cdn.dev.smb.rokt.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:67:dd:37:1d:27:d5:ad:19:d2:59:e4:29:0a:b1:11 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdn.dev.smb.rokt.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:67:dd:37:1d:27:d5:ad:19:d2:59:e4:29:0a:b1:11Serial Number (int): 8514661330233150235855945420591771921
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 39:4c:a2:a8:93:f0:49:a5:16:91:40:c9:0f:e6:f5:a6:83:cb:f0:0c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): fa:15:e0:ac:3d:89:55:d4:22:60:ed:26:24:d1:b6:54:ca:e7:e3:87
Fingerprint (sha256): 09:f8:3b:cd:42:e0:c4:a6:24:ce:fd:04:de:fb:80:b2:d7:44:aa:4a:4a:46:e3:ac:f6:c7:db:65:43:68:74:c0
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate cdn.dev.smb.rokt.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn.dev.smb.rokt.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn.dev.smb.rokt.com
Other certificates including the domain name rokt.com
(limited to 100 certificates)
rokt.com
customerstatus.eye-share.com
beta2-status.netsuite.com
docs.rokt.com
info.rokt.com
policies.rokt.com
herbalife.status.polaris.synopsys.com
es.rokt.com
customerstatus.eye-share.com
links.ecommerce.rokt.com
herbalife.status.polaris.synopsys.com
smb-ecommerce-api-eu-west-1.rokt.com
publishers.rokt.com
beta2-status.netsuite.com
rokt.com
beta2-status.netsuite.com
publishers.rokt.com
fr.rokt.com
smb-help.rokt.com
get.rokt.com
customerstatus.eye-share.com
smb-bigcommerce-app.rokt.com
cdn.dev.smb.rokt.com
es.rokt.com
playground.stage.rokt.com
compliance.rokt.com
rokt.com
rokt.com
cross-sell-proddemo.stage.smb.rokt.com
playground.uat.rokt.com
help.rokt.com
playground.rokt.com
smb-ecommerce-app.rokt.com
uts.rokt.com
cdn.stage.smb.rokt.com
build.rokt.com
publishers.rokt.com
customerstatus.eye-share.com
herbalife.status.polaris.synopsys.com
beta2-status.netsuite.com
es.rokt.com
my.stage.rokt.com
beta2-status.netsuite.com
customerstatus.eye-share.com
api.stage.smb.rokt.com
beta2-status.netsuite.com
jwks.stage.rokt.com
rokt.com
ideas.rokt.com
docs.rokt.com
stageeng.rokt.com
publishers.rokt.com
customerstatus.eye-share.com
fr.rokt.com
smb-bigcommerce-api.stage.rokt.com
customerstatus.eye-share.com
wordpress-test-qa2.stage.rokt.com
customerstatus.eye-share.com
get.rokt.com
rokt.com
fr.rokt.com
login.stage.rokt.com
build.rokt.com
herbalife.status.polaris.synopsys.com
stage.rokt.com
publishers.rokt.com
developers.rokt.com
rokt.com
smb-ecommerce-api-ap-southeast-2.rokt.com
api.rokt.com
rokt.com
ecomm-apps-status.rokt.com
auth-api.build.rokt.com
es.rokt.com
smb-bigcommerce-app.stage.rokt.com
customerstatus.eye-share.com
es.rokt.com
developer.rokt.com
build.rokt.com
rokt.com
rokt.com
get.rokt.com
login.rokt.com
help.rokt.com
info.rokt.com
wordpress-test-qa3.stage.rokt.com
get.rokt.com
stage.rokt.com
rokt.com
cdn.alpha.smb.rokt.com
get.rokt.com
build.rokt.com
api.dev.smb.rokt.com
stage.rokt.com
help.rokt.com
customerstatus.eye-share.com
ecomm-apps-status.rokt.com
smb-bigcommerce-api.stage.rokt.com
publishers.rokt.com
rokt.com
customerstatus.eye-share.com
beta2-status.netsuite.com
docs.rokt.com
info.rokt.com
policies.rokt.com
herbalife.status.polaris.synopsys.com
es.rokt.com
customerstatus.eye-share.com
links.ecommerce.rokt.com
herbalife.status.polaris.synopsys.com
smb-ecommerce-api-eu-west-1.rokt.com
publishers.rokt.com
beta2-status.netsuite.com
rokt.com
beta2-status.netsuite.com
publishers.rokt.com
fr.rokt.com
smb-help.rokt.com
get.rokt.com
customerstatus.eye-share.com
smb-bigcommerce-app.rokt.com
cdn.dev.smb.rokt.com
es.rokt.com
playground.stage.rokt.com
compliance.rokt.com
rokt.com
rokt.com
cross-sell-proddemo.stage.smb.rokt.com
playground.uat.rokt.com
help.rokt.com
playground.rokt.com
smb-ecommerce-app.rokt.com
uts.rokt.com
cdn.stage.smb.rokt.com
build.rokt.com
publishers.rokt.com
customerstatus.eye-share.com
herbalife.status.polaris.synopsys.com
beta2-status.netsuite.com
es.rokt.com
my.stage.rokt.com
beta2-status.netsuite.com
customerstatus.eye-share.com
api.stage.smb.rokt.com
beta2-status.netsuite.com
jwks.stage.rokt.com
rokt.com
ideas.rokt.com
docs.rokt.com
stageeng.rokt.com
publishers.rokt.com
customerstatus.eye-share.com
fr.rokt.com
smb-bigcommerce-api.stage.rokt.com
customerstatus.eye-share.com
wordpress-test-qa2.stage.rokt.com
customerstatus.eye-share.com
get.rokt.com
rokt.com
fr.rokt.com
login.stage.rokt.com
build.rokt.com
herbalife.status.polaris.synopsys.com
stage.rokt.com
publishers.rokt.com
developers.rokt.com
rokt.com
smb-ecommerce-api-ap-southeast-2.rokt.com
api.rokt.com
rokt.com
ecomm-apps-status.rokt.com
auth-api.build.rokt.com
es.rokt.com
smb-bigcommerce-app.stage.rokt.com
customerstatus.eye-share.com
es.rokt.com
developer.rokt.com
build.rokt.com
rokt.com
rokt.com
get.rokt.com
login.rokt.com
help.rokt.com
info.rokt.com
wordpress-test-qa3.stage.rokt.com
get.rokt.com
stage.rokt.com
rokt.com
cdn.alpha.smb.rokt.com
get.rokt.com
build.rokt.com
api.dev.smb.rokt.com
stage.rokt.com
help.rokt.com
customerstatus.eye-share.com
ecomm-apps-status.rokt.com
smb-bigcommerce-api.stage.rokt.com
publishers.rokt.com
rokt.com
Certificate
The complete raw certificate details for cdn.dev.smb.rokt.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfjCCA2agAwIBAgIQBmfdNx0n1a0Z0lnkKQqxETANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMTEwMDAwMDBaFw0yMTAzMTEx MjAwMDBaMB8xHTAbBgNVBAMTFGNkbi5kZXYuc21iLnJva3QuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE78kBzLcTa6jtd/k/F/vnRPa6MQ0Qfr lYku0+EGjWdUnDshz6dmBE9Lx2uswEjmH+LDwQqYvmk71Af9KJtK4cbQubUNwICi c6dCg7KN5c23Pn83iF4fcIOEvCKXCty5vdDUNhsFVcqkMfDTtBZAwncxDlDyktVv 9jzJ1lUQJOSor+Skc2NIPPeC2PcEJ2l/5sW6bbNaOrPZHlP7m4pMonVHN9UN7OdK /4nXc6tlWY4xL5PpJin5HbyJWl3NpwqCPP6UrC6eFTPrCqO3oWeyka+lbTtfkNUe U6G7dZHYlxXw3OIk7G+ZSgoOptvsmYq8izzLEkzLqA69G+1mN12jnwIDAQABo4IB jTCCAYkwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FDlMoqiT8EmlFpFAyQ/m9aaDy/AMMB8GA1UdEQQYMBaCFGNkbi5kZXYuc21iLnJv a3QuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeB DAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNj YTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2Ex Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAJFlOChnJnQZD1gLI1Yz v50gpcQENaEsMgdBOwLlS4qtTCnSGGIkia9A83P8guaDFvMNnJpUD9pWyUbIuf0k ljxMvwaqZHQpbWFzVSsbB1Nw0FGaNM0AD8CPXkK6B4iB2n2FpxBRN82i5fwZcksm TglyWjGvlOOD8r0s5MmZcNrN0MY2uEBNvcoySwY6w6WWp9lIV2bfjrSMo86OUuqz smiCKknVsTi5bpBxtEINid+Fpzx3Lbe8B5S7q+4UiyYaNyNUOmvWDxfOHS9Xogrg KL05ahgPJeHrsHJwSt8KrUCocE3yFOeqKnHRHuUXKQGy7syHCIj2nAd6z9frl4ed T1I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE78kBzLcTa6jtd/k/F/ vnRPa6MQ0QfrlYku0+EGjWdUnDshz6dmBE9Lx2uswEjmH+LDwQqYvmk71Af9KJtK 4cbQubUNwICic6dCg7KN5c23Pn83iF4fcIOEvCKXCty5vdDUNhsFVcqkMfDTtBZA wncxDlDyktVv9jzJ1lUQJOSor+Skc2NIPPeC2PcEJ2l/5sW6bbNaOrPZHlP7m4pM onVHN9UN7OdK/4nXc6tlWY4xL5PpJin5HbyJWl3NpwqCPP6UrC6eFTPrCqO3oWey ka+lbTtfkNUeU6G7dZHYlxXw3OIk7G+ZSgoOptvsmYq8izzLEkzLqA69G+1mN12j nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8514661330233150235855945420591771921 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.dev.smb.rokt.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22256891405333169479348073787169258775156473887107671326812320690587239506410152510362937705776322758218088649495565591432375051125361316749838397659286718271095680695966909701853511557823789265749623217830894768963222853800807009968736774004403405229820459893336730317330652140873324891105253483253240950827922544085549275139463255275708206082965668156477819604383971632963225885806406129114627240731038782734074388855730229886628293912935894735689274675720948383317869648087165001611729658790709511656366473693858116758387851653362412349767475165820436966541245765524640883021119976215129527712866772011831770588063 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 394ca2a893f049a5169140c90fe6f5a683cbf00c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev.smb.rokt.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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