auroraadvertiser.net
Issued by Amazon
About this certificate
This digital certificate with serial number 04:af:c0:50:76:ad:54:8e:8c:f0:2b:c3:5b:d3:cc:31 was issued on by Amazon.
With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=auroraadvertiser.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:af:c0:50:76:ad:54:8e:8c:f0:2b:c3:5b:d3:cc:31Serial Number (int): 6229464531008935222566404205980142641
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 8f:30:1e:83:3b:d4:4f:6d:82:6f:fc:90:05:5f:b3:23:ec:6e:99:37
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): fc:28:95:e2:8f:82:8c:7a:e6:13:11:df:52:dd:e4:d7:b1:25:a3:ec
Fingerprint (sha256): 1f:59:a5:6d:11:93:21:8a:6d:8f:00:0d:cf:16:a3:1a:4c:f4:5f:c9:34:be:1e:05:93:b8:5d:90:46:8a:1e:39
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate auroraadvertiser.net
35
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for auroraadvertiser.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
auroraadvertiser.net
*.auroraadvertiser.net
*.boonvilledailynews.com
boonvilledailynews.com
*.carthagepress.com
carthagepress.com
*.chillicothenews.com
chillicothenews.com
*.columbiatribune.com
columbiatribune.com
*.devilslakejournal.com
devilslakejournal.com
*.examiner.net
examiner.net
*.hannibal.net
hannibal.net
*.kirksvilledailyexpress.com
kirksvilledailyexpress.com
*.lakenewsonline.com
lakenewsonline.com
*.leaderjournal.com
leaderjournal.com
*.linncountyleader.com
linncountyleader.com
*.mexicoledger.com
mexicoledger.com
*.moberlymonitor.com
moberlymonitor.com
*.neoshodailynews.com
neoshodailynews.com
*.therolladailynews.com
therolladailynews.com
*.waynesvilledailyguide.com
waynesvilledailyguide.com
*.newscyclecloud.com
*.auroraadvertiser.net
*.boonvilledailynews.com
boonvilledailynews.com
*.carthagepress.com
carthagepress.com
*.chillicothenews.com
chillicothenews.com
*.columbiatribune.com
columbiatribune.com
*.devilslakejournal.com
devilslakejournal.com
*.examiner.net
examiner.net
*.hannibal.net
hannibal.net
*.kirksvilledailyexpress.com
kirksvilledailyexpress.com
*.lakenewsonline.com
lakenewsonline.com
*.leaderjournal.com
leaderjournal.com
*.linncountyleader.com
linncountyleader.com
*.mexicoledger.com
mexicoledger.com
*.moberlymonitor.com
moberlymonitor.com
*.neoshodailynews.com
neoshodailynews.com
*.therolladailynews.com
therolladailynews.com
*.waynesvilledailyguide.com
waynesvilledailyguide.com
*.newscyclecloud.com
Other certificates including the domain name auroraadvertiser.net
(limited to 100 certificates)
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
auroraadvertiser.net
*.auroraadvertiser.net
auroraadvertiser.net
incapsula.com
*.auroraadvertiser.net
*.auroraadvertiser.net
incapsula.com
incapsula.com
auroraadvertiser.net
local.brechinadvertiser.co.uk
auroraadvertiser.net
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
*.auroraadvertiser.net
statejournal.wanderful.ownlocal.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
barrie.simcoe.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
auroraadvertiser.net
*.auroraadvertiser.net
auroraadvertiser.net
incapsula.com
*.auroraadvertiser.net
*.auroraadvertiser.net
incapsula.com
incapsula.com
auroraadvertiser.net
local.brechinadvertiser.co.uk
auroraadvertiser.net
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
*.auroraadvertiser.net
statejournal.wanderful.ownlocal.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
barrie.simcoe.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.auroraadvertiser.net
incapsula.com
incapsula.com
incapsula.com
Certificate
The complete raw certificate details for auroraadvertiser.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHbjCCBlagAwIBAgIQBK/AUHatVI6M8CvDW9PMMTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEwMTgwMDAwMDBaFw0xOTExMTgx MjAwMDBaMB8xHTAbBgNVBAMTFGF1cm9yYWFkdmVydGlzZXIubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkz/0FDwxNMCbBiOWTJC+/DYbwObfbnn CCTPZvNkf92uXiv3Nch2GrQE9IcIKSPUOj7KWyIFCzbLxaegDJnkqHi4B0SMIKpW bI8OvP2NavBx4hia/hEuPe1RJjO8xJ3GJ+jQn/WLCS2R51+sU3AZSGNm30z7JljD gtzvE9MuiXhO/uau9nmZ+gyNAajYRf5tYDVoTCRzkRu13dJqc0I0hukULYWat+Kr 74Uw7/tKwXCrCT5FwZbN2dCc/kTQH2zT1ZRLmvnFaUNLNYf+bwugHwO0ZCfsys2E qpqQzz2fPd17ZB2clxMKHFn6MzJdHzza22BS4cpuAzP0Jl3QAnecpwIDAQABo4IE fTCCBHkwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FI8wHoM71E9tgm/8kAVfsyPsbpk3MIIDDQYDVR0RBIIDBDCCAwCCFGF1cm9yYWFk dmVydGlzZXIubmV0ghYqLmF1cm9yYWFkdmVydGlzZXIubmV0ghgqLmJvb252aWxs ZWRhaWx5bmV3cy5jb22CFmJvb252aWxsZWRhaWx5bmV3cy5jb22CEyouY2FydGhh Z2VwcmVzcy5jb22CEWNhcnRoYWdlcHJlc3MuY29tghUqLmNoaWxsaWNvdGhlbmV3 cy5jb22CE2NoaWxsaWNvdGhlbmV3cy5jb22CFSouY29sdW1iaWF0cmlidW5lLmNv bYITY29sdW1iaWF0cmlidW5lLmNvbYIXKi5kZXZpbHNsYWtlam91cm5hbC5jb22C FWRldmlsc2xha2Vqb3VybmFsLmNvbYIOKi5leGFtaW5lci5uZXSCDGV4YW1pbmVy Lm5ldIIOKi5oYW5uaWJhbC5uZXSCDGhhbm5pYmFsLm5ldIIcKi5raXJrc3ZpbGxl ZGFpbHlleHByZXNzLmNvbYIaa2lya3N2aWxsZWRhaWx5ZXhwcmVzcy5jb22CFCou bGFrZW5ld3NvbmxpbmUuY29tghJsYWtlbmV3c29ubGluZS5jb22CEyoubGVhZGVy am91cm5hbC5jb22CEWxlYWRlcmpvdXJuYWwuY29tghYqLmxpbm5jb3VudHlsZWFk ZXIuY29tghRsaW5uY291bnR5bGVhZGVyLmNvbYISKi5tZXhpY29sZWRnZXIuY29t ghBtZXhpY29sZWRnZXIuY29tghQqLm1vYmVybHltb25pdG9yLmNvbYISbW9iZXJs eW1vbml0b3IuY29tghUqLm5lb3Nob2RhaWx5bmV3cy5jb22CE25lb3Nob2RhaWx5 bmV3cy5jb22CFyoudGhlcm9sbGFkYWlseW5ld3MuY29tghV0aGVyb2xsYWRhaWx5 bmV3cy5jb22CGyoud2F5bmVzdmlsbGVkYWlseWd1aWRlLmNvbYIZd2F5bmVzdmls bGVkYWlseWd1aWRlLmNvbYIUKi5uZXdzY3ljbGVjbG91ZC5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEB BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3Qu Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNv bS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAuDt4cM4hYj+XTpZ+Jg2JGQiekDOMACd8YkSOs0QQ j97zdfYZAG20SBIKOYhv/GMld/Q0Wz9D8zZsfIkB72/FOE41UTYTamEf5gg00MrB woy4Jx+OvHPM/G9SXTkCrp//onUd7b3dEcpkdJX9uAeqn94FrXIYEZvtRlHrvtvy DeR/s2sUlCmeW2KieUfvidfdNFKGOsChsrcsBEmRCKYUy/aCj0wFTaqWjv+P2iSg 96EIB/02OvuuTJJgV7VXbUpfW20rbWOin66spDFl5BSagmrGkDQIhPwJ8gmFFx/5 EDAfmmQVll44gaTPXRwRVCgsxYdCkvP086P/qme0EVkSSA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkz/0FDwxNMCbBiOWTJC +/DYbwObfbnnCCTPZvNkf92uXiv3Nch2GrQE9IcIKSPUOj7KWyIFCzbLxaegDJnk qHi4B0SMIKpWbI8OvP2NavBx4hia/hEuPe1RJjO8xJ3GJ+jQn/WLCS2R51+sU3AZ SGNm30z7JljDgtzvE9MuiXhO/uau9nmZ+gyNAajYRf5tYDVoTCRzkRu13dJqc0I0 hukULYWat+Kr74Uw7/tKwXCrCT5FwZbN2dCc/kTQH2zT1ZRLmvnFaUNLNYf+bwug HwO0ZCfsys2EqpqQzz2fPd17ZB2clxMKHFn6MzJdHzza22BS4cpuAzP0Jl3QAnec pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6229464531008935222566404205980142641 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auroraadvertiser.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16953902621825755199611965239807028213190842986073379021558976728374353401236172596920843699575821181992932597608836788466348224408988157856295426824849275676300759653431150689949679409019402662025524783251763948260908357811481858895106115490535672158918325067303987136711022236249519677462547875021288042605911156198688740922944293870805049937769028548138341534788016311870687905903134352952342971348168478655525223611009725086470512199957776920444554924857117386929770355729123710643706585274242990537554446173183235190657644838921414431779801939944960540213276303718524053203693335186740553056648279406038104906919 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f301e833bd44f6d826ffc90055fb323ec6e9937 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (772 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auroraadvertiser.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auroraadvertiser.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boonvilledailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonvilledailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carthagepress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carthagepress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chillicothenews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillicothenews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiatribune.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiatribune.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devilslakejournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devilslakejournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.examiner.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'examiner.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hannibal.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannibal.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirksvilledailyexpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirksvilledailyexpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakenewsonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakenewsonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leaderjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaderjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linncountyleader.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linncountyleader.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mexicoledger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexicoledger.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moberlymonitor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moberlymonitor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neoshodailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoshodailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therolladailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therolladailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waynesvilledailyguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waynesvilledailyguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newscyclecloud.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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