43.fpinternational.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:04:27:7a:f1:c1:57:5b:c5:b2:48:51:98:f0:ed:09 was issued on by Amazon.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=43.fpinternational.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:04:27:7a:f1:c1:57:5b:c5:b2:48:51:98:f0:ed:09
Serial Number (int): 11984621904128373910957139329717169417
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:68:75:71:f0:4a:d4:ab:cd:0b:f9:d6:30:1a:a4:7d:67:95:fd:c7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 77:b5:9a:67:8c:76:50:2c:37:a7:f4:4f:ff:c1:4e:c2:e5:e6:46:31
Fingerprint (sha256): 20:92:1b:2c:f3:ae:98:a8:e5:41:0d:f7:af:d6:4c:43:1e:7e:ff:37:95:4c:33:51:72:1b:8a:e6:13:b8:d7:7c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate 43.fpinternational.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 43.fpinternational.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

43.fpinternational.com
apprentices.aviva.co.uk
avivabroker.ie
avivaequine.ca
avivastaffpensions.co.uk
avivahealth.ie
aviva-labs.co.uk
avivasurety.biz
avivadirect.ie
bcmotorcycle.com
bcmotorcycle.uk
avivawellbeingrewards.co.uk
aviva-digital.net
advantageaviva.ca
aviva.co.uk
brokertechlaunchpad.com
avivasurety.com
avantageaviva.com
avivaresults.com
aviva-ebh.com
avivapartenaire.ca
avivaworld.at.aviva.com
brokertechlaunchpad.ca
avivawellbeingrewards.com
aviva-digital.co.uk
avivawaterprotection.ca
advantageaviva.com
avivacorpsite.at.aviva.com
aviva-digital.uk
aviva-digital.com
bcmotorcycle.co.uk
avivawaterprotection.com
avivasaleshub.com
avivastaffpension.co.uk
aviva-labs.uk
avivatrouduncoup.com
bcmotorcycle.ca
avivademosauto-enrolment.co.uk
avivasavesmarter.co.uk
avivawebcast.com
avivamerchandise.com
avivaadvantage.ca
avivatransfer.co.uk
aviva-direct.ie
autoenrolmentplanner.co.uk
avantageaviva.ca
aviva.com
avivashareplans.at.aviva.com
avivafa.com.sg
bcmotorcycle.net
avivaadvantage.com
avivabrand.com
avivascholarships.com
avivasurety.ca
avivamarine.com
avivasurety.net

Other certificates including the domain name fpinternational.com

(limited to 100 certificates)
offshore.fpinternational.com
fpinternational.com
*.fpinternational.com
cert01.tmp.aviva.com
fpinternational.com
www.avivatransfer.co.uk
fpinternational.com
cert01.as.aviva.com
e-learningportal.at.aviva.com
cert01.tmp.aviva.com
cert01.as.aviva.com
fpinternational.com

fpinternational.com
www.avivainvestors.com
fpinternational.com
www.avivatransfer.co.uk

avivaadvantage.com
fpinternational.com
www.avivapartenaire.ca
fpinternational.com
fpinternational.com
43.fpinternational.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
fpinternational.com
cert01.as.aviva.com

generalaccident.claims
www.fpinternational.com
cert01.tmp.aviva.com
services.fpinternational.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
fpinternational.com
fpinternational.com
fpinternational.com
www.avivatransfer.co.uk
cert01.tmp.aviva.com
services.fpinternational.com
cert01.tmp.aviva.com
www.avivatransfer.co.uk
dfmupload.fpinternational.com
cert01.tmp.aviva.com
cert01.as.aviva.com
friendslife.co.uk
np-cert01.as.aviva.com
cert01.tmp.aviva.com
www.avivatransfer.co.uk
cert01.tmp.aviva.com
*.fpinternational.com
cert01.as.aviva.com
fpinternational.com
fpinternational.com
cert01.tmp.aviva.com
www.avivatransfer.co.uk
fpinternational.com
fpinternational.com
www.fpinternational.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.as.aviva.com
cert01.tmp.aviva.com
cert01.as.aviva.com
www.avivainvestors.com
fpinternational.com
www.avantageaviva.com
cert01.as.aviva.com
cert01.as.aviva.com
www.fpinternational.com
www.fpinternational.com
www.avivatransfer.co.uk
www.avivainvestors.com
fpinternational.com

fpinternational.com
np-cert01.as.aviva.com
fpinternational.com
cert01.tmp.aviva.com

avivaadvantage.com
sta-portal.fpinternational.com
cert01.tmp.aviva.com
cert01.as.aviva.com
fpinternational.com
cert01.as.aviva.com
fpinternational.com
cert01.as.aviva.com
cert01.tmp.aviva.com
uat-portal.fpinternational.com
fpinternational.com
www.avivatransfer.co.uk
fpinternational.com
fpinternational.com
fpinternational.com
www.avivatransfer.co.uk
fpinternational.com

Certificate

The complete raw certificate details for 43.fpinternational.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEkvkXOflXgoMEPv37k+
0RcLLoz0z+LwB8PDOv7TJOa3ZjpSbfLmibC6Y3q1fCnG+g5pQVIlgvzK0jmjdOwt
NBJg4yDj8offUkQeAH/c1f7tlfzzX+EAWnMhQmkV6Bhe/m10ZWhZb4WvHH5/0PZs
RNdsKnSztQIKH6wAU5HSJWhMB+Pi81dIB+5jk+pogsWkcQZwArIzP0towVPqzl+B
Q/+BQCIdo3ena8O6WcQIFYqwit3wvf68ohTliTC+EQjJK2AbGs1BV3yaPGkCdJFw
wiIHKmapIF5ZSzhSoEsolf0yOaMqJ2sqv1CJYBxJlZJ/UmoJtdrTB9Pt6JLQOYRU
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11984621904128373910957139329717169417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '43.fpinternational.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21749077723699784801903848413190535833599316566228311698690539893433960727251569871963728594221027673303273843225838742243033837448391451123940609356020798078088576739037663654749019585490900641201812075238525956762164426025595529279676361674459915024787685217942825305703330201148992253492056735900761887882263980277389286533889256838758288566683686739805933989296687716218306847493447872577010473304596684060233689696519751423377649478640920400277113191644417549472894289682299934286438655845350672997789326603848651464562269468384777927824449146096050354576636222343515723111531673873278180874181612456810624865287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3687571f04ad4abcd0bf9d6301aa47d6795fdc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '43.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apprentices.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabroker.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaequine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivahealth.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivadirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-ebh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivapartenaire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaworld.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacorpsite.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatrouduncoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivademosauto-enrolment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasavesmarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawebcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamerchandise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-direct.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoenrolmentplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivashareplans.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivafa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivascholarships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001823729a9e00000040300473045022056cbd2885523f67d84f2434b9dd435322f7807711b6752375f6d9d14ae53c8a90221008b9d5f6ba1fdea042ce24d921ed0f571095edd5195556cd7361f05b651e1a90800770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001823729a9390000040300483046022100b3fbd7897023acca6c1db72f70aa739549d0bb10e6d1bf9dc01de060e9044b44022100aaf020224bb5f6545481c34807ab73f3cfa3711a06e84cb1bc1e043bcdfbd7a3007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001823729a96b0000040300473045022100f75803dedda411573e18851f90d70903c11e63068b64880e1f6a001f151caa0402203659de1f90149fb5c9515406f59b96d102e1d7e72b950a225c18ffd373b96511
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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