app.elivr2.preprodpci1.us-west-2.pci-tmaws.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:22:9d:6f:3e:49:7c:65:5a:a4:d9:63:52:9f:ab:a0 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.elivr2.preprodpci1.us-west-2.pci-tmaws.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:22:9d:6f:3e:49:7c:65:5a:a4:d9:63:52:9f:ab:a0
Serial Number (int): 17459695190304812519569435112234789792
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:a6:e1:6f:86:4f:cf:57:09:7f:60:f7:fe:29:0e:23:8e:f6:53:df
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d3:19:8e:1f:bf:26:c1:55:df:5a:24:a0:16:e0:82:fe:b2:7f:77:5f
Fingerprint (sha256): 15:14:b0:4d:f6:fa:59:b2:07:92:98:71:da:58:3e:76:34:7a:d0:47:67:2f:ce:74:2b:ec:87:b2:66:c7:47:09

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate app.elivr2.preprodpci1.us-west-2.pci-tmaws.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.elivr2.preprodpci1.us-west-2.pci-tmaws.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.elivr2.preprodpci1.us-west-2.pci-tmaws.io

Other certificates including the domain name pci-tmaws.io

(limited to 100 certificates)
app.pmtivr3.preprodpci1.us-west-2.pci-tmaws.io
*.preprodpci1.us-west-2.pci-tmaws.io
app.elivr1.prodpci1.us-west-2.pci-tmaws.io
pxy.cts.prod2.pci-tmaws.io
app.csivr3.preprodpci1.us-east-1.pci-tmaws.io
*.beanstream.payment.prod1.us-east-1.pci-tmaws.io
app.pmtivr3.prodpci1.us-west-2.pci-tmaws.io
app.preprodpci1.us-east-1.ole.pci-tmaws.io
dc01techeuw1.techops.info
klarna.payment.prod1.us-east-1.pci-tmaws.io
app.csivr1.preprodpci1.us-west-2.pci-tmaws.io
*.prd214.stg.us-east-1.pci-tmaws.io
app.pmtivr1.prodpci1.us-west-2.pci-tmaws.io
adfseast.pci-tmaws.io
adfseu.pci-tmaws.io
speechminer.genesys.pci-tmaws.io
*.beanstream.payment.prod1.us-east-1.pci-tmaws.io
app.elivr2.preprodpci1.us-west-2.pci-tmaws.io
pxy.cts.preprod2.pci-tmaws.io
btoauth.payment.prod1.us-east-1.pci-tmaws.io
app-preprod1.apms.us-east-1.pci-tmaws.io
walletmgr.payment.preprod1.us-east-1.pci-tmaws.io
adfseast.pci-tmaws.io
app.pmtsvc.prodpci1.us-west-2.pci-tmaws.io
app-prod1.apms.us-east-1.pci-tmaws.io
app.pmtivr2.prodpci1.us-east-1.pci-tmaws.io
testcreatecert.pci-tmaws.io
app.pmtivr1.prodpci1.us-east-1.pci-tmaws.io
ticketinsurance.payment.prod1.us-west-2.pci-tmaws.io
beanstream.payment.prod1.us-west-2.pci-tmaws.io
giftcard.payment.prod1.us-east-1.pci-tmaws.io
amex-otl.payment.preprod1.us-east-1.pci-tmaws.io
paysys-otl.prod1.us-east-1.pci-tmaws.io
adfseast.pci-tmaws.io
*.preprodpci1.us-east-1.pci-tmaws.io
payments-elk-logs.prod1.us-west-2.pci-tmaws.io
klarna.payment.preprod2.us-west-2.pci-tmaws.io
adfswest.pci-tmaws.io
app.pmtivr3.prodpci1.us-east-1.pci-tmaws.io
app.prodpci1.us-east-1.ole.pci-tmaws.io
payments-elk-logs.prod1.eu-west-1.pci-tmaws.io
app.pcipxy.prodpci1.us-east-1.pci-tmaws.io
pci-api.payment.preprod1.eu-west-1.pci-tmaws.io
app.elivr2.prodpci1.us-west-2.pci-tmaws.io
*.prodpci1.us-east-1.pci-tmaws.io
dc02techuse1.techops.info
app.csivr3.preprodpci1.us-west-2.pci-tmaws.io
app.csivr1.prodpci1.us-east-1.pci-tmaws.io
app.pmtsvc.prodpci1.us-east-1.pci-tmaws.io
braintree.payment.preprod1.eu-west-1.pci-tmaws.io
app.pmtivr2.prodpci1.us-west-2.pci-tmaws.io
sales-dta-preprodpci1-us-east-1.pci-tmaws.io
dc02techuse1.techops.info
braintree.payment.prod1.us-west-2.pci-tmaws.io
pci-api.payment.preprod1.eu-west-1.pci-tmaws.io
app.csivr3.prodpci1.us-east-1.pci-tmaws.io
app.csivr2.preprodpci1.us-west-2.pci-tmaws.io
app.pmtsvc.preprodpci1.us-east-1.pci-tmaws.io
app.csivr2.preprodpci1.us-west-2.pci-tmaws.io
app.pmtivr1.preprodpci1.us-west-2.pci-tmaws.io
app.csivr1.preprodpci1.us-west-2.pci-tmaws.io
app.pmtivr2.preprodpci1.us-east-1.pci-tmaws.io
talonone.payment.preprod1.us-east-1.pci-tmaws.io
adfseast.pci-tmaws.io
beanstream.payment.us-east-1.pci-tmaws.io
vaultlite.payment.preprod1.us-west-2.pci-tmaws.io
braintree.payment.preprod1.us-east-1.pci-tmaws.io
app.csivr2.prodpci1.us-east-1.pci-tmaws.io
walletmgr.payment.prod1.us-east-1.pci-tmaws.io
btonboard.payment.prod1.us-east-1.pci-tmaws.io
app.csivr2.prodpci1.us-east-1.pci-tmaws.io
app.csivr2.preprodpci1.us-east-1.pci-tmaws.io
app.pmtsvc.preprodpci1.us-east-1.pci-tmaws.io
*.prd214.prod.us-east-1.pci-tmaws.io
giftcard.payment.preprod1.us-east-1.pci-tmaws.io
sales-dta-preprodpci2-us-east-1.pci-tmaws.io
braintree.payment.preprod1.ap-southeast-2.pci-tmaws.io
app.csivr1.prodpci1.us-west-2.pci-tmaws.io
app.pcipxy.preprodpci1.us-west-2.pci-tmaws.io
jpbs.payment.preprod1.us-east-1.pci-tmaws.io
amex-otl.payment.preprod1.us-west-2.pci-tmaws.io
app.csivr1.preprodpci1.us-west-2.pci-tmaws.io
pci-api.payment.preprod1.eu-west-1.pci-tmaws.io
adfswest.pci-tmaws.io
app.pmtivr3.prodpci1.us-east-1.pci-tmaws.io
klarna.payment.prod2.us-west-2.pci-tmaws.io
klarna.payment.preprod1.us-east-1.pci-tmaws.io
ticketinsurance.payment.prod1.us-west-2.pci-tmaws.io
dbdm.pci-tmaws.io
vv20-api-preprodpci.pci-tmaws.io
app.pmtivr2.prodpci1.us-west-2.pci-tmaws.io
app.pmtivr3.preprodpci1.us-west-2.pci-tmaws.io
paysys-otl.prod1.us-west-2.pci-tmaws.io
dc02techusw2.techops.info
btcapture.payment.prod1.ap-southeast-2.pci-tmaws.io
dc02techeuw1.techops.info
mastercard.payment.preprod1.ap-southeast-2.pci-tmaws.io
app.pcipxy.preprodpci1.us-east-1.pci-tmaws.io
braintree.payment.prod1.us-east-1.pci-tmaws.io
dc01techusw2.techops.info

Certificate

The complete raw certificate details for app.elivr2.preprodpci1.us-west-2.pci-tmaws.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIQDSKdbz5JfGVapNljUp+roDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA3MjUwMDAwMDBaFw0yMDA4MjUx
MjAwMDBaMDgxNjA0BgNVBAMTLWFwcC5lbGl2cjIucHJlcHJvZHBjaTEudXMtd2Vz
dC0yLnBjaS10bWF3cy5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMKacgzzh79rFuezihpxKnKslXI/kmosK3tAk8Z6V9Ap16peVfvxNTjDfzAEKtd1
mR3BJF2Y4PHxn8f7bINeFz1Xqo7vP6USTaXwaR/YFCJWhIDF35ZsxLWMN9Sc4WUQ
NRcFJhTi5yi6uvfTIppo59c0SZx0y1wuLTmWZcdIQy7Xvb711AKn/2WcXTP8DUpv
HvXYhecEG4QcZfJmJqDkLSp2Fa6N6hHXOKKZ0JdH4csqehRyqGEhktXy0S6c4TB5
DmnG6qihwHaJJAqDa+H+E9d41fLgZuXiLTfANHULmG2rpG8sc1wdRQD0wllWw107
4WizRvVXfbm0n1m4SgGJHLkCAwEAAaOCAaYwggGiMB8GA1UdIwQYMBaAFFmkZgZS
oHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTxpuFvhk/PVwl/YPf+KQ4jjvZT3zA4
BgNVHREEMTAvgi1hcHAuZWxpdnIyLnByZXByb2RwY2kxLnVzLXdlc3QtMi5wY2kt
dG1hd3MuaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv
bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj
YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv9HyPvHbInWxH+x
4i5+RrIftJgfXYsJXq/ONBUgqwHh8TSzD/HVIKStkP264dh7XnpphDybt4tYfr7w
cZwvlgcEzxrdLz7SkWBhw6HUdrYZMMUP9lFHQDfbNWZn4A+B/hpMHN6L2ICU46tD
9jIVEPBS/QUVhYqY51qQrr3Idxw1gvEnvaSQ5MlNV/nua9/KPuoSeWDPqGReGdS8
BGHncfZuVFnGlMm7hvoYUVWOMOEt8BY6pao526tsYW6M2fIUmXzoJ85gc9AAOtKY
Z27jsz8WWtKXALms0hWu/Dqk/3DvAyhs7jVtPT+zcJDqTFC4SH1mEM9yr+p04eAR
dtEI1g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwppyDPOHv2sW57OKGnEq
cqyVcj+Saiwre0CTxnpX0CnXql5V+/E1OMN/MAQq13WZHcEkXZjg8fGfx/tsg14X
PVeqju8/pRJNpfBpH9gUIlaEgMXflmzEtYw31JzhZRA1FwUmFOLnKLq699Mimmjn
1zRJnHTLXC4tOZZlx0hDLte9vvXUAqf/ZZxdM/wNSm8e9diF5wQbhBxl8mYmoOQt
KnYVro3qEdc4opnQl0fhyyp6FHKoYSGS1fLRLpzhMHkOacbqqKHAdokkCoNr4f4T
13jV8uBm5eItN8A0dQuYbaukbyxzXB1FAPTCWVbDXTvhaLNG9Vd9ubSfWbhKAYkc
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17459695190304812519569435112234789792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.elivr2.preprodpci1.us-west-2.pci-tmaws.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24566391082975113945456685941656770729979494781840967172054404564293406463770505287197126866837972758567798961187921570619570926061871283895718513123978042362975243146971002539530133499572153385479818433966866320332457951403142931848029297068938686249381018230525535532805006286990415245889331121905400569473275393542017866841221091151794264043556736092739849409659318947238800400584150319389155028087803977278530818992026844823329991555331812421678471586360691837414277370591618736128499199440164997464400222863177549165458877254986342888407008041066563519316864482874908147837820305220571071545874601088676553891001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1a6e16f864fcf57097f60f7fe290e238ef653df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.elivr2.preprodpci1.us-west-2.pci-tmaws.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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