persistent.app.qa.aws.dotdash.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:88:f3:6f:e2:13:20:dc:aa:68:ab:89:a7:52:a8:61 was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=persistent.app.qa.aws.dotdash.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:88:f3:6f:e2:13:20:dc:aa:68:ab:89:a7:52:a8:61
Serial Number (int): 3369545854157031739029318209375479905
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7b:16:ae:4a:b4:77:8c:86:b6:f1:7c:e9:7f:bd:11:9b:f2:15:ae:42
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cb:0f:06:85:ac:2d:7b:29:a3:9e:09:78:d6:9f:e6:2e:54:e4:08:35
Fingerprint (sha256): 1c:fe:af:80:ec:f2:88:80:8f:2b:cb:77:6c:76:68:8e:5b:4b:fb:b5:bb:d6:91:14:a1:99:3c:3f:c1:bc:94:12

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate persistent.app.qa.aws.dotdash.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for persistent.app.qa.aws.dotdash.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

persistent.app.qa.aws.dotdash.com
*.internal2.persistent.app.qa.aws.dotdash.com
*.external6.persistent.app.qa.aws.dotdash.com
*.external7.persistent.app.qa.aws.dotdash.com
*.internal3.persistent.app.qa.aws.dotdash.com
*.external8.persistent.app.qa.aws.dotdash.com
*.external9.persistent.app.qa.aws.dotdash.com
*.internal1.persistent.app.qa.aws.dotdash.com
*.dotdash.com
*.qa.aws.dotdash.com
*.internal6.persistent.app.qa.aws.dotdash.com
*.external3.persistent.app.qa.aws.dotdash.com
qa.aws.dotdash.com
*.internal4.persistent.app.qa.aws.dotdash.com
*.external5.persistent.app.qa.aws.dotdash.com
dotdash.com
*.app.qa.aws.dotdash.com
*.internal8.persistent.app.qa.aws.dotdash.com
*.external1.persistent.app.qa.aws.dotdash.com
*.internal9.persistent.app.qa.aws.dotdash.com
*.external2.persistent.app.qa.aws.dotdash.com
*.internal7.persistent.app.qa.aws.dotdash.com
*.external4.persistent.app.qa.aws.dotdash.com
*.internal5.persistent.app.qa.aws.dotdash.com

Other certificates including the domain name dotdash.com

(limited to 100 certificates)
continual.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
dotdash.map.fastly.net
*.dotdash.com
*.test.aws.dotdash.com
continual.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.map.fastly.net
dotdash.map.fastly.net
*.dotdash.com
about.com
dotdash.map.fastly.net
pe-adhoc-2.app.qa.aws.dotdash.com
local.dotdash.com
pe-batch.app.qa.aws.dotdash.com
link.dotdash.com
continual.app.prod.aws.dotdash.com
*.greenhouse.dotdash.com
local.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.qa.aws.dotdash.com
a-ue1.dotdash.com
local.dotdash.com
hackerone-quarantine.app.qa.aws.dotdash.com
a-uw2.dotdash.com
*.about.com
*.dotdash.com
*.about.com
techblog.dotdash.com
*.about.com
local.dotdash.com
techblog.dotdash.com
*.about.com
*.ext1.use1.dotdash.com
*.dotdash.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.dotdash.com
groceryserver-qa.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.com
continual.app.qa.aws.dotdash.com
*.about.com
local.dotdash.com
link.dotdash.com
continual.app.qa.aws.dotdash.com
control.app.prod.aws.dotdash.com
continual.app.prod.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
*.about.com
dotdash.map.fastly.net
persistent.app.qa.aws.dotdash.com
link.dotdash.com
persistent.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
*.ext1.usw2.dotdash.com
continual.app.prod.aws.dotdash.com
a-uw2.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
pe.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
pe-adhoc-4.app.qa.aws.dotdash.com
local.dotdash.com
pe.app.qa.aws.dotdash.com
pe-batch.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
qa.aws.dotdash.com
local.dotdash.com
dotdash.com
*.ops.k8s.use1.dotdash.com
*.about.com
a-ue1.dotdash.com
persistent.app.qa.aws.dotdash.com
*.qa.aws.about.com
dotdash.map.fastly.net
continual.app.prod.aws.dotdash.com
dotdash.map.fastly.net
control.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
link.dotdash.com
*.qa.aws.about.com
persistent.app.qa.aws.dotdash.com
*.about.com
dotdash.map.fastly.net
disposable.app.qa.aws.dotdash.com

Certificate

The complete raw certificate details for persistent.app.qa.aws.dotdash.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5yedouxBikXilu2ouY7
QCDKojHxhL597qmh1qvMcaWNOdAvtsvLcdPUUQOaxSBiDIfLZ8bWpIazCYhC5jxF
0HNAfEw20JP7qP/N/FW/j+a/1AyEl4DYMbhWC0VSVpcaA+6Qh4jBoJMWK9EBzYTX
jHv8WV2sk4jdEfRbebMyQlKUhJTnhNz5pU3WHPcejbMk4jHH4VlKGPZ6zkorDe8n
Fol2bSv7cUARNjb/e7RgtSAVFBluhExQqyuDHJLImPMidNqGkkTllA/3FriVz9Wk
UjHtZfTCOfFzq7GOwgpg/umkRdwdRN3P/KG0dIyVZTK9I/w9XJP2VFp4T5oS8/h1
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3369545854157031739029318209375479905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'persistent.app.qa.aws.dotdash.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25198654393817530415763436089268525343958140779432741645648988967108155948505145787550330149290519276356029092692466706154424966948590319879491643144628421786793835848848276420449736594303969058241523105542315949507542827989888587007141973435874369297646709987897695891676274264363107994268766525413437654589839090081311810535493843155749702589614753975388036210032056837350784188378408869957761988081146115094018915493295436254911982720858925583497038367616034768102784813987965298167923004392701604172770171167986973261141075661310270373836192253351438060212812599375092778871710451926660447440299416941836090504653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b16ae4ab4778c86b6f17ce97fbd119bf215ae42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (981 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal2.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external6.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external7.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal3.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external8.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external9.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal1.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal6.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external3.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal4.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external5.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal8.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external1.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal9.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external2.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal7.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.external4.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal5.persistent.app.qa.aws.dotdash.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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