*.mbed.com
Issued by Amazon
About this certificate
This digital certificate with serial number 05:46:ab:04:b9:ca:ce:31:78:17:e8:e7:cf:99:1e:7e was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.mbed.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:46:ab:04:b9:ca:ce:31:78:17:e8:e7:cf:99:1e:7eSerial Number (int): 7013069425476795343766580255983738494
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 0b:d3:6a:f0:cf:90:df:18:b7:94:12:d2:0b:68:64:ac:78:04:04:20
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ec:05:49:cf:ca:e7:76:24:46:3b:59:c2:b8:f2:91:4a:61:02:08:6c
Fingerprint (sha256): 19:4a:df:68:00:25:49:4c:a8:1f:ea:59:3b:98:d4:71:88:12:0a:5e:b7:c9:64:66:22:45:fc:fe:d6:c7:75:84
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.mbed.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.mbed.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.mbed.com
api.keil.arm.com
*.mbed.org
*.api.keil.arm.com
mbed.com
keil.arm.com
core.mbed.com
*.keil.arm.com
*.core.mbed.com
mbed.org
api.keil.arm.com
*.mbed.org
*.api.keil.arm.com
mbed.com
keil.arm.com
core.mbed.com
*.keil.arm.com
*.core.mbed.com
mbed.org
Other certificates including the domain name mbed.com
(limited to 100 certificates)
*.test.mbed.com
yotta.mbed.com
*.test.mbed.com
studio.mbed.com
*.test.mbed.com
api.connector.mbed.com
docs.mbed.com
systemtest-radiator.mbedcloudtesting.com
mbed-www-media.mbed.com
forums.mbed.com
forums.mbed.com
media-cdn.partners.test.mbed.com
api.connector.mbed.com
forums.mbed.com
internal.mbed.com
*.mbed.com
studio.test.mbed.com
mbed-media.mbed.com
account.mbed.com
artifactory.mbed.com
*.mbed.com
*.mbed.com
forums.mbed.com
account.mbed.com
mbed-www-media.test.mbed.com
forums.mbed.com
labs.test.mbed.com
forums.mbed.com
account.mbed.com
forums.mbed.com
mbed-media.mbed.com
forums.mbed.com
account.test.mbed.com
account.mbed.com
account.mbed.com
*.test.mbed.com
labs.mbed.com
studio.mbed.com
*.test.mbed.com
*.mbed.com
forums.mbed.com
forums.mbed.com
labs.mbed.com
*.test.mbed.com
*.mbed.com
yotta.mbed.com
forums.mbed.com
simulator.mbed.com
*.test.mbed.com
accounts.mbed.com
mbed-www-media.mbed.com
*.mbed.com
studio.mbed.com
*.test.mbed.com
studio.mbed.com
forums.mbed.com
internal.test.mbed.com
*.dev.mbed.com
mbed-www-media.mbed.com
*.test.mbed.com
account.mbed.com
mbed-media.mbed.com
labs.mbed.com
forums.mbed.com
studio.mbed.com
*.mbed.com
systest-radiator.mbed.com
mbed-billing-sandbox.test.mbed.com
studio.mbed.com
*.mbed.com
*.test.mbed.com
mbed-www-media.test.mbed.com
*.mbed.com
mbed.com
*.test.mbed.com
*.test.mbed.com
studio-tmp.mbed.com
account.test.mbed.com
forums.mbed.com
*.test.mbed.com
api.connector.mbed.com
*.preview.mbed.com
*.preview.mbed.com
mbed-billing-sandbox.test.mbed.com
forums.mbed.com
account.mbed.com
mbed.com
accounts.mbed.com
assets.test.mbed.com
*.mbed.com
connector.mbed.com
yotta.mbed.com
forums.mbed.com
studio.mbed.com
simulator.mbed.com
mbed-media.mbed.com
mbed.com
*.test.mbed.com
*.test.mbed.com
*.mbed.com
yotta.mbed.com
*.test.mbed.com
studio.mbed.com
*.test.mbed.com
api.connector.mbed.com
docs.mbed.com
systemtest-radiator.mbedcloudtesting.com
mbed-www-media.mbed.com
forums.mbed.com
forums.mbed.com
media-cdn.partners.test.mbed.com
api.connector.mbed.com
forums.mbed.com
internal.mbed.com
*.mbed.com
studio.test.mbed.com
mbed-media.mbed.com
account.mbed.com
artifactory.mbed.com
*.mbed.com
*.mbed.com
forums.mbed.com
account.mbed.com
mbed-www-media.test.mbed.com
forums.mbed.com
labs.test.mbed.com
forums.mbed.com
account.mbed.com
forums.mbed.com
mbed-media.mbed.com
forums.mbed.com
account.test.mbed.com
account.mbed.com
account.mbed.com
*.test.mbed.com
labs.mbed.com
studio.mbed.com
*.test.mbed.com
*.mbed.com
forums.mbed.com
forums.mbed.com
labs.mbed.com
*.test.mbed.com
*.mbed.com
yotta.mbed.com
forums.mbed.com
simulator.mbed.com
*.test.mbed.com
accounts.mbed.com
mbed-www-media.mbed.com
*.mbed.com
studio.mbed.com
*.test.mbed.com
studio.mbed.com
forums.mbed.com
internal.test.mbed.com
*.dev.mbed.com
mbed-www-media.mbed.com
*.test.mbed.com
account.mbed.com
mbed-media.mbed.com
labs.mbed.com
forums.mbed.com
studio.mbed.com
*.mbed.com
systest-radiator.mbed.com
mbed-billing-sandbox.test.mbed.com
studio.mbed.com
*.mbed.com
*.test.mbed.com
mbed-www-media.test.mbed.com
*.mbed.com
mbed.com
*.test.mbed.com
*.test.mbed.com
studio-tmp.mbed.com
account.test.mbed.com
forums.mbed.com
*.test.mbed.com
api.connector.mbed.com
*.preview.mbed.com
*.preview.mbed.com
mbed-billing-sandbox.test.mbed.com
forums.mbed.com
account.mbed.com
mbed.com
accounts.mbed.com
assets.test.mbed.com
*.mbed.com
connector.mbed.com
yotta.mbed.com
forums.mbed.com
studio.mbed.com
simulator.mbed.com
mbed-media.mbed.com
mbed.com
*.test.mbed.com
*.test.mbed.com
*.mbed.com
Certificate
The complete raw certificate details for *.mbed.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIQBUarBLnKzjF4F+jnz5kefjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEwMDQwMDAwMDBaFw0yMzExMDIy MzU5NTlaMBUxEzARBgNVBAMMCioubWJlZC5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE/Lfk1SHf5EuBnI69ngDHNVKaSGZMAV+kUlSSaUpJAm1o jheH5Lrd9KWa5WVByrp9PVjwyCLOSA4mRsQMwJLuyw6QX1xfNayfFuEXneyDtUF3 cMWMc4lX0pbVcEIKmVRNgYOb1ThKpprh2ikmT1AymI539l9dP6fdSXewMyW06IY5 jh46vv8/xO3oS0uTQ6WJEcDS0iR6uRhVv5+ajidaEmZc+SxZsaQ+UAZPNtY4Y6/n 5BuFR20NuO8e3R/6uXHGyadCVir0crxakM+SOXo8y7oq8+aHy4Oj8lW1wCsFTWX7 V7rCzq3SWAUMubMybolTZ1FJYOePh7Na0JHOMy1nAgMBAAGjggNsMIIDaDAfBgNV HSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUC9Nq8M+Q3xi3 lBLSC2hkrHgEBCAwgZsGA1UdEQSBkzCBkIIKKi5tYmVkLmNvbYIQYXBpLmtlaWwu YXJtLmNvbYIKKi5tYmVkLm9yZ4ISKi5hcGkua2VpbC5hcm0uY29tgghtYmVkLmNv bYIMa2VpbC5hcm0uY29tgg1jb3JlLm1iZWQuY29tgg4qLmtlaWwuYXJtLmNvbYIP Ki5jb3JlLm1iZWQuY29tgghtYmVkLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6 Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQM MAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov L29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v Y3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIw ADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA6D7Q2j71BjUy51covIlryQPT y9ERa+zraeF3fW0GvW4AAAGDo8WoAwAABAMARzBFAiAT6fmeSvO+/Xj2MHWcxHCb 3HZGUCXCnNoe9832w8Sv8wIhAOVwi9KygeoSX1TywZGLHQh6rc6CFqG8xiWQS1Wc xZS1AHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGDo8WoWgAA BAMARzBFAiEA9eD02X8lLAL7/dLHmNxz2bbBOrifxiPcF6NszRpW8U4CICNgXxSE 6sZ3OIXDZ6e5dEUcEVfj/qgaadyP8fgAdC6bAHYAtz77JN+cTbp18jnFulj0bF38 Qs96nzXEnh0JgSXttJkAAAGDo8WoEAAABAMARzBFAiAXSUKq3B6Jq65IoTL4RroQ cUevi3i1FxBtnrrQtEGjZgIhAMqTAXGQV6lLyuAkv8fK41o6if9vP9cCymI/OENO X20FMA0GCSqGSIb3DQEBCwUAA4IBAQAc0Qvw9DEr/zi8DzgvJn2GciQOHxy++3tV toXIR/lbY7zPk5BY+hiaJlFumf/+/6M8BCdJQVTrrEA2zBXPq1cqwDaVDWUrgjWr P7gK7QbH114cZpKA7VKDXQmkQj5BWUV5q1K8ajusG8dC3fZfRW9H6Bj9FfwQjKN4 It6ZyAmEe5j81ouw/suFxuKaAYs1YISiCG55e48kaL9xPKVph/ooiBTRPK5/C2Ze w53XhJeVLgu6p2aZyZ7fw62vl4K7EXj+Vnwe7/Xh7zcv7Unia3esqyjIK++UqiGi la34dvU/RmtBLYGO9fB2bNjoe4UDDG0pjQWHg6RVomfscY5JVYZP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPy35NUh3+RLgZyOvZ4A xzVSmkhmTAFfpFJUkmlKSQJtaI4Xh+S63fSlmuVlQcq6fT1Y8MgizkgOJkbEDMCS 7ssOkF9cXzWsnxbhF53sg7VBd3DFjHOJV9KW1XBCCplUTYGDm9U4Sqaa4dopJk9Q MpiOd/ZfXT+n3Ul3sDMltOiGOY4eOr7/P8Tt6EtLk0OliRHA0tIkerkYVb+fmo4n WhJmXPksWbGkPlAGTzbWOGOv5+QbhUdtDbjvHt0f+rlxxsmnQlYq9HK8WpDPkjl6 PMu6KvPmh8uDo/JVtcArBU1l+1e6ws6t0lgFDLmzMm6JU2dRSWDnj4ezWtCRzjMt ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7013069425476795343766580255983738494 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mbed.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24867327829214712705700370040327945160386698192417601116421974311189330983419456553365268121653356287384040173684628477134651093318405752350193766494776330949036076434975788825875767033743138889759144954889347037612537989383274817016564825254735163237599287187032778606070230261876823449930990883849605710050412138193214353723887947191039212509267282942554065011371961286385119506687531518480371151048598549203134875042301118727478769589696869337009738924999458713779672146800760357077001358517942794790259677149179265732872416699756991509192591415975391465397446759389409997960324037118936009721299482967899418864999 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0bd36af0cf90df18b79412d20b6864ac78040420 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.keil.arm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbed.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.keil.arm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keil.arm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.mbed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keil.arm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.mbed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbed.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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