twitch.amazon.eu

Issued by Amazon

About this certificate

This digital certificate with serial number 07:a2:72:4e:86:3b:0f:75:9f:5c:74:de:f8:7d:e1:23 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=twitch.amazon.eu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:a2:72:4e:86:3b:0f:75:9f:5c:74:de:f8:7d:e1:23
Serial Number (int): 10148066477610936533862235760383353123
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: de:58:87:0a:d1:3f:3e:92:d1:a9:2a:df:60:61:27:b5:94:36:94:dc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f8:bb:32:65:8c:58:4e:26:87:48:32:0c:bc:0f:29:8f:eb:01:8b:a6
Fingerprint (sha256): 17:aa:0f:0f:ac:9d:9b:1f:a0:f7:48:b7:8d:1b:de:c1:40:ea:a8:d5:11:b8:c9:f5:1f:32:48:33:24:22:8b:ba

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate twitch.amazon.eu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twitch.amazon.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twitch.amazon.eu
twitch.amazon.de
twitch.amazon.es
twitch.amazon.fr
twitch.amazon.it
twitch.amazon.co.uk
twitch.amazon.ae
twitch.amazon.in

Other certificates including the domain name amazon.eu

(limited to 100 certificates)
sdu.amazon.eu
pay-api.amazon.eu
sdu.amazon.eu
prime.amazon.eu
luna.amazon.eu
webservices.amazon.eu
chat.amazon.eu
freight.amazon.co.uk
vendorexpress.amazon.eu
sdu.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
gaming.amazon.eu
music-xray-service.amazon.eu
twitch.amazon.eu
vendorcentral.amazon.eu
vendorexpress.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
www.amazon.eu
sdu.amazon.eu
twitch.amazon.eu
dolphin-preprod.amazon.eu
music-xray-service.amazon.eu
prime.amazon.eu
ab.amazon.eu
pay-api.amazon.eu
digprjsurvey.amazon.eu
digital-music-delivery.amazon.eu
vendorcentral-prod.amazon.com
vat-assist.amazon.eu
sdu.amazon.eu
relay.amazon.eu
vendorcentral-prod.amazon.com
prime.amazon.eu
mlis.amazon.eu
www.amazon.eu
music-xray-service.amazon.eu
webservices.amazon.eu
freight.amazon.eu
pay.amazon.eu
pay.amazon.eu
twitch.amazon.eu
sellercentral.amazon.eu
twitch.amazon.eu
xb-node-report.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
chat.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
vat-assist-beta.amazon.eu
vendorcentral-prod.amazon.com
sdu.amazon.eu
dcp.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
pay.amazon.eu
webservices.amazon.eu
credential-locker-service.amazon.eu
gaming.amazon.eu
www.amazon.eu
vendorcentral-prod.amazon.com
digital-music-delivery.amazon.eu
freight.amazon.co.uk
pay.amazon.eu
carriercentral.amazon.eu
vendorcentral.amazon.eu
gaming.amazon.eu
dolphin-preprod.amazon.eu
poweredby.amazon.de
push.amazon.eu
twitch.amazon.eu
twitch.amazon.eu
photos.amazon.eu
webservices.amazon.eu
storepickup.amazon.eu
prime.amazon.eu
chat.amazon.eu
www.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
vendorcentral.amazon.com
dcp.amazon.eu
rtn.amazon.eu
klite-services.amazon.eu
www.amazon.eu
webservices.amazon.eu
www.amazon.eu
luna.amazon.eu
api.relay.amazon.eu
sellercentral.amazon.eu
dcp.amazon.eu
webservices.amazon.eu
www.amazon.eu
amcentral.amazon.eu
photos.amazon.eu
luna.amazon.eu

Certificate

The complete raw certificate details for twitch.amazon.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgIQB6JyToY7D3WfXHTe+H3hIzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMTcwMDAwMDBaFw0yMTAxMTcx
MjAwMDBaMBsxGTAXBgNVBAMTEHR3aXRjaC5hbWF6b24uZXUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCs29ykl4Jwe8TB62lSOCggkxXr+gisaTQMBDMi
lMVS9vY9wFtlygDp9wSM+rFK5ZEoN4wL5MoKsoXDiFbid5o/ferXgr54A9rUF2IK
+P4PdneBf4ium2jxJtyeU+0gBygmX7CXy9f8xdW+SNjuOODRcES5b4LSBC0kXQgB
IIbUSdmXF4wa3Ublnm/p3rq02rtggRR0XQTs5wOflkz/p6MMngzxasO61P73IUKD
3Kf5ititoeel801JVkCQ6YyWQKt6iD7Lv4j5o/sv2lqi5haR71TqbnSicEEXfX1z
Y6uSfQiwzK32sLeMDKlBIgYmfsniIa8CrKEqOu2Z64OXXXmlAgMBAAGjggMCMIIC
/jAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU3liH
CtE/PpLRqSrfYGEntZQ2lNwwgZ4GA1UdEQSBljCBk4IQdHdpdGNoLmFtYXpvbi5l
dYIQdHdpdGNoLmFtYXpvbi5kZYIQdHdpdGNoLmFtYXpvbi5lc4IQdHdpdGNoLmFt
YXpvbi5mcoIQdHdpdGNoLmFtYXpvbi5pdIITdHdpdGNoLmFtYXpvbi5jby51a4IQ
dHdpdGNoLmFtYXpvbi5hZYIQdHdpdGNoLmFtYXpvbi5pbjAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu
oCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAg
BgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBn
MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20w
NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3Nj
YTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA
pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFvs1zd1AAABAMASDBG
AiEAn8t7HigH0MulxdkXNKGpIfNnJ9MgR8L18K1rKc83N8QCIQC/5k/8zVSDGr6y
Kyb4exUm+5WsiqDXK6ugmD4IvkEQ8AB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1
YMG06v9eoIMPAAABb7Nc3msAAAQDAEgwRgIhAIOeTeBjBwL5iYauvJbQ0+CeX55y
HjTcX/CQ35BuWlVQAiEA6TpV+l+WT2uQAiEC/cWXq90mVKrfIyFnkCS311oNSwIw
DQYJKoZIhvcNAQELBQADggEBALdr7RXYINGRGMKffJ1HqLRCj2hFRwT5KWXy34/2
k1gptN1NqkX8FZbdgb+VGd5nah5YMUOnvZuV/JI8txcU73emqj7UNt/QjvMKs64f
1qZ85m87Sqhz92iW2WfXr+ji8XaISaD2pX/BTkR54nom3Z4hdwu/DBWa63sj69bm
esEy4KB3/L6i2GtqATCBmolo7Wz4a54UMphB7vhIdlzbmlisGQ/rYi0E0UA/MKCb
yjlMPuCruETCVuQjhuWnXeES5eqMCK4v5ASC97u7gHIeC/Sqhn5zLfhubR6wSMZn
ReDXuPYmv89yzW4Eji1UlWlPAm2t4gU2kF1+Y2Hv1Rassl4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNvcpJeCcHvEwetpUjgo
IJMV6/oIrGk0DAQzIpTFUvb2PcBbZcoA6fcEjPqxSuWRKDeMC+TKCrKFw4hW4nea
P33q14K+eAPa1BdiCvj+D3Z3gX+Irpto8SbcnlPtIAcoJl+wl8vX/MXVvkjY7jjg
0XBEuW+C0gQtJF0IASCG1EnZlxeMGt1G5Z5v6d66tNq7YIEUdF0E7OcDn5ZM/6ej
DJ4M8WrDutT+9yFCg9yn+YrYraHnpfNNSVZAkOmMlkCreog+y7+I+aP7L9paouYW
ke9U6m50onBBF319c2Orkn0IsMyt9rC3jAypQSIGJn7J4iGvAqyhKjrtmeuDl115
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10148066477610936533862235760383353123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twitch.amazon.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21821406391173314000163112495561441609957661350760009741354409432681627677408931624580816256541855120341913620262886580885545315816127900679552643738803135242745018956906943169789405568010440540073407856653663738386828242903212155278825616425017247131921760820889019111244957933877074493272799838628466723154131294039930235164451339564872315136780028042355808799534059901306816102665431671036747785122923170134099024004658814059724951536317138427569975541847704737522221418705220195747330417631943260187624389897469098986727857080927342291634547351591686275776244714307720882220962413081139215011156059289534966102437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de58870ad13f3e92d1a92adf606127b5943694dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016fb35cddd400000403004830460221009fcb7b1e2807d0cba5c5d91734a1a921f36727d32047c2f5f0ad6b29cf3737c4022100bfe64ffccd54831abeb22b26f87b1526fb95ac8aa0d72baba0983e08be4110f00077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016fb35cde6b0000040300483046022100839e4de0630702f98986aebc96d0d3e09e5f9e721e34dc5ff090df906e5a5550022100e93a55fa5f964f6b90022102fdc597abdd2654aadf2321679024b7d75a0d4b02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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