*.yorkregion.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0a:c8:b5:85:41:4e:de:25:df:38:43:04:1c:92:6c:15 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.yorkregion.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:c8:b5:85:41:4e:de:25:df:38:43:04:1c:92:6c:15Serial Number (int): 14334421003251870520538582347796343829
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 88:29:21:59:b4:bd:e1:e8:71:8e:39:33:5a:d5:4f:51:ba:5f:8e:47
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 75:d9:05:5b:ca:b5:49:a7:62:34:4b:e3:7d:2c:7e:93:aa:82:b6:ef
Fingerprint (sha256): 1a:c3:34:08:52:2b:a7:35:d9:e7:a2:30:72:91:24:a7:f5:72:14:bc:0c:17:ee:9c:1c:49:95:a9:c2:91:64:fb
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.yorkregion.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.yorkregion.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.yorkregion.com
Other certificates including the domain name yorkregion.com
(limited to 100 certificates)
local.buckinghamtoday.co.uk
yorkregion.com
yorkregion.com
eastyorkbeach.toronto.com
kalamazooshopping.mlive.com
local.kentnews.co.uk
local.flamboroughreview.com
local.theameryfreepress.com
local.panolawatchman.com
local.yourdailyjournal.com
local.thefirsthundredmiles.com
admin.adforge.com
local.thegazette.com
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
local.mexicoledger.com
local.summitdaily.com
local.101highlandlakes.com
local.wahpetondailynews.com
local.ripongazette.co.uk
local.daily-chronicle.com
get.yorkregion.com
local.newstribune.info
peterborough.mykawartha.com
*.yorkregion.com
local.airgunshooting.co.uk
local.southwesternontario.ca
markham.yorkregion.com
the-nelson-leader.origami.neighbourly.co.nz
flintshopping.mlive.com
western-leader.origami.neighbourly.co.nz
local.newportnewstimes.com
local.clintonnc.com
portperry.durhamregion.com
local.bridemagazine.co.uk
tomball.communityimpact.com
local.lutontoday.co.uk
georgina.yorkregion.com
admin.adforge.com
s.yorkregion.com
local.ottawasun.com
local.sachem.ca
newhomes.yorkregion.com
local.northjersey.com
local.hertsad.co.uk
local.brechinadvertiser.co.uk
local.banbridgeleader.co.uk
s.yorkregion.com
local.brookingsregister.com
local.hutchnews.com
*.yorkregion.com
local.kent-life.co.uk
local.clevelandcountyherald.com
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
local.northamptonchron.co.uk
local.wisbechstandard.co.uk
local.moodycountyenterprise.com
*.yorkregion.com
local.pontiacdailyleader.com
local.thefirsthundredmiles.com
parrysoundnorth.parrysound.com
s.yorkregion.com
local.eastlondonadvertiser.co.uk
local.militarynews.com
local.theshaunavonstandard.com
local.thetfordandbrandontimes.co.uk
local.uintacountyherald.com
local.calgaryherald.com
local.guymondailyherald.com
local.hamhigh.co.uk
local.dglobe.com
secure-metroland.adperfect.com
local.spenboroughguardian.co.uk
local.moorefieldexaminer.com
local.saltwire.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
peterborough.mykawartha.com
minto.southwesternontario.ca
local.thetfordandbrandontimes.co.uk
local.tahoedailytribune.com
kawarthalakes.mykawartha.com
local.argusobserver.com
secure-metroland.adperfect.com
yorkregion-com.us-midwest-1.townnews-staging.com
admin.adforge.com
local.torringtontelegram.com
local.fdlreporter.com
local.gettysburgtimes.com
local.theledger.com
muskegonshopping.mlive.com
local.mysuburbanlife.com
shopping.silive.com
local.suffolkfreepress.co.uk
cdn-le5.arkadiumhosted.com
mm.local.kentonline.co.uk
yorkregion.com
yorkregion.com
yorkregion.com
eastyorkbeach.toronto.com
kalamazooshopping.mlive.com
local.kentnews.co.uk
local.flamboroughreview.com
local.theameryfreepress.com
local.panolawatchman.com
local.yourdailyjournal.com
local.thefirsthundredmiles.com
admin.adforge.com
local.thegazette.com
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
local.mexicoledger.com
local.summitdaily.com
local.101highlandlakes.com
local.wahpetondailynews.com
local.ripongazette.co.uk
local.daily-chronicle.com
get.yorkregion.com
local.newstribune.info
peterborough.mykawartha.com
*.yorkregion.com
local.airgunshooting.co.uk
local.southwesternontario.ca
markham.yorkregion.com
the-nelson-leader.origami.neighbourly.co.nz
flintshopping.mlive.com
western-leader.origami.neighbourly.co.nz
local.newportnewstimes.com
local.clintonnc.com
portperry.durhamregion.com
local.bridemagazine.co.uk
tomball.communityimpact.com
local.lutontoday.co.uk
georgina.yorkregion.com
admin.adforge.com
s.yorkregion.com
local.ottawasun.com
local.sachem.ca
newhomes.yorkregion.com
local.northjersey.com
local.hertsad.co.uk
local.brechinadvertiser.co.uk
local.banbridgeleader.co.uk
s.yorkregion.com
local.brookingsregister.com
local.hutchnews.com
*.yorkregion.com
local.kent-life.co.uk
local.clevelandcountyherald.com
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
local.northamptonchron.co.uk
local.wisbechstandard.co.uk
local.moodycountyenterprise.com
*.yorkregion.com
local.pontiacdailyleader.com
local.thefirsthundredmiles.com
parrysoundnorth.parrysound.com
s.yorkregion.com
local.eastlondonadvertiser.co.uk
local.militarynews.com
local.theshaunavonstandard.com
local.thetfordandbrandontimes.co.uk
local.uintacountyherald.com
local.calgaryherald.com
local.guymondailyherald.com
local.hamhigh.co.uk
local.dglobe.com
secure-metroland.adperfect.com
local.spenboroughguardian.co.uk
local.moorefieldexaminer.com
local.saltwire.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
peterborough.mykawartha.com
minto.southwesternontario.ca
local.thetfordandbrandontimes.co.uk
local.tahoedailytribune.com
kawarthalakes.mykawartha.com
local.argusobserver.com
secure-metroland.adperfect.com
yorkregion-com.us-midwest-1.townnews-staging.com
admin.adforge.com
local.torringtontelegram.com
local.fdlreporter.com
local.gettysburgtimes.com
local.theledger.com
muskegonshopping.mlive.com
local.mysuburbanlife.com
shopping.silive.com
local.suffolkfreepress.co.uk
cdn-le5.arkadiumhosted.com
mm.local.kentonline.co.uk
yorkregion.com
Certificate
The complete raw certificate details for *.yorkregion.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEVDCCAzygAwIBAgIQCsi1hUFO3iXfOEMEHJJsFTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNjExMDIwMDAwMDBaFw0xNzEyMDIx MjAwMDBaMBsxGTAXBgNVBAMMECoueW9ya3JlZ2lvbi5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCvP3EzeIY8h184JR9+LnDdb4c19mQ2+vVTvGqX nLTSwB8SL4c0Ttw4DNQIsn6fhakzldvUIvYdA9MmgVBTigjGSa+F0wbQH7j8LFS4 7VCpflPycrJP/JgZ+DCaKOKCD+b5WKxyiVnl1fJSFVfu4H/oSnTTDJlT5+G1I/5S xF25mZ0ac/+XvRS7EythGVhutSHe8EdCbVP51uN9iGq/ZsPsu8h7U7EWXDbKamuF /tQiyLdZaFZOWNPHDLj7i/gbR48ZEJ7dHAaG/u+eSie+G+K4JU4uJRgrmCI7qPIC uO/t5I4wmtmPSUag1yQdieGORXYJD4ubUzSXGw0xnlv40vd7AgMBAAGjggFnMIIB YzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUiCkh WbS94ehxjjkzWtVPUbpfjkcwGwYDVR0RBBQwEoIQKi55b3JrcmVnaW9uLmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggEBAGWfG55gavFj jpI6aUsMPZLJRWpm5iarHo91VmuVj64eZyRH5OhzofjbyrWQS8FkOoxF3AFkZiyq fJMWBR3uUZO5GbXgW4dGhpP2z+dN/kHYz74ZgItDPeetCMAp2TY4/Sl3VXY8y5hI aH53HxYQoIwNaOvX6FAvhkZoFENbS3aVKAWVncnIuXZo+MD/WwSE+yftdo8qcc+0 jElRBfDGCW5ryPfsOblM9zLOxpQPwIYLRVMVCyFlQGRl4f0+U3Np1OFr/QhiCh0D 1eP5p0f/UICh9n6f7vgUDR6b/u8y/4Pkgaf6/N7osVRi0SOGM+27OB+VeCS+YAKQ KfYMfm3IVN0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz9xM3iGPIdfOCUffi5w 3W+HNfZkNvr1U7xql5y00sAfEi+HNE7cOAzUCLJ+n4WpM5Xb1CL2HQPTJoFQU4oI xkmvhdMG0B+4/CxUuO1QqX5T8nKyT/yYGfgwmijigg/m+ViscolZ5dXyUhVX7uB/ 6Ep00wyZU+fhtSP+UsRduZmdGnP/l70UuxMrYRlYbrUh3vBHQm1T+dbjfYhqv2bD 7LvIe1OxFlw2ymprhf7UIsi3WWhWTljTxwy4+4v4G0ePGRCe3RwGhv7vnkonvhvi uCVOLiUYK5giO6jyArjv7eSOMJrZj0lGoNckHYnhjkV2CQ+Lm1M0lxsNMZ5b+NL3 ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14334421003251870520538582347796343829 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.yorkregion.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22122987879743705595461149325446424787465399837346914761296386062433533524326634419134542750818251991635300639666814047277768449567765641958382271367908297236178520289859989833142702213647755991222780300291038877217286486377929705209389802020292943950937462310020425406461128918139043911043906556148753913587638033989579878248758294379076084616460220716503617492581591880900601815810751092521763667335125307747633842612023915153160145173308087128477470558204904248683416144744886516097888732420839079218080907885560070308097835515201179357995260145634401921569399179233267690174310754567453295276685992321399877990267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 88292159b4bde1e8718e39335ad54f51ba5f8e47 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkregion.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00659f1b9e606af1638e923a694b0c3d92c9456a66e626ab1e8f75566b958fae1e672447e4e873a1f8dbcab5904bc1643a8c45dc0164662caa7c9316051dee5193b919b5e05b87468693f6cfe74dfe41d8cfbe19808b433de7ad08c029d93638fd297755763ccb9848687e771f1610a08c0d68ebd7e8502f86466814435b4b76952805959dc9c8b97668f8c0ff5b0484fb27ed768f2a71cfb48c495105f0c6096e6bc8f7ec39b94cf732cec6940fc0860b4553150b2165406465e1fd3e537369d4e16bfd08620a1d03d5e3f9a747ff5080a1f67e9feef8140d1e9bfeef32ff83e481a7fafcdee8b15462d1238633edbb381f957824be60029029f60c7e6dc854dd