*.us-east-1-prod-v1.disco-api.com
Issued by Amazon
About this certificate
This digital certificate with serial number 07:7c:b3:8f:77:08:d2:96:b2:86:a7:c2:ec:31:f8:fc was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.us-east-1-prod-v1.disco-api.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:7c:b3:8f:77:08:d2:96:b2:86:a7:c2:ec:31:f8:fcSerial Number (int): 9952082698738404977204741136383604988
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: dd:3b:34:1b:fa:28:62:61:9e:b3:03:c4:b3:13:a1:f9:d7:46:88:7f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 4c:b3:d9:3d:6c:60:bb:f2:9d:da:f2:9f:40:95:f0:13:9b:6d:4f:6e
Fingerprint (sha256): 23:4f:c4:45:8c:04:fa:d8:69:d2:06:87:a8:06:e0:3a:70:cb:45:d1:70:48:85:d6:63:97:92:f0:83:97:4b:fa
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.us-east-1-prod-v1.disco-api.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.us-east-1-prod-v1.disco-api.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.us-east-1-prod-v1.disco-api.com
*.disco-api.com
*.disco-api.com
Other certificates including the domain name disco-api.com
(limited to 100 certificates)
*.disco-api.com
dev.disco-api.com
*.lambda-edge-poc-dev.dev.buckets.disco-api.com
kibana-beam-us-west-2.o11y.int.disco-api.com
dkids-test.disco-api.com
dksport-staging-vms.disco-api.com
*.disco-api.com
*.disco-api.com
kibana-eu-west-1.o11y.stage.disco-api.com
stage.disco-api.com
*.waas.disco-api.com
*.o11y.dev.disco-api.com
*.int.api.discomax.com
kibana-users.o11y.prod.disco-api.com
kibana-beam-us-east-1.o11y.dev.disco-api.com
testing-certs-tools.disco-api.com
*.eu-west-1-prod-v2.disco-api.com
*.disco-api.com
dplay-south-prod.disco-api.com
test-se.disco-api.com
*.ssp.disco-api.com
kibana-us-west-2.o11y.prod.disco-api.com
dplay-south-test.disco-api.com
*.disco-api.com
kibana-beam-us-west-2.o11y.stage.disco-api.com
*.hwa-hashbuild.disco-api.com
*.disco-api.com
*.workload-eu-west-1-int-v1.tools.disco-api.com
o11y.dev.disco-api.com
httpstest.disco-api.com
*.disco-api.com
*.disco-api.com
ap2-test.disco-api.com
testing-certs-vms.disco-api.com
*.disco-api.com
*.eu-west-1-ci.disco-api.com
*.discoveryplus.in
dplay-south-test.disco-api.com
dplay-south-test-tools.disco-api.com
httpstestelb.disco-api.com
*.disco-api.com
*.atve.hashbuild.disco-api.com
*.disco-api.com
dkids-test.disco-api.com
*.demo.dev.buckets.disco-api.com
*.int.api.discomax.com
kibana-beam-us-east-1.o11y.stage.disco-api.com
test-se.disco-api.com
dkids-test-vms.disco-api.com
*.disco-api.com
*.eu-west-1-prod.disco-api.com
dplay-south-test.disco-api.com
*.disco-api.com
testing-more-certs.disco-api.com
kibana-o11y-eu-west-1.o11y.prod.disco-api.com
*.eurosportplayer.com
stage.disco-api.com
*.us-east-1-prod-v1.disco-api.com
kibanacw-us-east-1.o11y.dev.disco-api.com
*.eurosportplayer.com
dkids-prod.disco-api.com
*.dplus-roku-dcl.buckets.disco-api.com
httpstest.disco-api.com
*.disco-api.com
dev.disco-api.com
*.ap-northeast-1-prod1.disco-api.com
sonic-eu1-test.disco-api.com
test-private-ingress-tf.edge-svcs.disco-api.com
kibana-beam-us-east-1.o11y.int.disco-api.com
disco-test.disco-api.com
*.eu-west-1-test-v2.disco-api.com
sonic-test-private.disco-api.com
httpstestelb.disco-api.com
*.disco-api.com
*.eurosportplayer.com
eu1-prod-private.disco-api.com
*.disco-api.com
*.ssp.disco-api.com
httpstest.disco-api.com
kibana-users.o11y.stage.disco-api.com
*.o11y.stage.disco-api.com
kibana-us-east-2.o11y.stage.disco-api.com
httpstest.disco-api.com
*.o11y.stage.disco-api.com
*.eu-west-1-ci-poc.disco-api.com
dkids-prod.disco-api.com
httpstest.disco-api.com
testing-more-certs-tools.disco-api.com
*.disco-api.com
*.us-east-1-prod.disco-api.com
*.us-east-1-prod.disco-api.com
dplay-south-prod.disco-api.com
kibana-us-east-1.o11y.prod.disco-api.com
dplay-south-test-vms.disco-api.com
dev-dplus-marketing.waas.disco-api.com
*.disco-api.com
*.disco-api.com
*.disco-api.com
*.disco-api.com
*.ap-northeast-1-prod-v1.disco-api.com
dev.disco-api.com
*.lambda-edge-poc-dev.dev.buckets.disco-api.com
kibana-beam-us-west-2.o11y.int.disco-api.com
dkids-test.disco-api.com
dksport-staging-vms.disco-api.com
*.disco-api.com
*.disco-api.com
kibana-eu-west-1.o11y.stage.disco-api.com
stage.disco-api.com
*.waas.disco-api.com
*.o11y.dev.disco-api.com
*.int.api.discomax.com
kibana-users.o11y.prod.disco-api.com
kibana-beam-us-east-1.o11y.dev.disco-api.com
testing-certs-tools.disco-api.com
*.eu-west-1-prod-v2.disco-api.com
*.disco-api.com
dplay-south-prod.disco-api.com
test-se.disco-api.com
*.ssp.disco-api.com
kibana-us-west-2.o11y.prod.disco-api.com
dplay-south-test.disco-api.com
*.disco-api.com
kibana-beam-us-west-2.o11y.stage.disco-api.com
*.hwa-hashbuild.disco-api.com
*.disco-api.com
*.workload-eu-west-1-int-v1.tools.disco-api.com
o11y.dev.disco-api.com
httpstest.disco-api.com
*.disco-api.com
*.disco-api.com
ap2-test.disco-api.com
testing-certs-vms.disco-api.com
*.disco-api.com
*.eu-west-1-ci.disco-api.com
*.discoveryplus.in
dplay-south-test.disco-api.com
dplay-south-test-tools.disco-api.com
httpstestelb.disco-api.com
*.disco-api.com
*.atve.hashbuild.disco-api.com
*.disco-api.com
dkids-test.disco-api.com
*.demo.dev.buckets.disco-api.com
*.int.api.discomax.com
kibana-beam-us-east-1.o11y.stage.disco-api.com
test-se.disco-api.com
dkids-test-vms.disco-api.com
*.disco-api.com
*.eu-west-1-prod.disco-api.com
dplay-south-test.disco-api.com
*.disco-api.com
testing-more-certs.disco-api.com
kibana-o11y-eu-west-1.o11y.prod.disco-api.com
*.eurosportplayer.com
stage.disco-api.com
*.us-east-1-prod-v1.disco-api.com
kibanacw-us-east-1.o11y.dev.disco-api.com
*.eurosportplayer.com
dkids-prod.disco-api.com
*.dplus-roku-dcl.buckets.disco-api.com
httpstest.disco-api.com
*.disco-api.com
dev.disco-api.com
*.ap-northeast-1-prod1.disco-api.com
sonic-eu1-test.disco-api.com
test-private-ingress-tf.edge-svcs.disco-api.com
kibana-beam-us-east-1.o11y.int.disco-api.com
disco-test.disco-api.com
*.eu-west-1-test-v2.disco-api.com
sonic-test-private.disco-api.com
httpstestelb.disco-api.com
*.disco-api.com
*.eurosportplayer.com
eu1-prod-private.disco-api.com
*.disco-api.com
*.ssp.disco-api.com
httpstest.disco-api.com
kibana-users.o11y.stage.disco-api.com
*.o11y.stage.disco-api.com
kibana-us-east-2.o11y.stage.disco-api.com
httpstest.disco-api.com
*.o11y.stage.disco-api.com
*.eu-west-1-ci-poc.disco-api.com
dkids-prod.disco-api.com
httpstest.disco-api.com
testing-more-certs-tools.disco-api.com
*.disco-api.com
*.us-east-1-prod.disco-api.com
*.us-east-1-prod.disco-api.com
dplay-south-prod.disco-api.com
kibana-us-east-1.o11y.prod.disco-api.com
dplay-south-test-vms.disco-api.com
dev-dplus-marketing.waas.disco-api.com
*.disco-api.com
*.disco-api.com
*.disco-api.com
*.disco-api.com
*.ap-northeast-1-prod-v1.disco-api.com
Certificate
The complete raw certificate details for *.us-east-1-prod-v1.disco-api.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEqTCCA5GgAwIBAgIQB3yzj3cI0payhqfC7DH4/DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMTQwMDAwMDBaFw0yMTAyMTQx MjAwMDBaMCwxKjAoBgNVBAMMISoudXMtZWFzdC0xLXByb2QtdjEuZGlzY28tYXBp LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ0nKL21Mvne6NJ/ yeGhoZe5qtN/7lGh0NH8CHjI0Saurie2nzWQf4ef3lnrZnMoGa4WuEIyJUfnRiKf +Li4/YqdFu3+JTfYd23sKQQauw1YdX4ykvg0Wdi3LM1BwTUMsyNsfvI//HtLqfkv xDgra3W8jMlzlM0tB0S9lETtgzYW1aYTlOQ8ASFpgwmUakUmM7UZfkP4vmE9gqiO J/0STbF9s9CmGUBsIHUMuPKmp76mBqywGTEtDbxXEJ1WfrsoVWnMuRHFBkGaEj0/ 17rsCqLaXfAkvm5tjFfMHWvtzwVzCEfOn0q8qbIe9J8687rDuEXzqjt4uvdIaly2 TxNfVe8CAwEAAaOCAaswggGnMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb +T3QMB0GA1UdDgQWBBTdOzQb+ihiYZ6zA8SzE6H510aIfzA9BgNVHREENjA0giEq LnVzLWVhc3QtMS1wcm9kLXYxLmRpc2NvLWFwaS5jb22CDyouZGlzY28tYXBpLmNv bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3Qu Y29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEw dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmJf006HlOulKeVyteO8cMsgfL XKTRBMA8qfmhLTwInYyEXMn8mzW3N/hieoS4HIAGF/fsz1Rh0DzS+R+5JSXC3TpH 8rlwBG2jkAQPxCHVGpWvj5g3wAr1TY4UUs/53tXQSQgrXHvyeVo6Sl7Lxv9tOOy4 fphHUQWhQ6xsH5woKc5aQJ8dQfBXhOK2d1coqjosAg0GY8Az/4P3gR5Uxg+52nOz Sj+jth9k57XcnLrDRjAmR1ovtqy9k7Dj2KcCKq3dsf/rqLPxNSWbeCAPvIwVZZXw bG76L5mFXp0TFCWfo5BVDi7VhJ0wqH23AWb03rPJjZ3RbE3m1mxMp0JCf0Q8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnScovbUy+d7o0n/J4aGh l7mq03/uUaHQ0fwIeMjRJq6uJ7afNZB/h5/eWetmcygZrha4QjIlR+dGIp/4uLj9 ip0W7f4lN9h3bewpBBq7DVh1fjKS+DRZ2LcszUHBNQyzI2x+8j/8e0up+S/EOCtr dbyMyXOUzS0HRL2URO2DNhbVphOU5DwBIWmDCZRqRSYztRl+Q/i+YT2CqI4n/RJN sX2z0KYZQGwgdQy48qanvqYGrLAZMS0NvFcQnVZ+uyhVacy5EcUGQZoSPT/XuuwK otpd8CS+bm2MV8wda+3PBXMIR86fSrypsh70nzrzusO4RfOqO3i690hqXLZPE19V 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9952082698738404977204741136383604988 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.us-east-1-prod-v1.disco-api.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19838723973625473521861084422515244365051685823910740202079579000223548277400268204085481109944748836447078960647072538998530687032264493018159584473699103750365925083134382239984577313345280779768120501864962318643683233093526527266347102790195216599410491997790094138071448785053577468205346933141384714106031657019911764756973830352425506100032286720722117324673026684709831144855099259532922385110787521607938973979378690610109108825103164338971912402437970101716279926931078405917507613780984144570803314911797331529714100453542152003415528866191194484760131793610703272338003390254056178824369703137763393492463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dd3b341bfa2862619eb303c4b313a1f9d746887f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1-prod-v1.disco-api.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disco-api.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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