sslcertificate2.queue-it.net

Issued by Amazon

About this certificate

This digital certificate with serial number 06:23:89:f9:47:79:1f:6d:6d:67:bf:32:d2:99:33:26 was issued on by Amazon.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sslcertificate2.queue-it.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:23:89:f9:47:79:1f:6d:6d:67:bf:32:d2:99:33:26
Serial Number (int): 8159896804806244668517974199754109734
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:e9:3d:18:9c:44:54:c9:b6:4d:c1:8a:e5:38:7d:69:8c:5c:23:c3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 15:29:39:da:e1:3e:25:74:97:3d:9e:fd:f7:66:09:df:47:41:c4:7b
Fingerprint (sha256): 16:df:e5:c0:2d:54:7f:e8:da:49:35:82:dc:6b:dd:42:2d:c5:4c:d8:80:d9:f3:02:93:90:18:57:2c:5e:c9:f6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate sslcertificate2.queue-it.net

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sslcertificate2.queue-it.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sslcertificate2.queue-it.net
queue.smtickets.com
queue.hkairportshop.com
queue.fairphone.com
queue.amctheatres.com
queue.uhuu.com
q.axs.nu
queue.fanfares.cathaypacific.com
line.universe.com
waiting.seaworldparks.com
virtualcorral.nyrr.org
wait.loud-project.com
dragoiscoming.tieks.com
suturno.jccm.es
gov10k.hangseng.com
queue.sky.ch
queue.hakuapp.com
queue.hlg.uhuu.com
harrypotterqueue.travelcircus.de
queue.stage.amctheatres.com
queue.tkt.ge
queue.ticketarena.co.uk
queue.ticketania.com
queue.scandlines.com
stg-queue.hakuapp.com
wait.fenty.com
getinline.ticketfairy.com
queue.atgtickets.com
queue.three.co.uk
storequeue.wizards.com
go.aspiraconnect.com
wait.thepga.com

Other certificates including the domain name queue-it.net

(limited to 100 certificates)
sslcertificate3.queue-it.net
*.test.queue-it.net
hd-dtc.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net

sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate4.queue-it.net
sslcertificate4.queue-it.net
sslcertificate1.queue-it.net
go.test.queue-it.net
sslcertificate1.test.queue-it.net
tomo.okos.uno

sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sa-east-1-logging.test.queue-it.net
*.test.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net

api2.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net

sslcertificate4.queue-it.net
*.test.queue-it.net
vpn.test.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net
api2.test.queue-it.net
api2.test.queue-it.net
sslcertificate1.queue-it.net
www.queue-it.net
sslcertificate4.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
electronicarts.queue-it.net
go.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net
sslcertificate1.queue-it.net
go.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.test.queue-it.net
sslcertificate3.queue-it.net
portal.childrens-mercy.darivault.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
sslcertificate4.queue-it.net
*.queue-it.net
sslcertificate1.queue-it.net
*.queue-it.net
go.queue-it.net
api2.queue-it.net


sslcertificate2.queue-it.net
sslcertificate3.queue-it.net
*.test.queue-it.net
api2.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
sslcertificate1.queue-it.net
sslcertificate5.queue-it.net
*.test.queue-it.net
api2.queue-it.net
sslcertificate2.queue-it.net
*.queue-it.net
cf.go.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate4.queue-it.net
vpn.test.queue-it.net
*.test.queue-it.net
sslcertificate1.test.queue-it.net
go.queue-it.net
*.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.queue-it.net
sslcertificate2.queue-it.net
wazuh.internal.queue-it.net
api2.test.queue-it.net
herning.citytilbud.dk
sslcertificate5.queue-it.net
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate2.queue-it.net

api2.queue-it.net
sslcertificate2.queue-it.net
*.queue-it.net

Certificate

The complete raw certificate details for sslcertificate2.queue-it.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIKTCCBxGgAwIBAgIQBiOJ+Ud5H21tZ78y0pkzJjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA5MDgwMDAwMDBaFw0yMTEwMDgx
MjAwMDBaMCcxJTAjBgNVBAMTHHNzbGNlcnRpZmljYXRlMi5xdWV1ZS1pdC5uZXQw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6s2XyociuIvCmj6Ascu3P
l7QKR0Cs0Xd1WE8l5s7h5nWMx5hVYBYJi6/WUNo3DjNeuhc2sicGqP+UVp+71TWB
UcOAF91bY2ueRQPcrJst4wp9Q1L43T0LTDxIgxfqgXduI00eWvea9Pqw/Z3XuAgy
2RyJ80Xpt5a/I6hBGAnGxrFdweE6eGqB2unHPTjfUaNM9Z4n6LVzqGBa7LxRDmcA
CqC6TQNiGjD214nI6YBLGyewABw2161kGUgVjyJOu00q9y75tONwrkpppbzI4miw
G6spZ5c4FunOPk0FQrMR5+3G8m5PStQgdvl9N7GO7VEliMxIrki88erzj3rNj4pJ
AgMBAAGjggUwMIIFLDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAd
BgNVHQ4EFgQU/+k9GJxEVMm2TcGK5Th9aYxcI8MwggLOBgNVHREEggLFMIICwYIc
c3NsY2VydGlmaWNhdGUyLnF1ZXVlLWl0Lm5ldIITcXVldWUuc210aWNrZXRzLmNv
bYIXcXVldWUuaGthaXJwb3J0c2hvcC5jb22CE3F1ZXVlLmZhaXJwaG9uZS5jb22C
FXF1ZXVlLmFtY3RoZWF0cmVzLmNvbYIOcXVldWUudWh1dS5jb22CCHEuYXhzLm51
giBxdWV1ZS5mYW5mYXJlcy5jYXRoYXlwYWNpZmljLmNvbYIRbGluZS51bml2ZXJz
ZS5jb22CGXdhaXRpbmcuc2Vhd29ybGRwYXJrcy5jb22CFnZpcnR1YWxjb3JyYWwu
bnlyci5vcmeCFXdhaXQubG91ZC1wcm9qZWN0LmNvbYIXZHJhZ29pc2NvbWluZy50
aWVrcy5jb22CD3N1dHVybm8uamNjbS5lc4ITZ292MTBrLmhhbmdzZW5nLmNvbYIM
cXVldWUuc2t5LmNoghFxdWV1ZS5oYWt1YXBwLmNvbYIScXVldWUuaGxnLnVodXUu
Y29tgiBoYXJyeXBvdHRlcnF1ZXVlLnRyYXZlbGNpcmN1cy5kZYIbcXVldWUuc3Rh
Z2UuYW1jdGhlYXRyZXMuY29tggxxdWV1ZS50a3QuZ2WCF3F1ZXVlLnRpY2tldGFy
ZW5hLmNvLnVrghRxdWV1ZS50aWNrZXRhbmlhLmNvbYIUcXVldWUuc2NhbmRsaW5l
cy5jb22CFXN0Zy1xdWV1ZS5oYWt1YXBwLmNvbYIOd2FpdC5mZW50eS5jb22CGWdl
dGlubGluZS50aWNrZXRmYWlyeS5jb22CFHF1ZXVlLmF0Z3RpY2tldHMuY29tghFx
dWV1ZS50aHJlZS5jby51a4IWc3RvcmVxdWV1ZS53aXphcmRzLmNvbYIUZ28uYXNw
aXJhY29ubmVjdC5jb22CD3dhaXQudGhlcGdhLmNvbTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyG
Kmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNV
HSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G
CCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYI
KwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAfT7y
+I//iFVoJMLAyp5SiXkrxQ54CX8uapdomX4i8NcAAAF0bKrt4AAABAMARzBFAiEA
5EShYa4cekudWMPNy+JDHkIvb+FICxrP+kR0isOZRFACIGfb5Bc9DgQw8jlxzLgm
EfjgU9NxXcg1eO8Tys9mEuEaAHUAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe
5vbHDsoAAAF0bKrtgQAABAMARjBEAiAw1VyGXoxkVHem8Sqp0Z9SQyqBMt4vt5xx
fGZr3Ln8oQIgE0K/3bTZ0X8P68+vAJFnhDkrWcrYu0hy3vAzMmNY8yowDQYJKoZI
hvcNAQELBQADggEBAFhQTfc45B3MJp8pyU6jT5LfkEtudlyu17QK5PxF9TTYnavV
RP9UyASJxY+k5iwcjQ3fQMdxE22/YRwrHCxcS/5NvssiFpdXXHZ+mprpBaYRQsTb
q/zyIqyqiuMgN9gyNSFK20ipIH/lFd3A2OK7X2nAy1DP/Eyi8Ca/1gwKuTEZ7uz3
2XiCWrKII2udMMK28xE+5AGJobe+nY5oaxsxpGh47EuMIiV1T//XV0YtbvwWMPOz
QxeDkCbB5dO4V6y4XPEeBtqUnewjVtbXWF3noiLpd4izlvfEZf0DfR/oYcTTq+dE
d1B0Lo10no/Q8t4Eehcyn7sUBLZDC7P0E3gvMEU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurNl8qHIriLwpo+gLHLt
z5e0CkdArNF3dVhPJebO4eZ1jMeYVWAWCYuv1lDaNw4zXroXNrInBqj/lFafu9U1
gVHDgBfdW2NrnkUD3KybLeMKfUNS+N09C0w8SIMX6oF3biNNHlr3mvT6sP2d17gI
MtkcifNF6beWvyOoQRgJxsaxXcHhOnhqgdrpxz0431GjTPWeJ+i1c6hgWuy8UQ5n
AAqguk0DYhow9teJyOmASxsnsAAcNtetZBlIFY8iTrtNKvcu+bTjcK5KaaW8yOJo
sBurKWeXOBbpzj5NBUKzEeftxvJuT0rUIHb5fTexju1RJYjMSK5IvPHq8496zY+K
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8159896804806244668517974199754109734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sslcertificate2.queue-it.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23568789289755158319035133582350178257119322252025838016951883156282582241665616826279297924575561559186062090273207074745919310009046350600889778537099535842122343827619516375042476862248806412937736838734111918084017867228732986483920803704842006147018758882006705331754982578366177268383272180043417597970887294211710258753567643921354787880627169175229718726316129037564070849251264039993158832584712496715401759481596175690668322929017509535561660589740900679118332598871498343809120099853027656200122167559923435768650704672447915883401141562876271518010309303562921564719282578602876220387718579387983157234249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffe93d189c4454c9b64dc18ae5387d698c5c23c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (709 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslcertificate2.queue-it.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.smtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hkairportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.fairphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.amctheatres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.uhuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.axs.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.fanfares.cathaypacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'line.universe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiting.seaworldparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualcorral.nyrr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.loud-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragoiscoming.tieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suturno.jccm.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gov10k.hangseng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.sky.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hakuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hlg.uhuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotterqueue.travelcircus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.stage.amctheatres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.tkt.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketarena.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.scandlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-queue.hakuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.fenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinline.ticketfairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.atgtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.three.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storequeue.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.aspiraconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.thepga.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001746caaede00000040300473045022100e444a161ae1c7a4b9d58c3cdcbe2431e422f6fe1480b1acffa44748ac3994450022067dbe4173d0e0430f23971ccb82611f8e053d3715dc83578ef13cacf6612e11a0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001746caaed810000040300463044022030d55c865e8c645477a6f12aa9d19f52432a8132de2fb79c717c666bdcb9fca102201342bfddb4d9d17f0febcfaf00916784392b59cad8bb4872def033326358f32a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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