graphs.sharedservices.aws-usw2.hawaiianair.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:78:e0:42:34:a7:20:39:85:1a:ae:20:d7:38:e7:bf was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=graphs.sharedservices.aws-usw2.hawaiianair.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:78:e0:42:34:a7:20:39:85:1a:ae:20:d7:38:e7:bf
Serial Number (int): 19236816069118208751066824250087761855
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2b:a9:40:11:42:13:76:de:cd:37:2f:7f:d4:4b:d7:0d:fd:cd:08:3e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f1:b6:b0:e8:e9:94:a7:f9:50:44:e1:50:cd:75:21:15:5e:6f:8a:3a
Fingerprint (sha256): 16:07:c3:f7:0d:6a:21:3e:5c:30:41:ea:85:3d:53:ae:ca:e6:8f:b2:c6:32:4c:e1:f2:01:5c:a6:7b:63:46:e3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate graphs.sharedservices.aws-usw2.hawaiianair.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for graphs.sharedservices.aws-usw2.hawaiianair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

graphs.sharedservices.aws-usw2.hawaiianair.com

Other certificates including the domain name hawaiianair.com

(limited to 100 certificates)
VPN2.HAWAIIANAIR.COM
Manuals.hawaiianair.com
bdmdev.hawaiianair.com
web-users-spa-d1.prod.aws-usw2.hawaiianair.com
favacbid.hawaiianair.com
bfly.hawaiianair.com
sstats.hawaiianair.com
traxtstwebint.hawaiianair.com
favacbid.hawaiianair.com
feweb.hawaiianair.com
trax-taskcontrol-lab-v3-d99.dev.aws-usw2.hawaiianair.com
timeclk.hawaiianair.com
cargo.hawaiianair.com
trax-taskcontrol-prd-v3-d1.prod.aws-usw2.hawaiianair.com
rt-chad-roster-d1.dev.aws-usw2.hawaiianair.com
efg-v1-d2-transfer-web.dev.aws-usw2.hawaiianair.com
mongo-ods-db-1-dev-v3.1.dev.aws-usw2.hawaiianair.com
gy-vault.dev.aws-usw2.hawaiianair.com
ACSADMIN.HAWAIIANAIR.COM
bdmdev.hawaiianair.com
www.hawaiianairlines.com
consul-v5-d1.sharedservices.aws-usw2.hawaiianair.com
ifs.hawaiianair.com
VPN.hawaiianair.com
mongo-ods-db-1-dev-v3.1.dev.aws-usw2.hawaiianair.com
consul-v2-d2.dev.aws-usw2.hawaiianair.com
mongo-ods-db-1-prod-v3.1.prod.aws-usw2.hawaiianair.com
consul-v3-d3.dev.aws-usw2.hawaiianair.com
hapadmin.hawaiianair.com
www.hawaiianairlines.com
vault-v2-d2.stable-dev.aws-usw2.hawaiianair.com
trx-mc-uat.test.aws-usw2.hawaiianair.com
eks-chad-d0.dev.aws-usw2.hawaiianair.com
m.hawaiianairlines.com
consul-v2-d1.dev.aws-usw2.hawaiianair.com
forgotpassword.hawaiianair.com
psfs.hawaiianair.com
akaops.hawaiianair.com
www.hawaiianairlines.com
MCWEB.HAWAIIANAIR.COM
realtime-ogg-web-d1.test.aws-usw2.hawaiianair.com
pa3050.hawaiianair.com
Hart.hawaiianair.com
acsadmin.hawaiianair.com
www.hawaiianair.com
acs.hawaiianair.com
mongo-ods-backup-1-prod-v3.1.prod.aws-usw2.hawaiianair.com
consul-v3-d3.dev.aws-usw2.hawaiianair.com
Webapps.hawaiianair.com
graphs.dev.aws-usw2.hawaiianair.com
mongo-ods-opsmgr-2-prod-v3.1.prod.aws-usw2.hawaiianair.com
bamboo-v2-d99.dev.aws-usw2.hawaiianair.com
access.hawaiianair.com
dirweb.hawaiianair.com
dirweb.hawaiianair.com
mongo-ods-db-2-test-v3.1.test.aws-usw2.hawaiianair.com
www.hawaiianairlines.com
hapadmin.hawaiianair.com
trx-mc-lab-d1.dev.aws-usw2.hawaiianair.com
vault-v2-d3.dev.aws-usw2.hawaiianair.com
credential-manager-v5-d89.dev.aws-usw2.hawaiianair.com
forgotpassword.hawaiianair.com
dev.aws-usw2.hawaiianair.com
timeclk.hawaiianair.com
ws2.hawaiianair.com
lyncdirweb.hawaiianair.com
consul-v3-d1.dev.aws-usw2.hawaiianair.com
eks-prd-v7-d1.prod.aws-usw2.hawaiianair.com
me.hawaiianair.com
mongo-ods-opsmgr-1-test-v3.1.test.aws-usw2.hawaiianair.com
bamboo.hawaiianair.com
apps.hawaiianair.com
mongo-ods-db-3-prod-v3.1.prod.aws-usw2.hawaiianair.com
trx-mc-trn-d1.dev.aws-usw2.hawaiianair.com
bdmprod.hawaiianair.com
consul-v3-d3.dev.aws-usw2.hawaiianair.com
dirweb.hawaiianair.com
consul-v3-d1.dev.aws-usw2.hawaiianair.com
haflighttest.hawaiianair.com
mongo-ods-backup-1-test-v3.1.test.aws-usw2.hawaiianair.com
graphs.sharedservices.aws-usw2.hawaiianair.com
appdeploy255-lab-blue.dev.aws-usw2.hawaiianair.com
ifsadmin.hawaiianair.com
consul.dev.aws-usw2.hawaiianair.com
iro-lab-v1-d99.dev.aws-usw2.hawaiianair.com
consul-v2-d1.stable-dev.aws-usw2.hawaiianair.com
email.hawaiianair.com
Webapps.hawaiianair.com
ctweb.hawaiianair.com
tm-vault-v2-d1.dev.aws-usw2.hawaiianair.com
mongo-ods-appdb-2-prod-v3.1.prod.aws-usw2.hawaiianair.com
realtime-bis-d1.dev.aws-usw2.hawaiianair.com
efg-v1-d11-transfer-web.dev.aws-usw2.hawaiianair.com
lyncwebext03.hawaiianair.com
realtime-oggroster1d1.dev.aws-usw2.hawaiianair.com
thanos-v1-d99.dev.aws-usw2.hawaiianair.com
fs.hawaiianair.com
Webapps.hawaiianair.com
eks-tst-v7-d1.test.aws-usw2.hawaiianair.com
timeclk.hawaiianair.com

Certificate

The complete raw certificate details for graphs.sharedservices.aws-usw2.hawaiianair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIQDnjgQjSnIDmFGq4g1zjnvzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MDcwMDAwMDBaFw0yMTA1MDcx
MjAwMDBaMDkxNzA1BgNVBAMTLmdyYXBocy5zaGFyZWRzZXJ2aWNlcy5hd3MtdXN3
Mi5oYXdhaWlhbmFpci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDs4EYvjkTPEkO2NKj9xXvsg5BnRmt1sqOg5rJOfZs4vka7vmQ0XW/X1RYjFWnd
lg8xmYM7hw+7eyDT4HkQ8D4Gwn6VtYpWl+9LZvDwVOmQNzoepNLYaKA2++OLkMqB
ifXvtCSBPFVK9NYKT1S8JPSkoBOrmFdHkquxjj2IGfpJ5vuRaxEkzHi7IT0qo/hJ
J80UXWZVLEybJwUYSbl1xvY3wTNnd0uS3y2pXz6rHQvM1pCnSamMh7tSrq2/6WmN
yuWkmxyohRRf3EEhLJAIoXbUBhFSW98wDEAmPNFFQ8eq6qMzEROhCaiPSl1ROoWN
MqjKFCjb2/zu2LIEqG2W5DDBAgMBAAGjggGnMIIBozAfBgNVHSMEGDAWgBRZpGYG
UqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUK6lAEUITdt7NNy9/1EvXDf3NCD4w
OQYDVR0RBDIwMIIuZ3JhcGhzLnNoYXJlZHNlcnZpY2VzLmF3cy11c3cyLmhhd2Fp
aWFuYWlyLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h
em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI
BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz
cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVXCfTXAAuP9vq
3+stF7jxIm0o4yOvmMwFS5905qMm+X0kGWGstQ0axgpWSPNxleNjtz638GLYrT+P
cAnDGRUWjHFgvUWbPECZyVE2CNlzORPzv5clmUxtl+drgXoKLqpK1PAfikOMmWRu
XBAgc3mEKJqhBMxER46ZQpJd9vHUkTjNIorlkvYqIzaHeU7F7NcBT2TNudbgOam3
3/9Xsts1UDsYnuB9wvX7SfGFCvX9C++FukqEQW72NO/VLnrB5PuinFp3Unka4KcR
nSSLWKWBAjWyjLKLnYF22R3fvFSvnWgwuPzspdzTcOddynf76htsWdhQRYdFSMvH
dvm05O0n
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OBGL45EzxJDtjSo/cV7
7IOQZ0ZrdbKjoOayTn2bOL5Gu75kNF1v19UWIxVp3ZYPMZmDO4cPu3sg0+B5EPA+
BsJ+lbWKVpfvS2bw8FTpkDc6HqTS2GigNvvji5DKgYn177QkgTxVSvTWCk9UvCT0
pKATq5hXR5KrsY49iBn6Seb7kWsRJMx4uyE9KqP4SSfNFF1mVSxMmycFGEm5dcb2
N8EzZ3dLkt8tqV8+qx0LzNaQp0mpjIe7Uq6tv+lpjcrlpJscqIUUX9xBISyQCKF2
1AYRUlvfMAxAJjzRRUPHquqjMxEToQmoj0pdUTqFjTKoyhQo29v87tiyBKhtluQw
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19236816069118208751066824250087761855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'graphs.sharedservices.aws-usw2.hawaiianair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29902833683719715189399798162151824779799692304712388065926020593877170789444219748152545341227191532999355821144149998564949249457444219185076400783643203092446378161508561220873983186371529109939858781854534030369081720476561051748447248344281665433193369592350619769568080666285277696361229366477829923853430754582122536714757352270963056697439273000225015333015569615214225350930568793385123652499570941616390179399260484443267372869168502249191836215987543361928191622268466811625299616768753487401607156987815317742938211746142417193576037720284153981924379924696302462811660186186047557180273864094416430706881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ba94011421376decd372f7fd44bd70dfdcd083e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphs.sharedservices.aws-usw2.hawaiianair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00555c27d35c002e3fdbeadfeb2d17b8f1226d28e323af98cc054b9f74e6a326f97d241961acb50d1ac60a5648f37195e363b73eb7f062d8ad3f8f7009c31915168c7160bd459b3c4099c9513608d9733913f3bf9725994c6d97e76b817a0a2eaa4ad4f01f8a438c99646e5c1020737984289aa104cc44478e9942925df6f1d49138cd228ae592f62a233687794ec5ecd7014f64cdb9d6e039a9b7dfff57b2db35503b189ee07dc2f5fb49f1850af5fd0bef85ba4a84416ef634efd52e7ac1e4fba29c5a7752791ae0a7119d248b58a5810235b28cb28b9d8176d91ddfbc54af9d6830b8fceca5dcd370e75dca77fbea1b6c59d85045874548cbc776f9b4e4ed27