api.content.capi.newscorp.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:40:89:39:06:07:e3:88:00:0e:1e:b1:67:83:36:5a was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.content.capi.newscorp.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:40:89:39:06:07:e3:88:00:0e:1e:b1:67:83:36:5aSerial Number (int): 13627370164782798314797498620807689818
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f5:9e:66:2a:40:ee:bc:27:84:4d:64:09:7a:0c:9f:ae:b7:26:72:5e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): d7:ea:49:67:d2:41:32:a6:e3:05:9f:35:ea:f0:5d:ea:c4:ce:0b:0c
Fingerprint (sha256): 0a:c1:a9:c2:9b:21:b0:db:45:a3:bf:c9:87:9b:ba:88:bb:ba:e5:f6:60:01:fd:3a:5e:88:52:c4:53:09:90:79
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api.content.capi.newscorp.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.content.capi.newscorp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.content.capi.newscorp.com
Other certificates including the domain name newscorp.com
(limited to 100 certificates)
leapfrog-ssl-24.gcs-web.com
compliance.newscorp.com
tls.automattic.com
naifs.newscorp.com
pwm.newscorp.com
*.newscorp.com
naimeeting.newscorp.com
leapfrog-ssl-24.gcs-web.com
rsvp.newscorp.com
leapfrog-ssl-24.gcs-web.com
dscms.newscorp.com
api.content.capi.newscorp.com
lyncweb.newscorp.com
leapfrog-ssl-24.gcs-web.com
v2.pixel.djp.data.newscorp.com
m.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
leapfrog-ssl-24.gcs-web.com
slcwprd1.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange.newscorp.com
hyperion.newscorp.com
naipinchange.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
tanprd.newscorp.com
newscorp.com
pwm.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
newscorp.com
content.capi-nonprod.newscorp.com
naid3.newscorp.com
intranet.newscorp.com
editionscurator-api.newscorp.com
board.newscorp.com
naifs.newscorp.com
v2.pixel.nukp.data.newscorp.com
newscorp.com
content-dr.kapi.newscorp.com
lcspublic.newscorp.com
board.newscorp.com
content.capi.newscorp.com
leapfrog-ssl-24.gcs-web.com
remotevpn.21cf.com
naiftp.newscorp.com
staging.developer.newscorp.com
naichat.newscorp.com
ncusnjvzops1.newscorp.com
leapfrog-ssl-24.gcs-web.com
content-knewz.capi-nonprod.newscorp.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
naimail.newscorp.com
*.api.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
content.kapi.newscorp.com
newscorp.com
conferencecenter.newscorp.com
tcfusnjpgpl1.newscorp.com
tanpre.newscorp.com
ncsubmissions.newscorp.com
gtp.newscorp.com
newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange-test.newscorp.com
*.acs.svc.newscorp.com
rsvp.newscorp.com
content.capi-stage.newscorp.com
leapfrog-ssl-24.gcs-web.com
staging.developer.newscorp.com
*.qa.newscorp.com
developer.newscorp.com
leapfrog-ssl-24.gcs-web.com
hyperion.newscorp.com
tfs2010portal.newscorp.com
web.newscorp.com
lync15pool.newscorp.com
content.capi.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
content.capi-stage.newscorp.com
content.capi.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
naisharepoint.newscorp.com
datacatalog.cyber.newscorp.com
staging.developer.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
equitynet.newscorp.com
compliance.newscorp.com
tls.automattic.com
naifs.newscorp.com
pwm.newscorp.com
*.newscorp.com
naimeeting.newscorp.com
leapfrog-ssl-24.gcs-web.com
rsvp.newscorp.com
leapfrog-ssl-24.gcs-web.com
dscms.newscorp.com
api.content.capi.newscorp.com
lyncweb.newscorp.com
leapfrog-ssl-24.gcs-web.com
v2.pixel.djp.data.newscorp.com
m.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
leapfrog-ssl-24.gcs-web.com
slcwprd1.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange.newscorp.com
hyperion.newscorp.com
naipinchange.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
tanprd.newscorp.com
newscorp.com
pwm.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
newscorp.com
content.capi-nonprod.newscorp.com
naid3.newscorp.com
intranet.newscorp.com
editionscurator-api.newscorp.com
board.newscorp.com
naifs.newscorp.com
v2.pixel.nukp.data.newscorp.com
newscorp.com
content-dr.kapi.newscorp.com
lcspublic.newscorp.com
board.newscorp.com
content.capi.newscorp.com
leapfrog-ssl-24.gcs-web.com
remotevpn.21cf.com
naiftp.newscorp.com
staging.developer.newscorp.com
naichat.newscorp.com
ncusnjvzops1.newscorp.com
leapfrog-ssl-24.gcs-web.com
content-knewz.capi-nonprod.newscorp.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
naimail.newscorp.com
*.api.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
content.kapi.newscorp.com
newscorp.com
conferencecenter.newscorp.com
tcfusnjpgpl1.newscorp.com
tanpre.newscorp.com
ncsubmissions.newscorp.com
gtp.newscorp.com
newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange-test.newscorp.com
*.acs.svc.newscorp.com
rsvp.newscorp.com
content.capi-stage.newscorp.com
leapfrog-ssl-24.gcs-web.com
staging.developer.newscorp.com
*.qa.newscorp.com
developer.newscorp.com
leapfrog-ssl-24.gcs-web.com
hyperion.newscorp.com
tfs2010portal.newscorp.com
web.newscorp.com
lync15pool.newscorp.com
content.capi.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
content.capi-stage.newscorp.com
content.capi.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
naisharepoint.newscorp.com
datacatalog.cyber.newscorp.com
staging.developer.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
equitynet.newscorp.com
Certificate
The complete raw certificate details for api.content.capi.newscorp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkDCCA3igAwIBAgIQCkCJOQYH44gADh6xZ4M2WjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MjQwMDAwMDBaFw0yMDEwMjQx MjAwMDBaMCgxJjAkBgNVBAMTHWFwaS5jb250ZW50LmNhcGkubmV3c2NvcnAuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAropC8LI7F7zkGWZG+Niv 41BLxlbhHkOaNaaF4DPztziEyyHNDDLJSTjs6iEQQ6cPLqdnp+IB8Qc8nJLetEB3 QuEURzCxcKQ35njjwQiH99nPb+BgEYuuVEZBjt7FI5O06GWYsd8282mSr5MF3+eB 4TxoaR1qPC0SalFgLNWpvvCIBeDlito2a/HR7hrHJDBHUiuhsO0ZbmT47aRV2H8L Mjjn+80tERHwUIJhzZxGoPKvIkOoPZGbQpLip0E94Dpv0C5YO/Rfkede2bWevJsu jRd664uQSmyaue8f0kqprmUvsEHwLI+w2/Mn2migp32ziIbatzrqcjrKui/XjXJf LQIDAQABo4IBljCCAZIwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAw HQYDVR0OBBYEFPWeZipA7rwnhE1kCXoMn663JnJeMCgGA1UdEQQhMB+CHWFwaS5j b250ZW50LmNhcGkubmV3c2NvcnAuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDov L2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcw CwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH MAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw AoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwG A1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD ggEBAG/1BSWdYlQEwFvQ7SephZyF7UpH8nng1mucydR/qTWdHjV0bQNRGYS1a1mP /MrfP3xVKurZ78dIEYR59rxXgKWs6bDfAPJh8wINPT0K6VQVUPuqLFsQyt2znguX WqGriskOk2EHVucJNtasWFpG1JyH0rILJMf879qx2fWiNPj6ddeC4xoj3X2D2GF3 15HhusG6TwlrgFnTo/nRsaXU0QFsRnJ2whtN2YJAhehzBegUy0YhFzjuD1uZNCZN enjfuAHkxlG+k5T5mk5+U1/QxY1tStn6BiBx+dgtB1KkT/GBQG2JT8uf1lWbumh8 7Ok2yLn5biHZxn8K78sbT4zIbB4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAropC8LI7F7zkGWZG+Niv 41BLxlbhHkOaNaaF4DPztziEyyHNDDLJSTjs6iEQQ6cPLqdnp+IB8Qc8nJLetEB3 QuEURzCxcKQ35njjwQiH99nPb+BgEYuuVEZBjt7FI5O06GWYsd8282mSr5MF3+eB 4TxoaR1qPC0SalFgLNWpvvCIBeDlito2a/HR7hrHJDBHUiuhsO0ZbmT47aRV2H8L Mjjn+80tERHwUIJhzZxGoPKvIkOoPZGbQpLip0E94Dpv0C5YO/Rfkede2bWevJsu jRd664uQSmyaue8f0kqprmUvsEHwLI+w2/Mn2migp32ziIbatzrqcjrKui/XjXJf LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13627370164782798314797498620807689818 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.content.capi.newscorp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22033644343539018297993376834225233053070920798766963603534098294949004658910864650737997621569832492149336917792153077267117091886944510917251265329156556454872059314850452239257902800973657475177225700236955119642727940375368175548454433063930488198278763594956248696900870111676491220607578441840464760214242428231641438695299637056143272812113064559794115575568785716712536096200016671446011980750044302034029220256896407475276959225520635258135074309526332699116409983163427019361570378472879727047873918623317184071396243320763927837607270318729509893582241460017378975693357071107496969557182195564234115538733 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f59e662a40eebc27844d64097a0c9faeb726725e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.content.capi.newscorp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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