www-dev.silive.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:a8:6b:4a:f6:51:aa:0e:a7:02:94:5b:29:88:9e:81 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www-dev.silive.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:a8:6b:4a:f6:51:aa:0e:a7:02:94:5b:29:88:9e:81Serial Number (int): 8849850003887001543342831037745503873
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a0:1b:fb:b6:fd:5f:f8:f2:e3:95:66:1a:5f:0e:19:5a:45:e5:64:5c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): f4:9f:8d:c6:f6:d7:6e:f6:3e:a9:bc:9d:60:1d:d0:d7:1d:de:50:a3
Fingerprint (sha256): 13:93:30:9d:1b:2a:9d:d9:14:c8:d1:17:24:33:fe:00:b6:65:77:60:4b:da:52:e2:b2:45:20:30:71:88:48:b3
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate www-dev.silive.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www-dev.silive.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www-dev.silive.com
Other certificates including the domain name silive.com
(limited to 100 certificates)
dns-vetting1-jeffg-noah.map.fastly.net
ssl416260.cloudflaressl.com
ssl374614.cloudflaressl.com
hiring.mlive.com
jobs.thejobnetwork.com
ssl374614.cloudflaressl.com
ssl416260.cloudflaressl.com
foreclosures.al.com
br.bikeradar.com
login.pennlive.com
businessfinder.al.com
dns-vetting1-jeffg-noah.map.fastly.net
hiring.mlive.com
star2.arcpublishing.com
autos.mlive.com
obits.silive.com
ssl416260.cloudflaressl.com
dns-vetting1-jeffg-noah.map.fastly.net
li.lisecurelink.com
dns-vetting1-jeffg-noah.map.fastly.net
jobs.thejobnetwork.com
mms.silive.com
br.bikeradar.com
advancelocal.map.fastly.net
hiring.mlive.com
silive.com
dns-vetting1-jeffg-noah.map.fastly.net
advancelocal.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
sanssl2.stats.com
foreclosures.al.com
li.lisecurelink.com
dns-vetting1-jeffg-noah.map.fastly.net
silive.com
dns-vetting1-jeffg-noah.map.fastly.net
autos.silive.com
dns-vetting1-jeffg-noah.map.fastly.net
advancelocal.map.fastly.net
star2.arcpublishing.com
jobs.thejobnetwork.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
jobs.thejobnetwork.com
ssl416260.cloudflaressl.com
sanssl2.stats.com
sanssl2.stats.com
foreclosures.silive.com
advancelocal.web.arc-cdn.net
nwajobfinder.com
hiring.mlive.com
ssl121533.cloudflaressl.com
hiring.mlive.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
star2.arcpublishing.com
login.al.com
foreclosures.al.com
dns-vetting1-jeffg-noah.map.fastly.net
nwajobfinder.com
jobs.thejobnetwork.com
www-dev.silive.com
dns-vetting1-jeffg-noah.map.fastly.net
hiring.mlive.com
sanssl2.stats.com
dns-vetting1-jeffg-noah.map.fastly.net
local.wahpetondailynews.com
dns-vetting1-jeffg-noah.map.fastly.net
businessfinder.al.com
dns-vetting1-jeffg-noah.map.fastly.net
ssl374613.cloudflaressl.com
hiring.mlive.com
oasc18.247realmedia.com
hiring.mlive.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
br.bikeradar.com
dns-vetting1-jeffg-noah.map.fastly.net
star4.arcpublishing.com
dns-vetting1-jeffg-noah.map.fastly.net
li.lisecurelink.com
advancelocal.map.fastly.net
hiring.mlive.com
hiring.mlive.com
hiring.mlive.com
ssl374614.cloudflaressl.com
hiring.mlive.com
advancelocal.map.fastly.net
member.syracuse.com
star4.arcpublishing.com
ssl416260.cloudflaressl.com
ssl374614.cloudflaressl.com
hiring.mlive.com
jobs.thejobnetwork.com
ssl374614.cloudflaressl.com
ssl416260.cloudflaressl.com
foreclosures.al.com
br.bikeradar.com
login.pennlive.com
businessfinder.al.com
dns-vetting1-jeffg-noah.map.fastly.net
hiring.mlive.com
star2.arcpublishing.com
autos.mlive.com
obits.silive.com
ssl416260.cloudflaressl.com
dns-vetting1-jeffg-noah.map.fastly.net
li.lisecurelink.com
dns-vetting1-jeffg-noah.map.fastly.net
jobs.thejobnetwork.com
mms.silive.com
br.bikeradar.com
advancelocal.map.fastly.net
hiring.mlive.com
silive.com
dns-vetting1-jeffg-noah.map.fastly.net
advancelocal.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
sanssl2.stats.com
foreclosures.al.com
li.lisecurelink.com
dns-vetting1-jeffg-noah.map.fastly.net
silive.com
dns-vetting1-jeffg-noah.map.fastly.net
autos.silive.com
dns-vetting1-jeffg-noah.map.fastly.net
advancelocal.map.fastly.net
star2.arcpublishing.com
jobs.thejobnetwork.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
jobs.thejobnetwork.com
ssl416260.cloudflaressl.com
sanssl2.stats.com
sanssl2.stats.com
foreclosures.silive.com
advancelocal.web.arc-cdn.net
nwajobfinder.com
hiring.mlive.com
ssl121533.cloudflaressl.com
hiring.mlive.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
star2.arcpublishing.com
login.al.com
foreclosures.al.com
dns-vetting1-jeffg-noah.map.fastly.net
nwajobfinder.com
jobs.thejobnetwork.com
www-dev.silive.com
dns-vetting1-jeffg-noah.map.fastly.net
hiring.mlive.com
sanssl2.stats.com
dns-vetting1-jeffg-noah.map.fastly.net
local.wahpetondailynews.com
dns-vetting1-jeffg-noah.map.fastly.net
businessfinder.al.com
dns-vetting1-jeffg-noah.map.fastly.net
ssl374613.cloudflaressl.com
hiring.mlive.com
oasc18.247realmedia.com
hiring.mlive.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
br.bikeradar.com
dns-vetting1-jeffg-noah.map.fastly.net
star4.arcpublishing.com
dns-vetting1-jeffg-noah.map.fastly.net
li.lisecurelink.com
advancelocal.map.fastly.net
hiring.mlive.com
hiring.mlive.com
hiring.mlive.com
ssl374614.cloudflaressl.com
hiring.mlive.com
advancelocal.map.fastly.net
member.syracuse.com
star4.arcpublishing.com
Certificate
The complete raw certificate details for www-dev.silive.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEejCCA2KgAwIBAgIQBqhrSvZRqg6nApRbKYiegTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA0MjYwMDAwMDBaFw0xOTA1MjYx MjAwMDBaMB0xGzAZBgNVBAMTEnd3dy1kZXYuc2lsaXZlLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANTtp6qWNDoUXgtZd9YdAH8bHiRzONlOikCv VNvXHatobCBOYUxvH0YZhTpAqI2DIiKA8cHygDUXcWkyeuoLlNh4zYHGQbcj8Wab JmT2vWo6itmlnUsZUQ/DV6LZ/rlBVp8JFJRxjxEvRAwm7CyQTL6aDAK1prVFOm4J UVj65BIw3EoWphVdk8OtvSsgbCtH4EnRmfcNE7OAidTVNZVfvYmGoEKgz+20TYUs EXX3F/lpPTg071/x4aX0trzmG5z+ZUPpANgOpXUrzdQixjrpmZQEHAzmtprf+wqH dJcJ+DpGKzg8mGHAAtG3lXpS7pzlM4lTnU2w+q+TINpwCP8pfdcCAwEAAaOCAYsw ggGHMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBSg G/u2/V/48uOVZhpfDhlaReVkXDAdBgNVHREEFjAUghJ3d3ctZGV2LnNpbGl2ZS5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNQCZ+/N2xBz5hzTCZbkYUjt EBiHltLBbp2bjMDa0ewp9DfN1jjBo1jSl6W3CdZIEtDqhXEGTBWHGyu/e/Fzdf96 TAAeXv+uFrO1hdWXbx3dXWOGQSvrUNkGYOU99yAGKDq251MdZ83SQ5a+mpdv+ea+ OgbUKpG5xkBaV7vh9tBzdtT8I8uKEELNWoj2PBFzh9rh4G349Sg5M8gJ1Kvb0eX/ kqwJd1jJWiWNh3EH3V9/ClO0Wb9nD9+pRPLNALgMAD0muUQLvVdggUzI9Hdr4vK9 y/+vmst7czRmrepish+Jc6lVH8ys7TLzY/uH9ATe426ZvsZI9+MxbeRk0/roRw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O2nqpY0OhReC1l31h0A fxseJHM42U6KQK9U29cdq2hsIE5hTG8fRhmFOkCojYMiIoDxwfKANRdxaTJ66guU 2HjNgcZBtyPxZpsmZPa9ajqK2aWdSxlRD8NXotn+uUFWnwkUlHGPES9EDCbsLJBM vpoMArWmtUU6bglRWPrkEjDcShamFV2Tw629KyBsK0fgSdGZ9w0Ts4CJ1NU1lV+9 iYagQqDP7bRNhSwRdfcX+Wk9ODTvX/HhpfS2vOYbnP5lQ+kA2A6ldSvN1CLGOumZ lAQcDOa2mt/7Cod0lwn4OkYrODyYYcAC0beVelLunOUziVOdTbD6r5Mg2nAI/yl9 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8849850003887001543342831037745503873 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-dev.silive.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26879712674827193384679522820472990016124169565348886044808657507636235043559551266439729058842525289953006060280595749860426524781046010414167810491843079991418589529361871846647862978950533028754363359947166130139387659318867130781502420050303484341805649136034252659791533375308633555560783794780784624077812644338578145423450503229107447153157801497507205234151846832912924430284505314622831485025184153523136813071391612653194680486810174574072537456481278578400110930786135998407602561015567248140326660452252846882399377528999269211251644411941781895108704357544028184187000207123205890791406921867590206324183 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a01bfbb6fd5ff8f2e395661a5f0e195a45e5645c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-dev.silive.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b4d40267efcddb1073e61cd30996e46148ed10188796d2c16e9d9b8cc0dad1ec29f437cdd638c1a358d297a5b709d64812d0ea8571064c15871b2bbf7bf17375ff7a4c001e5effae16b3b585d5976f1ddd5d6386412beb50d90660e53df72006283ab6e7531d67cdd24396be9a976ff9e6be3a06d42a91b9c6405a57bbe1f6d07376d4fc23cb8a1042cd5a88f63c117387dae1e06df8f5283933c809d4abdbd1e5ff92ac097758c95a258d877107dd5f7f0a53b459bf670fdfa944f2cd00b80c003d26b9440bbd5760814cc8f4776be2f2bdcbffaf9acb7b733466adea62b21f8973a9551fccaced32f363fb87f404dee36e99bec648f7e3316de464d3fae847