*.zalora.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:b1:b2:20:c5:07:11:98:04:b6:03:da:ab:88:06:1e was issued on by Amazon.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.zalora.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:b1:b2:20:c5:07:11:98:04:b6:03:da:ab:88:06:1eSerial Number (int): 14214929366997566173099286047664637470
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 16:2b:6a:c0:ba:71:c2:32:fd:94:33:97:f0:34:dc:50:9a:6a:af:4a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): f7:76:41:45:ec:36:30:75:52:73:de:6f:81:b1:c2:60:59:c1:bd:ce
Fingerprint (sha256): 13:6a:93:0e:25:eb:07:4a:9c:0d:16:98:8c:05:0f:61:bb:9e:58:d3:8b:61:b3:d2:4d:bc:e7:bf:e9:5c:79:15
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.zalora.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.zalora.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.zalora.com
*.zalora.com.ph
*.qadistribution.sellercenter.net
*.zalora.sg
*.zalora.co.id
*.zalora.com.hk
*.zalora.com.tw
*.zalora.com.my
*.zalora.com.ph
*.qadistribution.sellercenter.net
*.zalora.sg
*.zalora.co.id
*.zalora.com.hk
*.zalora.com.tw
*.zalora.com.my
Other certificates including the domain name zalora.com
(limited to 100 certificates)
*.zalora.com
*.zalora.com
*.zalora.com
trender-tableau.zalora.com
images.partner.zalora.com
goto.zalora.com
affiliate.zalora.com
images.partner.zalora.com
ads.zalora.com
images.partner.zalora.com
ads.zalora.com
*.zalora.com
zalora.vn
*.zalora.com
images.partner.zalora.com
*.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
images.partner.zalora.com
trender.zalora.com
ads.zalora.com
worldwide.zalora.com
*.zalora.com
images.partner.zalora.com
images.partner.zalora.com
goto.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
www.zalora.com
images.partner.zalora.com
ads.zalora.com
zops.zalora.com
trender.zalora.com
email.zalora.com
*.zalora.com
styleguide.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
engineering.zalora.com
ads.zalora.com
goto.zalora.com
ads.zalora.com
trender-superset.zalora.com
ads.zalora.com
*.zalora.com
zalora.com
zops.zalora.com
zops-staging.zalora.com
ads.zalora.com
ads.zalora.com
goto.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
zheadcount-staging.zalora.com
*.zalora.com
*.zalora.com
trender.zalora.com
zalora.vn
ads.zalora.com
www.zalora.com
worldwide.zalora.com
ads.zalora.com
*.zalora.com
www.zalora.com
sellercenter.zalora.com
*.zalora.com
zalora.vn
zalora.com
ads.zalora.com
images.partner.zalora.com
*.zalora.com
zalora.vn
affiliate.zalora.com
ads.zalora.com
*.zalora.com
goto.zalora.com
sellercenter.zalora.com
corporate.zalora.com
www.zalora.com
z-pas.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
corporate.zalora.com
ads.zalora.com
ads.zalora.com
z-pas.zalora.com
*.zalora.com
zalora.com
trender-tableau.zalora.com
engineering.zalora.com
*.zalora.com
zalora.com
ads.zalora.com
zalora.com
*.zalora.com
*.zalora.com
trender-tableau.zalora.com
images.partner.zalora.com
goto.zalora.com
affiliate.zalora.com
images.partner.zalora.com
ads.zalora.com
images.partner.zalora.com
ads.zalora.com
*.zalora.com
zalora.vn
*.zalora.com
images.partner.zalora.com
*.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
images.partner.zalora.com
trender.zalora.com
ads.zalora.com
worldwide.zalora.com
*.zalora.com
images.partner.zalora.com
images.partner.zalora.com
goto.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
www.zalora.com
images.partner.zalora.com
ads.zalora.com
zops.zalora.com
trender.zalora.com
email.zalora.com
*.zalora.com
styleguide.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
engineering.zalora.com
ads.zalora.com
goto.zalora.com
ads.zalora.com
trender-superset.zalora.com
ads.zalora.com
*.zalora.com
zalora.com
zops.zalora.com
zops-staging.zalora.com
ads.zalora.com
ads.zalora.com
goto.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
zheadcount-staging.zalora.com
*.zalora.com
*.zalora.com
trender.zalora.com
zalora.vn
ads.zalora.com
www.zalora.com
worldwide.zalora.com
ads.zalora.com
*.zalora.com
www.zalora.com
sellercenter.zalora.com
*.zalora.com
zalora.vn
zalora.com
ads.zalora.com
images.partner.zalora.com
*.zalora.com
zalora.vn
affiliate.zalora.com
ads.zalora.com
*.zalora.com
goto.zalora.com
sellercenter.zalora.com
corporate.zalora.com
www.zalora.com
z-pas.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
corporate.zalora.com
ads.zalora.com
ads.zalora.com
z-pas.zalora.com
*.zalora.com
zalora.com
trender-tableau.zalora.com
engineering.zalora.com
*.zalora.com
zalora.com
ads.zalora.com
zalora.com
Certificate
The complete raw certificate details for *.zalora.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIQCrGyIMUHEZgEtgPaq4gGHjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA5MjEwMDAwMDBaFw0yMjEwMjAy MzU5NTlaMBcxFTATBgNVBAMMDCouemFsb3JhLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAI2+MhUPrSBDjeIF9tL0GKotKaPAUhCvN8GDPXnVjGt1 M6VBe1jkSKZYiE6g5Mb6hiyk6cBiAT0liXRaFeN6O/O4/ev5sJwbw89Al86acWBQ K5axqVmyqJ70x7FaabaZi/STpx6FSpT/mY1WCEeuBsT2M1riXhe5pdu5kvD0B/rU Sw7cF/7+b9O3UDyjxoqoaPRX/FwY6WqZLyabcqwMGQ5KhuLz81o+hy85PXi2UCVe 1Y9WZVHmzuuP65ZAJBjxt7SkbsNMiAmkTw7GFROi0SZiZ1JQ/YVwhH88Oc7wYTtu yl6MniJZ2uxQeE3w8AvXEA9raTROQAU+8SecnWkcShsCAwEAAaOCAf8wggH7MB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQWK2rAunHC Mv2UM5fwNNxQmmqvSjCBnQYDVR0RBIGVMIGSggwqLnphbG9yYS5jb22CDyouemFs b3JhLmNvbS5waIIhKi5xYWRpc3RyaWJ1dGlvbi5zZWxsZXJjZW50ZXIubmV0ggsq LnphbG9yYS5zZ4IOKi56YWxvcmEuY28uaWSCDyouemFsb3JhLmNvbS5oa4IPKi56 YWxvcmEuY29tLnR3gg8qLnphbG9yYS5jb20ubXkwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwEwYDVR0g BAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRw Oi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6 Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8E AjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC30cpi ZieIau1L1206IJgaGj9JbFcyyvIz1Do2U5pJA7ZLsIhpmhSIJIkiv/wlGWnTrntQ 6ckw6peVj3+G9lwK0ymPVpwDyGEN8II5joSIGYsRVGUUO/+lyi86zzesYXDHJoQC s1sFxsb8DkN+grTlKdVsOmngF2704aj1pKLG/oGmdW6ZTzESOX/aQS+SUIDIONJw VoFICo6+LrN7E95t37rEpCYEZULrsVc5MD2i0Y0G4q6sSQsaSoJriBUU+hX0n9ar mZAFE8+h59i9BLGxfX453iBIEtm/9IDB0R3FK2Cz+D2OM/abqWU0TBn5oZDe1X54 3G/nVA9uz6brGssb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb4yFQ+tIEON4gX20vQY qi0po8BSEK83wYM9edWMa3UzpUF7WORIpliITqDkxvqGLKTpwGIBPSWJdFoV43o7 87j96/mwnBvDz0CXzppxYFArlrGpWbKonvTHsVpptpmL9JOnHoVKlP+ZjVYIR64G xPYzWuJeF7ml27mS8PQH+tRLDtwX/v5v07dQPKPGiqho9Ff8XBjpapkvJptyrAwZ DkqG4vPzWj6HLzk9eLZQJV7Vj1ZlUebO64/rlkAkGPG3tKRuw0yICaRPDsYVE6LR JmJnUlD9hXCEfzw5zvBhO27KXoyeIlna7FB4TfDwC9cQD2tpNE5ABT7xJ5ydaRxK GwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14214929366997566173099286047664637470 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zalora.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17893389962837551738831183453926593280353899738529596873366954613625966489434569652922341134668149339534185298297839949796882377272703519308893472316256749172094961103841988488367467573421784186766901843430306767361690365720527798127762797064333666767938817436929355061150103190766513972843990237536120926053114916597008278164604655469394145457489864100283689992865005912147921753664347404121660544940171460334389577596496422365828312067894820263314678479224715617639596034544744794016048937976198024700153930434848411192232733261266777158829589316239335767741501320993418344928021612996729963716816988442944167758363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 162b6ac0ba71c232fd943397f034dc509a6aaf4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.ph' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qadistribution.sellercenter.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.my' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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