*.archant.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 09:18:f6:22:46:62:33:a7:6e:bb:4e:bc:1b:81:cb:51 was issued on by Amazon.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.archant.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:18:f6:22:46:62:33:a7:6e:bb:4e:bc:1b:81:cb:51
Serial Number (int): 12092659274971771862223097524631227217
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ef:9e:cb:91:72:44:ef:b1:45:38:c9:54:9d:48:f5:31:31:16:7e:ee
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d1:d5:a0:3a:29:f9:4e:4c:92:b4:c9:87:ae:e0:18:44:8e:94:a3:8e
Fingerprint (sha256): 17:bc:9f:77:ad:ad:a4:73:2a:e7:c5:c0:c2:2d:c1:c1:9b:3f:b5:af:f7:93:06:e5:ee:bc:f5:c5:d4:95:11:ad

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.archant.co.uk

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.archant.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.archant.co.uk
archant.co.uk
barkinganddagenhampost.co.uk
*.barkinganddagenhampost.co.uk
eadt.co.uk
*.eadt.co.uk
edp24.co.uk
*.edp24.co.uk
eveningnews24.co.uk
*.eveningnews24.co.uk
greatyarmouthmercury.co.uk
*.greatyarmouthmercury.co.uk
hackneygazette.co.uk
*.hackneygazette.co.uk
hertsad.co.uk
*.hertsad.co.uk
huntspost.co.uk
*.huntspost.co.uk
ilfordrecorder.co.uk
*.ilfordrecorder.co.uk
ipswichstar.co.uk
*.ipswichstar.co.uk
islingtongazette.co.uk
*.islingtongazette.co.uk
lowestoftjournal.co.uk
*.lowestoftjournal.co.uk
newhamrecorder.co.uk
*.newhamrecorder.co.uk
northdevongazette.co.uk
*.northdevongazette.co.uk
pinkun.com
*.pinkun.com
romfordrecorder.co.uk
*.romfordrecorder.co.uk
thecomet.net
*.thecomet.net
theneweuropean.co.uk
*.theneweuropean.co.uk
thewestonmercury.co.uk
*.thewestonmercury.co.uk
whtimes.co.uk
*.whtimes.co.uk

Other certificates including the domain name archant.co.uk

(limited to 100 certificates)
consent.archant.co.uk
comments.archant.co.uk
a02342.archant.co.uk
consent.northnorfolknews.cyan.archant.co.uk
as.adsoniris.com
consent.derehamtimes.cyan.archant.co.uk
*.barkinganddagenhampost.co.uk
*.airgunshooting.co.uk
consent.northdevongazette.cyan.archant.co.uk
archant.bynder.com
consent.edp24.magenta.archant.co.uk
consent.eadt.uat.archant.co.uk
hivefeed.archant.co.uk
consent.greatyarmouthmercury.uat.archant.co.uk
theneweuropean.co.uk
*.uat.archant.co.uk
consent.edp24.uat.archant.co.uk
images.passendo.com
comments.archant.co.uk
shows.archant.co.uk
*.shows.archant.co.uk
*.barkinganddagenhampost.co.uk
consent.eadt.uat.archant.co.uk
consent.eadt.uat.archant.co.uk
theneweuropean.co.uk
remote2.archant.co.uk
images.passendo.com
*.advertiser24.co.uk
advertisingdelivery.archant.co.uk
images.passendo.com
*.archant.co.uk
consent.pinkun.cyan.archant.co.uk
*.airgunshooting.co.uk
localrecall.archant.co.uk
consent.pinkun.cyan.archant.co.uk
theneweuropean.co.uk
consent.eveningnews24.uat.archant.co.uk
images.passendo.com
consent.pinkun.cyan.archant.co.uk
consent.northdevongazette.cyan.archant.co.uk
consent.greatyarmouthmercury.uat.archant.co.uk
consent.newhamrecorder.uat.archant.co.uk
consent.eadt.cyan.archant.co.uk
*.archant.co.uk
shows.archant.co.uk
*.tne.archant.co.uk
consent.greatyarmouthmercury.cyan.archant.co.uk
*.barkinganddagenhampost.co.uk
consent.cambstimes.cyan.archant.co.uk
archant.co.uk
consent.edp24.cyan.archant.co.uk
www.archant.co.uk
archant.co.uk
connectsocial.archant.co.uk
employeeselfservice.archant.co.uk
comments.archant.co.uk
theneweuropean.co.uk
consent.edp24.black.archant.co.uk
archant.co.uk
theneweuropean.co.uk
*.barkinganddagenhampost.co.uk
archant.co.uk
consent.archant.co.uk
*.barkinganddagenhampost.co.uk
consent.edp24.black.archant.co.uk
images.passendo.com
shows.archant.co.uk
archant.co.uk
images.passendo.com
archant.co.uk
*.archant.co.uk
images.passendo.com
a02342.archant.co.uk
consent-eng.brianmadden.com
consent.edp24.cyan.archant.co.uk
images.passendo.com
consent.romfordrecorder.uat.archant.co.uk
employeeselfservice.archant.co.uk
*.cyan.archant.co.uk
consent.exmouthjournal.magenta.archant.co.uk
staging.botserver.localrecall.archant.co.uk
remote.archant.co.uk
*.archant.co.uk
*.uat.archant.co.uk
access.archant.co.uk
consent.thecomet.uat.archant.co.uk
cses.localrecall.archant.co.uk
as.adsoniris.com
consent-eng.brianmadden.com
staging.botserver.localrecall.archant.co.uk
consent.ipswichstar.cyan.archant.co.uk
images.passendo.com
consent.huntspost.uat.archant.co.uk
archant.co.uk
consent.eadt.cyan.archant.co.uk
checkout.mywebsite.archant.co.uk
staging.bot.localrecall.archant.co.uk
consent.northdevongazette.uat.archant.co.uk
consent.northdevongazette.uat.archant.co.uk
*.archant.co.uk

Certificate

The complete raw certificate details for *.archant.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kq5XeJKNQSQqJMBEQr0
2e0hstGOjDlS8RMpi6dwZ9ub4J+jQawCJuQd2phhMI6qILU+BnZPe/Qst5mW6vOR
MPNMnilb1q1nx2xs0tJRYoqYaPjskAwQ3zIJZZpd6GzfOmMDprx7983USePNfskS
D+KKxcahmPqR348oVztaAwn/eIl5NVq0HW12u2wZ/H28f7+Lawz6QOrMb5jao1yT
zTAMXBUGtViLW4UMVmlYsL6VrKM4fJxGtJOVHd/uqZCFNVsfvbMmHP82CCFwHUpS
+5isQ/9ALcPFF0No3MYfAZLTVsijwmaCR92RF8/xQ2V3agrEL5L0V37gzw/iVCQT
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12092659274971771862223097524631227217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.archant.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26341754618829479471812320234308152405669099679221634921974291766269579055653853433094584489184971368325129748701132604566244009899367012103793607255222328026055932344183686140390876539060030898350520600457518070498211255536308561944534337331825909221907841090613870801689293290082504389445521833260125906359279289474550985965976829688625631298210435663884540713992036527686169644306365181448003815168516093032603729649337545458887712742943566634741746467629555185610700411796720153175300966789227777244619296784144144169337742178901625572014045782934719028880701381635257433452510361834367208852632768707415159083911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef9ecb917244efb14538c9549d48f53131167eee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archant.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barkinganddagenhampost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barkinganddagenhampost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatyarmouthmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatyarmouthmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntspost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huntspost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowestoftjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowestoftjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhamrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newhamrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecomet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecomet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theneweuropean.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theneweuropean.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whtimes.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000166e9447f8b000004030046304402207f43ec5f5863ab1d455ef511d903a911ba4cf0e78ad55dd51a70f68c0fb24522022062177cf994881dddccd6c8624a2790cdec140e10e6fb9464b1eeb750c10e519b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166e9447f65000004030047304502210089105dee7d9f5aeb20520c262600cf3d3b68821540c52cdffe302e7e6e6bbe7702206a33eecbeacfc543e28855047b4f4bc8f53338999da7e09eca9961cb96ca73fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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