production.sandvik.sales.diarz.net
Issued by Amazon
About this certificate
This digital certificate with serial number 04:e0:3e:72:0e:18:35:c1:36:fa:e3:62:a2:f0:4e:e1 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=production.sandvik.sales.diarz.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e0:3e:72:0e:18:35:c1:36:fa:e3:62:a2:f0:4e:e1Serial Number (int): 6481253025219476116883339026942152417
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 78:e1:b1:74:2e:e1:2d:7d:5d:76:0c:b1:81:52:2a:3b:88:2c:8c:6a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): d3:83:b0:09:5d:96:2b:74:fd:8f:ad:5b:24:e0:76:0e:30:ef:71:87
Fingerprint (sha256): 13:de:dd:6a:03:c7:3f:b6:00:ea:31:ba:dc:d3:3b:5d:b8:0e:6d:53:80:76:9b:26:ca:0f:e5:4a:42:44:cd:e9
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate production.sandvik.sales.diarz.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for production.sandvik.sales.diarz.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
production.sandvik.sales.diarz.net
*.production.sandvik.sales.diarz.net
*.production.sandvik.sales.diarz.net
Other certificates including the domain name diarz.net
(limited to 100 certificates)
skom.rms.brand.diarz.net
fs-demo.sms.brand.diarz.net
shop.nordparts.lu
wecker.rcommerce.net
meiseleder.at
wuetschner-shop.de
industrietechnik24.rms.brand.diarz.net
unimatic.rms.brand.diarz.net
krinner.rms.brand.diarz.net
geyer.rms.brand.diarz.net
production.sandvik.sales.diarz.net
production.infraserv.sales.diarz.net
pspneumatik.rms.brand.diarz.net
production.precitool.sales.diarz.net
ackrutat.de
ps-hydraulik.diabrand.shop
riegler.shop
production.mb.sales.diarz.net
production.montalpina.sales.diarz.net
production.kfw.sales.diarz.net
mls-safety-shop.de
toologic-webshop.de
bng-schlueter.diabrand.shop
production.pchpoints.sales.diarz.net
altmann-industrietechnik.shop
kl-arbeitsschutz.de
webshop.schmitter-hydraulik.de
wecker.rms.brand.diarz.net
doeringshoff.de
muehlberger-shop.de
riegler.shop
fecht-hydraulik.diabrand.shop
tsm.rms.brand.diarz.net
approval.dia.procure.diarz.net
production.mls.sales.diarz.net
kw-webshop.de
wille.rms.brand.diarz.net
pch-portal.com
approval.dia.sales.diarz.net
dia.alexander-buerkle.com
ksa-shop.de
muehlberger-shop.de
kfw-webshop.de
nordparts.sms.brand.diarz.net
altmann-industrietechnik.shop
fey.rms.brand.diarz.net
rolfwebershop.de
pwk-shop.de
fecht.sms.brand.diarz.net
kfw-webshop.de
interlink.diatool.diarz.net
mls-safety-shop.de
ackrutat.de
groll.rms.brand.diarz.net
production.kw.sales.diarz.net
shop.nordparts.lu
rolfwebershop.de
bosch.sms.brand.diarz.net
kl-arbeitsschutz.de
moesch.rms.brand.diarz.net
demo.rms.brand.diarz.net
bng.sms.brand.diarz.net
erp.diatool.diarz.net
production.klingseisen.sales.diarz.net
toologic-webshop.de
trg.rms.brand.diarz.net
ps-hydraulik.sms.brand.diarz.net
rittmeier.rms.brand.diarz.net
montalpina-shop.com
montalpina-shop.com
doeringshoff.de
production.schmitter.sales.diarz.net
wilde-hydraulik.sms.brand.diarz.net
neuendorf-shop.de
dzbamberg.rms.brand.diarz.net
hanselmann.rms.brand.diarz.net
wolfgang-bosch.diabrand.shop
pwk-shop.de
wilde-hydraulik.diabrand.shop
production.kl.sales.diarz.net
kl-webshop.de
fs-demo.sms.brand.diarz.net
shop.nordparts.lu
wecker.rcommerce.net
meiseleder.at
wuetschner-shop.de
industrietechnik24.rms.brand.diarz.net
unimatic.rms.brand.diarz.net
krinner.rms.brand.diarz.net
geyer.rms.brand.diarz.net
production.sandvik.sales.diarz.net
production.infraserv.sales.diarz.net
pspneumatik.rms.brand.diarz.net
production.precitool.sales.diarz.net
ackrutat.de
ps-hydraulik.diabrand.shop
riegler.shop
production.mb.sales.diarz.net
production.montalpina.sales.diarz.net
production.kfw.sales.diarz.net
mls-safety-shop.de
toologic-webshop.de
bng-schlueter.diabrand.shop
production.pchpoints.sales.diarz.net
altmann-industrietechnik.shop
kl-arbeitsschutz.de
webshop.schmitter-hydraulik.de
wecker.rms.brand.diarz.net
doeringshoff.de
muehlberger-shop.de
riegler.shop
fecht-hydraulik.diabrand.shop
tsm.rms.brand.diarz.net
approval.dia.procure.diarz.net
production.mls.sales.diarz.net
kw-webshop.de
wille.rms.brand.diarz.net
pch-portal.com
approval.dia.sales.diarz.net
dia.alexander-buerkle.com
ksa-shop.de
muehlberger-shop.de
kfw-webshop.de
nordparts.sms.brand.diarz.net
altmann-industrietechnik.shop
fey.rms.brand.diarz.net
rolfwebershop.de
pwk-shop.de
fecht.sms.brand.diarz.net
kfw-webshop.de
interlink.diatool.diarz.net
mls-safety-shop.de
ackrutat.de
groll.rms.brand.diarz.net
production.kw.sales.diarz.net
shop.nordparts.lu
rolfwebershop.de
bosch.sms.brand.diarz.net
kl-arbeitsschutz.de
moesch.rms.brand.diarz.net
demo.rms.brand.diarz.net
bng.sms.brand.diarz.net
erp.diatool.diarz.net
production.klingseisen.sales.diarz.net
toologic-webshop.de
trg.rms.brand.diarz.net
ps-hydraulik.sms.brand.diarz.net
rittmeier.rms.brand.diarz.net
montalpina-shop.com
montalpina-shop.com
doeringshoff.de
production.schmitter.sales.diarz.net
wilde-hydraulik.sms.brand.diarz.net
neuendorf-shop.de
dzbamberg.rms.brand.diarz.net
hanselmann.rms.brand.diarz.net
wolfgang-bosch.diabrand.shop
pwk-shop.de
wilde-hydraulik.diabrand.shop
production.kl.sales.diarz.net
kl-webshop.de
Certificate
The complete raw certificate details for production.sandvik.sales.diarz.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtTCCA52gAwIBAgIQBOA+cg4YNcE2+uNiovBO4TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMDMwMDAwMDBaFw0yMzAxMDEy MzU5NTlaMC0xKzApBgNVBAMTInByb2R1Y3Rpb24uc2FuZHZpay5zYWxlcy5kaWFy ei5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQCiohPueF64Pf mYnssVzShUsdTPUjd8CJUXHpPHWOyBysfkzyDqTL2tceUrDd/k+u6qNlE9OvZRe9 QViY7kYEtMDxKn02yyjiSZLDV1AqHvQBFlTMEEJNoLyOlpO/6xb6NaylK/dmhRvG uu5yW45Q9yttlEeq2afz58YvVIzFgb1O1aeCvNv+2Y4iKS6pT/tUGx3rxViPDlGr U4O7D8mRy+QgtHMxjVN3ANg5DBZWFD+ebnWh76o6gkE6TDQHZ0iETyDDb+oVIllb 1y0Pw3eQNvcnZmzSy/ZcUXO8nnVHdL+iReFphO3o6Sx8R6h9MKH/PGJRhg7Tkg9M qMqwv5GVAgMBAAGjggG2MIIBsjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0 W/k90DAdBgNVHQ4EFgQUeOGxdC7hLX1ddgyxgVIqO4gsjGowUwYDVR0RBEwwSoIi cHJvZHVjdGlvbi5zYW5kdmlrLnNhbGVzLmRpYXJ6Lm5ldIIkKi5wcm9kdWN0aW9u LnNhbmR2aWsuc2FsZXMuZGlhcnoubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDov L2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAww CjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMP5KGbZiw g1oAVbFx8hRrt7SZYavdrlM18Rd9Nqxx9d0QtQxEAY01BYXlua02Q9XeSmDh5uUC 87LVpiOOaSKkyO/61+1jzKXfC46wBfpKFr0hofsmMKJbAWcWBskkXP8iPxtpf2fD QesX2l4QC7j5roYCSqmPK2PS7P+nu8v2+J2pKOQaSYVSaok3BUN2cHBoS+fFZMUK +8VTx4wJr/voC0VsXxvIQkfwuYj4moTEXU/CGqRVM+/Eoeczda0DZSZEtvkemPuH /B8gb7M/Fwz9ITTfJFxUzyhR3waw4RklDPdoSHyHaa8DyFvUmoEnnxDyuFB4THC9 tMygFjcdU2Ti -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAoqIT7nheuD35mJ7LFc 0oVLHUz1I3fAiVFx6Tx1jsgcrH5M8g6ky9rXHlKw3f5PruqjZRPTr2UXvUFYmO5G BLTA8Sp9Nsso4kmSw1dQKh70ARZUzBBCTaC8jpaTv+sW+jWspSv3ZoUbxrrucluO UPcrbZRHqtmn8+fGL1SMxYG9TtWngrzb/tmOIikuqU/7VBsd68VYjw5Rq1ODuw/J kcvkILRzMY1TdwDYOQwWVhQ/nm51oe+qOoJBOkw0B2dIhE8gw2/qFSJZW9ctD8N3 kDb3J2Zs0sv2XFFzvJ51R3S/okXhaYTt6OksfEeofTCh/zxiUYYO05IPTKjKsL+R lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6481253025219476116883339026942152417 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'production.sandvik.sales.diarz.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18183328251287938456550819450371888739931229687794175938444769924628814136488382686896648258404078033903682779942210065265685856926237368346374106169756105786180046072343450834035572373070186195697929976061524335264824478339464750643387681192658805839616615980359533680374298120682709935238923876170994491870894819708997782714723895291502686196936738746870731012883360766148451134583533092180783947818285477038433828466969612030214737305014738961243651180556463512585495724384443647798519942312510881059171621652916975810096469275125047599977073288023600743556101226046328011730849628328084764264546943221201641640341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 78e1b1742ee12d7d5d760cb181522a3b882c8c6a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.sandvik.sales.diarz.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.sandvik.sales.diarz.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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