developer-portal.prod.getty1.net

Issued by Amazon

About this certificate

This digital certificate with serial number 08:20:de:20:df:68:4f:d9:53:4a:3d:7a:fb:9e:36:ce was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=developer-portal.prod.getty1.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:20:de:20:df:68:4f:d9:53:4a:3d:7a:fb:9e:36:ce
Serial Number (int): 10804482765126915145933511156551268046
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4b:26:b5:90:dd:9f:ce:de:9e:4d:d2:19:11:04:fd:24:1b:3c:bd:ad
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4d:db:82:21:1c:e4:d3:db:d1:25:cd:a0:aa:db:18:70:f0:f2:53:b5
Fingerprint (sha256): 0e:92:73:04:77:d6:37:fa:8b:a1:a7:51:40:af:e7:aa:62:a5:ac:56:94:fb:e0:db:30:0e:e1:08:1a:e3:3c:90

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate developer-portal.prod.getty1.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developer-portal.prod.getty1.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developer-portal.prod.getty1.net
developers.gettyimages.com
developer.gettyimages.com
usage-cdn.gettyimages.com

Other certificates including the domain name getty1.net

(limited to 100 certificates)
embed-cdn.gettyimages.com
stage-gateway-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wireimage-origin-stage.nonprod.getty1.net
api.gettyimages.com
developer-portal.prod.getty1.net
origin-api.sandbox.getty1.net
wp-mktg.prod.getty1.net
istockcontenthub.lower.getty1.net
wildcard.lower.getty1.net
wp-mktg.prod.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
thinkstock-origin-production.prod.getty1.net
jake.sandbox.getty1.net
wildcard.prod.getty1.net
api.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
accountmanagement.sandbox.getty1.net
unisporkal.sandbox.getty1.net
developer-portal.prod.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
api.gettyimages.com
wp-istock-inspector.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wildcard.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
wildcard.sandbox.getty1.net
wireimage-origin-production.prod.getty1.net
accountmanagement.sandbox.getty1.net
api.gettyimages.com
api.gettyimages.com
wildcard.sandbox.getty1.net
origin-api.gettyimages.com
wildcard.prod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.nonprod.getty1.net
wildcard.prod.getty1.net
embed.gettyimages.com
origin-api.gettyimages.com
wildcard.sandbox.getty1.net
musiccontrib-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
wildcard.lower.getty1.net
developer-portal.prod.getty1.net
wp-istock-inspector.prod.getty1.net
api.gettyimages.com
wp-mktg.sandbox.getty1.net
thinkstock-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
origin-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
developer-portal.prod.getty1.net
jake.sandbox.getty1.net
wp-istock-inspector.prod.getty1.net
wp-mktg.prod.getty1.net
api.sandbox.getty1.net
wildcard.prod.getty1.net
wp-mktg.sandbox.getty1.net
wildcard.sandbox.getty1.net
entmon-splunk-hec-firehose.shared.getty1.net
wp-mktg.prod.getty1.net
embed-test-cdn.lower.getty1.net
entmon-splunk-hec-firehose.shared.getty1.net
embed.gettyimages.com
*.nonprod.getty1.net
embed-test-cdn.lower.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
developer-portal.prod.getty1.net
api.gettyimages.com
entmon-splunk-hec-firehose.nonprod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
wp-mktg.prod.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
gateway-api.prod.getty1.net
api.sandbox.getty1.net
wildcard.shared.getty1.net
wildcard.sandbox.getty1.net

Certificate

The complete raw certificate details for developer-portal.prod.getty1.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIQCCDeIN9oT9lTSj16+542zjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MDgwMDAwMDBaFw0yMDA5MDgx
MjAwMDBaMCsxKTAnBgNVBAMTIGRldmVsb3Blci1wb3J0YWwucHJvZC5nZXR0eTEu
bmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqEUsfpt815dUdna
g7Y6Lei9TbH+nyHznAqTRMxO8s6yYMRsbQsrLODcXZFnAgibxHK2ndy++hgvmiHm
ij/lGcKa1h96/aPg3uNwMOejQLTpwUG6duywYyOVLdrIXDsr6QrIwxQgF1HdK31T
0Ke0u0e01Obe/SU5KYt5IH4ndW/vfDoYV66lBP/qy2eZYeT8L7sxFImVCf0M4YiB
BjoN4y8i9NC9xOqwblWSeeKl/DUQNCcygRV+2IXkxdH4lHGl+Nddo9dWwoCzubfc
EO89MVX0xUNNzSxA3uVOWJuhmjaAEPhqZ3rj97BhOkJiyzeJEbHZMDYHOHqm0/nv
RMPJNQIDAQABo4IC3zCCAtswHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5
PdAwHQYDVR0OBBYEFEsmtZDdn87enk3SGREE/SQbPL2tMH0GA1UdEQR2MHSCIGRl
dmVsb3Blci1wb3J0YWwucHJvZC5nZXR0eTEubmV0ghpkZXZlbG9wZXJzLmdldHR5
aW1hZ2VzLmNvbYIZZGV2ZWxvcGVyLmdldHR5aW1hZ2VzLmNvbYIZdXNhZ2UtY2Ru
LmdldHR5aW1hZ2VzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2Nh
MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG
/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRw
Oi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6
Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8E
AjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcApLkJkLQYWBSHuxOizGdwCjw1
mAT5G9+443fNDsgN3BAAAAFscq5hHAAABAMASDBGAiEAuWd+dV4SvGxyGGU1wYEK
Dou8gR9jPSasRXFSfwHLp3ECIQDOUnoa4Le2hQqUUvp8yDYB3mAl1Y4zWOIhUMqG
CR9qZwB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbHKuYZ8A
AAQDAEcwRQIhALdefz0XvqhUZl/rSP1Gqxtajl3REcTEZN890sA+6wYWAiACpFgT
akqW34Yw0L6pACxjCx6tnFXcAln2F/XOGqE9sjANBgkqhkiG9w0BAQsFAAOCAQEA
uzYShj8f32o+I6u9kbHSZZOWDM4Muuon5JBrdlKs+JzCGS8HMX4Y/bA1lhL0OKUA
Af+9H7ppor6JfsO3+EywUFJ2xp2FU5fTY4nsPz4Px60CPn9mGAfvUg6Pi4NXoz3w
g31RMRD6fj5cUc87w5xdRo0/1gXSI4JVAKlgJuYPtvqE0rbE2liE2F+olBjd3kya
NXmJhhlPNiSCV2nEsAQvf6Xppy5VSFzzBx53gk2pPeN3afHoTFNbtGc5Tm2l/Ik+
IvEFu2CsOjYGdTlSSLFOB7mUXiCAY90V0PEy72VsXm9Hou0y1bPUKU7CeBoTlHYv
47TGhqxF40pRO9pl3b/4vw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqEUsfpt815dUdnag7Y6
Lei9TbH+nyHznAqTRMxO8s6yYMRsbQsrLODcXZFnAgibxHK2ndy++hgvmiHmij/l
GcKa1h96/aPg3uNwMOejQLTpwUG6duywYyOVLdrIXDsr6QrIwxQgF1HdK31T0Ke0
u0e01Obe/SU5KYt5IH4ndW/vfDoYV66lBP/qy2eZYeT8L7sxFImVCf0M4YiBBjoN
4y8i9NC9xOqwblWSeeKl/DUQNCcygRV+2IXkxdH4lHGl+Nddo9dWwoCzubfcEO89
MVX0xUNNzSxA3uVOWJuhmjaAEPhqZ3rj97BhOkJiyzeJEbHZMDYHOHqm0/nvRMPJ
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10804482765126915145933511156551268046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developer-portal.prod.getty1.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22549850206991907429489904177371336892416405275138775222185975172966038942130323300815777070151344214223881875161848935625264141555766036740102036760921166979388385568853055792713152096874256213132596038746894073779573013059801286157632533125097914570824899082341864566731588912282852473188903189038105340198222492401153303961589093674684151012972289205451198026626214484071301556813131453096233076379080775842363234199309125416427204954229712553216729629775026242025064170297544560120427133767026738656011549826198801069419606796019001527636452976700492453871428282170291366377766684111954760501884778886599446612277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b26b590dd9fcede9e4dd2191104fd241b3cbdad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-portal.prod.getty1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usage-cdn.gettyimages.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016c72ae611c0000040300483046022100b9677e755e12bc6c72186535c1810a0e8bbc811f633d26ac4571527f01cba771022100ce527a1ae0b7b6850a9452fa7cc83601de6025d58e3358e22150ca86091f6a670076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c72ae619f0000040300473045022100b75e7f3d17bea854665feb48fd46ab1b5a8e5dd111c4c464df3dd2c03eeb0616022002a458136a4a96df8630d0bea9002c630b1ead9c55dc0259f617f5ce1aa13db2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bb3612863f1fdf6a3e23abbd91b1d26593960cce0cbaea27e4906b7652acf89cc2192f07317e18fdb0359612f438a50001ffbd1fba69a2be897ec3b7f84cb0505276c69d855397d36389ec3f3e0fc7ad023e7f661807ef520e8f8b8357a33df0837d513110fa7e3e5c51cf3bc39c5d468d3fd605d223825500a96026e60fb6fa84d2b6c4da5884d85fa89418ddde4c9a35798986194f3624825769c4b0042f7fa5e9a72e55485cf3071e77824da93de37769f1e84c535bb467394e6da5fc893e22f105bb60ac3a360675395248b14e07b9945e208063dd15d0f132ef656c5e6f47a2ed32d5b3d4294ec2781a1394762fe3b4c686ac45e34a513bda65ddbff8bf