*.canopy.rent
Issued by Amazon
About this certificate
This digital certificate with serial number 07:b5:0a:6c:68:b9:8f:e0:33:ac:0a:cb:de:31:ad:da was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.canopy.rent
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:b5:0a:6c:68:b9:8f:e0:33:ac:0a:cb:de:31:ad:daSerial Number (int): 10244613115037574700593048110364732890
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: e6:c0:0c:bc:fb:03:b1:6d:14:55:52:73:12:26:31:5b:a5:77:e3:de
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): b2:ea:ac:8c:67:5e:e5:7e:e0:ea:72:3a:eb:39:43:2e:89:5b:59:97
Fingerprint (sha256): 14:d8:39:35:96:23:a5:5d:97:3a:dd:0e:d5:df:2c:d3:f0:22:46:d2:83:9e:a1:2a:3f:fb:03:39:38:c1:5c:f5
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.canopy.rent
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.canopy.rent
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.canopy.rent
canopy.rent
canopy.rent
Other certificates including the domain name canopy.rent
(limited to 100 certificates)
comercializadoracentral.com
energy.canopy.rent
www.audiocay.com
canopy.rent
help.canopy.rent
mezzolladev.com
retool.canopy.rent
api.boron.canopy.rent
app-uat.canopy.rent
smartverify.boron.canopy.rent
botdeploy.io
www.everestgreenayur.com
api.plutuslabs.ca
ssl380325.cloudflaressl.com
hatechs.com
www.djeliba.com
eemaxtours.com
dreamteam.staging.canopy.rent
*.canopy.rent
beta.funfastfit.co
casaferrao.com.br
ar-upopoy.jp
hq-uat.canopy.rent
backend-prod.canopy.rent
contacthub-dialer.alertacall.com
www.canopy.rent
hq-uat.canopy.rent
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
www.deli.land
go.selva.boron.canopy.rent
ssl380325.cloudflaressl.com
*.canopy.rent
hydcal.me
www.alexmanzana.com
ssl380323.cloudflaressl.com
dev-links.resident.love
marcialdiaz.com
ssl380324.cloudflaressl.com
thinkers.developwithmaw.com
hq.staging.canopy.rent
www.la-bouilloire-verte.fr
etu.auron.fi
phoenix.auren.com.pe
ssl380325.cloudflaressl.com
api-uat.canopy.rent
communications.chief.systems
www.canopy.rent
www.odiledegraeve.be
ssl380324.cloudflaressl.com
www.canopy.rent
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
ditalipizzaria.lupi.delivery
willyou.watch
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
beta.hq.canopy.rent
ssl380324.cloudflaressl.com
app-uat.canopy.rent
www.canopy.rent
ssl380325.cloudflaressl.com
etu.auron.fi
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
kibana.canopy.rent
www.canopy.rent
www.la-bouilloire-verte.fr
backend-staging.canopy.rent
to-do-map.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
www.pridemap.eu
app-uat.canopy.rent
www.pridemap.eu
ssl380324.cloudflaressl.com
www.mehmetkose.com.tr
rabbiyisraeli.com
www.canopy.rent
oudon.xyz
ssl380325.cloudflaressl.com
www.canopy.rent
hq-prod.canopy.rent
link.otospector.co.id
canopy.rent
ssl380325.cloudflaressl.com
servir.shanemaglangit.com
energy.canopy.rent
ssl380324.cloudflaressl.com
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
canopy.rent
ssl380323.cloudflaressl.com
comercializadoracentral.com
www.canopy.rent
development.admin.canopy.rent
crm.kokos.co.nz
vpn-staging.canopy.rent
energy.canopy.rent
www.audiocay.com
canopy.rent
help.canopy.rent
mezzolladev.com
retool.canopy.rent
api.boron.canopy.rent
app-uat.canopy.rent
smartverify.boron.canopy.rent
botdeploy.io
www.everestgreenayur.com
api.plutuslabs.ca
ssl380325.cloudflaressl.com
hatechs.com
www.djeliba.com
eemaxtours.com
dreamteam.staging.canopy.rent
*.canopy.rent
beta.funfastfit.co
casaferrao.com.br
ar-upopoy.jp
hq-uat.canopy.rent
backend-prod.canopy.rent
contacthub-dialer.alertacall.com
www.canopy.rent
hq-uat.canopy.rent
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
www.deli.land
go.selva.boron.canopy.rent
ssl380325.cloudflaressl.com
*.canopy.rent
hydcal.me
www.alexmanzana.com
ssl380323.cloudflaressl.com
dev-links.resident.love
marcialdiaz.com
ssl380324.cloudflaressl.com
thinkers.developwithmaw.com
hq.staging.canopy.rent
www.la-bouilloire-verte.fr
etu.auron.fi
phoenix.auren.com.pe
ssl380325.cloudflaressl.com
api-uat.canopy.rent
communications.chief.systems
www.canopy.rent
www.odiledegraeve.be
ssl380324.cloudflaressl.com
www.canopy.rent
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
ditalipizzaria.lupi.delivery
willyou.watch
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
beta.hq.canopy.rent
ssl380324.cloudflaressl.com
app-uat.canopy.rent
www.canopy.rent
ssl380325.cloudflaressl.com
etu.auron.fi
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
kibana.canopy.rent
www.canopy.rent
www.la-bouilloire-verte.fr
backend-staging.canopy.rent
to-do-map.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
www.pridemap.eu
app-uat.canopy.rent
www.pridemap.eu
ssl380324.cloudflaressl.com
www.mehmetkose.com.tr
rabbiyisraeli.com
www.canopy.rent
oudon.xyz
ssl380325.cloudflaressl.com
www.canopy.rent
hq-prod.canopy.rent
link.otospector.co.id
canopy.rent
ssl380325.cloudflaressl.com
servir.shanemaglangit.com
energy.canopy.rent
ssl380324.cloudflaressl.com
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
canopy.rent
ssl380323.cloudflaressl.com
comercializadoracentral.com
www.canopy.rent
development.admin.canopy.rent
crm.kokos.co.nz
vpn-staging.canopy.rent
Certificate
The complete raw certificate details for *.canopy.rent in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfTCCA2WgAwIBAgIQB7UKbGi5j+AzrArL3jGt2jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEwMTYwMDAwMDBaFw0xOTExMTYx MjAwMDBaMBgxFjAUBgNVBAMMDSouY2Fub3B5LnJlbnQwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCZwQuG+dqr4nq2+QW8fFzyeh8pNTaMklIsbgCOans1 j2B/aYc0QgzN5ZwWAP9TQbA6kLpZIIeT+VHYdq14D+OxNojSIEtaLMRvtMCFdSbi uNLX6TFggdkxW3XyHcsCC9OKzihPWDH0IM/pitLKBnebctARKTpiUknN8lcty1yj gQNlPdSTu22EOUaSy3S42rN8MyFjxvt879ik4HnL+Bzvp6OQaYJL7wBpDWgqjkl4 D3heIH8+HuS1no3E1uqn3s7IXu2axj4KPqRryVDBH7xITybVwimNL76Vid96XmOV LzQe+lzqZyB+TfuvDiHfllUuSxW3Jf5Q2bgQx4pYqtd1AgMBAAGjggGTMIIBjzAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU5sAMvPsD sW0UVVJzEiYxW6V3494wJQYDVR0RBB4wHIINKi5jYW5vcHkucmVudIILY2Fub3B5 LnJlbnQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRy dXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EM AQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2Nh MWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT150df8g8JmG+bjTjhCj vojYZ30XN7guTwQLR014MIJzKEGwgP7HYEIWwES9quWw9t8AhFM8OArwYddjbawm FiDTcoNFp2s15DTPchzDsd7LDypqhrcC/x3ytuyfN1QD1WsNjE77ZU+Vw9yo+F5b Kw8qe6TWc6TYr94r4/A799jC64PNLp/uXFEMiq/WPl6fy0yibqM1fYGbwc8g95fp BK/y5a9e27TJ3pgSeM36jcVLnTy7uGRXjZmK2qjt4J8jnul4NbaT0x4bKUU/kVjD n9KLXwlePqJeomjYGIvoNQr+CGg47qRxa1jup3HdM90uPigl2eVsvk+ge8mq8v1H 7w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcELhvnaq+J6tvkFvHxc 8nofKTU2jJJSLG4Ajmp7NY9gf2mHNEIMzeWcFgD/U0GwOpC6WSCHk/lR2HateA/j sTaI0iBLWizEb7TAhXUm4rjS1+kxYIHZMVt18h3LAgvTis4oT1gx9CDP6YrSygZ3 m3LQESk6YlJJzfJXLctco4EDZT3Uk7tthDlGkst0uNqzfDMhY8b7fO/YpOB5y/gc 76ejkGmCS+8AaQ1oKo5JeA94XiB/Ph7ktZ6NxNbqp97OyF7tmsY+Cj6ka8lQwR+8 SE8m1cIpjS++lYnfel5jlS80Hvpc6mcgfk37rw4h35ZVLksVtyX+UNm4EMeKWKrX dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10244613115037574700593048110364732890 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canopy.rent' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19409654711202544902284860498070122143096133995544468547955113705485952582029878085745211478695426577789078737663952930016900471319402374871867773224038400584594641392341643478798372619922682954827071038306527453879798844601052811188763936979401959863211556952962320582623171826607222775839799461744172525191610028794483145227374282613620925827611668017618600577914160200145756468591777944643096360465523837505265620526098953008351748222334788747280690415983305844277428743292846614643320505685659789879366149307402044248363110528441298971419714610700190183397227203244243775996208510354269859232890453314836399576949 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e6c00cbcfb03b16d145552731226315ba577e3de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canopy.rent' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopy.rent' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004f5e7475ff20f09986f9b8d38e10a3be88d8677d1737b82e4f040b474d783082732841b080fec7604216c044bdaae5b0f6df0084533c380af061d7636dac261620d3728345a76b35e434cf721cc3b1decb0f2a6a86b702ff1df2b6ec9f375403d56b0d8c4efb654f95c3dca8f85e5b2b0f2a7ba4d673a4d8afde2be3f03bf7d8c2eb83cd2e9fee5c510c8aafd63e5e9fcb4ca26ea3357d819bc1cf20f797e904aff2e5af5edbb4c9de981278cdfa8dc54b9d3cbbb864578d998adaa8ede09f239ee97835b693d31e1b29453f9158c39fd28b5f095e3ea25ea268d8188be8350afe086838eea4716b58eea771dd33dd2e3e2825d9e56cbe4fa07bc9aaf2fd47ef