services-store.peugeot.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:e8:a2:c4:dc:11:43:b4:1b:2d:87:df:af:86:fd:47 was issued on by Amazon.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=services-store.peugeot.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:e8:a2:c4:dc:11:43:b4:1b:2d:87:df:af:86:fd:47
Serial Number (int): 7854054197287877361312978396242181447
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 57:73:ca:fd:32:63:73:d4:f2:12:b1:69:ad:e8:4e:81:2e:9f:d7:01
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 10:d6:58:85:eb:f0:6c:89:b1:70:f1:a5:1c:1c:ea:87:c4:1a:e2:3c
Fingerprint (sha256): 1b:76:36:65:ae:a7:aa:27:b5:d0:9d:74:ed:61:64:82:61:d5:b4:76:dc:b0:cc:d7:82:04:81:e6:9c:5f:cd:ad

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate services-store.peugeot.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for services-store.peugeot.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

services-store.peugeot.com
services-store.peugeot.pt
services-store.peugeot.at
services-store.peugeot.gr
services-store.peugeot.co.uk
services-store.peugeot.dk
services-store.peugeot.hu
services-store.peugeot.ie
services-store.peugeot.nl
services-store.peugeot.de
services-store.peugeot.sk
services-store.peugeotisland.is
services-store.peugeot.com.ro
services-store.peugeot.se
services-store.peugeot.es
services-store.peugeot.hr
services-store.peugeot.ch
services-store.peugeot.lu
services-store.peugeot.be
services-store.peugeot.it
services-store.peugeot.cz
services-store.peugeot.si
services-store.peugeot.pl
services-store.peugeot.no
services-store.peugeot.fr
services-store.peugeot.fi

Other certificates including the domain name peugeot.com

(limited to 100 certificates)
dev.services-store.peugeot.com
ar.oman.peugeot.com
inf-admin.services-store.peugeot.com
www.peugeot.bo
cycles.peugeot.com
en.kwt.peugeot.com
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
inf.services-store.dsautomobiles.com
int-media.peugeotsport.preprod.peugeot.com
pat.services-store.dsautomobiles.com
cycles.peugeot.fr
www.bhr.peugeot.com
*.peugeot.com
pat-admin.services-store.peugeot.com
aemstagems4-connect.alfaromeo.com
contact-plan.peugeot.com
pat-admin.services-store.dsautomobiles.com
dev.services-store.dsautomobiles.com
dev-admin.services-store.peugeot.com
inf.services-store.dsautomobiles.com
ppr-admin.services-store.peugeot.com
visuel3d-secure.peugeot.com
dpromo.abarth.it
www.qtr.peugeot.com
account.services-store.peugeot.com
trn-admin.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
media-mym.peugeot.com
www.peugeot.co.il
en.ksa.peugeot.com
fr.preprod.access.peugeot.com
pat-admin.services-store.peugeot.com
peugeot.subsahara.carusselgroup.com
ppr-admin.services-store.dsautomobiles.com
pat.services-store.peugeot.com
pat.services-store.dsautomobiles.com
www.ar.oman.peugeot.com
trn.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
preprod.access.peugeot.com
inf-admin.services-store.peugeot.com
dev.services-store.dsautomobiles.com
sip-hr.mpsa.com
sip-be.mpsa.com
colour-chart.peugeot.com
sip-hr.mpsa.com
dev-admin.services-store.dsautomobiles.com
be-media.peugeot.com
dubai.peugeot.com
fix.services-store.peugeot.com
media-professional.peugeot.ru
aemdevms4-connectivity.alfaromeo.com
pat-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
uat.services-store.dsautomobiles.com
services-store.peugeot.fr
www.peugeot.fr
uae.peugeot.com
sip-be.mpsa.com
*.peugeot.com
fr-media.peugeot.com
dev.services-store.peugeot.com
dpromo.abarth.it
ppr.services-store.dsautomobiles.com
aemdevms4-connectivity.alfaromeo.com
*.peugeot.com
sip-hr.mpsa.com
inf-admin.services-store.peugeot.com
pat.services-store.dsautomobiles.com
sip-hr.mpsa.com
inf-admin.services-store.peugeot.com
sip-be.mpsa.com
inf-admin.services-store.peugeot.com
inf-admin.services-store.peugeot.com
accessories.peugeot.com
peugeot.com
fr-peugeotrent.peugeot.com
sip-be.mpsa.com
inf.services-store.peugeot.com
dev.lead.services-store.dsautomobiles.com
media.peugeot-martinique.com
uae.peugeot.com
int.cycles.peugeot.com
fandays.peugeot.com
sip-hr.mpsa.com
pat-admin.services-store.dsautomobiles.com
*.peugeot.com
services-store.peugeot.com
inf.services-store.peugeot.com
uat.services-store.peugeot.com
services-store.peugeot.fr
ppr-admin.services-store.peugeot.com
trn.services-store.dsautomobiles.com
www.ar.bhr.peugeot.com
dev-admin.services-store.peugeot.com
inf-front-eligibility.services-store.awsmpsa.com
www.ar.uae.peugeot.com
fix-admin.services-store.peugeot.com
dubai.peugeot.com

Certificate

The complete raw certificate details for services-store.peugeot.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIQBeiixNwRQ7QbLYffr4b9RzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMDIwMDAwMDBaFw0yMTA0MDIx
MjAwMDBaMCUxIzAhBgNVBAMTGnNlcnZpY2VzLXN0b3JlLnBldWdlb3QuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c53UbyogiiFdUrXaqAj/L5B
OmJ0vxu1JnNXoBwY01iH3shX0WQIM1T1N3ql1a3pkUzat8O+3YXMbdtb9fj1QBxi
0UByIpeV4j3vTuviavl4PWi3QHKwciJ0ximM17l8jq/pGOCw8NxRID+OPB2/MrOf
AS8DXqd8Kqj2NH6Bn2N00kDzJB4IQHuyPaeX9uUXQC0p2n/XNWckrp3HUpEM8tG4
Z6VGcLPq//dIwGP0/EBACTx3HuMrTfoa7u1VKy9gvLvDtQcU93ZLcMXl8WO0jLH0
Z5EqdLfUbSY3XL2f1bG+BG2mFnuZMN+Qs3RaIIQ4yoAIHH4RN2YVV5Mz5gy57wID
AQABo4IESTCCBEUwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYD
VR0OBBYEFFdzyv0yY3PU8hKxaa3oToEun9cBMIIC2QYDVR0RBIIC0DCCAsyCGnNl
cnZpY2VzLXN0b3JlLnBldWdlb3QuY29tghlzZXJ2aWNlcy1zdG9yZS5wZXVnZW90
LnB0ghlzZXJ2aWNlcy1zdG9yZS5wZXVnZW90LmF0ghlzZXJ2aWNlcy1zdG9yZS5w
ZXVnZW90LmdyghxzZXJ2aWNlcy1zdG9yZS5wZXVnZW90LmNvLnVrghlzZXJ2aWNl
cy1zdG9yZS5wZXVnZW90LmRrghlzZXJ2aWNlcy1zdG9yZS5wZXVnZW90Lmh1ghlz
ZXJ2aWNlcy1zdG9yZS5wZXVnZW90LmllghlzZXJ2aWNlcy1zdG9yZS5wZXVnZW90
Lm5sghlzZXJ2aWNlcy1zdG9yZS5wZXVnZW90LmRlghlzZXJ2aWNlcy1zdG9yZS5w
ZXVnZW90LnNrgh9zZXJ2aWNlcy1zdG9yZS5wZXVnZW90aXNsYW5kLmlzgh1zZXJ2
aWNlcy1zdG9yZS5wZXVnZW90LmNvbS5yb4IZc2VydmljZXMtc3RvcmUucGV1Z2Vv
dC5zZYIZc2VydmljZXMtc3RvcmUucGV1Z2VvdC5lc4IZc2VydmljZXMtc3RvcmUu
cGV1Z2VvdC5ocoIZc2VydmljZXMtc3RvcmUucGV1Z2VvdC5jaIIZc2VydmljZXMt
c3RvcmUucGV1Z2VvdC5sdYIZc2VydmljZXMtc3RvcmUucGV1Z2VvdC5iZYIZc2Vy
dmljZXMtc3RvcmUucGV1Z2VvdC5pdIIZc2VydmljZXMtc3RvcmUucGV1Z2VvdC5j
eoIZc2VydmljZXMtc3RvcmUucGV1Z2VvdC5zaYIZc2VydmljZXMtc3RvcmUucGV1
Z2VvdC5wbIIZc2VydmljZXMtc3RvcmUucGV1Z2VvdC5ub4IZc2VydmljZXMtc3Rv
cmUucGV1Z2VvdC5mcoIZc2VydmljZXMtc3RvcmUucGV1Z2VvdC5maTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH
AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz
dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu
Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQAPLYl7DeLJ6F7SQRiKMohJNZsEJPbMhcNRAn83
zwWs8w1pOlub0MOQP3OvezTf9lXM7++gl143toRtxIIHB78j5O5oJvFhVknCT8pD
TwIsisuyts4+QGOizNx8BG/d8N8xH8nUGH/v2WoMXVH2eekJgCesknxPzLq6+1xW
fTiK6yrVMWx5ia/T9J+sJzmPXIJVYxEeHQ5ujiyqsxCKTxhSyl/4HQk3WxJ8fMKx
C32KdKC5y0xZOy6stywQnOKMRRWQXyGkCiGChnypUPWCTUfYe5ecIYbGUablkpbB
5lIQs0ngol+ALgFoUWHkCfUoephMw5S9S13+zXBAlJTgAL9A
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c53UbyogiiFdUrXaqAj
/L5BOmJ0vxu1JnNXoBwY01iH3shX0WQIM1T1N3ql1a3pkUzat8O+3YXMbdtb9fj1
QBxi0UByIpeV4j3vTuviavl4PWi3QHKwciJ0ximM17l8jq/pGOCw8NxRID+OPB2/
MrOfAS8DXqd8Kqj2NH6Bn2N00kDzJB4IQHuyPaeX9uUXQC0p2n/XNWckrp3HUpEM
8tG4Z6VGcLPq//dIwGP0/EBACTx3HuMrTfoa7u1VKy9gvLvDtQcU93ZLcMXl8WO0
jLH0Z5EqdLfUbSY3XL2f1bG+BG2mFnuZMN+Qs3RaIIQ4yoAIHH4RN2YVV5Mz5gy5
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7854054197287877361312978396242181447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services-store.peugeot.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27495524401679085070282939567863982880531274439507470892582300377659460927131615671523894815897303173375063163521864760308296750439986443468966025972429502310126941358290206095621472122005658255642534363742194391771635030597986520756672644574166407404788837329562312626588937451465794075382194114804380838319177573350918063940793120523735206428129171289133867605029945412577516015200842215560948056017844643437247789715522586773060887159486664125368364403054518491430511937031292524672611206493179238407590672801636875868525837450720119743965809707299444496147901950599246746696892956530336933943968486206202700413423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5773cafd326373d4f212b169ade84e812e9fd701
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (720 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeotisland.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.peugeot.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f2d897b0de2c9e85ed241188a328849359b0424f6cc85c351027f37cf05acf30d693a5b9bd0c3903f73af7b34dff655ccefefa0975e37b6846dc4820707bf23e4ee6826f1615649c24fca434f022c8acbb2b6ce3e4063a2ccdc7c046fddf0df311fc9d4187fefd96a0c5d51f679e9098027ac927c4fccbabafb5c567d388aeb2ad5316c7989afd3f49fac27398f5c825563111e1d0e6e8e2caab3108a4f1852ca5ff81d09375b127c7cc2b10b7d8a74a0b9cb4c593b2eacb72c109ce28c4515905f21a40a2182867ca950f5824d47d87b979c2186c651a6e59296c1e65210b349e0a25f802e01685161e409f5287a984cc394bd4b5dfecd70409494e000bf40