relay.withsecure.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:2d:a2:fb:6f:da:24:b2:c5:12:b9:18:ff:d8:3d:57 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=relay.withsecure.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:2d:a2:fb:6f:da:24:b2:c5:12:b9:18:ff:d8:3d:57Serial Number (int): 14858466983509279717942901740278398295
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b0:79:c9:19:14:66:27:13:cb:b0:12:8d:a0:8a:78:34:4d:06:78:b2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 7a:33:75:f4:cd:18:00:19:21:0c:b6:7a:30:a5:74:07:9e:32:11:7d
Fingerprint (sha256): 14:52:da:e3:f4:62:d8:f3:56:d4:98:66:cc:db:78:13:df:9a:06:00:2d:dd:62:cf:1a:39:06:b2:eb:ad:86:82
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate relay.withsecure.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for relay.withsecure.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
relay.withsecure.com
relay.f-secure.com
relay.prd.condev.fsapi.com
relay-external.prd.condev.fsapi.com
relay.f-secure.com
relay.prd.condev.fsapi.com
relay-external.prd.condev.fsapi.com
Other certificates including the domain name withsecure.com
(limited to 100 certificates)
relay.stg.withsecure.com
internal-dev.connect.withsecure.com
withsecure.com
partnerportal.withsecure.com
portal.radar.elements-stg.withsecure.com
click.e.withsecure.com
api.elements.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
a.accounts-emea-stg.fsxt.net
download.withsecure.com
labs.f-secure.com
static.accounts-stg.fsxt.net
psblive.psb-stg.f-secure.com
help.withsecure.com
download.withsecure.com
relay.withsecure.com
foundry.withsecure.com
internal-ideas.withsecure.com
www3.withsecure.com
static.accounts.f-secure.com
static.accounts-stg.fsxt.net
san-10-s7.tlsprovisioning.exacttarget.com
static.accounts.f-secure.com
withsecure.com
*.elements.withsecure.com
elements.withsecure.com
san-10-s7.tlsprovisioning.exacttarget.com
makingsenseofcents.withsecure.com
git.f-secure.com
eu-status.swrve.com
eu-status.swrve.com
portal.cp.elements-stg.withsecure.com
relay.withsecure.com
eu-status.swrve.com
withsecure.com
foundry.withsecure.com
eu-status.swrve.com
ue1gpgw01.withsecure.com
solar.withsecure.com
git.f-secure.com
labs.f-secure.com
corp-reg.withsecure.com
withsecure.com
redirects.f-secure.com
eu-status.swrve.com
ideas.withsecure.com
www.survey.withsecure.com
elements.withsecure.com
cnbc.withsecure.com
labs.f-secure.com
withsecure.com
solar.dev.withsecure.com
keys.f-secure.com
internal-ideas.withsecure.com
api.elements-stg.withsecure.com
*.elements.withsecure.com
eu-status.swrve.com
bloomberg.withsecure.com
community.withsecure.com
sst.withsecure.com
ideas.withsecure.com
ideas.withsecure.com
san-10-s7.tlsprovisioning.exacttarget.com
ane1gpgw01.withsecure.com
labs.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
static.accounts-stg.fsxt.net
eu-status.swrve.com
elements.withsecure.com
elements.withsecure.com
download.withsecure.com
elements-stg.fsxt.net
sst.withsecure.com
solar.withsecure.com
withsecure.com
solar.withsecure.com
labs.withsecure.com
proxy.elements.withsecure.com
static.accounts.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
withsecure.com
api.elements.withsecure.com
onboardme.withsecure.com
san-10-s7.tlsprovisioning.exacttarget.com
eu-status.swrve.com
psblive.psb-stg.f-secure.com
login.withsecure.com
internal-ideas.withsecure.com
withsecure.com
eu-status.swrve.com
soccer24.withsecure.com
www.survey.withsecure.com
accounts.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
www.survey.withsecure.com
accounts.f-secure.com
login-stg.withsecure.com
help.withsecure.com
download.withsecure.com
www.survey.withsecure.com
internal-dev.connect.withsecure.com
withsecure.com
partnerportal.withsecure.com
portal.radar.elements-stg.withsecure.com
click.e.withsecure.com
api.elements.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
a.accounts-emea-stg.fsxt.net
download.withsecure.com
labs.f-secure.com
static.accounts-stg.fsxt.net
psblive.psb-stg.f-secure.com
help.withsecure.com
download.withsecure.com
relay.withsecure.com
foundry.withsecure.com
internal-ideas.withsecure.com
www3.withsecure.com
static.accounts.f-secure.com
static.accounts-stg.fsxt.net
san-10-s7.tlsprovisioning.exacttarget.com
static.accounts.f-secure.com
withsecure.com
*.elements.withsecure.com
elements.withsecure.com
san-10-s7.tlsprovisioning.exacttarget.com
makingsenseofcents.withsecure.com
git.f-secure.com
eu-status.swrve.com
eu-status.swrve.com
portal.cp.elements-stg.withsecure.com
relay.withsecure.com
eu-status.swrve.com
withsecure.com
foundry.withsecure.com
eu-status.swrve.com
ue1gpgw01.withsecure.com
solar.withsecure.com
git.f-secure.com
labs.f-secure.com
corp-reg.withsecure.com
withsecure.com
redirects.f-secure.com
eu-status.swrve.com
ideas.withsecure.com
www.survey.withsecure.com
elements.withsecure.com
cnbc.withsecure.com
labs.f-secure.com
withsecure.com
solar.dev.withsecure.com
keys.f-secure.com
internal-ideas.withsecure.com
api.elements-stg.withsecure.com
*.elements.withsecure.com
eu-status.swrve.com
bloomberg.withsecure.com
community.withsecure.com
sst.withsecure.com
ideas.withsecure.com
ideas.withsecure.com
san-10-s7.tlsprovisioning.exacttarget.com
ane1gpgw01.withsecure.com
labs.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
static.accounts-stg.fsxt.net
eu-status.swrve.com
elements.withsecure.com
elements.withsecure.com
download.withsecure.com
elements-stg.fsxt.net
sst.withsecure.com
solar.withsecure.com
withsecure.com
solar.withsecure.com
labs.withsecure.com
proxy.elements.withsecure.com
static.accounts.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
withsecure.com
api.elements.withsecure.com
onboardme.withsecure.com
san-10-s7.tlsprovisioning.exacttarget.com
eu-status.swrve.com
psblive.psb-stg.f-secure.com
login.withsecure.com
internal-ideas.withsecure.com
withsecure.com
eu-status.swrve.com
soccer24.withsecure.com
www.survey.withsecure.com
accounts.f-secure.com
san-10-s7.tlsprovisioning.exacttarget.com
www.survey.withsecure.com
accounts.f-secure.com
login-stg.withsecure.com
help.withsecure.com
download.withsecure.com
www.survey.withsecure.com
Certificate
The complete raw certificate details for relay.withsecure.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEyDCCA7CgAwIBAgIQCy2i+2/aJLLFErkY/9g9VzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA2MjkwMDAwMDBaFw0yMzA3Mjgy MzU5NTlaMB8xHTAbBgNVBAMTFHJlbGF5LndpdGhzZWN1cmUuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1KypFPyVMLVnto67/3dYGjy+p6dD38J cz1sfserZgapz9+DlICbDJO15jzRWaueBJB5i6qnYz9CTTOIEQaa3PrYMt/g3B4W ttn9lG4X57UVbM8Y+Y8+SL8o3q3nA9X/G6hqCUy7o+RwuZ8QlBTLA2tBUQEoPIek MZpVJiEc3v3YswT+nld40q2FzUChKG7q+Y4u37jekFbarouZdnaCfco7Q+7ETQwx I7i4WraFTV+8ok00TqpoQOQwPycDr7rGqtbEw/3G0Ck7Hs3qKHNFQWjIVxZjjAHt wWkq+hwpJ7QVPkLtIVDnxQnxFJueMSP0RaC6UJgl6Ce4OVlQ06x2hQIDAQABo4IB 1zCCAdMwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FLB5yRkUZicTy7ASjaCKeDRNBniyMHQGA1UdEQRtMGuCFHJlbGF5LndpdGhzZWN1 cmUuY29tghJyZWxheS5mLXNlY3VyZS5jb22CGnJlbGF5LnByZC5jb25kZXYuZnNh cGkuY29tgiNyZWxheS1leHRlcm5hbC5wcmQuY29uZGV2LmZzYXBpLmNvbTAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0GA1Ud HwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3Nj YTFiLTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAt BggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYG CCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex Yi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAC/xGPKU9cI00jV+MCSa6c9PrMMs2VndEE6AgDivaoV0STm1X c5A0ceuP3FvzsSjaDolDbZKNE5HMvRrqCEWXpriUQPSEwCWTGvJ0fquYbYhDgdYt U8jnWcvR2gCEZ1BqPjiUATgRjujI0QmvLqFWi/4qNHzIS2DVW0fAU905UlGzydMx vCk/SXeNNz4BJXEIaX9TmlVKlqRkE/zd1wdgRmc2OOsBvjAEyJmUa79V5bsTe2ud 8h7pU2ByUcDvQzCJrOpL8LBB5J+ECNySUwk51Jtl9rgZuhF34ELtYnbBOl5xrbwr ms0kMyGu7CvcVeV+aiBJtkf2Vj1MfbG9yIFtfw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1KypFPyVMLVnto67/3d YGjy+p6dD38Jcz1sfserZgapz9+DlICbDJO15jzRWaueBJB5i6qnYz9CTTOIEQaa 3PrYMt/g3B4Wttn9lG4X57UVbM8Y+Y8+SL8o3q3nA9X/G6hqCUy7o+RwuZ8QlBTL A2tBUQEoPIekMZpVJiEc3v3YswT+nld40q2FzUChKG7q+Y4u37jekFbarouZdnaC fco7Q+7ETQwxI7i4WraFTV+8ok00TqpoQOQwPycDr7rGqtbEw/3G0Ck7Hs3qKHNF QWjIVxZjjAHtwWkq+hwpJ7QVPkLtIVDnxQnxFJueMSP0RaC6UJgl6Ce4OVlQ06x2 hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14858466983509279717942901740278398295 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'relay.withsecure.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24152296063416598675305732565346177151709825409578146419952265456200246631241181035968599016411390963231546542683659342926158934039450998953235822630532415271466756644286151275783992834306751136091407211289701104062206406695270807558628861325364690940163813489909945435318264552396968678482411324255233926239537818166420108376289804829934533091562953454673444874788630217350748239469676729401712322406807972482422423446548110994445628520854412104366619413690344742746049218477198776853072698835494685423353076000848840879364441489190441521238536172033406957054374366107582571587460164788922929641719980791745718548101 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b079c91914662713cbb0128da08a78344d0678b2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relay.withsecure.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relay.f-secure.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relay.prd.condev.fsapi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relay-external.prd.condev.fsapi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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