*.cdn.k8s-aws-eu-west-245.callsign.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:c9:46:b0:3e:8f:75:98:8f:7e:14:6d:08:12:c6:13 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.cdn.k8s-aws-eu-west-245.callsign.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:c9:46:b0:3e:8f:75:98:8f:7e:14:6d:08:12:c6:13Serial Number (int): 14337365358605019542077398574571898387
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 26:17:33:b8:e6:4f:e0:5e:2d:e3:60:ec:bd:6a:da:13:be:c6:36:10
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 8e:05:27:fb:a4:31:e8:81:1f:2c:a4:46:ef:2b:ae:1e:b9:b0:9d:25
Fingerprint (sha256): 10:af:22:77:18:b3:0a:7c:ad:70:6d:ca:b9:bf:31:1d:2a:fa:e3:87:61:f7:ea:5a:0e:7f:6d:74:03:25:5b:95
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.cdn.k8s-aws-eu-west-245.callsign.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cdn.k8s-aws-eu-west-245.callsign.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cdn.k8s-aws-eu-west-245.callsign.com
Other certificates including the domain name callsign.com
(limited to 100 certificates)
*.s06.callsign.com
grafana.green.mtepafs1.af-south-1.internal.s06.callsign.com
*.s06.callsign.com
grafana.blue.csppeuw1.eu-west-1.internal.s02.callsign.com
blog.callsign.com
grafana.green.hsbcpeuw1.eu-west-1.internal.t12.callsign.com
sales.callsign.com
*.eu-central-1.t07.callsign.com
incapsula.com
support.callsign.com
*.blue.csprodeuw1.eu-west-1.internal.s01.callsign.com
*.green.cositeuw1.eu-west-1.internal.t10-sit.callsign.com
callsign.com
sales.callsign.com
estado.medios.com.ar
app.s02.callsign.com
*.packages.callsign.com
grafana.pink.lbgpeu.eu-west-1.internal.t07.callsign.com
aonhrlearningcenter.credentials.aon.com
aonhrlearningcenter.credentials.aon.com
*.pink.csppeuw1.eu-west-1.internal.s02.callsign.com
callsign.com
*.green.cositeuw1.eu-west-1.internal.t10-sit.callsign.com
grafana.green.lbgpeu.eu-west-1.internal.t07.callsign.com
app.s01.callsign.com
callsign.com
estado.medios.com.ar
estado.medios.com.ar
*.green.csprodeuw1.eu-west-1.internal.s01.callsign.com
grafana.green.lbgpeu.eu-west-1.internal.t07.callsign.com
*.eu-west-1.s01.callsign.com
ok.callsign.com
app.s05.callsign.com
*.pink.mtepusw2.us-west-2.internal.s05.callsign.com
*.yellow.mtepafs1.af-south-1.internal.s06.callsign.com
callsign.com
southfields.s02.callsign.com
docs.callsign.com
*.blue.mtepusw2.us-west-2.internal.s05.callsign.com
docs.callsign.com
sales.callsign.com
*.t15-sit.callsign.com
callsign.com
*.eu-west-1.s01.callsign.com
*.green.lbgpeu.eu-central-1.internal.t07.callsign.com
ok.callsign.com
*.cdn.k8s-aws-eu-west-245.callsign.com
*.blue.mtepafs1.af-south-1.internal.s06.callsign.com
t07-pre-prod.callsign.com
programs.callsign.com
grafana.blue.mtepafs1.af-south-1.internal.s06.callsign.com
callsign.com
sales.callsign.com
app.t07-pre-prod.callsign.com
*.blue.mtepmes1.me-south-1.internal.s04.callsign.com
*.green.lbgsiteuw1.eu-west-1.internal.t07-sit.callsign.com
ok.callsign.com
support.callsign.com
*.yellow.mtepafs1.af-south-1.internal.s06.callsign.com
t11-sit.callsign.com
estado.medios.com.ar
ok.callsign.com
callsign.com
callsign.com
*.green.hsbcppape1.ap-east-1.internal.t14-pre-prod.callsign.com
blog.callsign.com
*.blue.hsbcpape1.ap-east-1.internal.t14.callsign.com
sales.callsign.com
callsign.com
grafana.pink.mtepusw2.us-west-2.internal.s05.callsign.com
*.csprodeuw1.eu-west-1.internal.s01.callsign.com
*.pink.hsbcsitape1.ap-east-1.internal.t14-sit.callsign.com
programs.callsign.com
grafana.green.mtepmes1.me-south-1.internal.s04.callsign.com
*.pink.lbgppeu.eu-west-1.internal.t07-pre-prod.callsign.com
callsign.com
*.green.mtepafs1.af-south-1.internal.s06.callsign.com
programs.callsign.com
blog.callsign.com
ssl363069.cloudflaressl.com
*.s02.callsign.com
incapsula.com
*.eu-central-1.t07-pre-prod.callsign.com
white.csprod.me-central2.internal.s08.callsign.com
ssl363067.cloudflaressl.com
grafana.blue.hsbcpape1.ap-east-1.internal.t14.callsign.com
app.t14.callsign.com
*.green.mtepmes1.me-south-1.internal.s04.callsign.com
app.t12.callsign.com
t09-sit.callsign.com
callsign.com
t09.callsign.com
callsign.com
estado.medios.com.ar
*.cdn.k8s-aws-eu-west-245.callsign.com
*.blue.lbgppeu.eu-central-1.internal.t07-pre-prod.callsign.com
grafana.blue.hsbcsiteuw1.eu-west-1.internal.t12-sit.callsign.com
t07-sit.callsign.com
grafana.green.mtepafs1.af-south-1.internal.s06.callsign.com
*.callsign.com
grafana.green.mtepafs1.af-south-1.internal.s06.callsign.com
*.s06.callsign.com
grafana.blue.csppeuw1.eu-west-1.internal.s02.callsign.com
blog.callsign.com
grafana.green.hsbcpeuw1.eu-west-1.internal.t12.callsign.com
sales.callsign.com
*.eu-central-1.t07.callsign.com
incapsula.com
support.callsign.com
*.blue.csprodeuw1.eu-west-1.internal.s01.callsign.com
*.green.cositeuw1.eu-west-1.internal.t10-sit.callsign.com
callsign.com
sales.callsign.com
estado.medios.com.ar
app.s02.callsign.com
*.packages.callsign.com
grafana.pink.lbgpeu.eu-west-1.internal.t07.callsign.com
aonhrlearningcenter.credentials.aon.com
aonhrlearningcenter.credentials.aon.com
*.pink.csppeuw1.eu-west-1.internal.s02.callsign.com
callsign.com
*.green.cositeuw1.eu-west-1.internal.t10-sit.callsign.com
grafana.green.lbgpeu.eu-west-1.internal.t07.callsign.com
app.s01.callsign.com
callsign.com
estado.medios.com.ar
estado.medios.com.ar
*.green.csprodeuw1.eu-west-1.internal.s01.callsign.com
grafana.green.lbgpeu.eu-west-1.internal.t07.callsign.com
*.eu-west-1.s01.callsign.com
ok.callsign.com
app.s05.callsign.com
*.pink.mtepusw2.us-west-2.internal.s05.callsign.com
*.yellow.mtepafs1.af-south-1.internal.s06.callsign.com
callsign.com
southfields.s02.callsign.com
docs.callsign.com
*.blue.mtepusw2.us-west-2.internal.s05.callsign.com
docs.callsign.com
sales.callsign.com
*.t15-sit.callsign.com
callsign.com
*.eu-west-1.s01.callsign.com
*.green.lbgpeu.eu-central-1.internal.t07.callsign.com
ok.callsign.com
*.cdn.k8s-aws-eu-west-245.callsign.com
*.blue.mtepafs1.af-south-1.internal.s06.callsign.com
t07-pre-prod.callsign.com
programs.callsign.com
grafana.blue.mtepafs1.af-south-1.internal.s06.callsign.com
callsign.com
sales.callsign.com
app.t07-pre-prod.callsign.com
*.blue.mtepmes1.me-south-1.internal.s04.callsign.com
*.green.lbgsiteuw1.eu-west-1.internal.t07-sit.callsign.com
ok.callsign.com
support.callsign.com
*.yellow.mtepafs1.af-south-1.internal.s06.callsign.com
t11-sit.callsign.com
estado.medios.com.ar
ok.callsign.com
callsign.com
callsign.com
*.green.hsbcppape1.ap-east-1.internal.t14-pre-prod.callsign.com
blog.callsign.com
*.blue.hsbcpape1.ap-east-1.internal.t14.callsign.com
sales.callsign.com
callsign.com
grafana.pink.mtepusw2.us-west-2.internal.s05.callsign.com
*.csprodeuw1.eu-west-1.internal.s01.callsign.com
*.pink.hsbcsitape1.ap-east-1.internal.t14-sit.callsign.com
programs.callsign.com
grafana.green.mtepmes1.me-south-1.internal.s04.callsign.com
*.pink.lbgppeu.eu-west-1.internal.t07-pre-prod.callsign.com
callsign.com
*.green.mtepafs1.af-south-1.internal.s06.callsign.com
programs.callsign.com
blog.callsign.com
ssl363069.cloudflaressl.com
*.s02.callsign.com
incapsula.com
*.eu-central-1.t07-pre-prod.callsign.com
white.csprod.me-central2.internal.s08.callsign.com
ssl363067.cloudflaressl.com
grafana.blue.hsbcpape1.ap-east-1.internal.t14.callsign.com
app.t14.callsign.com
*.green.mtepmes1.me-south-1.internal.s04.callsign.com
app.t12.callsign.com
t09-sit.callsign.com
callsign.com
t09.callsign.com
callsign.com
estado.medios.com.ar
*.cdn.k8s-aws-eu-west-245.callsign.com
*.blue.lbgppeu.eu-central-1.internal.t07-pre-prod.callsign.com
grafana.blue.hsbcsiteuw1.eu-west-1.internal.t12-sit.callsign.com
t07-sit.callsign.com
grafana.green.mtepafs1.af-south-1.internal.s06.callsign.com
*.callsign.com
Certificate
The complete raw certificate details for *.cdn.k8s-aws-eu-west-245.callsign.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElTCCA32gAwIBAgIQCslGsD6PdZiPfhRtCBLGEzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA0MDQwMDAwMDBaFw0yMjA1MDMy MzU5NTlaMDExLzAtBgNVBAMMJiouY2RuLms4cy1hd3MtZXUtd2VzdC0yNDUuY2Fs bHNpZ24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+AxKH/1 jhBcM38gFQlmlUvfCMsY0qCoLxzhh+3SaeVx52m9ImEgUupAVJ9eMu5dIqo8n1uB MkcNpHX1zYZkW3QFZjY6tqvD/Hgfz5lI1rL4L3/THzluxQmhGlHZFmjswcjtGPW7 iSXE27xn1WdhPFDVVtGXvQZxiWj9Dzt72NavwKNuS8YP6FRGr3KdtSka+D6gDv2a 24pinJEwaVsVjKZyVjp/kWghIX8rSyqvLk/fUJ4nULcLUmrxwTdh9JBDPdiMLaX4 4ZdevtqREBGasSyWdAvlbfq3ot49V1/k7oQnmciI3oxizGxx80dh/S2pzTFVJY3+ zVQ5aoGkNvSm0wIDAQABo4IBkjCCAY4wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOU ByeWdFv5PdAwHQYDVR0OBBYEFCYXM7jmT+BeLeNg7L1q2hO+xjYQMDEGA1UdEQQq MCiCJiouY2RuLms4cy1hd3MtZXUtd2VzdC0yNDUuY2FsbHNpZ24uY29tMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEACeSuumglQJLY/gzHdZ2Fhjonw3oK8DpduqMx61bNZrzNk1VAc1yJ 2ZhI88DwXPhbKePdsTOAT9+F2wy1DbJy8Tvnc1dJZdkRkX0ujMHnc8Th/rATjthf Z24dbJNUvksuV3Bh4VQuALG3o930pj5F6+b14+lDjmK5W/5L231nGgatZdDicR/a s84dpCZe6OjXKJ5Z2+Cr6DYM0QUu+Aqz57Su8EzCZ7po5CW8cII4KHvepAEpd0gE +6sUz9mhGZ2Vhuy5AIhSM9GT0RhL2YfS5FdZSB1xu+KnJdTL63s7oUTEO+oLevrO zKs1pWKQXn/txifyrRLfhTowWcJ8fBYz6g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+AxKH/1jhBcM38gFQlm lUvfCMsY0qCoLxzhh+3SaeVx52m9ImEgUupAVJ9eMu5dIqo8n1uBMkcNpHX1zYZk W3QFZjY6tqvD/Hgfz5lI1rL4L3/THzluxQmhGlHZFmjswcjtGPW7iSXE27xn1Wdh PFDVVtGXvQZxiWj9Dzt72NavwKNuS8YP6FRGr3KdtSka+D6gDv2a24pinJEwaVsV jKZyVjp/kWghIX8rSyqvLk/fUJ4nULcLUmrxwTdh9JBDPdiMLaX44ZdevtqREBGa sSyWdAvlbfq3ot49V1/k7oQnmciI3oxizGxx80dh/S2pzTFVJY3+zVQ5aoGkNvSm 0wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14337365358605019542077398574571898387 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cdn.k8s-aws-eu-west-245.callsign.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21697303356717581264006536826861894403304840449068471270068514343125011132476847333294873779398671966482360868603614869028450412364752332977492064795345468619468418318141577876557675830069667545422371931343742775469012306239527744194713206589231874479694780617552858273780763804897044005617953627024322323722474112101873287985717738658156020762480747872749682039894223086053380445558353347247442692204558713534574119895614669019229321339274282689759374749419911717453937301624163616155104389434040457514339774019945482739570672537565106954116447137110581713018688160874398569284695549040648014525970331110764207974099 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 261733b8e64fe05e2de360ecbd6ada13bec63610 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.k8s-aws-eu-west-245.callsign.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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