como-proxy.omnivore.io
Issued by Amazon
About this certificate
This digital certificate with serial number 02:7a:51:69:9b:e3:23:b9:82:f0:9e:d1:56:7e:37:0e was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=como-proxy.omnivore.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:7a:51:69:9b:e3:23:b9:82:f0:9e:d1:56:7e:37:0eSerial Number (int): 3293567450690811887818898112321042190
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 76:bb:87:db:49:e8:8c:24:29:11:ec:af:33:06:c5:60:4c:85:d7:3d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): b0:c5:36:49:37:f9:ac:80:83:6d:24:10:25:91:0b:75:54:c5:72:ce
Fingerprint (sha256): 09:94:c2:48:52:01:0b:57:a5:c6:48:24:88:cc:2e:83:ec:06:06:f5:64:df:ff:7a:a9:b1:7d:38:8a:9e:55:b0
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate como-proxy.omnivore.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for como-proxy.omnivore.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
como-proxy.omnivore.io
Other certificates including the domain name omnivore.io
(limited to 100 certificates)
panel.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
jobs.omnivore.io
coke-marketplace.omnivore.io
blog.omnivore.io
coke-marketplace.omnivore.io
confluence.status.atlassian.com
como-proxy.omnivore.io
confluence.status.atlassian.com
connect.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
agent.omnivore.io
confluence.status.atlassian.com
netlifystatus.com
confluence.status.atlassian.com
cc3.status.jasper.com
cc3.status.jasper.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
blog.omnivore.io
netlifystatus.com
cc3.status.jasper.com
agent.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
confluence.status.atlassian.com
performance-marketplace.omnivore.io
confluence.status.atlassian.com
netlifystatus.com
confluence.status.atlassian.com
confluence.status.atlassian.com
confluence.status.atlassian.com
blog.omnivore.io
menustatus.omnivore.io
netlifystatus.com
blog.omnivore.io
coke-marketplace.omnivore.io
agent.omnivore.io
netlifystatus.com
cc3.status.jasper.com
confluence.status.atlassian.com
coke-marketplace.omnivore.io
cc3.status.jasper.com
confluence.status.atlassian.com
cc3.status.jasper.com
omnivore.io
blog.omnivore.io
marketplace.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
menustatus.omnivore.io
confluence.status.atlassian.com
www.omnivore.io
confluence.status.atlassian.com
omnivore.io
cc3.status.jasper.com
confluence.status.atlassian.com
netlifystatus.com
confluence.status.atlassian.com
cc3.status.jasper.com
netlifystatus.com
omnivore.io
cc3.status.jasper.com
blog.omnivore.io
omnivore.io
menustatus.omnivore.io
*.omnivore.io
confluence.status.atlassian.com
jobs.omnivore.io
netlifystatus.com
menustatus.omnivore.io
netlifystatus.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
coke-marketplace.omnivore.io
netlifystatus.com
confluence.status.atlassian.com
blog.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
jobs.omnivore.io
coke-marketplace.omnivore.io
blog.omnivore.io
coke-marketplace.omnivore.io
confluence.status.atlassian.com
como-proxy.omnivore.io
confluence.status.atlassian.com
connect.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
agent.omnivore.io
confluence.status.atlassian.com
netlifystatus.com
confluence.status.atlassian.com
cc3.status.jasper.com
cc3.status.jasper.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
blog.omnivore.io
netlifystatus.com
cc3.status.jasper.com
agent.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
confluence.status.atlassian.com
performance-marketplace.omnivore.io
confluence.status.atlassian.com
netlifystatus.com
confluence.status.atlassian.com
confluence.status.atlassian.com
confluence.status.atlassian.com
blog.omnivore.io
menustatus.omnivore.io
netlifystatus.com
blog.omnivore.io
coke-marketplace.omnivore.io
agent.omnivore.io
netlifystatus.com
cc3.status.jasper.com
confluence.status.atlassian.com
coke-marketplace.omnivore.io
cc3.status.jasper.com
confluence.status.atlassian.com
cc3.status.jasper.com
omnivore.io
blog.omnivore.io
marketplace.omnivore.io
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
cc3.status.jasper.com
confluence.status.atlassian.com
menustatus.omnivore.io
confluence.status.atlassian.com
www.omnivore.io
confluence.status.atlassian.com
omnivore.io
cc3.status.jasper.com
confluence.status.atlassian.com
netlifystatus.com
confluence.status.atlassian.com
cc3.status.jasper.com
netlifystatus.com
omnivore.io
cc3.status.jasper.com
blog.omnivore.io
omnivore.io
menustatus.omnivore.io
*.omnivore.io
confluence.status.atlassian.com
jobs.omnivore.io
netlifystatus.com
menustatus.omnivore.io
netlifystatus.com
cc3.status.jasper.com
confluence.status.atlassian.com
confluence.status.atlassian.com
coke-marketplace.omnivore.io
netlifystatus.com
confluence.status.atlassian.com
blog.omnivore.io
confluence.status.atlassian.com
Certificate
The complete raw certificate details for como-proxy.omnivore.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgjCCA2qgAwIBAgIQAnpRaZvjI7mC8J7RVn43DjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA3MTYwMDAwMDBaFw0yMDA4MTYx MjAwMDBaMCExHzAdBgNVBAMTFmNvbW8tcHJveHkub21uaXZvcmUuaW8wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMGWphr3oAqby9tI0UxFkCsjAWyws uO6Or1TAHVrEJl9441VBJ4zZM/HJ5UPbLRR7WWWcvnTElEKAXRttETxtPPUaKgE/ eh2ONTuCLDMYR+K4yEeQvOoUgv53U+89e9LFeSqmtGC6tA58lGpEPqISqQqkSWYr v+R3N/JltXwg8qL2bXthhR2HnJfGabW/4Y84sfsOgcqefXbendjjPeN5ObOz5m4s CT5fxpJeQ7TkQPSYULZ71+CbnNADWSBsLHmqMHQR7rq7Hq6XID1k2e9f4E7FAZIH vrmWj5sB7X/uJm1tmtRS7DZkFqOAFk1yHa62fGJAb3sG8IcFgIiSTjg1AgMBAAGj ggGPMIIBizAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUdruH20nojCQpEeyvMwbFYEyF1z0wIQYDVR0RBBowGIIWY29tby1wcm94eS5v bW5pdm9yZS5pbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALodC4QnpfBxIX 8EnFqk9e24sO3yeEl1emTwjlzlswbOFUpW0YH4rSiPkfS4lNtLw/gLXSxDhtph3h h/pdvh6seg9LJvINF8smLA0a/F1IeGv+T7qHKh3mGFAI+yGlDOYVjEy+JPIl8k/b OesAoi8ikxOzBRl5DMPnHsPO2PdpNg0kHfyro5qiMhpFga8yLNuKuKAQL4b4lhEc 1SmWglAjcmZezceTVu1cIus2xpcSUR1i9a02LDUxBxgHnKNG7lAnkG4q8dd4aFvG Zwl5WK2Hcr/n+CqJHWC5ipBOHSHeo1Rri78OY9YBS/WSpOwAmbj/6h1lFTOqeBVa QGI4dMDd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjBlqYa96AKm8vbSNFMR ZArIwFssLLjujq9UwB1axCZfeONVQSeM2TPxyeVD2y0Ue1llnL50xJRCgF0bbRE8 bTz1GioBP3odjjU7giwzGEfiuMhHkLzqFIL+d1PvPXvSxXkqprRgurQOfJRqRD6i EqkKpElmK7/kdzfyZbV8IPKi9m17YYUdh5yXxmm1v+GPOLH7DoHKnn123p3Y4z3j eTmzs+ZuLAk+X8aSXkO05ED0mFC2e9fgm5zQA1kgbCx5qjB0Ee66ux6ulyA9ZNnv X+BOxQGSB765lo+bAe1/7iZtbZrUUuw2ZBajgBZNch2utnxiQG97BvCHBYCIkk44 NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3293567450690811887818898112321042190 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'como-proxy.omnivore.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22494283792332093413603262752282842502259833915801770663672419611495663655389882644772226207166512954217345990945299493842889714433079249195626862653286458308652058000283531672267971099268663728671236735772124581510917012573752638822969660867807396817249994652656392300238659336041955119206572698664902927637343888097994036279205705766754833159933300635304549058343759811945575002269079971610781106796901859071225803290392898749511983322116512859054336603997415167453676244554209336565645893426843207449127160082499176767915600695510983489245667449991706010806816964663831491782645336554082046052849626387331085645877 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 76bb87db49e88c242911ecaf3306c5604c85d73d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'como-proxy.omnivore.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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