fraud-3ds-service.preprodpci5.us-east-1.tktm.io
Issued by Amazon
About this certificate
This digital certificate with serial number 01:1d:d6:57:4b:6e:7e:45:d0:d0:89:31:5d:6b:0e:4d was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fraud-3ds-service.preprodpci5.us-east-1.tktm.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:1d:d6:57:4b:6e:7e:45:d0:d0:89:31:5d:6b:0e:4dSerial Number (int): 1484151956532699955406636028917386829
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: c4:1f:d7:32:44:46:bd:4a:49:94:a1:fb:71:85:b8:05:cb:4b:c3:22
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): cf:c7:fc:76:91:0f:11:70:53:ff:c0:54:cc:b7:91:9d:ea:24:23:9a
Fingerprint (sha256): 1f:bd:71:e6:9b:19:62:13:e3:70:e2:52:20:ca:11:69:33:15:19:09:8c:16:58:8f:7b:c7:94:a5:64:e1:0f:64
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate fraud-3ds-service.preprodpci5.us-east-1.tktm.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fraud-3ds-service.preprodpci5.us-east-1.tktm.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fraud-3ds-service.preprodpci5.us-east-1.tktm.io
Other certificates including the domain name tktm.io
(limited to 100 certificates)
*.cctm.dev1.nonprod3.us-east-1.tktm.io
*.nam.prd214.prodpci4.us-west-2.tktm.io
synthetics-monitoring-backend.prd214.prod9.us-east-1.tktm.io
fraud-3ds-service.prd115.preprodpci4.us-west-2.tktm.io
*.prd1688.prodpci9.us-east-1.tktm.io
pxy.cts.prod2.pci-tmaws.io
app.shared-data.prod1.us-east-1.prod-tmaws.io
prd130.preprod10.us-west-2.tktm.io
fraud-3ds-service.prd2279.qapci1.nonprod3.us-east-1.tktm.io
gateway-ui.prd1902.nonprod9.us-east-1.tktm.io
*.titan.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
thanos-query-devx.nonprod9.us-east-1.tktm.io
app.loyalty-service.preprod3.us-east-1.tktm.io
kiali.sandbox5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
prometheus-k8s.nonprod9.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.sandbox5.us-east-1.tktm.io
*.dev.amex-otl.develop.prd150.nonprod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.nam.prd214.nonprod5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
checkout.tmc.prd3392.prod10.us-west-2.tktm.io
ra.prd2269.preprodpci5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ra.prd2269.prodpci6.us-west-2.tktm.io
pxy.pci.cts.dev2.nonprod-tmaws.io
*.nam.prd214.prodpci4.us-west-2.tktm.io
app.parkwhiz-service.qa.prd235.nonprod3.us-east-1.tktm.io
fraud-3ds-service.prd115.prodpci4.us-west-2.tktm.io
bucket.prodpciconn1.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.checkout.nonprod5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
pxy.cts.preprod2.pci-tmaws.io
lightstep.prodpci.eu-central-1.tktm.io
k8s.prodpciconn2.us-west-2.tktm.io
distributor.mimir.nonprod9.us-east-1.tktm.io
*.titan.preprod3.us-east-1.tktm.io
*.prd1902.nonprod5.us-east-1.tktm.io
*.nam.prd214.nonprod3.us-east-1.tktm.io
*.nam.prd214.prodpci6.us-west-2.tktm.io
*.em.prd214.prod6.us-west-2.tktm.io
ticketmaster6.map.fastly.net
*.prd1688.prodpci9.us-east-1.tktm.io
*.titan.prod4.us-west-2.tktm.io
*.titan.nonprod3.us-east-1.tktm.io
qa1-monoql.titan.nonprod-tmaws.io
fraud-3ds-service.preprodpci5.us-east-1.tktm.io
*.bdt.nonprod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
gangway.prodpciconn1.us-east-1.tktm.io
*.nam.prd214.prodpci3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
prometheus-hpa.nonprod9.us-east-1.tktm.io
k8s.nonprod9.us-east-1.tktm.io
inventory.tktm.io
ticketmaster6.map.fastly.net
grafana-dr.sharedsvcs3.eu-central-1.tktm.io
ticketmaster6.map.fastly.net
*.prd1688.prodpci5.us-east-1.tktm.io
*.bdt.nonprod3.us-east-1.tktm.io
app.cors-proxy.prod.prd2166.prod5.us-east-1.tktm.io
querier.mimir.sandbox11.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.beta.ticketmaster.ae
prometheus-hpa.prodpciconn2.us-west-2.tktm.io
*.nam.prd214.preprodpci6.us-west-2.tktm.io
ticketmaster6.map.fastly.net
query.prodpciconn2.us-west-2.tktm.io
*.slas-service.prod.prd2166.prod5.us-east-1.tktm.io
*.nam.prd214.prodpci3.us-east-1.tktm.io
*.em.prd214.preprod6.us-west-2.tktm.io
fraud-3ds-service.prd2279.preprodpci3.us-east-1.tktm.io
ra.prd245.prodpci4.us-west-2.tktm.io
ticketmaster6.map.fastly.net
app.tmp-python-app.dev1.nonprod9.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.fraud-3ds-service.prd115.dev1.nonprod3.us-east-1.tktm.io
controller.prd1224.nonprod3.us-east-1.tktm.io
app.tmp-python-app.preprod.preprod9.us-east-1.tktm.io
*.prd124.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.prd146.preprod4.us-west-2.tktm.io
log-fastly.tm1.prod9.us-east-1.tktm.io
*.prod8.us-west-2.tktm.io
*.prd1688.prodpci3.us-east-1.tktm.io
*.fraud-3ds-service.prd2279.dev1.nonprod3.us-east-1.tktm.io
*.insurance-service.prd1721.prod6.us-west-2.tktm.io
fraud-3ds-service.prodpci6.us-west-2.tktm.io
*.nonprod7.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
dbdm.prd1688.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
synth-monitoring-stg-backend.prd214.prod9.us-east-1.tktm.io
*.nam.prd214.prodpci4.us-west-2.tktm.io
synthetics-monitoring-backend.prd214.prod9.us-east-1.tktm.io
fraud-3ds-service.prd115.preprodpci4.us-west-2.tktm.io
*.prd1688.prodpci9.us-east-1.tktm.io
pxy.cts.prod2.pci-tmaws.io
app.shared-data.prod1.us-east-1.prod-tmaws.io
prd130.preprod10.us-west-2.tktm.io
fraud-3ds-service.prd2279.qapci1.nonprod3.us-east-1.tktm.io
gateway-ui.prd1902.nonprod9.us-east-1.tktm.io
*.titan.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
thanos-query-devx.nonprod9.us-east-1.tktm.io
app.loyalty-service.preprod3.us-east-1.tktm.io
kiali.sandbox5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
prometheus-k8s.nonprod9.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.sandbox5.us-east-1.tktm.io
*.dev.amex-otl.develop.prd150.nonprod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.nam.prd214.nonprod5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
checkout.tmc.prd3392.prod10.us-west-2.tktm.io
ra.prd2269.preprodpci5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ra.prd2269.prodpci6.us-west-2.tktm.io
pxy.pci.cts.dev2.nonprod-tmaws.io
*.nam.prd214.prodpci4.us-west-2.tktm.io
app.parkwhiz-service.qa.prd235.nonprod3.us-east-1.tktm.io
fraud-3ds-service.prd115.prodpci4.us-west-2.tktm.io
bucket.prodpciconn1.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.checkout.nonprod5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
pxy.cts.preprod2.pci-tmaws.io
lightstep.prodpci.eu-central-1.tktm.io
k8s.prodpciconn2.us-west-2.tktm.io
distributor.mimir.nonprod9.us-east-1.tktm.io
*.titan.preprod3.us-east-1.tktm.io
*.prd1902.nonprod5.us-east-1.tktm.io
*.nam.prd214.nonprod3.us-east-1.tktm.io
*.nam.prd214.prodpci6.us-west-2.tktm.io
*.em.prd214.prod6.us-west-2.tktm.io
ticketmaster6.map.fastly.net
*.prd1688.prodpci9.us-east-1.tktm.io
*.titan.prod4.us-west-2.tktm.io
*.titan.nonprod3.us-east-1.tktm.io
qa1-monoql.titan.nonprod-tmaws.io
fraud-3ds-service.preprodpci5.us-east-1.tktm.io
*.bdt.nonprod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
gangway.prodpciconn1.us-east-1.tktm.io
*.nam.prd214.prodpci3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
prometheus-hpa.nonprod9.us-east-1.tktm.io
k8s.nonprod9.us-east-1.tktm.io
inventory.tktm.io
ticketmaster6.map.fastly.net
grafana-dr.sharedsvcs3.eu-central-1.tktm.io
ticketmaster6.map.fastly.net
*.prd1688.prodpci5.us-east-1.tktm.io
*.bdt.nonprod3.us-east-1.tktm.io
app.cors-proxy.prod.prd2166.prod5.us-east-1.tktm.io
querier.mimir.sandbox11.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.beta.ticketmaster.ae
prometheus-hpa.prodpciconn2.us-west-2.tktm.io
*.nam.prd214.preprodpci6.us-west-2.tktm.io
ticketmaster6.map.fastly.net
query.prodpciconn2.us-west-2.tktm.io
*.slas-service.prod.prd2166.prod5.us-east-1.tktm.io
*.nam.prd214.prodpci3.us-east-1.tktm.io
*.em.prd214.preprod6.us-west-2.tktm.io
fraud-3ds-service.prd2279.preprodpci3.us-east-1.tktm.io
ra.prd245.prodpci4.us-west-2.tktm.io
ticketmaster6.map.fastly.net
app.tmp-python-app.dev1.nonprod9.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.fraud-3ds-service.prd115.dev1.nonprod3.us-east-1.tktm.io
controller.prd1224.nonprod3.us-east-1.tktm.io
app.tmp-python-app.preprod.preprod9.us-east-1.tktm.io
*.prd124.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.prd146.preprod4.us-west-2.tktm.io
log-fastly.tm1.prod9.us-east-1.tktm.io
*.prod8.us-west-2.tktm.io
*.prd1688.prodpci3.us-east-1.tktm.io
*.fraud-3ds-service.prd2279.dev1.nonprod3.us-east-1.tktm.io
*.insurance-service.prd1721.prod6.us-west-2.tktm.io
fraud-3ds-service.prodpci6.us-west-2.tktm.io
*.nonprod7.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
dbdm.prd1688.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
synth-monitoring-stg-backend.prd214.prod9.us-east-1.tktm.io
Certificate
The complete raw certificate details for fraud-3ds-service.preprodpci5.us-east-1.tktm.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtDCCA5ygAwIBAgIQAR3WV0tufkXQ0IkxXWsOTTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MTgwMDAwMDBaFw0yMDEwMTgx MjAwMDBaMDoxODA2BgNVBAMTL2ZyYXVkLTNkcy1zZXJ2aWNlLnByZXByb2RwY2k1 LnVzLWVhc3QtMS50a3RtLmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP2KmzHtGESvq/85JXeZZovfqXnfZzilGb4D+Zs6ZKmm4cwni9sI1y0IGbSC unuarblaC9Lr7cvDwnD0MYoJn9htDMkQFl4+nXJrYPkt77pCyDTdRzKVVmD+Uy1h MN2WHxY4UYjne6c6i8ZwpWXdiVYtORNq6QXGSoNdBIWebDQk333M7HUeLgLD620x i/vqDBAvVllTIVi9YlGo+PtpCUZWfvC7LwncLu5JDdbFX+jUOVjt50crIz1/b6ve JGuJd30KMrSTxTP5mgBBtMjc8CM1D3PBO9SHy9KusPjV7GbNkeOrtC88k2+VgoLt CHNkjVkS/x1X4E7XsdbGgiU1fQIDAQABo4IBqDCCAaQwHwYDVR0jBBgwFoAUWaRm BlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFMQf1zJERr1KSZSh+3GFuAXLS8Mi MDoGA1UdEQQzMDGCL2ZyYXVkLTNkcy1zZXJ2aWNlLnByZXByb2RwY2k1LnVzLWVh c3QtMS50a3RtLmlvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAEC MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAF5RhJnqY83x XpNUUUdB34ll6bxI5fa2AeiWMPZCIgMG4TUH3kAtZirE/N7gAMeY56YHhRngDoNH vLKubCHjUdoSUld0DDgwUTIozPRlKckQJ3kKObmd6pkvXidP/NpeG8CuiMI/LUHk 3lV9BK7wpKTHYID8EDNlJmmPzbl76Jlym+inwRmxhl/l6EMkXRIpHEfCl5kGJPFO S9bgy5lSzCVDNvuBvtvfLlFHnrm+ko637S/ghGYsn3q+iRmEiSgK/zI13y1LydcC vmIVIij7lbZ9PjmAxunGuxdoa0zJvykzZzyFlI1x81pR16zNjJ6ViqQkc8JGNU51 pSXu7qQbTr4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP2KmzHtGESvq/85JXeZ ZovfqXnfZzilGb4D+Zs6ZKmm4cwni9sI1y0IGbSCunuarblaC9Lr7cvDwnD0MYoJ n9htDMkQFl4+nXJrYPkt77pCyDTdRzKVVmD+Uy1hMN2WHxY4UYjne6c6i8ZwpWXd iVYtORNq6QXGSoNdBIWebDQk333M7HUeLgLD620xi/vqDBAvVllTIVi9YlGo+Ptp CUZWfvC7LwncLu5JDdbFX+jUOVjt50crIz1/b6veJGuJd30KMrSTxTP5mgBBtMjc 8CM1D3PBO9SHy9KusPjV7GbNkeOrtC88k2+VgoLtCHNkjVkS/x1X4E7XsdbGgiU1 fQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1484151956532699955406636028917386829 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fraud-3ds-service.preprodpci5.us-east-1.tktm.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23857827272822598319682403038621856785913617871168979759301168281870915075391143247370526595242760457226577773676287248763741243226004412448549386533845668488299586776775954690953881591915507699232564850675922265843872373783372568111115521161611401867806367805975267154616507861960276555122869417993406933679085727449273956673872788857909673336899775166448202086352902652353141115761972677110020603905319445716990756152278999236928596678067407399776582363276309493776177366430987491890602782484772247200222099943955452449148637465323526318671402803312224011716007314859265791624022159232119978765834281494991262266749 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c41fd7324446bd4a4994a1fb7185b805cb4bc322 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraud-3ds-service.preprodpci5.us-east-1.tktm.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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