cdn-ra.rockcontent.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:16:ee:7d:d0:a3:7a:fa:41:79:0d:28:11:b1:dd:dc was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cdn-ra.rockcontent.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:16:ee:7d:d0:a3:7a:fa:41:79:0d:28:11:b1:dd:dcSerial Number (int): 5435979695603930776597701723893652956
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ee:b1:fe:0e:22:50:e5:b4:53:2f:42:9c:7b:64:f3:45:f6:87:dd:2a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): af:85:4f:9d:17:bc:f4:04:df:c6:02:1d:64:78:1a:3c:b1:69:36:d6
Fingerprint (sha256): 10:2a:b4:f2:5e:9e:d4:08:26:6a:19:59:e6:ee:da:8c:8c:4c:71:d3:0d:49:74:9e:fc:07:b7:9a:34:3f:99:ae
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate cdn-ra.rockcontent.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn-ra.rockcontent.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn-ra.rockcontent.com
Other certificates including the domain name rockcontent.com
(limited to 100 certificates)
*.stage.rockcontent.com
sni32185.cloudflaressl.com
templatea.rockcontent.com
api.rockcontent.com
sni32185.cloudflaressl.com
space.rockcontent.com
admin7status.brinkpos.net
inteligencia.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
ion-status.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
comunidade.rockcontent.com
template8.rockcontent.com
wiki.rockcontent.com
template7.rockcontent.com
blog-anhanguera.prd.stage.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
comunidade.rockcontent.com
admin7status.brinkpos.net
rc-blogs.rockcontent.com
universidade.rockcontent.com
admin7status.brinkpos.net
ion-status.rockcontent.com
api.analytics.rockcontent.com
university.br.rockcontent.com
stage.rockcontent.com
rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
*.rockcontent.com
templateb.rockcontent.com
universidade.rockcontent.com
template2.rockcontent.com
admin7status.brinkpos.net
template4.rockcontent.com
sni32185.cloudflaressl.com
learndash.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
templatee.rockcontent.com
sni32185.cloudflaressl.com
template3.rockcontent.com
blog-faq.rockcontent.com
sni32185.cloudflaressl.com
university.rockcontent.com
cdn-ra.rockcontent.com
*.rockcontent.com
template7.rockcontent.com
hackers.rockcontent.com
champions.rockcontent.com
admin7status.brinkpos.net
templatea.rockcontent.com
performance.rockcontent.com
*.privacy.rockcontent.com
template4.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
tecnologia.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
template4.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
*.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
space.rockcontent.com
data.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
ion.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
sni32185.cloudflaressl.com
gtn.rockcontent.com
gabby-careless-top.blogs.rockstage.io
studio.rockcontent.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
template1.rockcontent.com
ion.rockcontent.com
sni32185.cloudflaressl.com
resources.rockcontent.com
admin7status.brinkpos.net
gtn.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
maestro.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
admin7status.brinkpos.net
admin7status.brinkpos.net
sni32185.cloudflaressl.com
templatea.rockcontent.com
api.rockcontent.com
sni32185.cloudflaressl.com
space.rockcontent.com
admin7status.brinkpos.net
inteligencia.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
ion-status.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
comunidade.rockcontent.com
template8.rockcontent.com
wiki.rockcontent.com
template7.rockcontent.com
blog-anhanguera.prd.stage.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
comunidade.rockcontent.com
admin7status.brinkpos.net
rc-blogs.rockcontent.com
universidade.rockcontent.com
admin7status.brinkpos.net
ion-status.rockcontent.com
api.analytics.rockcontent.com
university.br.rockcontent.com
stage.rockcontent.com
rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
*.rockcontent.com
templateb.rockcontent.com
universidade.rockcontent.com
template2.rockcontent.com
admin7status.brinkpos.net
template4.rockcontent.com
sni32185.cloudflaressl.com
learndash.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
templatee.rockcontent.com
sni32185.cloudflaressl.com
template3.rockcontent.com
blog-faq.rockcontent.com
sni32185.cloudflaressl.com
university.rockcontent.com
cdn-ra.rockcontent.com
*.rockcontent.com
template7.rockcontent.com
hackers.rockcontent.com
champions.rockcontent.com
admin7status.brinkpos.net
templatea.rockcontent.com
performance.rockcontent.com
*.privacy.rockcontent.com
template4.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
tecnologia.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
template4.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
*.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
space.rockcontent.com
data.rockcontent.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
sni32185.cloudflaressl.com
ion.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
sni32185.cloudflaressl.com
gtn.rockcontent.com
gabby-careless-top.blogs.rockstage.io
studio.rockcontent.com
admin7status.brinkpos.net
sni32185.cloudflaressl.com
template1.rockcontent.com
ion.rockcontent.com
sni32185.cloudflaressl.com
resources.rockcontent.com
admin7status.brinkpos.net
gtn.rockcontent.com
admin7status.brinkpos.net
admin7status.brinkpos.net
maestro.rockcontent.com
sni32185.cloudflaressl.com
admin7status.brinkpos.net
admin7status.brinkpos.net
admin7status.brinkpos.net
Certificate
The complete raw certificate details for cdn-ra.rockcontent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIQBBbufdCjevpBeQ0oEbHd3DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MTIwMDAwMDBaFw0yMTA1MTIx MjAwMDBaMCExHzAdBgNVBAMTFmNkbi1yYS5yb2NrY29udGVudC5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gAtXj31t3oGdmD6iSZSI3VBKzmUD WUOLDXhh+1AOGIZB4hrBqTlx84WnX2PpO6yMDk6DvgQ+6wGhj2MfbRtDOFz4GxEs OtPbTmSiFAIQmAmsM9R8Oy4gvzGXAzAVeVtnHgEFYDhTmFwuQxjLXz0ZhX7yRyJI N9k/mfABEvxDgfj+xgWP9bZuThvuz+i2awUePKVSFTUf29gDFTZx5h8Sd6pJ1ETg QlVhYTI1UE9vYTsPxMv21LChltwwfEAcCXdsZg4rGlewM4P7wKdUw71YHJivGt2C VZMHrNTuUpBuGagCBH//I6rpZ6A/CGcMFPAzAtAIeqIT6oUqaC8dtwWXAgMBAAGj ggKDMIICfzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQU7rH+DiJQ5bRTL0Kce2TzRfaH3SowIQYDVR0RBBowGIIWY2RuLXJhLnJvY2tj b250ZW50LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIB BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98M LyALzE7xZOMAAAFxbATcSwAABAMASDBGAiEApyThJJCi7iu3Sa3zH5wUryJvlVRi Y26Z7XFyY8RtFhICIQDSuuGeaNsBYWCpY9NwXff+Jtbw2R/A6uqSXan1r8FhHQB2 AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABcWwE3JYAAAQDAEcw RQIgNp0U/hKqtWDwZUSqov0dZnGWaGxr2KrvvkGm8P0+mXECIQDi13id9pOKuMCb OH363c6KyoNAUJjakVrhc4FFU0D54TANBgkqhkiG9w0BAQsFAAOCAQEAIhWlTrqA ZH0t8kVJJaeIW1oHW8w0anZe6hJpX+LwckZVbseIEIn3oB1pIhafNdzcDgoXObbC wVQNidzVb26SMMM9z7B+kDi/iEpYYZe05Ny05XG7z0lxVtuJY9/HCLLEe449SR+G 0d9Tv4X9vC2gBeCuvXdF85ij4adJiXG+CklrHjtjpUZehBw4n71zQ86mIL/HOnei 4Yb5IdBeuTmGL85vOil27lD6MbmbKlRQF8ThRDH6DbTC29wsAFSJMwjb07WXpPfL FYo57D37Vp/3osw62LXu9bFIqtrCfpoEc9tMKGGLMIrfd6foEex9GycnjFPhvy6b JHusoZZE6XfY3A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIALV499bd6BnZg+okmU iN1QSs5lA1lDiw14YftQDhiGQeIawak5cfOFp19j6TusjA5Og74EPusBoY9jH20b Qzhc+BsRLDrT205kohQCEJgJrDPUfDsuIL8xlwMwFXlbZx4BBWA4U5hcLkMYy189 GYV+8kciSDfZP5nwARL8Q4H4/sYFj/W2bk4b7s/otmsFHjylUhU1H9vYAxU2ceYf EneqSdRE4EJVYWEyNVBPb2E7D8TL9tSwoZbcMHxAHAl3bGYOKxpXsDOD+8CnVMO9 WByYrxrdglWTB6zU7lKQbhmoAgR//yOq6WegPwhnDBTwMwLQCHqiE+qFKmgvHbcF lwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5435979695603930776597701723893652956 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn-ra.rockcontent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23290989113757502733312850953239424243860577532753299144195508931743618131680292414091384005493827523249201953750332880829397512043502910371965911053561943312660641260195778910785069922348896456141621940081361566929351846524220383295820770073121131538407823242721225610323788054546778271716410205047874829540545429923332954288021865870535129108355554502753747595618371039008870543868829213107121234566726662166852655191967979731200038771865206109355963427204742483764489739698654745689590359103144340975524400131930313378871074317085980306758425997023671936557001329350849465102984625137078124890399469773310823695767 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eeb1fe0e2250e5b4532f429c7b64f345f687dd2a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-ra.rockcontent.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001716c04dc4b0000040300483046022100a724e12490a2ee2bb749adf31f9c14af226f955462636e99ed717263c46d1612022100d2bae19e68db016160a963d3705df7fe26d6f0d91fc0eaea925da9f5afc1611d0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001716c04dc9600000403004730450220369d14fe12aab560f06544aaa2fd1d667196686c6bd8aaefbe41a6f0fd3e9971022100e2d7789df6938ab8c09b387dfaddce8aca83405098da915ae17381455340f9e1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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