athenastgbeacon.theglobeandmail.ca
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:ec:8c:34:bf:ce:f0:44:07:15:ea:b7:b4:2b:44:da was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=athenastgbeacon.theglobeandmail.ca
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:ec:8c:34:bf:ce:f0:44:07:15:ea:b7:b4:2b:44:daSerial Number (int): 18508189720388897861250176067828401370
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f7:52:9b:14:41:34:a4:5b:3e:0b:d1:0b:85:c3:7c:23:4c:bc:cc:80
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 0a:3f:14:57:d5:7c:fa:b8:cf:32:31:88:52:cc:eb:09:b2:a4:fd:ad
Fingerprint (sha256): 18:05:a7:c1:e4:81:d5:ae:62:77:46:ff:e4:02:08:c9:ce:c4:2e:85:6f:2c:53:6a:f8:d7:cd:d4:49:7e:fe:13
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate athenastgbeacon.theglobeandmail.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for athenastgbeacon.theglobeandmail.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
athenastgbeacon.theglobeandmail.ca
Other certificates including the domain name theglobeandmail.ca
(limited to 100 certificates)
www.fatwestie.com
www.kilvingtonsofleeds.com
apps.mediavrog.net
tgamuserprofile.theglobeandmail.ca
recostgapimain.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
www.gdg.com.ar
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
sp.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
lighthouseexperiential.com
molm.case-it.app
q2.shared.global.fastly.net
www.theglobeandmail.com
q2.shared.global.fastly.net
www.apptimestamp.com
q2.shared.global.fastly.net
alpha.courseplan.io
q2.shared.global.fastly.net
q2.shared.global.fastly.net
aagroup.oz-tms.com
globeunlimited.com
sp.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
admin.engageto.ca
q2.shared.global.fastly.net
merela-hub.site
enterprise.stratj.app
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
joybit.org
athenastgbeacon.theglobeandmail.ca
www.vantty.co
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
amoeba.nu
recoapi-prd.theglobeandmail.ca
q2.shared.global.fastly.net
www.kraftwerk9.com
stg2.theglobeandmail.com
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
bupples.com
q2.shared.global.fastly.net
recoapi-prd.theglobeandmail.ca
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
moattestbeacon.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
globeunlimited.com
q2.shared.global.fastly.net
moattestbeacon.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
beta.metamoneybr.com.br
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
www.kilvingtonsofleeds.com
apps.mediavrog.net
tgamuserprofile.theglobeandmail.ca
recostgapimain.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
www.gdg.com.ar
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
sp.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
lighthouseexperiential.com
molm.case-it.app
q2.shared.global.fastly.net
www.theglobeandmail.com
q2.shared.global.fastly.net
www.apptimestamp.com
q2.shared.global.fastly.net
alpha.courseplan.io
q2.shared.global.fastly.net
q2.shared.global.fastly.net
aagroup.oz-tms.com
globeunlimited.com
sp.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
admin.engageto.ca
q2.shared.global.fastly.net
merela-hub.site
enterprise.stratj.app
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
joybit.org
athenastgbeacon.theglobeandmail.ca
www.vantty.co
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
amoeba.nu
recoapi-prd.theglobeandmail.ca
q2.shared.global.fastly.net
www.kraftwerk9.com
stg2.theglobeandmail.com
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
bupples.com
q2.shared.global.fastly.net
recoapi-prd.theglobeandmail.ca
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
moattestbeacon.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
globeunlimited.com
q2.shared.global.fastly.net
moattestbeacon.theglobeandmail.ca
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
beta.metamoneybr.com.br
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
Certificate
The complete raw certificate details for athenastgbeacon.theglobeandmail.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmjCCA4KgAwIBAgIQDeyMNL/O8EQHFeq3tCtE2jANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA1MTQwMDAwMDBaFw0xOTA2MTQx MjAwMDBaMC0xKzApBgNVBAMTImF0aGVuYXN0Z2JlYWNvbi50aGVnbG9iZWFuZG1h aWwuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDwMlazjkQNFP +24du/YRt2jrXnFu66iWbGSd5b3ppnQ8WkgCLZzIxqLpzX1hHvFpTTDY9FU4w7w+ xc0XVXfylrRWn1YQX4x1MSkWnHujTPJuEhmxSfUdLUZrnyYAQ732z0+JxA2cANsq K+khR++hc1Yy7Plx7WA+lohc/PxYvVj7mH9qQKBePVj5O2ukgyygoOCGeQ0ene+O xPMLaTmwDwrTqI4Kw7J1IttA9IxnKOslTzQNyhD7Tjxh5Ff/HfRDHGzmy8eAihHN P/Nyz3fHbcZpa1jyXr+XWT7n6j4nTly4nOK/gMbi5amPWmSf9SkqACbecXglvbiI MZRwBbF/AgMBAAGjggGbMIIBlzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0 W/k90DAdBgNVHQ4EFgQU91KbFEE0pFs+C9ELhcN8I0y8zIAwLQYDVR0RBCYwJIIi YXRoZW5hc3RnYmVhY29uLnRoZWdsb2JlYW5kbWFpbC5jYTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu oCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAg BgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBn MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20w NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3Nj YTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQDBhQwm+rlRSVqSaelSbWyVXTJq6oyy6VVUQ8U1SPwgWvk4 jJJcpOY6rshaDCA/OZ8B/3e+pyu43LMLdVX8Y+qhUfehM5A5DPHHZXx/HM/c9Ir1 0e0T2tpxN6Ybheu6+kKHndWluSU7Ce8J4H+oBtEJsMbtiKncmV0gbs9lQY3s23Si tjJzmat0OPzfb2/2tJWumpqmJNKsjFUVXdsV9PpGi9tKjlrmwGkNo1tJ3eIMIOkm kroUUai1b+GGPxyOQDXWjm9Fwcy23YzOZIOwNslaQhz7HjmpdNqBGzFAnTw1DGf5 633sMtftuPEbz1StBEllUg/QddoBhOhvy7TfwWac -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw8DJWs45EDRT/tuHbv2 Ebdo615xbuuolmxkneW96aZ0PFpIAi2cyMai6c19YR7xaU0w2PRVOMO8PsXNF1V3 8pa0Vp9WEF+MdTEpFpx7o0zybhIZsUn1HS1Ga58mAEO99s9PicQNnADbKivpIUfv oXNWMuz5ce1gPpaIXPz8WL1Y+5h/akCgXj1Y+TtrpIMsoKDghnkNHp3vjsTzC2k5 sA8K06iOCsOydSLbQPSMZyjrJU80DcoQ+048YeRX/x30Qxxs5svHgIoRzT/zcs93 x23GaWtY8l6/l1k+5+o+J05cuJziv4DG4uWpj1pkn/UpKgAm3nF4Jb24iDGUcAWx fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18508189720388897861250176067828401370 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'athenastgbeacon.theglobeandmail.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22604059424890996147008969481321610595275388281945935849990345058564724609993517976651912703812967966796887364113209224645497252299849157527326443887293802402224317064503968525328267635429089494038563123212341135390992945127096250100825631337590799816272152663117463905496695625378791391429992682412722926652236597704523480927595661014332934179795973747143224793812867050266064099782177554266220042305903710757014660190315936424170759548297663200156641851026326164823462580566136138491665757424427778687107200877985883509395624442085877793182539512965915164138019618572453025157258858976078303976121672383526749974911 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f7529b144134a45b3e0bd10b85c37c234cbccc80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenastgbeacon.theglobeandmail.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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