api.partners.abc.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:99:25:db:10:f9:5a:f2:37:0c:3a:ad:98:9e:22:9d was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.partners.abc.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:99:25:db:10:f9:5a:f2:37:0c:3a:ad:98:9e:22:9dSerial Number (int): 8770557199441461767571325093425324701
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 75:3b:07:dd:89:71:a2:9e:cd:77:de:f2:c7:b5:97:e6:6c:49:ba:6c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 47:8c:0d:42:40:fe:36:3f:ed:45:87:e6:fb:40:64:c0:af:b9:8d:1a
Fingerprint (sha256): 14:24:83:94:1a:dd:f6:cf:2e:a7:f9:f4:d1:db:d2:a4:73:8c:4d:ef:f9:7c:11:69:d2:ca:9d:75:35:27:9e:02
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api.partners.abc.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.partners.abc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.partners.abc.com
api.abc.com
api.abc.com
Other certificates including the domain name abc.com
(limited to 100 certificates)
emx.abc.com
j3.shared.global.fastly.net
v2.shared.global.fastly.net
emindex.net.abc.com
bvl-emg-emsetup.swna.wdpr.disney.com
Mobile-west.disney.com
etsdev.abc.com
secure.cdn.media.oscar.abc.com
test.gatekeeper.us-abc.symphony.edgedatg.com
fcast.qa.cdn.abc.com
fantasy.espn.com
v2.shared.global.fastly.net
staging.gatekeeper.us-abc.symphony.edgedatg.com
secureaccess.abc.com
api.partners.abc.com
watchdisneyfe.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
api.presentation.watchabc.go.com
mobile-west.disney.com
dsl-prod.media.disney.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
emsoundminerdev.net.abc.com
blogs.abc.com
soundminer.net.abc.com
mobile-east.disney.com
api.contents.watchabc.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
v2.shared.global.fastly.net
newsmamdev.abc.com
j3.shared.global.fastly.net
emx.abc.com
splunk.mit.abc.com
static.ddb.go.com
nyoffair.abc.com
www.gist.abc.com
mobile-east.disney.com
vdigateqa.abc.com
fcast.cdn.abc.com
j3.shared.global.fastly.net
j3.shared.global.fastly.net
dev.gatekeeper.us-abc.symphony.edgedatg.com
api2.abc.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
api.watchabc.go.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
emindexdb.net.abc.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
boesfx.net.abc.com
idolvote-test.abc.com
v2.shared.global.fastly.net
vdigate.abc.com
nyoffair.abc.com
v2.shared.global.fastly.net
vdigate1.abc.com
asperaconsole.abc.com
dwtsvote-live-test.abc.com
soundminer.net.abc.com
splunk.mit.abc.com
emmedia.disney.com
idolvote.abc.com
fcast.cdn.abc.com
sw88.abc.com
secure.cdn.media.oscar.abc.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
emsoundminerdev.net.abc.com
mpowr-aprimo.net.abc.com
secure.cdn.media.oscar.abc.com
v2.shared.global.fastly.net
static.ddb.go.com
watchdisneyfe.com
dev.sweepstakes.abc.com
j3.shared.global.fastly.net
bvl-emg-emsetup.swna.wdpr.disney.com
dwtsvote.abc.com
api.partners.abc.com
mobile-west.disney.com
watchdisneyfe.com
emreach-staging.net.abc.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
OCNA.wdw.disney.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
galaxy.abc.com
test.gatekeeper.us-abc.symphony.edgedatg.com
api.presentation.watchabc.go.com
mc.twdcmarketing.com
api.abc.go.com
fcast.cdn.abc.com
api.partners.abc.com
remotesupport.abc.com
v2.shared.global.fastly.net
api.watchabc.go.com
watchdisneyfe.com
vdigate.abc.com
api.watchabc.go.com
api.abc.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
v2.shared.global.fastly.net
devemx.net.abc.com
fcast.qa.cdn.abc.com
j3.shared.global.fastly.net
v2.shared.global.fastly.net
emindex.net.abc.com
bvl-emg-emsetup.swna.wdpr.disney.com
Mobile-west.disney.com
etsdev.abc.com
secure.cdn.media.oscar.abc.com
test.gatekeeper.us-abc.symphony.edgedatg.com
fcast.qa.cdn.abc.com
fantasy.espn.com
v2.shared.global.fastly.net
staging.gatekeeper.us-abc.symphony.edgedatg.com
secureaccess.abc.com
api.partners.abc.com
watchdisneyfe.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
api.presentation.watchabc.go.com
mobile-west.disney.com
dsl-prod.media.disney.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
emsoundminerdev.net.abc.com
blogs.abc.com
soundminer.net.abc.com
mobile-east.disney.com
api.contents.watchabc.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
v2.shared.global.fastly.net
newsmamdev.abc.com
j3.shared.global.fastly.net
emx.abc.com
splunk.mit.abc.com
static.ddb.go.com
nyoffair.abc.com
www.gist.abc.com
mobile-east.disney.com
vdigateqa.abc.com
fcast.cdn.abc.com
j3.shared.global.fastly.net
j3.shared.global.fastly.net
dev.gatekeeper.us-abc.symphony.edgedatg.com
api2.abc.go.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
api.watchabc.go.com
qa.gatekeeper.us-abc.symphony.edgedatg.com
emindexdb.net.abc.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
boesfx.net.abc.com
idolvote-test.abc.com
v2.shared.global.fastly.net
vdigate.abc.com
nyoffair.abc.com
v2.shared.global.fastly.net
vdigate1.abc.com
asperaconsole.abc.com
dwtsvote-live-test.abc.com
soundminer.net.abc.com
splunk.mit.abc.com
emmedia.disney.com
idolvote.abc.com
fcast.cdn.abc.com
sw88.abc.com
secure.cdn.media.oscar.abc.com
staging.gatekeeper.us-abc.symphony.edgedatg.com
emsoundminerdev.net.abc.com
mpowr-aprimo.net.abc.com
secure.cdn.media.oscar.abc.com
v2.shared.global.fastly.net
static.ddb.go.com
watchdisneyfe.com
dev.sweepstakes.abc.com
j3.shared.global.fastly.net
bvl-emg-emsetup.swna.wdpr.disney.com
dwtsvote.abc.com
api.partners.abc.com
mobile-west.disney.com
watchdisneyfe.com
emreach-staging.net.abc.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
OCNA.wdw.disney.com
dev.gatekeeper.us-abc.symphony.edgedatg.com
galaxy.abc.com
test.gatekeeper.us-abc.symphony.edgedatg.com
api.presentation.watchabc.go.com
mc.twdcmarketing.com
api.abc.go.com
fcast.cdn.abc.com
api.partners.abc.com
remotesupport.abc.com
v2.shared.global.fastly.net
api.watchabc.go.com
watchdisneyfe.com
vdigate.abc.com
api.watchabc.go.com
api.abc.com
prod.gatekeeper.us-abc.symphony.edgedatg.com
v2.shared.global.fastly.net
devemx.net.abc.com
fcast.qa.cdn.abc.com
Certificate
The complete raw certificate details for api.partners.abc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEizCCA3OgAwIBAgIQBpkl2xD5WvI3DDqtmJ4inTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMjkwMDAwMDBaFw0yMDA0Mjkx MjAwMDBaMB8xHTAbBgNVBAMTFGFwaS5wYXJ0bmVycy5hYmMuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt20tdNhmbTUj5PDPE8DlKaD3Bxu0YLwA foK+68JU4bHOdXTf6WeV9w/KI7RPueOyO0EsdQpI+skQmIa5Yl0Ko4y1QVRjtqSx hjTBz6ejjzyJRXhjXdYWGDG+jrVzNWl1izsxTR7CLudbZKbEgaobETww9Mrm0y0f P4LtMHEpYHWYW8s5y2fqptrulzlF0oWICu5lcph+o+rAI3alVtA6TxgLkGHZLnX2 aMhM+7FP+cdDTk+gchAHpuwOzL/bmqQUZQj+40dyGt0Bz96dhSgN72PjqZW+cwi8 +oviquNeHk1BLOY4jJsCg68gEa+ijxmpS9fp/t9Sxw4HtZRkCg8xhQIDAQABo4IB mjCCAZYwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FHU7B92JcaKezXfe8se1l+ZsSbpsMCwGA1UdEQQlMCOCFGFwaS5wYXJ0bmVycy5h YmMuY29tggthcGkuYWJjLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCG SAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMB Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCV tyGf1Cc+S+rpC3lUGyquCKUrC/dv2F3PCug2rO5RhHxcmCnQXywetPpwkZr/tDHO XqogUDKZBz2JrU8bGXPfjkdVVl479jxS5luXdwVsqOU16unoKJPbUhyyK3QN1UP+ 3V2CLztMNLq5uY0qeCQGhUfbPt4AFREQ+U6Ga8xImXwoeeyjaqeBNjAvFod2GpEG zKhbd5x1/AcrbmFRgMVokmUceW/Zh08H0fBYN66xV/aRRZdf71SsVW8MAyGF17NL iw1Agb2QIwnAVyrB6cZilpO4HjHWOyn8uy06L2NG7GGRWjYGteGhvy8LWtt873J1 /O7W6xH9+UYEO3v24eRY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt20tdNhmbTUj5PDPE8Dl KaD3Bxu0YLwAfoK+68JU4bHOdXTf6WeV9w/KI7RPueOyO0EsdQpI+skQmIa5Yl0K o4y1QVRjtqSxhjTBz6ejjzyJRXhjXdYWGDG+jrVzNWl1izsxTR7CLudbZKbEgaob ETww9Mrm0y0fP4LtMHEpYHWYW8s5y2fqptrulzlF0oWICu5lcph+o+rAI3alVtA6 TxgLkGHZLnX2aMhM+7FP+cdDTk+gchAHpuwOzL/bmqQUZQj+40dyGt0Bz96dhSgN 72PjqZW+cwi8+oviquNeHk1BLOY4jJsCg68gEa+ijxmpS9fp/t9Sxw4HtZRkCg8x hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8770557199441461767571325093425324701 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.partners.abc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23155447272229701383200864521868426949363930304097153544131101730941603492692181879687115753304326065971032593246362610530933343642294311673724904189233165672652428875114105692573461651877678759270024148917678273056827282335046771773135453563232592149871126376756759862813172548255706818919548182613149648855425908166279924999115263967482302764785965249857551259256986712759105815863531675145374773195661063711723371426256589387521950776593036269897155388334552727624829672786848329378177250591343366586632325219963321930698772647217364559205386594454188365161800230963002006992668542030862333961741699911756192625029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 753b07dd8971a29ecd77def2c7b597e66c49ba6c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.partners.abc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.abc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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