thinkstock-origin-production.prod.getty1.net
Issued by Amazon
About this certificate
This digital certificate with serial number 02:fc:e4:3f:04:ed:58:57:ab:4b:aa:3b:90:1f:f8:4c was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=thinkstock-origin-production.prod.getty1.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:fc:e4:3f:04:ed:58:57:ab:4b:aa:3b:90:1f:f8:4cSerial Number (int): 3971544182209351931701648269437302860
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 75:6f:6e:85:81:dc:3a:1f:0f:96:79:bd:4b:90:a6:ca:e2:7d:33:d3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): de:17:35:90:3e:db:39:0f:e5:b6:a5:76:92:7a:71:bf:a3:37:77:39
Fingerprint (sha256): 20:96:e9:bf:a0:ab:20:1c:3a:c7:c8:ed:01:34:43:f7:ca:05:f7:3d:2d:82:d1:ba:01:4f:2f:33:b3:1b:59:d6
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate thinkstock-origin-production.prod.getty1.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thinkstock-origin-production.prod.getty1.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
thinkstock-origin-production.prod.getty1.net
Other certificates including the domain name getty1.net
(limited to 100 certificates)
embed-cdn.gettyimages.com
embed-cdn.gettyimages.com
stage-gateway-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wireimage-origin-stage.nonprod.getty1.net
api.gettyimages.com
developer-portal.prod.getty1.net
origin-api.sandbox.getty1.net
wp-mktg.prod.getty1.net
istockcontenthub.lower.getty1.net
wildcard.lower.getty1.net
wp-mktg.prod.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
thinkstock-origin-production.prod.getty1.net
jake.sandbox.getty1.net
wildcard.prod.getty1.net
api.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
accountmanagement.sandbox.getty1.net
unisporkal.sandbox.getty1.net
developer-portal.prod.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
api.gettyimages.com
wp-istock-inspector.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wildcard.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
wildcard.sandbox.getty1.net
wireimage-origin-production.prod.getty1.net
accountmanagement.sandbox.getty1.net
api.gettyimages.com
wp-mktg.prod.getty1.net
api.gettyimages.com
wildcard.sandbox.getty1.net
origin-api.gettyimages.com
wildcard.prod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.nonprod.getty1.net
wildcard.prod.getty1.net
embed.gettyimages.com
origin-api.gettyimages.com
wildcard.sandbox.getty1.net
musiccontrib-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
wildcard.lower.getty1.net
developer-portal.prod.getty1.net
wp-istock-inspector.prod.getty1.net
api.gettyimages.com
wp-mktg.sandbox.getty1.net
thinkstock-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
origin-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
developer-portal.prod.getty1.net
jake.sandbox.getty1.net
wp-istock-inspector.prod.getty1.net
wp-mktg.prod.getty1.net
api.sandbox.getty1.net
wildcard.prod.getty1.net
wp-mktg.sandbox.getty1.net
wildcard.sandbox.getty1.net
embed.gettyimages.com
entmon-splunk-hec-firehose.shared.getty1.net
wp-mktg.prod.getty1.net
embed-test-cdn.lower.getty1.net
entmon-splunk-hec-firehose.shared.getty1.net
embed.gettyimages.com
*.nonprod.getty1.net
embed-test-cdn.lower.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
developer-portal.prod.getty1.net
api.gettyimages.com
entmon-splunk-hec-firehose.nonprod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
wp-mktg.prod.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
stage-gateway-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wireimage-origin-stage.nonprod.getty1.net
api.gettyimages.com
developer-portal.prod.getty1.net
origin-api.sandbox.getty1.net
wp-mktg.prod.getty1.net
istockcontenthub.lower.getty1.net
wildcard.lower.getty1.net
wp-mktg.prod.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
thinkstock-origin-production.prod.getty1.net
jake.sandbox.getty1.net
wildcard.prod.getty1.net
api.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
accountmanagement.sandbox.getty1.net
unisporkal.sandbox.getty1.net
developer-portal.prod.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
api.gettyimages.com
wp-istock-inspector.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wildcard.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
wildcard.sandbox.getty1.net
wireimage-origin-production.prod.getty1.net
accountmanagement.sandbox.getty1.net
api.gettyimages.com
wp-mktg.prod.getty1.net
api.gettyimages.com
wildcard.sandbox.getty1.net
origin-api.gettyimages.com
wildcard.prod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.nonprod.getty1.net
wildcard.prod.getty1.net
embed.gettyimages.com
origin-api.gettyimages.com
wildcard.sandbox.getty1.net
musiccontrib-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
wildcard.lower.getty1.net
developer-portal.prod.getty1.net
wp-istock-inspector.prod.getty1.net
api.gettyimages.com
wp-mktg.sandbox.getty1.net
thinkstock-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
origin-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
developer-portal.prod.getty1.net
jake.sandbox.getty1.net
wp-istock-inspector.prod.getty1.net
wp-mktg.prod.getty1.net
api.sandbox.getty1.net
wildcard.prod.getty1.net
wp-mktg.sandbox.getty1.net
wildcard.sandbox.getty1.net
embed.gettyimages.com
entmon-splunk-hec-firehose.shared.getty1.net
wp-mktg.prod.getty1.net
embed-test-cdn.lower.getty1.net
entmon-splunk-hec-firehose.shared.getty1.net
embed.gettyimages.com
*.nonprod.getty1.net
embed-test-cdn.lower.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
developer-portal.prod.getty1.net
api.gettyimages.com
entmon-splunk-hec-firehose.nonprod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
wp-mktg.prod.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
gateway-api.prod.getty1.net
Certificate
The complete raw certificate details for thinkstock-origin-production.prod.getty1.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmTCCA4GgAwIBAgIQAvzkPwTtWFerS6o7kB/4TDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODAzMjQwMDAwMDBaFw0xOTA0MjQx MjAwMDBaMDcxNTAzBgNVBAMTLHRoaW5rc3RvY2stb3JpZ2luLXByb2R1Y3Rpb24u cHJvZC5nZXR0eTEubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA wVgKnv7h/RHuH8eTXa65MjwS+LBLrcnUVSiKd1fwyPx9UByloEHNjdz24tpXuPa0 /UAHuSwId2vsS5f3MGoDQfVPUAUncFau7dSG9/wej3377MaLYjIwi08jgbbqbTi7 VkeKxCPLIl5Fqsw42tjMK+xQCvvYhT+yNIQ+ei33jwJjeL1507FWNO/GbKL604CE 88X03Xx6YPDgTnNChEkjnOowQmqUPgbRfKKffY8BrjBQflwf5dq7uPYHXIWg7irz kTkLz9iyRSycbnqlTob5NHnW/VqpgMVOUNc9E07IsGcMbJ+k5SpHwo9n27aJDlZ8 qqN3il5/BPd6OcZphOfeDQIDAQABo4IBkDCCAYwwHwYDVR0jBBgwFoAUWaRmBlKg e5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFHVvboWB3DofD5Z5vUuQpsrifTPTMDcG A1UdEQQwMC6CLHRoaW5rc3RvY2stb3JpZ2luLXByb2R1Y3Rpb24ucHJvZC5nZXR0 eTEubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeB DAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNj YTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2Ex Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZI hvcNAQELBQADggEBAFnZS55w0h3nM5C7JX4BRrtI7tUhIYUtu/gVdvHVOTE9+YYr bYyr5o7HhUEPVJpqWtHHpYPDm3muoWVVKfCYMCO4mD7+tvCy/UMElYxYQXiVtHwQ MAvt96xjlOAxxf79EIjU7HMLcw6J2/IIp+/K42WkJinXKIH9DSvH6NoFmwK6aqlr kyxnb+8sFcJsA9tQLloremMZM4tBVktOraba+XzQ7e5rTJ8zkhlQbseeaMXA/Qbx yuiRi69lxUasheSwfBiLALBLEBfFGn9jEBdSe0O5rAjM+jTGxRLWzibQqIGDzx1X RkntSKjmPoVr7GfmO3VkWKfMQQuPOxNuacVZY4E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVgKnv7h/RHuH8eTXa65 MjwS+LBLrcnUVSiKd1fwyPx9UByloEHNjdz24tpXuPa0/UAHuSwId2vsS5f3MGoD QfVPUAUncFau7dSG9/wej3377MaLYjIwi08jgbbqbTi7VkeKxCPLIl5Fqsw42tjM K+xQCvvYhT+yNIQ+ei33jwJjeL1507FWNO/GbKL604CE88X03Xx6YPDgTnNChEkj nOowQmqUPgbRfKKffY8BrjBQflwf5dq7uPYHXIWg7irzkTkLz9iyRSycbnqlTob5 NHnW/VqpgMVOUNc9E07IsGcMbJ+k5SpHwo9n27aJDlZ8qqN3il5/BPd6OcZphOfe DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3971544182209351931701648269437302860 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinkstock-origin-production.prod.getty1.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24407407734563132346965610737982136144941394495571961667771871830735874415155911639038697610155019577082008453704857800594780305589473310193307127087719152116362054784554550491510486921701586928167064451812621031743733606372741984187408920727553785158439062179218058898977802875286321154166812979413512292872176603945122289624610451901314081452690569697645177238282853745123394810761382354016748349650369272139063650836927608799606748323818426557411765122130704670355446192555207381563422945298541742843627643483612299072728515927625913039893397077052013320075372648521795799246661246355884266649579225896276151754253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 756f6e8581dc3a1f0f9679bd4b90a6cae27d33d3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkstock-origin-production.prod.getty1.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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