int.adtalem.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:b9:b5:4e:c3:37:0b:9f:1a:3a:04:10:bf:37:2a:1d was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=int.adtalem.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:b9:b5:4e:c3:37:0b:9f:1a:3a:04:10:bf:37:2a:1d
Serial Number (int): 20902672211953740985994854229488380445
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:03:9e:b9:b1:fe:d3:f6:e2:4d:1c:1e:2f:d3:f3:2b:bb:be:57:64
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e2:05:39:36:7e:b6:82:c5:97:20:87:5c:6f:4a:d3:51:c7:47:07:ce
Fingerprint (sha256): 0d:01:85:38:29:9d:67:f7:f5:6a:a6:6d:86:94:00:c0:07:ae:ca:39:a6:bf:1d:bb:f4:5b:9e:10:d4:14:7e:19

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate int.adtalem.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int.adtalem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int.adtalem.com
int.rossu.edu
m.int.rossu.edu
medical.int.rossu.edu
veterinary.int.rossu.edu
viewpoints.int.adtalem.com
www.int.adtalem.com
www.int.aucmed.edu
www.int.rossu.edu
merp.int.medschoolprep.com
ccdm.int.aucmed.edu
med.int.rossu.edu

Other certificates including the domain name adtalem.com

(limited to 100 certificates)
secured2.san1.raxcdn.com
www.int.devry.edu
cyberark.adtalem.com
api.dev.adtalem.com
sso.adtalem.com
internalservices.adtalem.com
secured2.san1.raxcdn.com
patho.games.adtalem.com
savinglives.games.adtalem.com
*.adtalem.com
myross.adtalem.com
secure12.san1.raxcdn.com
caw-cbrp00wa01.dvuadmin.net
adtalem.com
dev.adtalem.com
icc.games-dev.adtalem.com
sso.adtalem.com
adtalem.com
edge-exe104.vmce.adtalem.com
dev.adtalem.com
services.adtalem.com
jenkinssand.dev.adtalem.com
bi.qa.adtalem.com
www.adtalem.com
atge.idm.qa.adtalem.com
adtalem.com
aos.dev.adtalem.com
stumerp2.qa.adtalem.com
dev5195-exc102.vmce.adtalem.com
icc.games-dev.adtalem.com
adtalem.com
jira-ies.adtalem.com
venafitest.adtalem.com
edge-exe106.vmce.adtalem.com
edge-exe202.vmce.adtalem.com
savinglives.games.adtalem.com
connect.adtalem.com
cdn-myvrscope-elt-dev.adtalem.com
wsr.dev.adtalem.com
por.games-qa.adtalem.com
as.adtalem.com
venafitesting123.adtalem.com
sl.adtalem.com
qa.adtalem.com
int.adtalem.com
confluence-ies.adtalem.com
5195dev3-cuc11-ms.vmce.adtalem.com
adtalem.com
lms-analytics-dev.adtalem.com
bamboo-ies.adtalem.com
games.adtalem.com
dss.adtalem.com
sl-dev.adtalem.com
qa.adtalem.com
budget.qa.adtalem.com
cal-epcd00wa01.dev.adtalem.com
bi.adtalem.com
aem.adtalem.com
adtalem.com
dss.qa2.adtalem.com
int.adtalem.com
jenkinssand.dev.adtalem.com
patho.games-dev.adtalem.com
secure4.san1.raxcdn.com
secure12.san1.raxcdn.com
por.games-dev.adtalem.com
bios242.games.adtalem.com
games-qa.adtalem.com
secure12.san1.raxcdn.com
release-notes-ies.adtalem.com
secure12.san1.raxcdn.com
secure12.san1.raxcdn.com
afe.games-dev.adtalem.com
blog.qa.devry.edu
wso2aui.adtalem.com
aem.qa.adtalem.com
afe.games-qa.adtalem.com
wso2aui.adtalem.com
afe.games.adtalem.com
mobile.adtalem.com
www.stg.adtalem.com
sia-qa.adtalem.com
nexus-ies.adtalem.com
dev5195-exc208.vmce.adtalem.com
www.adtalem.com
release-notes-ies.adtalem.com
secure12.san1.raxcdn.com
*.qa.adtalem.com
adtalem.com
blog.qa.devry.edu
edge-exe106.vmce.adtalem.com
aemecomm.dev.adtalem.com
remote.adtalem.com
dss.dev2.adtalem.com
*.mobile.dev.adtalem.com
games-qa.adtalem.com
bios242.games-qa.adtalem.com
sl-qa.adtalem.com
services.int.adtalem.com
m.stg.rossu.edu

Certificate

The complete raw certificate details for int.adtalem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIQD7m1TsM3C58aOgQQvzcqHTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEyMTYwMDAwMDBaFw0yMTAxMTYx
MjAwMDBaMBoxGDAWBgNVBAMTD2ludC5hZHRhbGVtLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMUruZBwzCVyq+UpMUvdSqByWRZihXdBgh14zNcF
Isq91zMhDrTPQA4lsw3o3S22T1J4MOUm9QtzmNpuxWiSRGFFylH9A4Yf9iWLQIuA
9nWQepq2RJTG2bByNXxaxKuDAtYBSt8dgxk5oMhHxCdO5SH0CyRC1nh0/zcLCAh3
Fb77PVGgQoZSbD0PvZoOJZ+MUmgVXx7kCcsTAH/QfKFqHzyyBxLKa35eUKGEvvLZ
761GCFwUGk/mBDFNfUuotM4MgGoKlyMC2vURBtIOhxq2NWHbyqSSYjSBv8qn8wwu
zJuV6wWZ7DLFIShht8slknUVlBLyUmi1qlAH8R3/FaMuSF0CAwEAAaOCAnowggJ2
MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBT/A565
sf7T9uJNHB4v0/Mru75XZDCCAQoGA1UdEQSCAQEwgf6CD2ludC5hZHRhbGVtLmNv
bYINaW50LnJvc3N1LmVkdYIPbS5pbnQucm9zc3UuZWR1ghVtZWRpY2FsLmludC5y
b3NzdS5lZHWCGHZldGVyaW5hcnkuaW50LnJvc3N1LmVkdYIadmlld3BvaW50cy5p
bnQuYWR0YWxlbS5jb22CE3d3dy5pbnQuYWR0YWxlbS5jb22CEnd3dy5pbnQuYXVj
bWVkLmVkdYIRd3d3LmludC5yb3NzdS5lZHWCGm1lcnAuaW50Lm1lZHNjaG9vbHBy
ZXAuY29tghNjY2RtLmludC5hdWNtZWQuZWR1ghFtZWQuaW50LnJvc3N1LmVkdTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG
A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t
L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI
KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6
b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u
dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuEYalY81PBHKssfNZnnt6QqxFnM5B
tu7UtL0Snu68Ojdx/V8E6/3F/vAb9R+6uu3+Y6hphRKapTgyG76xRs1JYDM0ATlq
zajxTL90tAFGPzQmh1gvf1+yS+h8X6bcn3nC/HXl3H5riPwWwwklw0yMQE+2juEo
YJ3efNpRc53WnVIc47F+re57x+7bc0p2eHfRNexqSqY59bk8DMrsVVAPUTbtAkfQ
SS6LdsceC9VZhGdwHBGWVAyIYJD6pcvtBY4GSsTliu+1vn+hJ/OH/nlED6VOFDxV
spD4BFqKrYlZrZHLT5yu58Ah9EhNfjIBh2hfnyPzgm3gkGlsL8a/G8WX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSu5kHDMJXKr5SkxS91K
oHJZFmKFd0GCHXjM1wUiyr3XMyEOtM9ADiWzDejdLbZPUngw5Sb1C3OY2m7FaJJE
YUXKUf0Dhh/2JYtAi4D2dZB6mrZElMbZsHI1fFrEq4MC1gFK3x2DGTmgyEfEJ07l
IfQLJELWeHT/NwsICHcVvvs9UaBChlJsPQ+9mg4ln4xSaBVfHuQJyxMAf9B8oWof
PLIHEsprfl5QoYS+8tnvrUYIXBQaT+YEMU19S6i0zgyAagqXIwLa9REG0g6HGrY1
YdvKpJJiNIG/yqfzDC7Mm5XrBZnsMsUhKGG3yyWSdRWUEvJSaLWqUAfxHf8Voy5I
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20902672211953740985994854229488380445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int.adtalem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24890507610506648629265483772858489406469165151300302300387413907067840646626051612242929635394671244486117959386591686313716435179231728367058195051035918961175460066827460895482895213815966988452293167408431580439779439565570846124537382467840291796656452352322399202471096477766168513492657398968917061138243828111185916072747401629583184742318495772684446668346537042318278225606503115907942755012956524020592250552772495103077047754820646593940188127513197856880743215779588709158203465367271241133663126828523279513481566664941940488456111949480662084056408717744325543350951248348404672977697949292331302537309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff039eb9b1fed3f6e24d1c1e2fd3f32bbbbe5764
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.adtalem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.int.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.int.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterinary.int.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints.int.adtalem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int.adtalem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merp.int.medschoolprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdm.int.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'med.int.rossu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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