pdn.gettyimages.com
Issued by Amazon
About this certificate
This digital certificate with serial number 02:29:47:8c:70:59:d4:bd:5c:4d:d5:fb:e8:b4:2c:dc was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pdn.gettyimages.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:29:47:8c:70:59:d4:bd:5c:4d:d5:fb:e8:b4:2c:dcSerial Number (int): 2872791340565291076901283313281674460
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: bb:cb:27:78:6b:92:72:1b:dc:c6:1e:68:9b:75:cc:30:07:a2:04:18
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): f3:7d:e3:aa:c4:c8:16:c8:65:1e:6f:e4:b1:4d:f0:30:b8:cc:b0:b9
Fingerprint (sha256): 0c:3a:57:35:e2:22:cc:7f:87:be:2e:dd:de:56:55:2e:c3:cb:74:1d:78:11:34:54:ee:c8:f2:c6:2b:f9:48:38
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate pdn.gettyimages.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pdn.gettyimages.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pdn.gettyimages.com
Other certificates including the domain name gettyimages.com
(limited to 100 certificates)
api-us-east-1.nd.nudatasecurity.com
*.gettyimages.com
embed.gettyimages.com
labs.gettyimages.com
k3.shared.global.fastly.net
foto.gettyimages.com
www.labs.gettyimages.com
ews.gettyimages.com
embed-cdn.gettyimages.com
k3.shared.global.fastly.net
studio.gettyimages.com
ceros3.map.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
firstdata.gettyimages.com
smetrics.gettyimages.com
brookfield.gettyimages.com
mmpart.gettyimages.com
apply.gettyimages.com
sitemaps.gettyimages.com
labs.gettyimages.com
stories.gettyimages.com
k3.shared.global.fastly.net
workbench.gettyimages.com
api-prod.vizual.ai
mixer.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
workbench.gettyimages.com
services.gettyimages.com
hexion.gettyimages.com
mixer.gettyimages.com
*.dam.gettyimages.com
*.pinterestceros.com
k3.shared.global.fastly.net
view.ceros.com
developers.gettyimages.com
ceros3.map.fastly.net
remotetest.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
ceros.map.fastly.net
k3.shared.global.fastly.net
studioportfolios.gettyimages.com
legacycreative.gettyimages.com
servicestest.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
briefs-middleware.custom-content.usw2.prod-getty.cloud
k3.shared.global.fastly.net
events.gettyimages.com
www.gettyimages.com
licensecompliance.gettyimages.com
labs.gettyimages.com
mm.gettyimages.com
foto.gettyimages.com
communityassignments.gettyimages.com
stg-mm.lower-getty.cloud
k3.shared.global.fastly.net
stg-in.lower-getty.cloud
delivery.stage-gettyimages.com
services.gettyimages.com
copyrightcompliance.gettyimages.com
damhelp.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
ceros3.map.fastly.net
api-us-east-1.nd.nudatasecurity.com
k3.shared.global.fastly.net
communityassignments.gettyimages.com
essilormediamanager.gettyimages.com
mmx.gettyimages.com
view.ceros.com
www.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
mmpart.gettyimages.com
yearinfocus.gettyimages.com
secondary-prod-mm.prod-getty.cloud
affiliates.gettyimages.com
pdn.gettyimages.com
joinus.gettyimages.com
media.gettyimages.com
fashion.gettyimages.com
ceros3.map.fastly.net
unisys.gettyimages.com
ceros3.map.fastly.net
ceros3.map.fastly.net
k3.shared.global.fastly.net
api-us-east-1.nd.nudatasecurity.com
firstpartycookie.gettyimages.com
*.pinterestceros.com
mmx.gettyimages.com
k3.shared.global.fastly.net
api.gettyimages.com
k3.shared.global.fastly.net
likebox.gettyimages.com
embed.gettyimages.com
*.gettyimages.com
embed.gettyimages.com
labs.gettyimages.com
k3.shared.global.fastly.net
foto.gettyimages.com
www.labs.gettyimages.com
ews.gettyimages.com
embed-cdn.gettyimages.com
k3.shared.global.fastly.net
studio.gettyimages.com
ceros3.map.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
firstdata.gettyimages.com
smetrics.gettyimages.com
brookfield.gettyimages.com
mmpart.gettyimages.com
apply.gettyimages.com
sitemaps.gettyimages.com
labs.gettyimages.com
stories.gettyimages.com
k3.shared.global.fastly.net
workbench.gettyimages.com
api-prod.vizual.ai
mixer.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
workbench.gettyimages.com
services.gettyimages.com
hexion.gettyimages.com
mixer.gettyimages.com
*.dam.gettyimages.com
*.pinterestceros.com
k3.shared.global.fastly.net
view.ceros.com
developers.gettyimages.com
ceros3.map.fastly.net
remotetest.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
ceros.map.fastly.net
k3.shared.global.fastly.net
studioportfolios.gettyimages.com
legacycreative.gettyimages.com
servicestest.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
briefs-middleware.custom-content.usw2.prod-getty.cloud
k3.shared.global.fastly.net
events.gettyimages.com
www.gettyimages.com
licensecompliance.gettyimages.com
labs.gettyimages.com
mm.gettyimages.com
foto.gettyimages.com
communityassignments.gettyimages.com
stg-mm.lower-getty.cloud
k3.shared.global.fastly.net
stg-in.lower-getty.cloud
delivery.stage-gettyimages.com
services.gettyimages.com
copyrightcompliance.gettyimages.com
damhelp.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
ceros3.map.fastly.net
api-us-east-1.nd.nudatasecurity.com
k3.shared.global.fastly.net
communityassignments.gettyimages.com
essilormediamanager.gettyimages.com
mmx.gettyimages.com
view.ceros.com
www.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
mmpart.gettyimages.com
yearinfocus.gettyimages.com
secondary-prod-mm.prod-getty.cloud
affiliates.gettyimages.com
pdn.gettyimages.com
joinus.gettyimages.com
media.gettyimages.com
fashion.gettyimages.com
ceros3.map.fastly.net
unisys.gettyimages.com
ceros3.map.fastly.net
ceros3.map.fastly.net
k3.shared.global.fastly.net
api-us-east-1.nd.nudatasecurity.com
firstpartycookie.gettyimages.com
*.pinterestceros.com
mmx.gettyimages.com
k3.shared.global.fastly.net
api.gettyimages.com
k3.shared.global.fastly.net
likebox.gettyimages.com
embed.gettyimages.com
Certificate
The complete raw certificate details for pdn.gettyimages.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIQAilHjHBZ1L1cTdX76LQs3DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEwMDkwMDAwMDBaFw0xOTExMDkx MjAwMDBaMB4xHDAaBgNVBAMTE3Bkbi5nZXR0eWltYWdlcy5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX4oCQacus56fnBkv/X5CHFyisfLl1sMKf XHLVd8LgJ1Mzw5Q/04nRgRBJlywb4hkvpV40PGoE5OcGj/YWZ/5MFd2b/0V2HIwn 80UW9NO5di6kQK8+j95ZqPGK4Lx1w2pqVpoV3J8oiL1L0W8n8/j0BuvCxeKlThRJ rBvDIR/WSkXFccBNLSHFG2nzDjX1x5VKsKRDCMz5Sz0ZAAa0j23O/5cvcz9r6dDB ZvRksKkb7XYuGrV+HtzrJdzGTAN51/pBhjuxwWz35oPeu1uF7rreKqwtNAAlIqKK aPBCl0d6Lg4EL1W81Zhr75dT5dreBtPtGjvcIyLbjx2u6dPZ7F7/AgMBAAGjggGM MIIBiDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU u8sneGuSchvcxh5om3XMMAeiBBgwHgYDVR0RBBcwFYITcGRuLmdldHR5aW1hZ2Vz LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANhH0T3zy7DgBMfAe+GM0s 6D98+Cp7yu2bO1WF210Mo8jSjhUZx7ykD1Hvf6iCmL4w0MOUIc/R/dQWABwOa4Dv whiA+tASpioINIFFxast4gu0hmgzeRyGA0/kdEugJ9n/QWZfW4Qr9rmHVkJOwfqy 8tJAxg1CUYWUU3bRz4niPpxtQ4W6li3Wbn408aN0QtUHlNK7Wamu+sUpeEO+VjNO xd8PVnhMsJ8YyhG+gNXzZNf+xg5+XbnIfOZatUoQ37uyj5mCNs//1QUoDVll+CDT P4bEXqBLLj5YlCUbCcfot1dsajed6ValeumHjXNSLF2tHw0o9osCW7XAbeKLTmBO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+KAkGnLrOen5wZL/1+Q hxcorHy5dbDCn1xy1XfC4CdTM8OUP9OJ0YEQSZcsG+IZL6VeNDxqBOTnBo/2Fmf+ TBXdm/9FdhyMJ/NFFvTTuXYupECvPo/eWajxiuC8dcNqalaaFdyfKIi9S9FvJ/P4 9AbrwsXipU4USawbwyEf1kpFxXHATS0hxRtp8w419ceVSrCkQwjM+Us9GQAGtI9t zv+XL3M/a+nQwWb0ZLCpG+12Lhq1fh7c6yXcxkwDedf6QYY7scFs9+aD3rtbhe66 3iqsLTQAJSKiimjwQpdHei4OBC9VvNWYa++XU+Xa3gbT7Ro73CMi248drunT2exe /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2872791340565291076901283313281674460 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pdn.gettyimages.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19173676449288710066238253785607665945464398467949991064068296754072408665035570240435594855161234256003773648644567968598458805349146011018627970338368872541968597300323642138665841772817042329174272084451108700618166955807501112849274315442021063289584724462170088673178618122351019333630372524578202616823261588862686196188696130996137053430602387377673757257124935900048693537212033214349075251779972838992600902471211439551868696314610078468039043982225281002114858385106858647516304685172956700760155965282459940617378634845328033619471386334600566998177402087011875959997634784369001094203603745202650462576383 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bbcb27786b92721bdcc61e689b75cc3007a20418 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdn.gettyimages.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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