cayuseapi.demo.cayuse.com
Issued by Amazon
About this certificate
This digital certificate with serial number 07:b0:1e:b4:49:87:8b:ce:5f:f3:dc:8b:69:2e:48:39 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=cayuseapi.demo.cayuse.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:b0:1e:b4:49:87:8b:ce:5f:f3:dc:8b:69:2e:48:39Serial Number (int): 10219062973710173809132177395968526393
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 1b:d1:55:5f:23:1c:fa:31:97:a2:0b:d7:b5:cc:28:b3:00:cc:87:67
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 2f:65:95:99:0a:7d:56:60:d2:c4:bc:c1:31:04:08:a4:e2:ae:aa:fb
Fingerprint (sha256): 10:79:a6:e6:83:50:64:df:6f:33:65:40:4e:46:19:c5:a0:a7:da:c5:46:dd:0a:22:10:ed:39:40:2d:fe:79:51
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate cayuseapi.demo.cayuse.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cayuseapi.demo.cayuse.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cayuseapi.demo.cayuse.com
Other certificates including the domain name cayuse.com
(limited to 100 certificates)
gateway.app.cayuse.com
go.cayuse.com
standards-tools-status.ieee.org
info.cayuse.com
global-recruitment-jan.schrole.edu.au
*.sp.qa.apps.cayuse.com
itstatus.honegger.ch
go.cayuse.com
apac-status.cayuse.com
proxy.josh-test.apps.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
design.flowable.qa.apps.cayuse.com
*.regression.apps.cayuse.com
go.cayuse.com
apac-status.cayuse.com
global-recruitment-jan.schrole.edu.au
proxy.dev.424-preprod.cayuse.com
admin.dev.424-preprod.cayuse.com
cayuse.com
*.qa.cayuse.com
platform-zero.qa.apps.cayuse.com
*.ft.cayuse.com
go.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
cayusevpn.cayuse.com
apac-status.cayuse.com
cayuse.com
design.qa.apps.cayuse.com
www.cayuse.com
*.devops1.cayuse.com
global-recruitment-jan.schrole.edu.au
*.cayuse.com
support.cayuse.com
proxy.adam.424-preprod.cayuse.com
support.cayuse.com
cayuseapi.demo.cayuse.com
*.training.apps.cayuse.com
apac-status.cayuse.com
cdn.app.cayuse.com
*.regression.apps.cayuse.com
go.cayuse.com
administration-import.uat.cayuse.com
itstatus.honegger.ch
go.cayuse.com
gateway.prod-au.cayuse.com
*.uat.cayuse.com
apac-status.cayuse.com
*.regression.apps.cayuse.com
gateway.uat.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
*.ft.cayuse.com
ad.corp.cayuse.com
cayuse.com
design.develop.apps.cayuse.com
status.bigpicture.one
opsportal.cayuse.com
sp.eng.cayuse.com
*.cayuse.com
apac-status.cayuse.com
itstatus.honegger.ch
admin.dev.424-preprod.cayuse.com
status.cayuse.com
cayuse.com
*.prod-au.cayuse.com
*.rgrs.cayuse.com
gateway.train-au.cayuse.com
itstatus.honegger.ch
cayuse.com
login.josh-test.apps.cayuse.com
itstatus.honegger.ch
apac-status.cayuse.com
apac-status.cayuse.com
support.cayuse.com
itstatus.honegger.ch
admin.dev.424-preprod.cayuse.com
*.ft.cayuse.com
developer.dev.cayuse.com
validation-stage.424-preprod.cayuse.com
*.qa.apps.cayuse.com
validation-stage.424-preprod.cayuse.com
apac-status.cayuse.com
*.eng.cayuse.com
login.adam.424-preprod.cayuse.com
proxy.default.424-preprod.cayuse.com
*.ft.cayuse.com
go.cayuse.com
*.develop.apps.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
control.qa.apps.cayuse.com
go.cayuse.com
fm.cayuse.com
platform.prod-sg.apps.cayuse.com
*.duplo.ft.cayuse.com
support.cayuse.com
cayuseapi.ft.cayuse.com
go.cayuse.com
standards-tools-status.ieee.org
info.cayuse.com
global-recruitment-jan.schrole.edu.au
*.sp.qa.apps.cayuse.com
itstatus.honegger.ch
go.cayuse.com
apac-status.cayuse.com
proxy.josh-test.apps.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
design.flowable.qa.apps.cayuse.com
*.regression.apps.cayuse.com
go.cayuse.com
apac-status.cayuse.com
global-recruitment-jan.schrole.edu.au
proxy.dev.424-preprod.cayuse.com
admin.dev.424-preprod.cayuse.com
cayuse.com
*.qa.cayuse.com
platform-zero.qa.apps.cayuse.com
*.ft.cayuse.com
go.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
cayusevpn.cayuse.com
apac-status.cayuse.com
cayuse.com
design.qa.apps.cayuse.com
www.cayuse.com
*.devops1.cayuse.com
global-recruitment-jan.schrole.edu.au
*.cayuse.com
support.cayuse.com
proxy.adam.424-preprod.cayuse.com
support.cayuse.com
cayuseapi.demo.cayuse.com
*.training.apps.cayuse.com
apac-status.cayuse.com
cdn.app.cayuse.com
*.regression.apps.cayuse.com
go.cayuse.com
administration-import.uat.cayuse.com
itstatus.honegger.ch
go.cayuse.com
gateway.prod-au.cayuse.com
*.uat.cayuse.com
apac-status.cayuse.com
*.regression.apps.cayuse.com
gateway.uat.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
*.ft.cayuse.com
ad.corp.cayuse.com
cayuse.com
design.develop.apps.cayuse.com
status.bigpicture.one
opsportal.cayuse.com
sp.eng.cayuse.com
*.cayuse.com
apac-status.cayuse.com
itstatus.honegger.ch
admin.dev.424-preprod.cayuse.com
status.cayuse.com
cayuse.com
*.prod-au.cayuse.com
*.rgrs.cayuse.com
gateway.train-au.cayuse.com
itstatus.honegger.ch
cayuse.com
login.josh-test.apps.cayuse.com
itstatus.honegger.ch
apac-status.cayuse.com
apac-status.cayuse.com
support.cayuse.com
itstatus.honegger.ch
admin.dev.424-preprod.cayuse.com
*.ft.cayuse.com
developer.dev.cayuse.com
validation-stage.424-preprod.cayuse.com
*.qa.apps.cayuse.com
validation-stage.424-preprod.cayuse.com
apac-status.cayuse.com
*.eng.cayuse.com
login.adam.424-preprod.cayuse.com
proxy.default.424-preprod.cayuse.com
*.ft.cayuse.com
go.cayuse.com
*.develop.apps.cayuse.com
apac-status.cayuse.com
apac-status.cayuse.com
control.qa.apps.cayuse.com
go.cayuse.com
fm.cayuse.com
platform.prod-sg.apps.cayuse.com
*.duplo.ft.cayuse.com
support.cayuse.com
cayuseapi.ft.cayuse.com
Certificate
The complete raw certificate details for cayuseapi.demo.cayuse.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfTCCA2WgAwIBAgIQB7AetEmHi85f89yLaS5IOTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMTgwMDAwMDBaFw0yNDAxMTYy MzU5NTlaMCQxIjAgBgNVBAMTGWNheXVzZWFwaS5kZW1vLmNheXVzZS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpLm36RljWcLmVcLRUJtsVxrP TggYn75717q2cu6u0tUcdKIhqk2lVvJh3JXXQR8a8BwaujzgnjHRXGd3J9HmjeUd X224dzAh+q/af1vvOLkieSbT25nZ6jAwFyLtjg8q1dDN0OLf9a7wM06lUXZMXpJj 9vzyjAc6d3Of3+NphwTW4f3Q4AkIENZ4YcTzguOv5GPNuIAjhk8aIwt9o5Oxqh9c y0wvnjwiAupchn3ZK0Nf43TdiWYwyUCRN6zLVVI4B9mZdl91h1+qwgX5N8YCXk4A RrnxPSXIvLRCfAAIjjLYsKTP9b2tMKEXDH6cYF+Q5A1iYHyBMezRKDiEe7EVAgMB AAGjggGHMIIBgzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNV HQ4EFgQUG9FVXyMc+jGXogvXtcwoswDMh2cwJAYDVR0RBB0wG4IZY2F5dXNlYXBp LmRlbW8uY2F5dXNlLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc2Nh MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EM AQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2Nh MWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgCQt0UNVG2UjSRrjJB1 JHMHbnLMok/Y0x2weYrG0lJI9UnXW+lOwfh8zL8vlOVGxqzMgWd/vPn5n0SD+df/ 9KYqxYzejsnCwh17lSj69kSdma6tzOX/HlQxEczgXoa1ivkDxauqjhRDJsyZAqnt eEMwfkcjarnucg7Tug+9YK3Fm2/s1aXGZeIsv5EzcufTKHywdaFwq/nCqQFg5jk3 KUgyEAvQ8nbmlTYWCIJBA6/DSgQH5Prcz3r7VN2hFivNcaJVzW2nfCeqMIhs53rv sk/o85jzMO23Jj3qRRJEBkqAaopMxcPPuIYEVAH+bMZkMt2sl4IyXOgHInWNShg2 dw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6S5t+kZY1nC5lXC0VCb bFcaz04IGJ++e9e6tnLurtLVHHSiIapNpVbyYdyV10EfGvAcGro84J4x0VxndyfR 5o3lHV9tuHcwIfqv2n9b7zi5Inkm09uZ2eowMBci7Y4PKtXQzdDi3/Wu8DNOpVF2 TF6SY/b88owHOndzn9/jaYcE1uH90OAJCBDWeGHE84Ljr+RjzbiAI4ZPGiMLfaOT saofXMtML548IgLqXIZ92StDX+N03YlmMMlAkTesy1VSOAfZmXZfdYdfqsIF+TfG Al5OAEa58T0lyLy0QnwACI4y2LCkz/W9rTChFwx+nGBfkOQNYmB8gTHs0Sg4hHux FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10219062973710173809132177395968526393 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cayuseapi.demo.cayuse.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19143213202886675172910776621507305436828105903812880171433176204077378768371088676748742052961270608328300592501463705551607094154389830960989657075059309011851256731116734347700938422808648449662433827130282869253054161723610456358839949479028062991433818897300597289747130734495885154825830486013568410988442239726012316898671553629157345134457922867461424515964315512511374735752384716131700976927516506763715938888309536425232973900301646533951008727311481952884154555675634713231063253187459632180523813205895585944106726470757969298162339544497718272458076849318244410601237843128898732016144280910172509679893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1bd1555f231cfa3197a20bd7b5cc28b300cc8767 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cayuseapi.demo.cayuse.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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