app.clari.com
Issued by Amazon
About this certificate
This digital certificate with serial number 02:5d:4e:17:4c:96:12:3e:8b:2c:b0:27:e2:b2:d9:f6 was issued on by Amazon.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=app.clari.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:5d:4e:17:4c:96:12:3e:8b:2c:b0:27:e2:b2:d9:f6Serial Number (int): 3142923473312679149321610794785495542
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: a3:39:35:ff:1d:ee:a0:bc:72:e2:17:5f:84:d3:d4:14:f3:b4:70:1b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 33:2e:0a:1f:66:00:10:e8:e8:20:ad:45:c0:ba:ee:98:38:de:45:3e
Fingerprint (sha256): 0b:90:51:91:a6:33:11:9b:ce:33:02:f6:ca:1c:65:6b:11:cd:78:fd:36:84:9d:9b:97:8d:c4:b3:df:62:ed:bb
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate app.clari.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app.clari.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app.clari.com
productionworker.clari.io
developer.clari.com
internal-tools.clari.io
productioncore.clari.io
productionmoco.clari.io
productionindexer.clari.io
gateway-internal.clari.com
api-manager.clari.com
ds-api.clari.com
app-test.clari.com
api.clari.com
nexus.clari.com
production-analytics.clari.io
productionconductor.clari.io
nexus-production-internal.clari.com
gateway.clari.com
api-admin.clari.com
autoqa-production.clari.io
admin.clari.com
productionworker.clari.io
developer.clari.com
internal-tools.clari.io
productioncore.clari.io
productionmoco.clari.io
productionindexer.clari.io
gateway-internal.clari.com
api-manager.clari.com
ds-api.clari.com
app-test.clari.com
api.clari.com
nexus.clari.com
production-analytics.clari.io
productionconductor.clari.io
nexus-production-internal.clari.com
gateway.clari.com
api-admin.clari.com
autoqa-production.clari.io
admin.clari.com
Other certificates including the domain name clari.com
(limited to 100 certificates)
ssl2793.cloudflare.com
nexus-staging.clari.com
login-sandbox.clari.com
ssl3103.cloudflare.com
app-builder-totodile.clari.com
engage.clari.com
www.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.dev.groove.clari.com
www.konggateway.clari.com
integration-staging.clari.com
sni217978.cloudflaressl.com
clari.com
sni.cloudflaressl.com
gateway-steelix.clari.com
backend.dev3.copilot.clari.com
ds-steelixapi.clari.com
sni217978.cloudflaressl.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
internal-gateway.clari.com
app-builder-bulbasaur.clari.com
backend.dev4.copilot.clari.com
webhooks.dev.copilot.clari.com
konggateway-steelix-internal.clari.com
app.clari.com
app.clari.com
admin.clari.com
login-sandbox.clari.com
download.clari.com
app-builder-hack1.clari.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
stage-scan.clari.com
beta.status.veracode.com
nexus-test-staging.clari.com
sni217978.cloudflaressl.com
hello.clari.com
nexus-steelix.clari.com
login.clari.com
sni217978.cloudflaressl.com
proservices.api.clari.com
sni217978.cloudflaressl.com
pages.clari.com
app.clari.com
integrations.clari.com
outreach.clari.com
hecate.clari.com
*.clari.com
login.clari.com
sni217978.cloudflaressl.com
beta.status.veracode.com
backend.wingman.clari.com
*.dev.wingman.clari.com
clari.com
rest-api.dev4.copilot.clari.com
pages.clari.com
compass.clari.com
partners.clari.com
engage.clari.com
sni217978.cloudflaressl.com
login-steelix.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
ol-www-craft.clari.com
production.clari.com
community.clari.com
pages.clari.com
app.clari.com
nexus-steelix.clari.com
app-builder-cyndaquil.clari.com
clari.com
integration-steelix.clari.com
integration-staging.clari.com
ssl2793.cloudflare.com
sni217978.cloudflaressl.com
app-builder-charmander.clari.com
nexus-staging.clari.com
nexus-staging.clari.com
app.dev.groove.clari.com
*.staging.clari.com
beta.status.veracode.com
*.sandbox.copilot.clari.com
sni217978.cloudflaressl.com
app-builder-hack6.clari.com
service-us.clari.com
sni217978.cloudflaressl.com
ssl3103.cloudflare.com
*.dev1.copilot.clari.com
prestaging.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.clari.com
beta.status.veracode.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
*.dev4.copilot.clari.com
sni.cloudflaressl.com
nexus-staging.clari.com
login-sandbox.clari.com
ssl3103.cloudflare.com
app-builder-totodile.clari.com
engage.clari.com
www.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.dev.groove.clari.com
www.konggateway.clari.com
integration-staging.clari.com
sni217978.cloudflaressl.com
clari.com
sni.cloudflaressl.com
gateway-steelix.clari.com
backend.dev3.copilot.clari.com
ds-steelixapi.clari.com
sni217978.cloudflaressl.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
internal-gateway.clari.com
app-builder-bulbasaur.clari.com
backend.dev4.copilot.clari.com
webhooks.dev.copilot.clari.com
konggateway-steelix-internal.clari.com
app.clari.com
app.clari.com
admin.clari.com
login-sandbox.clari.com
download.clari.com
app-builder-hack1.clari.com
sni.cloudflaressl.com
sni217978.cloudflaressl.com
stage-scan.clari.com
beta.status.veracode.com
nexus-test-staging.clari.com
sni217978.cloudflaressl.com
hello.clari.com
nexus-steelix.clari.com
login.clari.com
sni217978.cloudflaressl.com
proservices.api.clari.com
sni217978.cloudflaressl.com
pages.clari.com
app.clari.com
integrations.clari.com
outreach.clari.com
hecate.clari.com
*.clari.com
login.clari.com
sni217978.cloudflaressl.com
beta.status.veracode.com
backend.wingman.clari.com
*.dev.wingman.clari.com
clari.com
rest-api.dev4.copilot.clari.com
pages.clari.com
compass.clari.com
partners.clari.com
engage.clari.com
sni217978.cloudflaressl.com
login-steelix.clari.com
app-builder-bulbasaur.clari.com
sni217978.cloudflaressl.com
ol-www-craft.clari.com
production.clari.com
community.clari.com
pages.clari.com
app.clari.com
nexus-steelix.clari.com
app-builder-cyndaquil.clari.com
clari.com
integration-steelix.clari.com
integration-staging.clari.com
ssl2793.cloudflare.com
sni217978.cloudflaressl.com
app-builder-charmander.clari.com
nexus-staging.clari.com
nexus-staging.clari.com
app.dev.groove.clari.com
*.staging.clari.com
beta.status.veracode.com
*.sandbox.copilot.clari.com
sni217978.cloudflaressl.com
app-builder-hack6.clari.com
service-us.clari.com
sni217978.cloudflaressl.com
ssl3103.cloudflare.com
*.dev1.copilot.clari.com
prestaging.clari.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
app.clari.com
beta.status.veracode.com
sni217978.cloudflaressl.com
sni217978.cloudflaressl.com
*.dev4.copilot.clari.com
sni.cloudflaressl.com
Certificate
The complete raw certificate details for app.clari.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIQAl1OF0yWEj6LLLAn4rLZ9jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA0MDEwMDAwMDBaFw0yMjA0MzAy MzU5NTlaMBgxFjAUBgNVBAMTDWFwcC5jbGFyaS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCq4u3aOtxeSsTmmq7S+yC2AGhtDbF+UOQEgtj3lL8R sNPajTYR8xNyOJ5DwqHei8PCaGKbSgX0rDRQdrDd+jvJHbOwfb3uP9uRQWYHrj6O eGpDYwEoU7JrG4VvVg6E3WEBP7Pb9gPRA367Ydjn8XkoZNP1X3CcXl7fxD8eSalD 8ni+IVWyXWXpKNfzmGbqawwdsJ1SqSXPd4OU/i1UF0s8Ci3epje8YgYx3kHSKGWa h+H8xU98Mcu8z8j0wirdEsmIrKuAEvNdOej2d6fXaXzKNgkU+fHx6bf1H0Ou7wGs RhgBz6KRIkBdXMenIJ6+aKDfQlgxcaX/olYwYjkc8N/HAgMBAAGjggNGMIIDQjAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUozk1/x3u oLxy4hdfhNPUFPO0cBswggHjBgNVHREEggHaMIIB1oINYXBwLmNsYXJpLmNvbYIZ cHJvZHVjdGlvbndvcmtlci5jbGFyaS5pb4ITZGV2ZWxvcGVyLmNsYXJpLmNvbYIX aW50ZXJuYWwtdG9vbHMuY2xhcmkuaW+CF3Byb2R1Y3Rpb25jb3JlLmNsYXJpLmlv ghdwcm9kdWN0aW9ubW9jby5jbGFyaS5pb4IacHJvZHVjdGlvbmluZGV4ZXIuY2xh cmkuaW+CGmdhdGV3YXktaW50ZXJuYWwuY2xhcmkuY29tghVhcGktbWFuYWdlci5j bGFyaS5jb22CEGRzLWFwaS5jbGFyaS5jb22CEmFwcC10ZXN0LmNsYXJpLmNvbYIN YXBpLmNsYXJpLmNvbYIPbmV4dXMuY2xhcmkuY29tgh1wcm9kdWN0aW9uLWFuYWx5 dGljcy5jbGFyaS5pb4IccHJvZHVjdGlvbmNvbmR1Y3Rvci5jbGFyaS5pb4IjbmV4 dXMtcHJvZHVjdGlvbi1pbnRlcm5hbC5jbGFyaS5jb22CEWdhdGV3YXkuY2xhcmku Y29tghNhcGktYWRtaW4uY2xhcmkuY29tghphdXRvcWEtcHJvZHVjdGlvbi5jbGFy aS5pb4IPYWRtaW4uY2xhcmkuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny bC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMBMGA1UdIAQMMAowCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFC5jSlOXh5RCxrvp lt5PcHVOREfvhvD6En0fTT5l5Utea4rKpdexvywJkWbw/jrwUe0xgOW+WNa0V0rl 79m/7zKbtVOV3Qc/f1YdyQMtsdWcmuRsLgGTXDEF3SLgOjJ2oBNyc7EYf0WvxQ+D cmJX3n3KyOW+TqYsHH+UsF4QNOW3QIes43fhZ+R2YMIxYlSABvA/CBsvjpq3bZfS K45gZz1ieYiz7H+/nB/9nzl4rugau53qF8NMb3rcaEB6d5SclaoYWbgBtLnTsVx9 /LNbFFGdRIOtT89PF4AtknDgs98SweTIFIPRhteqjJL8DbjnxDdHON4BKU1FYwOm ifZz0A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquLt2jrcXkrE5pqu0vsg tgBobQ2xflDkBILY95S/EbDT2o02EfMTcjieQ8Kh3ovDwmhim0oF9Kw0UHaw3fo7 yR2zsH297j/bkUFmB64+jnhqQ2MBKFOyaxuFb1YOhN1hAT+z2/YD0QN+u2HY5/F5 KGTT9V9wnF5e38Q/HkmpQ/J4viFVsl1l6SjX85hm6msMHbCdUqklz3eDlP4tVBdL PAot3qY3vGIGMd5B0ihlmofh/MVPfDHLvM/I9MIq3RLJiKyrgBLzXTno9nen12l8 yjYJFPnx8em39R9Dru8BrEYYAc+ikSJAXVzHpyCevmig30JYMXGl/6JWMGI5HPDf xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3142923473312679149321610794785495542 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.clari.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21572414759628831843846676875481304788107351014134719505644453142423549698729268265548402369928664822336174639508848188697256651047390220878180728410395189336792576753278301380289266791062651606003837983937922361755369007308636359825190531888566306221702857579176278055866116846183102427368268830109269639187869690561027666976486409587981134789588102525215910761212739719114926326710311726085540498488674141335179764033346692531033496729375537822792913490606097856780988069832654163917354280874655985988366664029255271713585194644207153752744783263495095502704777876812206685648621005436753191984737966798426686414791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a33935ff1deea0bc72e2175f84d3d414f3b4701b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (474 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionworker.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal-tools.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productioncore.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionmoco.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionindexer.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-internal.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-manager.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds-api.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-test.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production-analytics.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productionconductor.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus-production-internal.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-admin.clari.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoqa-production.clari.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.clari.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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