carsgenius.com
Issued by Amazon
About this certificate
This digital certificate with serial number 07:04:74:ef:97:39:24:02:53:ee:4b:86:45:9c:cc:6d was issued on by Amazon.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=carsgenius.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:04:74:ef:97:39:24:02:53:ee:4b:86:45:9c:cc:6dSerial Number (int): 9327736899774730226662499230150347885
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 30:0d:5d:c6:25:4b:07:a2:89:15:8d:c5:51:64:c1:80:20:fa:84:b0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): a6:c0:5b:c7:1d:a7:67:df:be:72:40:e0:4c:59:b8:ff:cd:98:ea:93
Fingerprint (sha256): 11:2a:86:2c:58:9e:c6:fd:a8:dc:28:da:c5:54:c3:43:66:08:ed:25:4d:21:e2:ca:10:31:23:fe:9d:16:16:57
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate carsgenius.com
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for carsgenius.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
carsgenius.com
voteitup.com
*.prod.autonews.club
*.voteitup.com
*.prod.socialpick.net
*.prod.travelversed.com
*.prod.askthiswhen.com
*.askthiswhen.com
*.prod.answerguide.org
*.travelversed.co
travelversed.co
travelversed.com
*.prod.voteitup.com
autonews.club
*.socialpick.net
*.travelversed.com
askthiswhen.com
*.prod.travelversed.co
*.answerguide.org
*.prod.smartstuff.howstuffworks.com
socialpick.net
*.autonews.club
answerguide.org
voteitup.com
*.prod.autonews.club
*.voteitup.com
*.prod.socialpick.net
*.prod.travelversed.com
*.prod.askthiswhen.com
*.askthiswhen.com
*.prod.answerguide.org
*.travelversed.co
travelversed.co
travelversed.com
*.prod.voteitup.com
autonews.club
*.socialpick.net
*.travelversed.com
askthiswhen.com
*.prod.travelversed.co
*.answerguide.org
*.prod.smartstuff.howstuffworks.com
socialpick.net
*.autonews.club
answerguide.org
Other certificates including the domain name carsgenius.com
(limited to 100 certificates)
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
pubwp-admin-prod.k.system1.company
carsgenius.com
carsgenius.com
*.myloveluxe.com
content.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
pubwp-admin-prod.k.system1.company
carsgenius.com
carsgenius.com
*.myloveluxe.com
content.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
Certificate
The complete raw certificate details for carsgenius.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIQBwR075c5JAJT7kuGRZzMbTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MDIwMDAwMDBaFw0yMTA1MDIx MjAwMDBaMBkxFzAVBgNVBAMTDmNhcnNnZW5pdXMuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAnJN8mdWMOK9XFAxcdxdkPmd6uTp6sHlaJC/w7x+O 1HR80bLy07TBFidOpB7WJfVo8mWJWqCkqQCDatnnQrea4GA0ajoBzdVIR1SwDkwM 6UgLjD228/Xcsv7Ne1YUsy/Vrp9mAur4UsrApnpfrvsBWK5GNQRPH1Ik1zSB8vf8 RJ3NdsdducmJuJGZYqEif+twE94tl7oOdF27ApmJ98C6X71fxn9vD3vIgTzL7ZVn wwLxywUKjBbC8LaZwjoE+4GsQOCmc2yWRAH8AQb2LAOHsU3PfyBsktTUWUPbrNo/ 6/YU2LOEd1hb6D38OepfNRv0/i+OxGymqiTVqpj+2cNBEQIDAQABo4IEOjCCBDYw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFDANXcYl SweiiRWNxVFkwYAg+oSwMIIB1wYDVR0RBIIBzjCCAcqCDmNhcnNnZW5pdXMuY29t ggx2b3RlaXR1cC5jb22CFCoucHJvZC5hdXRvbmV3cy5jbHVigg4qLnZvdGVpdHVw LmNvbYIVKi5wcm9kLnNvY2lhbHBpY2submV0ghcqLnByb2QudHJhdmVsdmVyc2Vk LmNvbYIWKi5wcm9kLmFza3RoaXN3aGVuLmNvbYIRKi5hc2t0aGlzd2hlbi5jb22C FioucHJvZC5hbnN3ZXJndWlkZS5vcmeCESoudHJhdmVsdmVyc2VkLmNvgg90cmF2 ZWx2ZXJzZWQuY2+CEHRyYXZlbHZlcnNlZC5jb22CEyoucHJvZC52b3RlaXR1cC5j b22CDWF1dG9uZXdzLmNsdWKCECouc29jaWFscGljay5uZXSCEioudHJhdmVsdmVy c2VkLmNvbYIPYXNrdGhpc3doZW4uY29tghYqLnByb2QudHJhdmVsdmVyc2VkLmNv ghEqLmFuc3dlcmd1aWRlLm9yZ4IjKi5wcm9kLnNtYXJ0c3R1ZmYuaG93c3R1ZmZ3 b3Jrcy5jb22CDnNvY2lhbHBpY2submV0gg8qLmF1dG9uZXdzLmNsdWKCD2Fuc3dl cmd1aWRlLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIB BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98M LyALzE7xZOMAAAFxO9/COgAABAMASDBGAiEA8diaGAfy6sTEREUZhicGzoA2YqSK Ld9jZ1mYuDeYVHECIQDdAqm0SM3mIZzFw0EqqqM/f3B8dTK5S0cyp2EB0Us7ewB1 AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABcTvfwjkAAAQDAEYw RAIgGoFEsHJ4Z4jAudqSM1wv1d8y/8hAMCEG+ONEwgBMwpQCICZGNKHDxGgn3t2z Nov/t/Qs7GvRZms8nbccQv+w+Of/MA0GCSqGSIb3DQEBCwUAA4IBAQCJZ2PPGHT5 +hByC3T7VfjR0+7S5sk2zl7QCoXYkdWE7QCg0ouaGyLKAmB2hraeFsdVNUJD8bZN dr4cRE3J1JOvP2ZqgaTWZPMD1XXtEVghDNM/1Bn/ER9jhL8MwEwKJEJzq6YWwsS5 gEGH1+lZT+Lt8zeWQnWfaFfp6KnbVziXXQh4YQIqLsHhQirtQEUNuC3RnqA6GZzO B8Oucc+p5Y+n0BFaSgIHT21NhgfeNiGfNwwpUkArW9I0iP1cU0p5QgGHGwST8k16 BCCB8S0fiyFLOyL4ffLv6WYZ0nC+7ynFOygnCRYs/Q6j0h/XDVJfvh0zx+QpXKUY Lj46sWh0jhr3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJN8mdWMOK9XFAxcdxdk Pmd6uTp6sHlaJC/w7x+O1HR80bLy07TBFidOpB7WJfVo8mWJWqCkqQCDatnnQrea 4GA0ajoBzdVIR1SwDkwM6UgLjD228/Xcsv7Ne1YUsy/Vrp9mAur4UsrApnpfrvsB WK5GNQRPH1Ik1zSB8vf8RJ3NdsdducmJuJGZYqEif+twE94tl7oOdF27ApmJ98C6 X71fxn9vD3vIgTzL7ZVnwwLxywUKjBbC8LaZwjoE+4GsQOCmc2yWRAH8AQb2LAOH sU3PfyBsktTUWUPbrNo/6/YU2LOEd1hb6D38OepfNRv0/i+OxGymqiTVqpj+2cNB EQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9327736899774730226662499230150347885 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carsgenius.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19765903988107785506601849358995713279148830809555932958817213572704713955813259865339156355243301688709775891059026140145619005278358961935468155514780267023520419471246945992751182700478714270723272853312304685819825129431799795068931918764847550960416088756524242024595420656359185894676011850869404634780511823014007412807663566226470463081537568573864902701464705359412226480772999086248246828423042220396581146985400095040482650754746325553177494108962798610363732359737053945473197029923115514392160378067562120020503401127450015727238539955592144012612382777288279154008281746655025161037152741052453054791953 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 300d5dc6254b07a289158dc55164c18020fa84b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (462 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsgenius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voteitup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.autonews.club' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voteitup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.socialpick.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.travelversed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.askthiswhen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askthiswhen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.answerguide.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelversed.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelversed.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelversed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.voteitup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autonews.club' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialpick.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelversed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askthiswhen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.travelversed.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.answerguide.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.smartstuff.howstuffworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialpick.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autonews.club' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answerguide.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001713bdfc23a0000040300483046022100f1d89a1807f2eac4c4444519862706ce803662a48a2ddf63675998b837985471022100dd02a9b448cde6219cc5c3412aaaa33f7f707c7532b94b4732a76101d14b3b7b0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001713bdfc239000004030046304402201a8144b072786788c0b9da92335c2fd5df32ffc840302106f8e344c2004cc2940220264634a1c3c46827deddb3368bffb7f42cec6bd1666b3c9db71c42ffb0f8e7ff . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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