*.frontend.public.atl-paas.net
Issued by Amazon
About this certificate
This digital certificate with serial number 04:7f:99:e9:37:e3:2e:d3:04:d7:ee:4b:ed:db:cf:b0 was issued on by Amazon.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.frontend.public.atl-paas.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:7f:99:e9:37:e3:2e:d3:04:d7:ee:4b:ed:db:cf:b0Serial Number (int): 5979455370301133952300845165061066672
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 88:8c:15:53:dd:17:95:99:ee:cf:dc:8c:c7:77:15:01:4f:b1:3c:60
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 18:a2:33:42:ec:f0:d8:a2:41:7b:69:51:33:b7:4a:83:5e:c5:28:7a
Fingerprint (sha256): 09:8c:94:32:44:76:4a:6b:b6:20:80:d1:c8:7d:30:0c:db:2b:6d:a7:72:8f:ad:0a:74:8e:a4:ee:65:2a:17:2d
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.frontend.public.atl-paas.net
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.frontend.public.atl-paas.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.frontend.public.atl-paas.net
*.prod-apse2.frontend.public.atl-paas.net
*.prod-east.frontend.public.atl-paas.net
*.atlassian.com
*.prod-apse.frontend.public.atl-paas.net
*.prod-west2.frontend.public.atl-paas.net
*.prod-euwest.frontend.public.atl-paas.net
*.prod-west.frontend.public.atl-paas.net
*.prod-eucentral.frontend.public.atl-paas.net
*.prod-apse2.frontend.public.atl-paas.net
*.prod-east.frontend.public.atl-paas.net
*.atlassian.com
*.prod-apse.frontend.public.atl-paas.net
*.prod-west2.frontend.public.atl-paas.net
*.prod-euwest.frontend.public.atl-paas.net
*.prod-west.frontend.public.atl-paas.net
*.prod-eucentral.frontend.public.atl-paas.net
Other certificates including the domain name atl-paas.net
(limited to 100 certificates)
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
ingress-int-01.paas-stgwest2.us-west-2.kitt-inf.net
*.prod.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
ingress-internal-01.paas-pdevapse2.ap-southeast-2.kitt-inf.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
ingress-internal-01.paas-devwest2.us-west-2.kitt-inf.net
*.atl-paas.net
ingress-internal-01.paas-stgwest2.us-west-2.kitt-inf.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.platdev.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.staging.atl-paas.net
ingress-cust-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atlassian.io
*.atl-paas.net
ingress-internal-01.ap-southeast-2.paas-playground3.kitt-inf.net
*.staging.atl-paas.net
ingress-internal-01.us-west-2.paas-stg.kitt-inf.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atl-paas.net
*.atlassian.io
*.platdev.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.alvintest.atl-paas.net
*.platdev.atl-paas.net
ingress-internal-01.paas-prodwest2.us-west-2.kitt-inf.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
ingress-internal-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
ingress-internal-01.paas-prodeast.us-east-1.kitt-inf.net
*.staging.atlassian.io
*.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
ingress-int-01.paas-stgwest2.us-west-2.kitt-inf.net
*.prod.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
ingress-internal-01.paas-pdevapse2.ap-southeast-2.kitt-inf.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
ingress-internal-01.paas-devwest2.us-west-2.kitt-inf.net
*.atl-paas.net
ingress-internal-01.paas-stgwest2.us-west-2.kitt-inf.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.platdev.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.staging.atl-paas.net
ingress-cust-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atlassian.io
*.atl-paas.net
ingress-internal-01.ap-southeast-2.paas-playground3.kitt-inf.net
*.staging.atl-paas.net
ingress-internal-01.us-west-2.paas-stg.kitt-inf.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atl-paas.net
*.atlassian.io
*.platdev.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.alvintest.atl-paas.net
*.platdev.atl-paas.net
ingress-internal-01.paas-prodwest2.us-west-2.kitt-inf.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
ingress-internal-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
ingress-internal-01.paas-prodeast.us-east-1.kitt-inf.net
*.staging.atlassian.io
*.atlassian.io
Certificate
The complete raw certificate details for *.frontend.public.atl-paas.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIQBH+Z6TfjLtME1+5L7dvPsDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAzMDIwMDAwMDBaFw0yMzA0MDEy MzU5NTlaMCkxJzAlBgNVBAMMHiouZnJvbnRlbmQucHVibGljLmF0bC1wYWFzLm5l dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJOUSM97n4ygGMGHrX2F b2zcvUsikrgNJU+YULJBEa/H8m+2TwcEwfTLTpihXdeol4wuRA4AJAmp8hLvlxSy F8S/WS9OAI10574/D8K5uL3dyHG55roicdl8E5apEzi2FdxGDdSDKCe0nViDtHAw DSqm2EdeJIggof1Eozei/Q4h8ZMC6l0v4AdDrbuU6vfuMA4P9CgwIn453xT3PQVJ ZN1Dc+lJrDQMpyoh3DeJZDhjpHtd9IJ99K7v6EkSlU80683+iKNE3vecIelvCPtW e17XPOVHyBC9T1I6eBsMaSHxyiYt8FEXvv4wpvCxVTCWFoPMlaUEPku+BfAkajX2 BYcCAwEAAaOCAtIwggLOMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q MB0GA1UdDgQWBBSIjBVT3ReVme7P3IzHdxUBT7E8YDCCAW0GA1UdEQSCAWQwggFg gh4qLmZyb250ZW5kLnB1YmxpYy5hdGwtcGFhcy5uZXSCKSoucHJvZC1hcHNlMi5m cm9udGVuZC5wdWJsaWMuYXRsLXBhYXMubmV0gigqLnByb2QtZWFzdC5mcm9udGVu ZC5wdWJsaWMuYXRsLXBhYXMubmV0gg8qLmF0bGFzc2lhbi5jb22CKCoucHJvZC1h cHNlLmZyb250ZW5kLnB1YmxpYy5hdGwtcGFhcy5uZXSCKSoucHJvZC13ZXN0Mi5m cm9udGVuZC5wdWJsaWMuYXRsLXBhYXMubmV0gioqLnByb2QtZXV3ZXN0LmZyb250 ZW5kLnB1YmxpYy5hdGwtcGFhcy5uZXSCKCoucHJvZC13ZXN0LmZyb250ZW5kLnB1 YmxpYy5hdGwtcGFhcy5uZXSCLSoucHJvZC1ldWNlbnRyYWwuZnJvbnRlbmQucHVi bGljLmF0bC1wYWFzLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc2Nh MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EM AQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2Nh MWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR7veLz7Wugkj8ZPZb3F bgv/dEIk6yeN7stsQkeQqG+mzbepoj3GiUqo0CG7yFt+wGWFMMQBwR/n8CXKEpgQ QFH9VKuWhiJvwIOD3p8kqBtrVbqpHlU20s8LDiOz4umceRqpQE6UVKrVg6NWZ28L iijMwdV2tCaBenhDy4WWeyOYk9icf6N1yfuXngW6lTo1/WyNRL+Zg4HIAhoch17Q BZQMO4d++Qns0WgSIFQPSrXBsHq7DjjRD8hZvbhTBygAI6Mi3893WkgSATxWObw2 s8nVSm3IfafZaXar7q3VhDeQXutm25pQBcSdjR+DSzm6roKKrWWR4c1Dhsvenvwy AQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5RIz3ufjKAYwYetfYVv bNy9SyKSuA0lT5hQskERr8fyb7ZPBwTB9MtOmKFd16iXjC5EDgAkCanyEu+XFLIX xL9ZL04AjXTnvj8Pwrm4vd3IcbnmuiJx2XwTlqkTOLYV3EYN1IMoJ7SdWIO0cDAN KqbYR14kiCCh/USjN6L9DiHxkwLqXS/gB0Otu5Tq9+4wDg/0KDAifjnfFPc9BUlk 3UNz6UmsNAynKiHcN4lkOGOke130gn30ru/oSRKVTzTrzf6Io0Te95wh6W8I+1Z7 Xtc85UfIEL1PUjp4GwxpIfHKJi3wURe+/jCm8LFVMJYWg8yVpQQ+S74F8CRqNfYF hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5979455370301133952300845165061066672 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.frontend.public.atl-paas.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18630152600795292670080484724319133350903374228679965809436036611818402841772941398097837067696445651896941793063131429564338237586728727824900486588620990702981608647844520068178791052322582113693206736307744913020306330844461957265884695526123332282736919297376682021720132926361219479249688699680229556480571454877500749522322133617915213132941202847485162252929511619707957811574641650736805019603615102749693351279226054458865583744163351372526774411184726495575371704997468575531880396482745906378052865722842337816615717660733597254827671825341888785462990017904378445021295446470788849097360762415462636455303 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 888c1553dd179599eecfdc8cc77715014fb13c60 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (356 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-apse2.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-east.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlassian.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-apse.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-west2.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-euwest.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-west.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-eucentral.frontend.public.atl-paas.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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