byrdie.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:00:83:f9:2f:46:c4:d9:5d:f0:98:7d:44:59:93:8f was issued on by Amazon.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=byrdie.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:00:83:f9:2f:46:c4:d9:5d:f0:98:7d:44:59:93:8f
Serial Number (int): 13294956695951053012203095106617185167
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 72:d9:64:08:7d:93:01:2a:f0:d6:9d:23:6b:64:0e:a9:12:4f:4d:6a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 73:e6:9c:53:3b:03:de:91:78:e1:88:1c:cd:25:6d:69:ad:b4:b8:69
Fingerprint (sha256): 12:b9:d4:f5:68:be:df:6f:77:06:23:d2:4d:b6:80:8b:16:a9:6e:76:1e:1b:66:c0:6d:f9:29:88:85:97:9b:cf

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate byrdie.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for byrdie.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

byrdie.com
*.byrdie.com
mydomaine.com
*.mydomaine.com
byrdie.co.uk
*.byrdie.co.uk
byrdie.com.au
*.byrdie.com.au
domainehome.com
*.domainehome.com
mydomaine.co.uk
*.mydomaine.co.uk
mydomainehome.com.au
*.mydomainehome.com.au

Other certificates including the domain name byrdie.com

(limited to 100 certificates)
h2.shared.global.fastly.net
ssl373026.cloudflaressl.com
ssl373025.cloudflaressl.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
persistent.app.qa.aws.byrdie.com
link.byrdie.com
h2.shared.global.fastly.net
dotdash.map.fastly.net
pe-adhoc-5.app.qa.aws.byrdie.com
pe-batch.app.qa.aws.byrdie.com
h2.shared.global.fastly.net
dotdash.map.fastly.net
local.dotdash.com
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
k2.shared.global.fastly.net
local.dotdash.com
continual.app.qa.aws.byrdie.com
continual.app.prod.aws.byrdie.com
newsletter.byrdie.com
local.dotdash.com
h2.shared.global.fastly.net
k2.shared.global.fastly.net
beautylab.byrdie.com
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
persistent.app.qa.aws.byrdie.com
byrdie.com
pe-btch.app.qa.aws.byrdie.com
local.dotdash.com
k2.shared.global.fastly.net
h2.shared.global.fastly.net
continual.app.prod.aws.byrdie.com
pe.app.qa.aws.byrdie.com
h2.shared.global.fastly.net
dotdash.map.fastly.net
continual.app.prod.aws.byrdie.com
byrdie.com
k2.shared.global.fastly.net
byrdie.com
h2.shared.global.fastly.net
h2.shared.global.fastly.net
k2.shared.global.fastly.net
continual.app.qa.aws.byrdie.com
h2.shared.global.fastly.net
local.dotdash.com
continual.app.prod.aws.byrdie.com
beautylab.byrdie.com
k2.shared.global.fastly.net
disposable.app.qa.aws.byrdie.com
local.dotdash.com
ssl373026.cloudflaressl.com
dotdash.map.fastly.net
k2.shared.global.fastly.net
pe-adhoc-3.app.qa.aws.byrdie.com
h2.shared.global.fastly.net
k2.shared.global.fastly.net
persistent.app.qa.aws.byrdie.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
newsletter.byrdie.com
ssl373026.cloudflaressl.com
continual.app.qa.aws.byrdie.com
ssl373025.cloudflaressl.com
h2.shared.global.fastly.net
continual.app.prod.aws.byrdie.com
beautylab.byrdie.com
h2.shared.global.fastly.net
h2.shared.global.fastly.net
k2.shared.global.fastly.net
beautylab.byrdie.com
*.byrdie.com
ssl373025.cloudflaressl.com
k2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
local.dotdash.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
h2.shared.global.fastly.net
local.dotdash.com
local.dotdash.com
continual.app.qa.aws.byrdie.com
a-ue1.dotdash.com
k2.shared.global.fastly.net
*.whowhatwear.com
continual.app.prod.aws.byrdie.com
k2.shared.global.fastly.net
dotdash.map.fastly.net
dotdash.map.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net

Certificate

The complete raw certificate details for byrdie.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIQCgCD+S9GxNld8Jh9RFmTjzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMTIwMDAwMDBaFw0yMDA0MTIx
MjAwMDBaMBUxEzARBgNVBAMTCmJ5cmRpZS5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYWCKVe0nKlzqX897zPR8stahywddWHoXv9cBv23qxz/pJ
wujRe0GWAgredpe5Ivp9/Kx3tkVakSO71e4/kpcpirzv8+Z6EffXYPF+V1W7Ohnl
VekXpyBI4mzi7B+HzbFoU2IbX9VerECEidcNn8bLomCs4opqRcKX0QBFf3fNG6oR
MZ7NW3H6i9a3vSIcF5wZ0IPU3H0Aish4v0QERtfBCUHogxS7ZMt0FpcfmHbcJiME
oIxIZA0GfB7z96EDAtAc5puhYIr+IUnxLWL5lF8DohnLhYCLYMUzImWv7dkjOCx8
xbS+G7xGr93O8d3PR+sVmhdU1nMkRTsErOjGRL1FAgMBAAGjggNbMIIDVzAfBgNV
HSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUctlkCH2TASrw
1p0ja2QOqRJPTWowgfkGA1UdEQSB8TCB7oIKYnlyZGllLmNvbYIMKi5ieXJkaWUu
Y29tgg1teWRvbWFpbmUuY29tgg8qLm15ZG9tYWluZS5jb22CDGJ5cmRpZS5jby51
a4IOKi5ieXJkaWUuY28udWuCDWJ5cmRpZS5jb20uYXWCDyouYnlyZGllLmNvbS5h
dYIPZG9tYWluZWhvbWUuY29tghEqLmRvbWFpbmVob21lLmNvbYIPbXlkb21haW5l
LmNvLnVrghEqLm15ZG9tYWluZS5jby51a4IUbXlkb21haW5laG9tZS5jb20uYXWC
FioubXlkb21haW5laG9tZS5jb20uYXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v
Y3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzAL
BglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw
AYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC
hipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYD
VR0TAQH/BAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ALvZ37wfinG1k5Qj
l6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABaXKDk+MAAAQDAEYwRAIgIMlu3hsFsrX1
3OpSGjwPd9n3MIDQRjUQv+5psFHFRusCIHJgAcfUBSJp6zEbs2L1pL+0fbj0/Lkr
22d89LloQHV2AHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFp
coOUvgAABAMASDBGAiEA6zlmM3QomnXjQwSEyH8Tr1DxHXDF0P0yaPJN5fe4cX4C
IQDfQrey8ETtbAaef3GhFicEYeyAATkM8j8MQhljyMHV9DANBgkqhkiG9w0BAQsF
AAOCAQEANvqrARf3TCyr/1phRBvm0nNYbfxJ/bdypFNLpvSx429GlkKlSC3a74It
UZzMsHXo9JjhIc+xt0j+41dyVZagNMjMO2y5duu94YbUcoPD6MxXUY3YQhGhFd+J
L+aRQUoDWPwO9UwIbyDLcUK92jaTxViiV2CPjdev6Xbq9pWDWcHxDsRCq7mJq3xn
Bn1FH/0VNGXVFVXBtB+d83Z9vxCt26KLczlXj/OhGn9sQcHvyzdzvOnwYcJTZAcs
ZcW/utrtcF1EqpB9fgijs63e5Kxt4eKOzVRTotBCf8714+5DqeI6FoGvvuKmUnuz
8HqfKmGN5SgD6rueakThCQiOT7gzlw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFgilXtJypc6l/Pe8z0f
LLWocsHXVh6F7/XAb9t6sc/6ScLo0XtBlgIK3naXuSL6ffysd7ZFWpEju9XuP5KX
KYq87/PmehH312DxfldVuzoZ5VXpF6cgSOJs4uwfh82xaFNiG1/VXqxAhInXDZ/G
y6JgrOKKakXCl9EARX93zRuqETGezVtx+ovWt70iHBecGdCD1Nx9AIrIeL9EBEbX
wQlB6IMUu2TLdBaXH5h23CYjBKCMSGQNBnwe8/ehAwLQHOaboWCK/iFJ8S1i+ZRf
A6IZy4WAi2DFMyJlr+3ZIzgsfMW0vhu8Rq/dzvHdz0frFZoXVNZzJEU7BKzoxkS9
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13294956695951053012203095106617185167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'byrdie.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19231683389215389618621069778739816973297829636607291463900072681567684291856658357549568638764750583553816443675873196984915526989684699449356821824965923537882805933497616568695479233117586745972418510688009802951115061817353945286885873419856252638613130648227899778015068836116364346869792459284399049587327697482638937670854310522105073835644012865887641540391437729124893246774864145579257279702087901221433358138039335014596594901602323677928130215588012072535309034380174736573969537893671624823809850886509679012093166704442304207640851579993035828454178492828811954067959009096554046010249105663399312014661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72d964087d93012af0d69d236b640ea9124f4d6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byrdie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byrdie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byrdie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byrdie.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byrdie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byrdie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomaine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomaine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomainehome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomainehome.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169728393e30000040300463044022020c96ede1b05b2b5f5dcea521a3c0f77d9f73080d0463510bfee69b051c546eb0220726001c7d4052269eb311bb362f5a4bfb47db8f4fcb92bdb677cf4b9684075760077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169728394be0000040300483046022100eb39663374289a75e3430484c87f13af50f11d70c5d0fd3268f24de5f7b8717e022100df42b7b2f044ed6c069e7f71a116270461ec8001390cf23f0c421963c8c1d5f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036faab0117f74c2cabff5a61441be6d273586dfc49fdb772a4534ba6f4b1e36f469642a5482ddaef822d519cccb075e8f498e121cfb1b748fee357725596a034c8cc3b6cb976ebbde186d47283c3e8cc57518dd84211a115df892fe691414a0358fc0ef54c086f20cb7142bdda3693c558a257608f8dd7afe976eaf6958359c1f10ec442abb989ab7c67067d451ffd153465d51555c1b41f9df3767dbf10addba28b7339578ff3a11a7f6c41c1efcb3773bce9f061c25364072c65c5bfbadaed705d44aa907d7e08a3b3addee4ac6de1e28ecd5453a2d0427fcef5e3ee43a9e23a1681afbee2a6527bb3f07a9f2a618de52803eabb9e6a44e109088e4fb83397