*.idty.imdserve.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:2b:1e:0a:08:10:cb:a8:ba:52:53:4b:0e:96:10:eb was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.idty.imdserve.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:2b:1e:0a:08:10:cb:a8:ba:52:53:4b:0e:96:10:eb
Serial Number (int): 6870018010907496289861447555290108139
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 26:37:3a:88:d1:4f:f1:0e:98:79:7c:6d:b1:9e:4e:36:80:2d:4a:6d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f9:51:61:d7:65:76:2f:a0:7c:a7:3d:f6:78:87:d5:d2:0d:23:09:c1
Fingerprint (sha256): 1b:df:f4:bd:19:33:1a:04:33:75:76:d6:7f:bb:11:b0:34:a5:6e:e2:cb:dd:a7:b2:a1:fa:4a:ef:b1:12:b5:d9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.idty.imdserve.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.idty.imdserve.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.idty.imdserve.com
*.release-identity.madeformums.com
*.release-identity.radiotimes.com
*.release-identity.olivemagazine.com
*.release-identity.gardenersworld.com
*.release-identity.historyextra.com
*.release-identity.hitched.co.uk
*.release-identity.cyclingnews.com
*.release-identity.bikeradar.com

Other certificates including the domain name imdserve.com

(limited to 100 certificates)
feature-fab-15033.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
feature-testfe.wcpsandbox.imdserve.com
feature-fab-17849.wcpsandbox.imdserve.com
*.220triathlon.com
*.production.rdrct-serv.imdserve.com
feature-fab-24416-d.wcpsandbox.imdserve.com
feature-fab-19581.wcpsandbox.imdserve.com
feature-fab-15971.wcpsandbox.imdserve.com
feature-fab-11961.wcpsandbox.imdserve.com
feature-fab-24182.wcpsandbox.imdserve.com
feature-fab-19356.wcpsandbox.imdserve.com
feature-fab-14892.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
feature-fix-gen.wcpsandbox.imdserve.com
feature-fab-21257.wcpsandbox.imdserve.com
production.wcp.imdserve.com
bugfix-fab-17311.wcpsandbox.imdserve.com
feature-fab-17851.wcpsandbox.imdserve.com
feature-fab-21390.wcpsandbox.imdserve.com
feature-fab-14892.wcpsandbox.imdserve.com
feature-fab-19966.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
feature-loadtest.wcpsandbox.imdserve.com
feature-bazinga.wcpsandbox.imdserve.com
feature-fab-21390-n.wcpsandbox.imdserve.com
develop.wcpsandbox.imdserve.com
feature-fab-24738.wcpsandbox.imdserve.com
feature-fab-14892.wcpsandbox.imdserve.com
feature-fab-17105.wcpsandbox.imdserve.com
feature-fab-26720.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
immediate.map.fastly.net
feature-fab-14892.wcpsandbox.imdserve.com
feature-fab-15033.wcpsandbox.imdserve.com
immediate.map.fastly.net
*.preproduction.burda-int.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
feature-fab-24182.wcpsandbox.imdserve.com
feature-fab-14574.wcpsandbox.imdserve.com
immediate.map.fastly.net
immediate.map.fastly.net
migration-madeformums.wcpsandbox.imdserve.com
migration.wcpstaging.imdserve.com
feature-fab-23041.wcpsandbox.imdserve.com
feature-br-demo.wcpsandbox.imdserve.com
feature-fab-21226.wcpsandbox.imdserve.com
feature-fab-26234.wcpsandbox.imdserve.com
feature-br-demo.wcpsandbox.imdserve.com
feature-fetest.wcpsandbox.imdserve.com
feature-stv-1001.wcpsandbox.imdserve.com
feature-fab-17849.wcpsandbox.imdserve.com
feature-fab-17849.wcpsandbox.imdserve.com
feature-fab-20932.wcpsandbox.imdserve.com
feature-sktestbld.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
immediate.map.fastly.net
feature-wordpress-5-2.wcpsandbox.imdserve.com
bugfix-currentprod.wcpsandbox.imdserve.com
feature-fab-15883.wcpsandbox.imdserve.com
patch-hide-scm-checkout.wcpsandbox.imdserve.com
feature-fab-20964.wcpsandbox.imdserve.com
feature-fab-24915.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
migration.wcpstaging.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
feature-fab-17829.wcpsandbox.imdserve.com
fe-domain-alias-fix.wcpsandbox.imdserve.com
feature-fab-24182.wcpsandbox.imdserve.com
immediate.map.fastly.net
feature-template.wcpsandbox.imdserve.com
feature-airship.wcpsandbox.imdserve.com
fix-slack-wh.wcpsandbox.imdserve.com
feature-fab-18965.wcpsandbox.imdserve.com
feature-fab-18330.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
feature-fab-17849.wcpsandbox.imdserve.com
feature-fab-14892.wcpsandbox.imdserve.com
feature-wordpress-5-beta.wcpsandbox.imdserve.com
feature-fab-27407.wcpsandbox.imdserve.com
feature-postmantsts.wcpsandbox.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
immediate.map.fastly.net
feature-fab-21308.wcpsandbox.imdserve.com
feature-fab-21997.wcpsandbox.imdserve.com
feature-fab-24182.wcpsandbox.imdserve.com
feature-fab-16503.wcpsandbox.imdserve.com
immediate.map.fastly.net
feature-dummy-sitemap.wcpsandbox.imdserve.com
feature-fab-17849.wcpsandbox.imdserve.com
feature-fab-22885-i.wcpsandbox.imdserve.com
feature-fab-17849.wcpsandbox.imdserve.com
feature-fab-15033.wcpsandbox.imdserve.com
migration.wcpstaging.imdserve.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
feature-fab-17949.wcpsandbox.imdserve.com
feature-fab-19648.wcpsandbox.imdserve.com
feature-fab-24416.wcpsandbox.imdserve.com

Certificate

The complete raw certificate details for *.idty.imdserve.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIQBSseCggQy6i6UlNLDpYQ6zANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MTIwMDAwMDBaFw0xOTEwMTIx
MjAwMDBaMB4xHDAaBgNVBAMMEyouaWR0eS5pbWRzZXJ2ZS5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTMjiV/CYSvd3NmTQWJri2IKYXzVa+hR1x
VLX1I4YMFa5bNA5fHwzGL9I8i2g/2TXJAfJ7AP7AYoUaNOHd1HNM/7+KREn1vIUg
3NWFIxlxG/944jTQwBGI/SebavEAFly0SDXiDhYyU3BRYSTz18r5iqhDJt13VGx5
5X2kWIkEhtrqFSKHIUU7Zk6iZ6lHvRqJSrqzGWYAlD7qeQulF38X7QZmoUZoYGRB
vKAusZqCY2u4iakFt4d7wGmcfjpLmeOgBu5FHMz0b+6WCdAtwuO6c/rK5Iqj/9Cw
lq4oGURzf3USQ9grJsgQXG9otDh8d32cJmQEqfgjo5y6FNL+i1dxAgMBAAGjggKz
MIICrzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU
Jjc6iNFP8Q6YeXxtsZ5ONoAtSm0wggFDBgNVHREEggE6MIIBNoITKi5pZHR5Lmlt
ZHNlcnZlLmNvbYIiKi5yZWxlYXNlLWlkZW50aXR5Lm1hZGVmb3JtdW1zLmNvbYIh
Ki5yZWxlYXNlLWlkZW50aXR5LnJhZGlvdGltZXMuY29tgiQqLnJlbGVhc2UtaWRl
bnRpdHkub2xpdmVtYWdhemluZS5jb22CJSoucmVsZWFzZS1pZGVudGl0eS5nYXJk
ZW5lcnN3b3JsZC5jb22CIyoucmVsZWFzZS1pZGVudGl0eS5oaXN0b3J5ZXh0cmEu
Y29tgiAqLnJlbGVhc2UtaWRlbnRpdHkuaGl0Y2hlZC5jby51a4IiKi5yZWxlYXNl
LWlkZW50aXR5LmN5Y2xpbmduZXdzLmNvbYIgKi5yZWxlYXNlLWlkZW50aXR5LmJp
a2VyYWRhci5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFt
YXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIw
CAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j
c3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0
LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx+huJpnc2eE
V29xINXAgrEsAXiGPaCwuS2DnwURRS+3dECEUwl6AdhiYNx+nnfhHhLK6wN9kAHV
PUNzd2MUO3w12ld406DFZN+OWPALBC/71UYD+0MDqHyMvlOQeqN6BBcFFHMXFa17
Ex4QxzhQ0eWwFN3ufl0jN+Qkv0HDwd5NRMga0cuTGr5Jz8wniDfVVodeH6cokJJW
B8b2ZQiRsmINLalPbw4w/Xo/6w0cKoRq1qInV72XAPpa2NwMEX93DdA6TzoWVM93
X3XMCmrPXa37Dq6bL8ZylOV6SP5eObXqbS4ukhU5nb6hO5o8VfVQZt+P88S0qbs3
9ob/neP0tg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzI4lfwmEr3dzZk0Fia4
tiCmF81WvoUdcVS19SOGDBWuWzQOXx8Mxi/SPItoP9k1yQHyewD+wGKFGjTh3dRz
TP+/ikRJ9byFINzVhSMZcRv/eOI00MARiP0nm2rxABZctEg14g4WMlNwUWEk89fK
+YqoQybdd1RseeV9pFiJBIba6hUihyFFO2ZOomepR70aiUq6sxlmAJQ+6nkLpRd/
F+0GZqFGaGBkQbygLrGagmNruImpBbeHe8BpnH46S5njoAbuRRzM9G/ulgnQLcLj
unP6yuSKo//QsJauKBlEc391EkPYKybIEFxvaLQ4fHd9nCZkBKn4I6OcuhTS/otX
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6870018010907496289861447555290108139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.idty.imdserve.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18581795747139858938936218560304361406819355018705471861975855985370240594867575216691339586760103788482635786710659698246804126684538804347638842217808195708343419004163905019889197703238733058415686442192613013911683307786843596840549756258884372120602777497232927626573126573512710877886058092962390668223845411230017404102685297731802992262159899485865914465469907292179774323750552586078812482081973444043089246062432771816877379570491668636974732363269963611983986761692580091801223040525318526045728971758508634524000816503295353312276995590310488826105994965002401865114164260185789043030178868125346476808049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26373a88d14ff10e98797c6db19e4e36802d4a6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (314 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idty.imdserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.madeformums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.radiotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.olivemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.gardenersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.historyextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.hitched.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.cyclingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.release-identity.bikeradar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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