iqossvc.pmicloud.biz
Issued by Amazon
About this certificate
This digital certificate with serial number 07:42:01:94:91:d3:89:7c:fd:00:2b:ab:bf:4e:bc:69 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=iqossvc.pmicloud.biz
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:42:01:94:91:d3:89:7c:fd:00:2b:ab:bf:4e:bc:69Serial Number (int): 9647319616466424538470809282026585193
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 9e:b5:2a:40:c9:0b:73:6c:a0:03:94:43:a9:cb:e4:f8:aa:3d:4c:7f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 25:ea:28:e0:fc:7f:b7:ad:c8:1c:f5:41:30:e5:54:a3:8d:8b:8c:71
Fingerprint (sha256): 1d:68:5f:fc:68:80:37:ff:17:5e:cb:4b:95:03:39:9b:7a:bf:e0:1b:24:18:a1:56:26:d8:51:79:33:0d:e7:f1
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate iqossvc.pmicloud.biz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iqossvc.pmicloud.biz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iqossvc.pmicloud.biz
*.iqossvc.pmicloud.biz
*.iqossvc.pmicloud.biz
Other certificates including the domain name pmicloud.biz
(limited to 100 certificates)
ambari-qa.ocean.pmicloud.biz
*.cdt.pmicloud.biz
dev.elasticsearch.chatbot.pmicloud.biz
tngames.pmicloud.biz
iepm-qa.eu-west-1.aws.pmicloud.biz
*.java-api.chatbot.pmicloud.biz
whfc-dev.eu-west-1.aws.pmicloud.biz
dsvct-prd.eu-west-1.aws.pmicloud.biz
batchevents.dte.pmicloud.biz
websitefactory.pmicloud.biz
gts.pmicloud.biz
qa.crm-sms.pmicloud.biz
vpnprd.philipmorrisph.pmicloud.biz
ismsbr-prd.eu-west-1.aws.pmicloud.biz
cdra-qa.eu-west-1.aws.pmicloud.biz
vpnprd2.id-da.pmicloud.biz
webadmin.chatbot.pmicloud.biz
task.dte.pmicloud.biz
*.ocean.pmicloud.biz
www.cdt-dev.pmicloud.biz
tip.pmicloud.biz
cjm.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
qa.viber.dte.pmicloud.biz
fbi-qa.eu-west-1.aws.pmicloud.biz
ssrs-dev.eu-west-1.aws.pmicloud.biz
*.services.ocean.pmicloud.biz
vpnprd.nexthink.pmicloud.biz
pmjpisbi.pmicloud.biz
csa.cyber.pmicloud.biz
elastics.chatbot.pmicloud.biz
mirrorpl.pmicloud.biz
*.services.ocean.pmicloud.biz
mysite.pmicloud.biz
*.ua-ls.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
api-test.mozart-dev.aws.pmicloud.biz
wfiws-dev.eu-west-1.aws.pmicloud.biz
csa-qa.eu-west-1.aws.pmicloud.biz
vpnqa.dwa.pmicloud.biz
bensrq-qa.eu-west-1.aws.pmicloud.biz
chatui2.chatbot.pmicloud.biz
dev.batchevents.dte.pmicloud.biz
clipp-prd.eu-west-1.aws.pmicloud.biz
eipos.pmicloud.biz
pmplrose-qa.aws.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
dyo.pmicloud.biz
kibana.chatbot.pmicloud.biz
ismsph-dev.eu-west-1.aws.pmicloud.biz
*.games.ua-ls.pmicloud.biz
*.api.el.ocean.pmicloud.biz
auth.chatbot.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
elastics.chatbot.pmicloud.biz
entmisteunserewelt.com
ismscz-dev.eu-west-1.aws.pmicloud.biz
mdolz-qa.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
gauntlet.pmicloud.biz
tdisf-qa.eu-west-1.aws.pmicloud.biz
*.booked.pmicloud.biz
ambari-server-ds.ocean.pmicloud.biz
pse-dev.eu-west-1.aws.pmicloud.biz
dev.dyo.pmicloud.biz
iqos-id.pmicloud.biz
uaposmart.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
molecule.dte.pmicloud.biz
*.ocean.pmicloud.biz
iqossvcqas.pmicloud.biz
dyo.pmicloud.biz
bapsrq-dev.aws.pmicloud.biz
*.atool.pmicloud.biz
iqossvc.pmicloud.biz
vpn.iqossvcqas.pmicloud.biz
dev.dyo.pmicloud.biz
*.cjm.pmicloud.biz
vpn.gts.pmicloud.biz
dct.pmicloud.biz
vpnprd.ski.pmicloud.biz
unlitter.pmicloud.biz
cfghub.aws.pmicloud.biz
infrabackup9-prd.eu-west-1.aws.pmicloud.biz
gafp-prd.eu-west-1.aws.pmicloud.biz
hsrpt-qa.aws.pmicloud.biz
talmfpqa.rp.pmicloud.biz
amild-id.pmicloud.biz
vpnqa.setc.pmicloud.biz
*.games.ua-ls.pmicloud.biz
vpndev1.philipmorrisph.pmicloud.biz
auth.chatbot.pmicloud.biz
tkyvpn.tpe.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
messenger.chatbot.pmicloud.biz
hkchq-prd.eu-west-1.aws.pmicloud.biz
gmd-prd.eu-west-1.aws.pmicloud.biz
*.tpe.pmicloud.biz
vpnprd.itp.pmicloud.biz
*.cdt.pmicloud.biz
dev.elasticsearch.chatbot.pmicloud.biz
tngames.pmicloud.biz
iepm-qa.eu-west-1.aws.pmicloud.biz
*.java-api.chatbot.pmicloud.biz
whfc-dev.eu-west-1.aws.pmicloud.biz
dsvct-prd.eu-west-1.aws.pmicloud.biz
batchevents.dte.pmicloud.biz
websitefactory.pmicloud.biz
gts.pmicloud.biz
qa.crm-sms.pmicloud.biz
vpnprd.philipmorrisph.pmicloud.biz
ismsbr-prd.eu-west-1.aws.pmicloud.biz
cdra-qa.eu-west-1.aws.pmicloud.biz
vpnprd2.id-da.pmicloud.biz
webadmin.chatbot.pmicloud.biz
task.dte.pmicloud.biz
*.ocean.pmicloud.biz
www.cdt-dev.pmicloud.biz
tip.pmicloud.biz
cjm.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
qa.viber.dte.pmicloud.biz
fbi-qa.eu-west-1.aws.pmicloud.biz
ssrs-dev.eu-west-1.aws.pmicloud.biz
*.services.ocean.pmicloud.biz
vpnprd.nexthink.pmicloud.biz
pmjpisbi.pmicloud.biz
csa.cyber.pmicloud.biz
elastics.chatbot.pmicloud.biz
mirrorpl.pmicloud.biz
*.services.ocean.pmicloud.biz
mysite.pmicloud.biz
*.ua-ls.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
api-test.mozart-dev.aws.pmicloud.biz
wfiws-dev.eu-west-1.aws.pmicloud.biz
csa-qa.eu-west-1.aws.pmicloud.biz
vpnqa.dwa.pmicloud.biz
bensrq-qa.eu-west-1.aws.pmicloud.biz
chatui2.chatbot.pmicloud.biz
dev.batchevents.dte.pmicloud.biz
clipp-prd.eu-west-1.aws.pmicloud.biz
eipos.pmicloud.biz
pmplrose-qa.aws.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
dyo.pmicloud.biz
kibana.chatbot.pmicloud.biz
ismsph-dev.eu-west-1.aws.pmicloud.biz
*.games.ua-ls.pmicloud.biz
*.api.el.ocean.pmicloud.biz
auth.chatbot.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
elastics.chatbot.pmicloud.biz
entmisteunserewelt.com
ismscz-dev.eu-west-1.aws.pmicloud.biz
mdolz-qa.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
gauntlet.pmicloud.biz
tdisf-qa.eu-west-1.aws.pmicloud.biz
*.booked.pmicloud.biz
ambari-server-ds.ocean.pmicloud.biz
pse-dev.eu-west-1.aws.pmicloud.biz
dev.dyo.pmicloud.biz
iqos-id.pmicloud.biz
uaposmart.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
molecule.dte.pmicloud.biz
*.ocean.pmicloud.biz
iqossvcqas.pmicloud.biz
dyo.pmicloud.biz
bapsrq-dev.aws.pmicloud.biz
*.atool.pmicloud.biz
iqossvc.pmicloud.biz
vpn.iqossvcqas.pmicloud.biz
dev.dyo.pmicloud.biz
*.cjm.pmicloud.biz
vpn.gts.pmicloud.biz
dct.pmicloud.biz
vpnprd.ski.pmicloud.biz
unlitter.pmicloud.biz
cfghub.aws.pmicloud.biz
infrabackup9-prd.eu-west-1.aws.pmicloud.biz
gafp-prd.eu-west-1.aws.pmicloud.biz
hsrpt-qa.aws.pmicloud.biz
talmfpqa.rp.pmicloud.biz
amild-id.pmicloud.biz
vpnqa.setc.pmicloud.biz
*.games.ua-ls.pmicloud.biz
vpndev1.philipmorrisph.pmicloud.biz
auth.chatbot.pmicloud.biz
tkyvpn.tpe.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
messenger.chatbot.pmicloud.biz
hkchq-prd.eu-west-1.aws.pmicloud.biz
gmd-prd.eu-west-1.aws.pmicloud.biz
*.tpe.pmicloud.biz
vpnprd.itp.pmicloud.biz
Certificate
The complete raw certificate details for iqossvc.pmicloud.biz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEljCCA36gAwIBAgIQB0IBlJHTiXz9ACurv068aTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA2MDMwMDAwMDBaFw0yMDA3MDMx MjAwMDBaMB8xHTAbBgNVBAMTFGlxb3NzdmMucG1pY2xvdWQuYml6MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMhwX01eJ/9nzrC+LTCH3po92nH8j4XX RLWUtlq8qKJT/Dw//dU0xCjTOW3a97avjO27FHLebRj4St7JKJZESq2Kqw50lvFk 1668jedB6JSDSRgKw/45B2CXAvPWiP+5oG7RqD3gbMXp+TQIAgxODH18ne4Rpiq2 5sfYYeASFL8fvAqZOWUadsBzCRE6VfEbNu9UOOAx867o31Dp23Wzk2yme5rpCSZG qCAO7b9IPGZb8We7YG5SLb9XZXiiQVb0ns3k2VVklalK84XCzI4Nyml2hTvSXBig 8g4OV9+KsGi9IJZsDHWDy55/r1S76iNd2PFB9HAAK729PjIMwIFZjQIDAQABo4IB pTCCAaEwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FJ61KkDJC3NsoAOUQ6nL5PiqPUx/MDcGA1UdEQQwMC6CFGlxb3NzdmMucG1pY2xv dWQuYml6ghYqLmlxb3NzdmMucG1pY2xvdWQuYml6MA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq aHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1Ud IAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYI KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2Bggr BgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu Y3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN AQELBQADggEBADDbCy7hCLlUQL+2fLH8k54GfnbdGBZu/LQhLjnAMcbW1cqmHZe0 j9bYjmPyOJ6jPuwUxj1GwQTV7QNgYfNwNNJqlSJWRaVw1PUq08VR/b7p61cYzNVC CwZP8hh8HxM32Rw1Znf6AUm2kdCddGt10Xz3c6vyg9t2MSE4lwYQbT1hRDHcOELW kZL0Y3ez0qYY4Ue1VZGVti6SLKQFFeQXYYrMrroK++LkjdFtM2qq1FsV19h1uDEp CYerapArKYlYHv4oQI+xlfuOIK1zDL/D2hZWkOJ/HLOLrNs+d45tPS6hKIXWJMkQ Q9wxDnDx92iw8oki7o78RDi62yWMUDwPA8w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMhwX01eJ/9nzrC+LTCH 3po92nH8j4XXRLWUtlq8qKJT/Dw//dU0xCjTOW3a97avjO27FHLebRj4St7JKJZE Sq2Kqw50lvFk1668jedB6JSDSRgKw/45B2CXAvPWiP+5oG7RqD3gbMXp+TQIAgxO DH18ne4Rpiq25sfYYeASFL8fvAqZOWUadsBzCRE6VfEbNu9UOOAx867o31Dp23Wz k2yme5rpCSZGqCAO7b9IPGZb8We7YG5SLb9XZXiiQVb0ns3k2VVklalK84XCzI4N yml2hTvSXBig8g4OV9+KsGi9IJZsDHWDy55/r1S76iNd2PFB9HAAK729PjIMwIFZ jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9647319616466424538470809282026585193 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iqossvc.pmicloud.biz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23831641465755459189949940642260218798518786665803320996348805785134708486421520614144833640169536016086311520619476400862636893203473001226011968172943496163224857020267482947672404436961571817441698961340566534106785572193825726511512772435065379130350706922971832815605582555083254419175796855642685970062803723316273885257339478231373553681520796881464151383631689301336984851058778779622971285797377042097369357161893814137127681464165381465511181720520918255190731240991829142826769194192577833189095963292536712530938000028391973429972683465372717539871258883016259188912734570350050377775233565903540273109389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9eb52a40c90b736ca0039443a9cbe4f8aa3d4c7f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqossvc.pmicloud.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iqossvc.pmicloud.biz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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