdstr.com
smart-logic-policy-payload-maintainer.frdstr.com
develop-netservices.frdstr.com
stagingportal.usw.frdstr.com
dali.lightstream.euw.frdstr.com
gozer2.frdstr.com
thanos-querier.use.frdstr.com
gozer.frdstr.com
adaptive-auth.frdstr.com
prodintents-euw.es.frdstr.com
sigmund.frdstr.com
logging-kibana-public.frdstr.com
prod-tasks-md-writer-high.frdstr.com
redactor-staging.frdstr.com
enrichments.frdstr.com
sigmund.use.frdstr.com
batchman.frdstr.com
confetti.frdstr.com
squid.frdstr.com
*.es.frdstr.com
o11y-cert-frdstr.frdstr.com
pushgateway.use.frdstr.com
stagingportal.frdstr.com
dev-cyber-ip-enrichment.frdstr.com
status.use.frdstr.com
portal.frdstr.com
historun-enrichment-google-proxy.frdstr.com
prod-eh-a-tp-es-portal-w.frdstr.com
heimdall-dashboard.frdstr.com
alertmanager.use.frdstr.com
stagingportal.frdstr.com
prod-consul-api-gw-okta.frdstr.com
stagingportal.use.frdstr.com
stagingportal.frdstr.com
dev-consul-api-gw.frdstr.com
redash.frdstr.com
stagingportal.frdstr.com
Certificate
The complete raw certificate details for prod-enrichment.frdstr.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEijCCA3KgAwIBAgIQAjuRraiLxwwH3caq7vUBgzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMTgwMDAwMDBaFw0yMDA0MTgx MjAwMDBaMCUxIzAhBgNVBAMTGnByb2QtZW5yaWNobWVudC5mcmRzdHIuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6zlVK271tQz8f82XY7GjdoE mIPw0y8QyPnstgcsy60Kx80PTZTZCR3OS2z1iMOEtjpCX9MmK28m+uJc0RdZjrWR pkuXY7UDtz1sLZDPEQqEoBDrETkTeiMQgxBenhgX5/bmntTaDZChbCasQYWm/LOh najIjI6Kaaa56gUXzMnnm0F+UcTfqbleKU7nCKZD20kskB0Yd35lvlNyAkqJsATk LfAmH/8MKhkmXm0nRC7YB81ie87o3S1Xf0eO9BPUlI4aWTD2aOt0yAiLlQmizq6G 200WRpS2S5+PR0MSY5StdHAJylaGCGb6ND3wnPzTbD6dc5dAjcC+XguSe3aV9wID AQABo4IBkzCCAY8wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYD VR0OBBYEFAVIFRGguDaPNVMEVfuIvtaUxGJ8MCUGA1UdEQQeMByCGnByb2QtZW5y aWNobWVudC5mcmRzdHIuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0 cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB /wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFr/ PY3/74rPMaexFAOC0jd9iq5we7sAfpGZWVJUohDKyhyECVPS8P7kONT2VWUqxdPI YsG1ly+kysPY0mLy0/Z+d6bee9D2K8lKihUPS/e9ibVpTqOMJLJAdBEMlDTLd1FG a3caJkHTtgHanwQjFfW8h3AtOt3xRp9UezmeU4/VVtYjyW+W6Hb2HKuk5KUArsX1 eO7aMnktl9U54RCyZZV87JoetStJ37a/wMGuWroYncI3GgwT3WDgvO/KND2tR4U3 6wD4ig5pdJw46djRdp2b5v7sdpGirXc7eN4Dtc2AyY1TWnAfqsUFtjtGvaglHlFv TbbzQ/gr+I/yoqiXd34= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6zlVK271tQz8f82XY7G jdoEmIPw0y8QyPnstgcsy60Kx80PTZTZCR3OS2z1iMOEtjpCX9MmK28m+uJc0RdZ jrWRpkuXY7UDtz1sLZDPEQqEoBDrETkTeiMQgxBenhgX5/bmntTaDZChbCasQYWm /LOhnajIjI6Kaaa56gUXzMnnm0F+UcTfqbleKU7nCKZD20kskB0Yd35lvlNyAkqJ sATkLfAmH/8MKhkmXm0nRC7YB81ie87o3S1Xf0eO9BPUlI4aWTD2aOt0yAiLlQmi zq6G200WRpS2S5+PR0MSY5StdHAJylaGCGb6ND3wnPzTbD6dc5dAjcC+XguSe3aV 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2967756214250493347603041949058400643 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-enrichment.frdstr.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20157148597707264836558644730369677772022323615104813641937287100201425911178489640392701938957033766800124316182367672231470993663690973687374006885830535976559990730577366924020325334221003443944005363410657622287852328987247481400480739498366818453150472983230608355473889950077913164427779059807382789469693089777025307571337200423117873592482909915018989947468472803311455095835046234841631338459175973809351730291043733067977883943822270316503222701487748323527124578704321254342432462427674707117308270063867160052888376837935707496094691900001107024958938018393503511286978346923444561766088163581113151165943 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 05481511a0b8368f35530455fb88bed694c4627c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-enrichment.frdstr.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005aff3d8dffef8acf31a7b1140382d2377d8aae707bbb007e9199595254a210caca1c840953d2f0fee438d4f655652ac5d3c862c1b5972fa4cac3d8d262f2d3f67e77a6de7bd0f62bc94a8a150f4bf7bd89b5694ea38c24b24074110c9434cb7751466b771a2641d3b601da9f042315f5bc87702d3addf1469f547b399e538fd556d623c96f96e876f61caba4e4a500aec5f578eeda32792d97d539e110b265957cec9a1eb52b49dfb6bfc0c1ae5aba189dc2371a0c13dd60e0bcefca343dad478537eb00f88a0e69749c38e9d8d1769d9be6feec7691a2ad773b78de03b5cd80c98d535a701faac505b63b46bda8251e516f4db6f343f82bf88ff2a2a897777e