staging.liberty-rider.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:6e:a6:9a:47:eb:98:66:ee:42:f8:b8:0b:7b:34:f5 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging.liberty-rider.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:6e:a6:9a:47:eb:98:66:ee:42:f8:b8:0b:7b:34:f5Serial Number (int): 13866811715677476105541577487301686517
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 62:51:13:29:9e:94:10:d2:8f:dd:52:ea:26:bf:1d:89:2c:88:da:ee
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): f7:ad:68:f4:03:87:8d:72:5d:a4:ac:07:30:2d:7f:9f:52:f6:28:29
Fingerprint (sha256): 15:4a:ee:b2:32:d1:ac:3e:fd:b9:ac:b9:87:3c:d2:9e:3c:e2:fb:60:86:fe:f6:0b:fb:d0:a3:e7:a9:7f:db:da
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate staging.liberty-rider.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging.liberty-rider.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging.liberty-rider.com
Other certificates including the domain name liberty-rider.com
(limited to 100 certificates)
www.masiorski.eu
dev.liberty-rider.com
roadbook-api.liberty-rider.com
api.liberty-rider.com
mydaytracker.net
www.aclaraadapters.com
angel-api.liberty-rider.com
dev.liberty-rider.com
api.liberty-rider.com
shop.liberty-rider.com
goldwing.liberty-rider.com
jobs.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
www.invoicehub.co
staging.api.liberty-rider.com
cloudfront.liberty-rider.com
staging.forest-admin-api.liberty-rider.com
lightproduction.vn
goldwing.liberty-rider.com
tiles.liberty-rider.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
holagraphcorporate.com
staging.liberty-rider.com
www.liberty-rider.com
roadbook-api.liberty-rider.com
app.beta.fund
forest-admin-api-production.liberty-rider.com
liberty-rider.com
staging.goldwing.liberty-rider.com
dev-pr.infinitydoctors.com
jobs.liberty-rider.com
staging.track-api.liberty-rider.com
api.e2e.agency
cdn.liberty-rider.com
api.liberty-rider.com
forest-admin-api.liberty-rider.com
staging.api.liberty-rider.com
auth.testnet.gamecredits.org
volks.teuestoque.com.br
help.liberty-rider.com
jobs.liberty-rider.com
www.liberty-rider.com
dev2.liberty-rider.com
staging.angel-api.liberty-rider.com
admin.starsanswer.com
www.muchon.co.kr
app.liberty-rider.com
medscienceanimations.com
api.liberty-rider.com
simplest.co.il
jobs.liberty-rider.com
boho.ekanek.app
dev.liberty-rider.com
www.liberty-rider.com
staging.track-api.liberty-rider.com
staging.root-origin.liberty-rider.com
api.liberty-rider.com
root-origin.liberty-rider.com
www.tracovid-19.ml
staging.api.liberty-rider.com
staging.cloudfront.liberty-rider.com
www.liberty-rider.com
wordpress.liberty-rider.com
reps.fabrictent.com
app.montera.io
expert.gardencompass.com
staging.ecall.liberty-rider.com
liberty-rider.com
www.hgs-ltd.com
jobs.liberty-rider.com
liberty-rider.fr
covid19safe.es
staging.app.liberty-rider.com
ssh-keys.online
maps-cloudfront.liberty-rider.com
jobs.liberty-rider.com
resume.christiannaths.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
www.liberty-rider.com
help.liberty-rider.com
staging.liberty-rider.com
api.liberty-rider.com
liberty-rider.com
www.iceberg-technology.com
forest-admin-api-staging.liberty-rider.com
dev2.liberty-rider.com
roadbook-api.liberty-rider.com
dev.liberty-rider.com
macif.liberty-rider.com
jobs.liberty-rider.com
ride.liberty-rider.com
shop.liberty-rider.com
dev.liberty-rider.com
staging.api.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
staging.ecall.liberty-rider.com
dev.liberty-rider.com
roadbook-api.liberty-rider.com
api.liberty-rider.com
mydaytracker.net
www.aclaraadapters.com
angel-api.liberty-rider.com
dev.liberty-rider.com
api.liberty-rider.com
shop.liberty-rider.com
goldwing.liberty-rider.com
jobs.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
www.invoicehub.co
staging.api.liberty-rider.com
cloudfront.liberty-rider.com
staging.forest-admin-api.liberty-rider.com
lightproduction.vn
goldwing.liberty-rider.com
tiles.liberty-rider.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
holagraphcorporate.com
staging.liberty-rider.com
www.liberty-rider.com
roadbook-api.liberty-rider.com
app.beta.fund
forest-admin-api-production.liberty-rider.com
liberty-rider.com
staging.goldwing.liberty-rider.com
dev-pr.infinitydoctors.com
jobs.liberty-rider.com
staging.track-api.liberty-rider.com
api.e2e.agency
cdn.liberty-rider.com
api.liberty-rider.com
forest-admin-api.liberty-rider.com
staging.api.liberty-rider.com
auth.testnet.gamecredits.org
volks.teuestoque.com.br
help.liberty-rider.com
jobs.liberty-rider.com
www.liberty-rider.com
dev2.liberty-rider.com
staging.angel-api.liberty-rider.com
admin.starsanswer.com
www.muchon.co.kr
app.liberty-rider.com
medscienceanimations.com
api.liberty-rider.com
simplest.co.il
jobs.liberty-rider.com
boho.ekanek.app
dev.liberty-rider.com
www.liberty-rider.com
staging.track-api.liberty-rider.com
staging.root-origin.liberty-rider.com
api.liberty-rider.com
root-origin.liberty-rider.com
www.tracovid-19.ml
staging.api.liberty-rider.com
staging.cloudfront.liberty-rider.com
www.liberty-rider.com
wordpress.liberty-rider.com
reps.fabrictent.com
app.montera.io
expert.gardencompass.com
staging.ecall.liberty-rider.com
liberty-rider.com
www.hgs-ltd.com
jobs.liberty-rider.com
liberty-rider.fr
covid19safe.es
staging.app.liberty-rider.com
ssh-keys.online
maps-cloudfront.liberty-rider.com
jobs.liberty-rider.com
resume.christiannaths.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
www.liberty-rider.com
help.liberty-rider.com
staging.liberty-rider.com
api.liberty-rider.com
liberty-rider.com
www.iceberg-technology.com
forest-admin-api-staging.liberty-rider.com
dev2.liberty-rider.com
roadbook-api.liberty-rider.com
dev.liberty-rider.com
macif.liberty-rider.com
jobs.liberty-rider.com
ride.liberty-rider.com
shop.liberty-rider.com
dev.liberty-rider.com
staging.api.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
staging.ecall.liberty-rider.com
Certificate
The complete raw certificate details for staging.liberty-rider.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEZjCCA06gAwIBAgIQCm6mmkfrmGbuQvi4C3s09TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNzEwMTEwMDAwMDBaFw0xODExMTEx MjAwMDBaMCQxIjAgBgNVBAMTGXN0YWdpbmcubGliZXJ0eS1yaWRlci5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgcyweIbVWJMBC9EoEjk7MBte v1+uz00Zj/2jEusj5+Fp4cfWECbHShpm6w05e/fK4S+bQ6m5Q61eBzHaNvSj2bxF 19FuQrnjCUOpcu8n49r04aj2TpwY5lAOzAZgdxS0P09cLtq2MozE3WXxQKN0GxWl xqx7SCKyt76p6PP+gTZ2om0WlVsG+SpsWuU/A5s8uxRPS9MII7inT0WgmEsuWgVZ D7twvPxpPtbNfatpOewKDcB0kdBqf+6cmFsAcztSTTQnNdxq2j1jIoVgx8Dvu2xG eWdUbe8Ursj2WnNOcaagIhEPOLVsxW16aERqWPjrfSGG0aKOtCdS2ji7v8QJAgMB AAGjggFwMIIBbDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNV HQ4EFgQUYlETKZ6UENKP3VLqJr8diSyI2u4wJAYDVR0RBB0wG4IZc3RhZ2luZy5s aWJlcnR5LXJpZGVyLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2Nh MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDATBgNVHSAEDDAKMAgGBmeBDAEC ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFi LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcN AQELBQADggEBAJUX1Picm0XH36ks1Dktmo9FfxThQFYN49ZKbIstu4lYzW6t+4aI 0IHcgGTpEJPz8lEDxhbuw/h50g9UYFEgmwlGgj2BDk3SSy47ldLzu0arXT94/180 4w2JjRq6UUA9umA4+vvozLRn/8mEaKY+AZDx6iiyNJmQV9HXbKALMd94mruQHus2 OG2TPMF/3zXyJGDDHlFoDrKDuqKLDPflS5Mv7pDD4FJ2RJ0JnPUtgGsd+/4j4Dyd b7A47HFhNUEODzPbCOUmWohYdiI4zzKdBji4x0o+J4zvZVCF3tvCKwFh8OqFrKsT z1kXi/dzNTm/9Ivsab2sXJVUxyoSmgW/c+w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIHMsHiG1ViTAQvRKBI5 OzAbXr9frs9NGY/9oxLrI+fhaeHH1hAmx0oaZusNOXv3yuEvm0OpuUOtXgcx2jb0 o9m8RdfRbkK54wlDqXLvJ+Pa9OGo9k6cGOZQDswGYHcUtD9PXC7atjKMxN1l8UCj dBsVpcase0gisre+qejz/oE2dqJtFpVbBvkqbFrlPwObPLsUT0vTCCO4p09FoJhL LloFWQ+7cLz8aT7WzX2raTnsCg3AdJHQan/unJhbAHM7Uk00JzXcato9YyKFYMfA 77tsRnlnVG3vFK7I9lpzTnGmoCIRDzi1bMVtemhEalj4630hhtGijrQnUto4u7/E CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13866811715677476105541577487301686517 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-11 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.liberty-rider.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19757182127110092568108640187831604345848864325194469884184220831594256230846119127737492229994341742134949040507358345422869265309654454523889326653917658350299042381791889690189952371869306745403278579881962980251787374793502801441523818094984526405390834332267623209523200362820237420176485311281808226788793974295489012506947185287204649679880257499250840028000291994826902801946390171289046925453734859857778701651275040543673100846756028175079593002530711005352659346519784054296591919077012552620499311519493344369237804734965161427129419794960230066000127529947721743570949501887198451942623196885867936334857 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 625113299e9410d28fdd52ea26bf1d892c88daee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.liberty-rider.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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