auth.sandpit.dukc.net
Issued by Amazon
About this certificate
This digital certificate with serial number 08:c7:00:a5:71:62:ba:de:9f:ed:ce:ba:0a:a9:75:99 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=auth.sandpit.dukc.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:c7:00:a5:71:62:ba:de:9f:ed:ce:ba:0a:a9:75:99Serial Number (int): 11667104148865735841925047049010115993
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 94:48:d3:72:77:f3:6b:ef:c6:62:fb:6f:de:c8:ff:9a:df:8a:88:96
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 3c:29:b0:31:a0:af:8c:41:74:59:13:14:ee:0c:4e:ab:3b:49:24:da
Fingerprint (sha256): 15:00:0b:d8:4b:a8:fa:e0:8f:f6:31:76:e8:80:96:13:35:90:7b:de:ad:7f:00:d5:32:06:a2:9b:b7:81:a8:1c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate auth.sandpit.dukc.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for auth.sandpit.dukc.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
auth.sandpit.dukc.net
Other certificates including the domain name dukc.net
(limited to 100 certificates)
rmq.sandpitunstable.dukc.net
msdukc2.sandpit.dukc.net
services.production.dukc.net
msdukc-melbourne1.uat.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
nagios.uat.dukc.net
services.support.dukc.net
msdukc2.test.dukc.net
dds.test.dukc.net
auth.sandpit.dukc.net
www.dukc.net
nagios.sandpit.dukc.net
dds.support.dukc.net
sandpit.dukc.net
auth.test.dukc.net
nagios.sandpit.dukc.net
adaptacast2.sandpit.dukc.net
msdukc2.sandpitdev.dukc.net
dukc.net
services.dukc.net
transitanalyst-nightly.uat.dukc.net
api.production.dukc.net
rmq.uat.dukc.net
dds.production.dukc.net
melbourne.dukc.com
dds.sandpit.dukc.net
nagios.sandpit.dukc.net
dukc.net
adaptacast.test.dukc.net
dukc.net
rmq.test.dukc.net
auth.dukc.net
auth.sandpit.dukc.net
dukc.net
dukc.net
sandpitdev.dukc.net
msdukc1.uat.dukc.net
serviceviewer.support.dukc.net
dds.dukc.net
nagios.uat.dukc.net
dukc.net
centralais.dukc.net
api.sandpit.dukc.net
dukc.net
dukc.net
centralrmq.dukc.net
msdukc2.dukc.net
dds.production.dukc.net
sandpit.dukc.net
appservices.test.dukc.net
services.sandpit.dukc.net
adaptacast.support.dukc.net
test.dukc.net
appservices.sandpit.dukc.net
dukc.net
nagios.dukc.net
adaptacast.dukc.net
adaptacast2.production.dukc.net
dds.sandpitunstable.dukc.net
dukc.net
dukc.net
rmq.test.dukc.net
dukc.net
sandpitunstable.dukc.net
api.dukc.net
serviceviewer.production.dukc.net
melbourne.dukc.com
msdukc-melbourne1.sandpitdev.dukc.net
adaptacast1.production.dukc.net
msdukc2.sandpit.dukc.net
strat1.sandpitdev.dukc.net
centralrmq.dukc.net
dds.test.dukc.net
dds.dukc.net
api.sandpit.dukc.net
nagios.production.dukc.net
adaptacast.production.dukc.net
nagios.production.dukc.net
ais.sandpit.dukc.net
appservices.production.dukc.net
uat.dukc.net
api.sandpit.dukc.net
ais.uat.dukc.net
rmq.sandpit.dukc.net
adaptacast.sandpit.dukc.net
dds.sandpitdev.dukc.net
nagios.dukc.net
rmq.support.dukc.net
ais.dukc.net
msdukc1.production.dukc.net
*.dukc.net
rmq.sandpit.dukc.net
api.sandpitdev.dukc.net
rmq.production.dukc.net
msdukc1.test.dukc.net
ais.sandpit.dukc.net
msdukc2.sandpit.dukc.net
services.production.dukc.net
msdukc-melbourne1.uat.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
nagios.uat.dukc.net
services.support.dukc.net
msdukc2.test.dukc.net
dds.test.dukc.net
auth.sandpit.dukc.net
www.dukc.net
nagios.sandpit.dukc.net
dds.support.dukc.net
sandpit.dukc.net
auth.test.dukc.net
nagios.sandpit.dukc.net
adaptacast2.sandpit.dukc.net
msdukc2.sandpitdev.dukc.net
dukc.net
services.dukc.net
transitanalyst-nightly.uat.dukc.net
api.production.dukc.net
rmq.uat.dukc.net
dds.production.dukc.net
melbourne.dukc.com
dds.sandpit.dukc.net
nagios.sandpit.dukc.net
dukc.net
adaptacast.test.dukc.net
dukc.net
rmq.test.dukc.net
auth.dukc.net
auth.sandpit.dukc.net
dukc.net
dukc.net
sandpitdev.dukc.net
msdukc1.uat.dukc.net
serviceviewer.support.dukc.net
dds.dukc.net
nagios.uat.dukc.net
dukc.net
centralais.dukc.net
api.sandpit.dukc.net
dukc.net
dukc.net
centralrmq.dukc.net
msdukc2.dukc.net
dds.production.dukc.net
sandpit.dukc.net
appservices.test.dukc.net
services.sandpit.dukc.net
adaptacast.support.dukc.net
test.dukc.net
appservices.sandpit.dukc.net
dukc.net
nagios.dukc.net
adaptacast.dukc.net
adaptacast2.production.dukc.net
dds.sandpitunstable.dukc.net
dukc.net
dukc.net
rmq.test.dukc.net
dukc.net
sandpitunstable.dukc.net
api.dukc.net
serviceviewer.production.dukc.net
melbourne.dukc.com
msdukc-melbourne1.sandpitdev.dukc.net
adaptacast1.production.dukc.net
msdukc2.sandpit.dukc.net
strat1.sandpitdev.dukc.net
centralrmq.dukc.net
dds.test.dukc.net
dds.dukc.net
api.sandpit.dukc.net
nagios.production.dukc.net
adaptacast.production.dukc.net
nagios.production.dukc.net
ais.sandpit.dukc.net
appservices.production.dukc.net
uat.dukc.net
api.sandpit.dukc.net
ais.uat.dukc.net
rmq.sandpit.dukc.net
adaptacast.sandpit.dukc.net
dds.sandpitdev.dukc.net
nagios.dukc.net
rmq.support.dukc.net
ais.dukc.net
msdukc1.production.dukc.net
*.dukc.net
rmq.sandpit.dukc.net
api.sandpitdev.dukc.net
rmq.production.dukc.net
msdukc1.test.dukc.net
ais.sandpit.dukc.net
Certificate
The complete raw certificate details for auth.sandpit.dukc.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgIQCMcApXFiut6f7c66Cql1mTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMDkwMDAwMDBaFw0yMTAyMDkx MjAwMDBaMCAxHjAcBgNVBAMTFWF1dGguc2FuZHBpdC5kdWtjLm5ldDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJjeKJzsVILza127KI6vREwV17ASUJjY M1FqbElPyH9zqNmAmsL44sVhUR17VRFVBLzvRd9YwgEk9jpW/4oh7RtqkLpGLHmg rlnWdDAWG+FJ95xJCAEqkpovDvAl39N9IJUGydev4lLTEY0YZLAsmTH6xjlpPzz+ 2vNW+3ae9dsA1/+dkkXONGuhV195cOoJaeXruik3Vh0bu90SRCqmbssB+hmj6gJX QiuEXFVjigB3bixZ8X3QY1D0laCXPBdOkG31Fyl0IWKQctgPxrokYFitK4RMRArB wTVFpAs7UAdgWY4rTgWRkDHZfbSasit6FpMKSPzYHPXfCVLwtrXb7LUCAwEAAaOC AoEwggJ9MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBSUSNNyd/Nr78Zi+2/eyP+a34qIljAgBgNVHREEGTAXghVhdXRoLnNhbmRwaXQu ZHVrYy5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQQG CisGAQQB1nkCBAIEgfUEgfIA8AB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCW ZDaOHtGFAAABb4kv+QgAAAQDAEcwRQIgYk/8A2CVB1M4KktJ4YuIsRoZsMzubBad nv+YfQcLlOsCIQDzQxUYHGvcha66MgWkOOAAu+snram1xfHIxj0WAxXiygB2AId1 v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABb4kv+dEAAAQDAEcwRQIg MkO9xJCzcp1B/1gyBhyjTq55b+jB5eR6VgvOotCuiAECIQDQdg4/+PZRut3jhMK1 aPNj+oYjdqv+eslx+/+X9DRgZjANBgkqhkiG9w0BAQsFAAOCAQEAnR4hs9Bkhd3n ZJr0vFGW8iyPKkiy+ZPLq8p5lY6JyhGC9EC4257gUF+sXlEPewfqyQLfWHgfA5UK jKJqRnV0F9iIYVNw2WRHSxj5Im34tAcRJ8pmPobaZ0ENTwl9XFOhRuzXDz6kJJZr 4rzbpOOvZeLb88qVLgIcjoKYlAxHH1sww7nj8jMNSlRIxJj66b3Re6Lpdx7Owmy6 gFwScteT8uyuLonVIaB3qFIU2vzNkvmAm3MRdPcMUakseFrwMb99tRHdB6LZavLD aJ03bKhKMjD+1PWP20Yok2C+g30uZzGnA+fTvYxuveLovNkI7//+YlCs2L6WjwP7 48NNGIKpOA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN4onOxUgvNrXbsojq9E TBXXsBJQmNgzUWpsSU/If3Oo2YCawvjixWFRHXtVEVUEvO9F31jCAST2Olb/iiHt G2qQukYseaCuWdZ0MBYb4Un3nEkIASqSmi8O8CXf030glQbJ16/iUtMRjRhksCyZ MfrGOWk/PP7a81b7dp712wDX/52SRc40a6FXX3lw6glp5eu6KTdWHRu73RJEKqZu ywH6GaPqAldCK4RcVWOKAHduLFnxfdBjUPSVoJc8F06QbfUXKXQhYpBy2A/GuiRg WK0rhExECsHBNUWkCztQB2BZjitOBZGQMdl9tJqyK3oWkwpI/Ngc9d8JUvC2tdvs tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11667104148865735841925047049010115993 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.sandpit.dukc.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19297772865426331997756315023721888439898097156041315083836556006604944479986887913245878432067856586821458520474738963246516005959424778290838022432637608943910243766595397095085253955047450274150364052548035558492142568268478091606298466406280672662168101211676445333927273005315260899744679046128317344525310358444247130803382987360116303294737181012760496525037530742354194750211398032267131606026145267298345354645975997103823624586502078581500960448301302885839449386412773559477026914238151575015898110687324072251374236176290677131011878915666744642374753201898100820753264774719698647605769907795993806236853 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9448d37277f36befc662fb6fdec8ff9adf8a8896 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.sandpit.dukc.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016f892ff90800000403004730450220624ffc0360950753382a4b49e18b88b11a19b0ccee6c169d9eff987d070b94eb022100f34315181c6bdc85aeba3205a438e000bbeb27ada9b5c5f1c8c63d160315e2ca0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f892ff9d1000004030047304502203243bdc490b3729d41ff5832061ca34eae796fe8c1e5e47a560bcea2d0ae8801022100d0760e3ff8f651badde384c2b568f363fa862376abfe7ac971fbff97f4346066 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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