r468.evo.co.uk
Issued by Amazon
About this certificate
This digital certificate with serial number 06:a9:dd:77:2e:b7:1e:c2:80:09:a9:54:c5:10:38:72 was issued on by Amazon.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=r468.evo.co.uk
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:a9:dd:77:2e:b7:1e:c2:80:09:a9:54:c5:10:38:72Serial Number (int): 8857357998933316458924640398098839666
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 9f:02:a8:ae:5d:e0:4e:80:f0:f1:96:7f:3e:fe:98:5b:ed:86:c1:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): b8:5c:3c:2a:d9:f5:2c:c7:ef:27:4c:f4:cf:a6:fd:8b:99:45:df:14
Fingerprint (sha256): 17:e6:84:9f:5d:11:d8:8c:a8:89:e6:d8:da:70:df:24:fa:bd:5d:59:02:72:83:23:fa:c5:16:6e:12:25:1b:12
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate r468.evo.co.uk
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for r468.evo.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
r468.evo.co.uk
u989.theweek.com
b915.carbuyer.co.uk
d096.theweek.co.uk
g314.kiplinger.com
c729.autoexpress.co.uk
u989.theweek.com
b915.carbuyer.co.uk
d096.theweek.co.uk
g314.kiplinger.com
c729.autoexpress.co.uk
Other certificates including the domain name evo.co.uk
(limited to 100 certificates)
www.pugpig.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s2-san.cloudinary.com
san-001.ceros.com
san-001.ceros.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
san-001.ceros.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
www.pugpig.com
s2-san.cloudinary.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
www.pugpig.com
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
derstandard-spat.derstandard.at
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
san-001.ceros.com
www.martechsocial.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
www.pugpig.com
san-001.ceros.com
subscription.theweek.co.uk
evo.co.uk
san-001.ceros.com
dns-vetting1j.map.fastly.net
san-001.ceros.com
z980.carthrottle.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
s2-san.cloudinary.com
auth.evo.co.uk
*.content.pugpig-dev.com
derstandard-spat.derstandard.at
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
mms.evo.co.uk
subscribe.evo.co.uk
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
san-001.ceros.com
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
s3-san.cloudinary.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
adspecs.dennis.co.uk
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
derstandard-spat.derstandard.at
auth.astonmagazine.co.uk
san-001.ceros.com
s3-san.cloudinary.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
s2-san.cloudinary.com
*.content.pugpig-dev.com
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s2-san.cloudinary.com
san-001.ceros.com
adspecs.dennis.co.uk
san-001.ceros.com
dns-vetting1.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s3-cloudinary-pin.map.fastly.net
l468.drivingelectric.com
www.pugpig.com
san-001.ceros.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
san-001.ceros.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s2-san.cloudinary.com
san-001.ceros.com
san-001.ceros.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
san-001.ceros.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
www.pugpig.com
s2-san.cloudinary.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
www.pugpig.com
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
derstandard-spat.derstandard.at
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
san-001.ceros.com
www.martechsocial.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
www.pugpig.com
san-001.ceros.com
subscription.theweek.co.uk
evo.co.uk
san-001.ceros.com
dns-vetting1j.map.fastly.net
san-001.ceros.com
z980.carthrottle.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
s2-san.cloudinary.com
auth.evo.co.uk
*.content.pugpig-dev.com
derstandard-spat.derstandard.at
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
mms.evo.co.uk
subscribe.evo.co.uk
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
san-001.ceros.com
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
s3-san.cloudinary.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
adspecs.dennis.co.uk
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
derstandard-spat.derstandard.at
auth.astonmagazine.co.uk
san-001.ceros.com
s3-san.cloudinary.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
s2-san.cloudinary.com
*.content.pugpig-dev.com
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s2-san.cloudinary.com
san-001.ceros.com
adspecs.dennis.co.uk
san-001.ceros.com
dns-vetting1.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s3-cloudinary-pin.map.fastly.net
l468.drivingelectric.com
www.pugpig.com
san-001.ceros.com
dns-vetting1j.map.fastly.net
Certificate
The complete raw certificate details for r468.evo.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIQBqnddy63HsKACalUxRA4cjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA2MTUwMDAwMDBaFw0yMjA3MTQy MzU5NTlaMBkxFzAVBgNVBAMTDnI0NjguZXZvLmNvLnVrMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAwHaXMVPuAoWI3G4DRVVyHHlHsW0KK8oST7D8l1zi M1EktwMZYidKA2327FHrTqeAluMJmjWUFQrvsfXONQHk8o9d09Y2mgt1RA79pkg8 Tv/khh/MXYrOg3gdQZyZUmZ3Wg8TumEBaYedBhtzl24UbfSzpO3rr6ZopnPWdFmm T9pchNP0qGHHRWHp1Q7GotBoAFc732HjqIoedZ0/GZvWkS9VHcwnlsEL4tDiNv9P B9HV3kKF09ukDVVAmHI2u1GnAoKFk3MB2nNBGbG0hk3L7+0W2+jY3Z56nolMxTcX Y6pulCwIJwzrvBohY+0Yjccxgok/hR21QqSj2vJFfim9awIDAQABo4IB4jCCAd4w HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFJ8CqK5d 4E6A8PGWfz7+mFvthsEIMIGABgNVHREEeTB3gg5yNDY4LmV2by5jby51a4IQdTk4 OS50aGV3ZWVrLmNvbYITYjkxNS5jYXJidXllci5jby51a4ISZDA5Ni50aGV3ZWVr LmNvLnVrghJnMzE0LmtpcGxpbmdlci5jb22CFmM3MjkuYXV0b2V4cHJlc3MuY28u dWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQABIaaIyURnMEaSxE8+E8/dqP9V6GF4yqFUOugGnxuj TmttkGWP07FADiMrtupm7RZE7NYp6Vo7+y9YyDyXuc3oSRt/75YG5giMFHQsnKkO mMUw07lMDoI1QAE8t1Qtbh2d6nV8/BOrLAiIHNT1SVfp30B5yhkccoWn6PLvxPzo S6wZvzQFCfnB1xJjqcLk+tsCMI6Z+CIGLm+i5Soox8UjFQXYnPfzbZDbvk36n1rV rd6EoCSMHbj/tuaK2KSF0q0uOev+d/r/gytPeCu+ydsQ8e/p+9abhD94LUvjdUJO zSDTGQGEOdBNM4drRPcSpn49gct6BWsMZITbYUjxzJD/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHaXMVPuAoWI3G4DRVVy HHlHsW0KK8oST7D8l1ziM1EktwMZYidKA2327FHrTqeAluMJmjWUFQrvsfXONQHk 8o9d09Y2mgt1RA79pkg8Tv/khh/MXYrOg3gdQZyZUmZ3Wg8TumEBaYedBhtzl24U bfSzpO3rr6ZopnPWdFmmT9pchNP0qGHHRWHp1Q7GotBoAFc732HjqIoedZ0/GZvW kS9VHcwnlsEL4tDiNv9PB9HV3kKF09ukDVVAmHI2u1GnAoKFk3MB2nNBGbG0hk3L 7+0W2+jY3Z56nolMxTcXY6pulCwIJwzrvBohY+0Yjccxgok/hR21QqSj2vJFfim9 awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8857357998933316458924640398098839666 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r468.evo.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24296233756134229547285775220567392363822511390111343653976930966050048869399578692440637349166437390304391913695610520246953500805492721147556226534114457085191123854492074855804097390615982293044124761812356809422816777324597114654675684453939132357317691565034356337205066493283160778889115477143437600118453121085117143981075431308971119436174055473942082469832416732409910864442900682964139760685512999314847778152188359329756325481509228975472424025452941837475995471889888950903652809896382944427831280847156516561736893435861452160240023237768424387057357658944472210941122281716628110105553774121328956783979 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9f02a8ae5de04e80f0f1967f3efe985bed86c108 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r468.evo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u989.theweek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b915.carbuyer.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd096.theweek.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g314.kiplinger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c729.autoexpress.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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