subscribe.hbonow.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:e5:65:2f:98:92:5c:6b:32:c8:31:4f:f3:f4:e4:a5 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=subscribe.hbonow.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:e5:65:2f:98:92:5c:6b:32:c8:31:4f:f3:f4:e4:a5Serial Number (int): 9166456249626238851178466706678146213
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 47:38:c8:52:74:ac:dc:e9:89:86:e4:f6:ed:2b:23:fd:cc:f6:0f:4c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 4a:4f:4d:c3:20:84:ba:9d:a2:5b:7b:df:c3:82:37:05:c0:26:1d:a5
Fingerprint (sha256): 23:07:4a:9d:50:7e:f1:a2:cb:5a:91:3a:ee:8e:48:42:92:1a:19:d3:4f:d9:ba:7c:d3:91:6d:c0:03:73:c4:51
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate subscribe.hbonow.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for subscribe.hbonow.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
subscribe.hbonow.com
*.subscribe.hbonow.com
*.subscribe.hbonow.com
Other certificates including the domain name hbonow.com
(limited to 100 certificates)
play.hbonow.com
play.hbonow.com
dns-vetting1j.map.fastly.net
link.hbonow.com
link.hbonow.com
restart.hbonow.com
dns-vetting1k.map.fastly.net
dns-vetting1j.map.fastly.net
restart.hbonow.com
hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
order.hbonow.com
dns-vetting1j.map.fastly.net
alb-redirector-production-us-east-1.api.hbo.com
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
subscribe.hbonow.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1j.map.fastly.net
smetrics.hbonow.com
*.hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
hbo.map.fastly.net
link.hbonow.com
hbonow.com
dns-vetting1j.map.fastly.net
link.hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
play.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
order.hbonow.com
subscribe.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1j.map.fastly.net
hbo.map.fastly.net
*.activate.hbonow.com
hbo.map.fastly.net
dns-vetting1j.map.fastly.net
*.hbonow.com
hbo.map.fastly.net
hbo.map.fastly.net
hbonow.com
dns-vetting1j.map.fastly.net
smetrics.hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
ablink.mail.hbomax.com
hbo.map.fastly.net
dns-vetting1k.map.fastly.net
signup.hbo.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
link.hbonow.com
link.hbonow.com
hbo.map.fastly.net
activate.hbonow.com
hbo.map.fastly.net
play.hbonow.com
dns-vetting1j.map.fastly.net
hbonow.com
link.hbonow.com
student.hbonow.com
subscribe.hbonow.com
hbo.map.fastly.net
activate.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
play.hbonow.com
hbonow.com
link.hbonow.com
subscribe.hbonow.com
newsletter.assets.hbonow.com
subscribe.hbonow.com
play.hbonow.com
hbo.map.fastly.net
hbo.map.fastly.net
hbo.map.fastly.net
hbo.map.fastly.net
subscribe.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
hbo.map.fastly.net
subscribe.hbonow.com
hbo.map.fastly.net
dns-vetting1j.map.fastly.net
smetrics.hbonow.com
order.hbonow.com
play.hbonow.com
dns-vetting1j.map.fastly.net
link.hbonow.com
link.hbonow.com
restart.hbonow.com
dns-vetting1k.map.fastly.net
dns-vetting1j.map.fastly.net
restart.hbonow.com
hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
order.hbonow.com
dns-vetting1j.map.fastly.net
alb-redirector-production-us-east-1.api.hbo.com
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
subscribe.hbonow.com
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1j.map.fastly.net
smetrics.hbonow.com
*.hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
hbo.map.fastly.net
link.hbonow.com
hbonow.com
dns-vetting1j.map.fastly.net
link.hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
play.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
order.hbonow.com
subscribe.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1j.map.fastly.net
hbo.map.fastly.net
*.activate.hbonow.com
hbo.map.fastly.net
dns-vetting1j.map.fastly.net
*.hbonow.com
hbo.map.fastly.net
hbo.map.fastly.net
hbonow.com
dns-vetting1j.map.fastly.net
smetrics.hbonow.com
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
ablink.mail.hbomax.com
hbo.map.fastly.net
dns-vetting1k.map.fastly.net
signup.hbo.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
link.hbonow.com
link.hbonow.com
hbo.map.fastly.net
activate.hbonow.com
hbo.map.fastly.net
play.hbonow.com
dns-vetting1j.map.fastly.net
hbonow.com
link.hbonow.com
student.hbonow.com
subscribe.hbonow.com
hbo.map.fastly.net
activate.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
play.hbonow.com
hbonow.com
link.hbonow.com
subscribe.hbonow.com
newsletter.assets.hbonow.com
subscribe.hbonow.com
play.hbonow.com
hbo.map.fastly.net
hbo.map.fastly.net
hbo.map.fastly.net
hbo.map.fastly.net
subscribe.hbonow.com
dns-vetting1k.map.fastly.net
hbo.map.fastly.net
hbo.map.fastly.net
subscribe.hbonow.com
hbo.map.fastly.net
dns-vetting1j.map.fastly.net
smetrics.hbonow.com
order.hbonow.com
Certificate
The complete raw certificate details for subscribe.hbonow.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIQBuVlL5iSXGsyyDFP8/TkpTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA2MjUwMDAwMDBaFw0yMTA3MjUx MjAwMDBaMB8xHTAbBgNVBAMTFHN1YnNjcmliZS5oYm9ub3cuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbqUxogeOUeKElPenq9IjsWzSEu05049 t0noea1PqDOZtw1Uyd6lg7qCUoY02B0f1+gH2iSinUo7Ms3Kc6S9zuBSAE0oCpMK Yti8CDn3Sko37v2Ifz8C/UHewVQg3iUaz9gn9cNpusD7rsXRNTpoAfzivvlt49T/ zf4Ii7l6wiz4bvw260XdanZnPYnXL4dERpRgMjHZfixDlNiwczXP5J+U5xQGDYRL L1AsckVZ+hRHNzHsjHetSf+O0JHgl7U40IYctflcD0GFSnWEIAzgElxbiUQZtloJ EY797LK9tBwj7g2kWRHRR9uT01WRFAzaPZW9zawtmzW+Y3wAVgpz6wIDAQABo4IC mTCCApUwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FEc4yFJ0rNzpiYbk9u0rI/3M9g9MMDcGA1UdEQQwMC6CFHN1YnNjcmliZS5oYm9u b3cuY29tghYqLnN1YnNjcmliZS5oYm9ub3cuY29tMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq aHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1Ud IAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYI KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2Bggr BgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu Y3J0MAwGA1UdEwEB/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwD2XJQv 0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXLo3JMmAAAEAwBIMEYCIQDv X++P+DGWE3XvQdG3cCbb2yaZEWG2881pqfgbDaKbHwIhAMvD32Gfpmcm3nXQgzPS U1ZU8C6PkykUNDlEWHL32+wqAHYAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe 5vbHDsoAAAFy6NyS7AAABAMARzBFAiEAnshtUN2YIApDW6z1SXM+GEiSyPGlRBJ9 7BhsykEs7SACIHjYstVmi1t3iBh3toZR47WaDyTIpYmYHhqllLP3rlrzMA0GCSqG SIb3DQEBCwUAA4IBAQAU3zYuGnFD3kVQTTn2h6bhHxkTOey6+kd0fI6+7pUWkGuk ASkkqzkgySHWRDk42NtRtTjFnVlIA1fRGy/fY9NnmEi2IzJR+JheYzK/z0Zc9gp9 aAXyBae7Uqhd0n6LekRgbZSwjS7Yw35UPjgwmHMgHs9zOIJAXpy1GeG3OJ5qL48I YZhC9OEzH/LsY3wpJGuRNBgbCcPkD+5mmT0xrfDeiOaB/Gf6ZVjD9en5Qfp6Ww+u vCCOEk/MTq5vnK5dv8lfhMS6Qm74ICLlaxtPmGXrvX4Mj0sVUlkKoZ+V08yJTwxB vahmtnzxOCntqkgHjN6X9mYNlj++gO1qtaWmIjYe -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbqUxogeOUeKElPenq9I jsWzSEu05049t0noea1PqDOZtw1Uyd6lg7qCUoY02B0f1+gH2iSinUo7Ms3Kc6S9 zuBSAE0oCpMKYti8CDn3Sko37v2Ifz8C/UHewVQg3iUaz9gn9cNpusD7rsXRNTpo Afzivvlt49T/zf4Ii7l6wiz4bvw260XdanZnPYnXL4dERpRgMjHZfixDlNiwczXP 5J+U5xQGDYRLL1AsckVZ+hRHNzHsjHetSf+O0JHgl7U40IYctflcD0GFSnWEIAzg ElxbiUQZtloJEY797LK9tBwj7g2kWRHRR9uT01WRFAzaPZW9zawtmzW+Y3wAVgpz 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9166456249626238851178466706678146213 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-25 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscribe.hbonow.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21426280135608425827748589981698776164680859183548049249027953599709610738108117669416530659998473356972875810123067838238792790428658278526317461665371745240916789679638234196295597119964970624638570109034680003304253891639084526853269156157154900971239348991584703760732893234531554003720631363961691921757341332319295415942044141673852958815841757589882276832920791444155087528100268603755382863362924159361809339595720574927922528324234498120463919706605298796091876609901873346388450043313458540367054110634513243339290076813230854842336748889333730007678833398430920914856853368513372334460079020898830776955883 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4738c85274acdce98986e4f6ed2b23fdccf60f4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.hbonow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subscribe.hbonow.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000172e8dc93260000040300483046022100ef5fef8ff831961375ef41d1b77026dbdb26991161b6f3cd69a9f81b0da29b1f022100cbc3df619fa66726de75d08333d2535654f02e8f9329143439445872f7dbec2a0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000172e8dc92ec00000403004730450221009ec86d50dd98200a435bacf549733e184892c8f1a544127dec186cca412ced20022078d8b2d5668b5b77881877b68651e3b59a0f24c8a589981e1aa594b3f7ae5af3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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