*.eurosportplayer.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:a2:3b:34:c3:8f:35:bb:55:34:e7:2d:dd:ae:d2:bd was issued on by Amazon.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.eurosportplayer.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:a2:3b:34:c3:8f:35:bb:55:34:e7:2d:dd:ae:d2:bd
Serial Number (int): 14134632891485574043632279384637756093
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:59:31:98:35:9d:9e:eb:6a:22:ed:27:6e:e1:23:a2:c4:44:ca:78
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 64:a5:a2:00:cf:16:bc:0f:b8:b6:61:28:9b:14:6e:89:04:dc:0f:c1
Fingerprint (sha256): 23:68:54:79:5d:e9:f4:5d:03:3b:80:ae:24:d6:af:9e:1d:f5:47:cb:a5:b1:e7:9f:e6:33:13:b3:5c:8d:06:51

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.eurosportplayer.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eurosportplayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eurosportplayer.com
*.au.eurosport.com
*.eurosport.pt
*.eurosport.com.tr
*.eurosport.com
*.eurosport.hu
*.eurosport.co.uk
*.eurosport.dk
*.mercury.dnitv.com
*.eurosport.ro
*.eurosport.rs
*.eurosport.fr
*.eurosport.bg
*.eurosport.de
*.eurosport.nl
*.it.eurosport.com
*.eurosport.ru
*.eurosport.es
*.eurosport.fi
*.eurosport.no
*.tr.eurosport.com
*.eurosport.cz
*.eurosport.it
*.disco-api.com
*.eurosport.se
*.eurosport.pl
*.espanol.eurosport.com

Other certificates including the domain name eurosportplayer.com

(limited to 100 certificates)
*.eurosport.no
*.discoveryplus.com
*.eurosportplayer.com
promo-ru.eurosportplayer.com
*.disco-api.com
promo-se.eurosportplayer.com
promo-dk.eurosportplayer.com
promo-gb.eurosportplayer.com
*.discoveryplus.com
promo-fr.eurosportplayer.com
*.eurosport.com
*.eurosport.no
*.eurosport.com
promo-at.eurosportplayer.com
promo-hu.eurosportplayer.com
promo-ie.eurosportplayer.com
*.web.eurosportplayer.com
*.eurosport.com
promo-dk.eurosportplayer.com
promo-se.eurosportplayer.com
*.discoveryplus.com
promo-nl.eurosportplayer.com
*.discoveryplus.com
promo-ie.eurosportplayer.com
promo.eurosportplayer.com
promo-es.eurosportplayer.com
promo-es.eurosportplayer.com
*.disco-api.com
promo-pl.eurosportplayer.com
promo-pl.eurosportplayer.com
promo-no.eurosportplayer.com
promo-gb.eurosportplayer.com
www.bamtechtest.com
*.eurosport.com
promo-at.eurosportplayer.com
www.120sports.com
eurosportplayer.com
layout.ssl.eurosportplayer.com
*.eurosportplayer.com
*.eurosportplayer.com
*.discoveryplus.com
promo-de.eurosportplayer.com
promo-fi.eurosportplayer.com
promo-cz.eurosportplayer.com
promo-dk.eurosportplayer.com
promo-nl.eurosportplayer.com
www.120sports.com
promo-pl.eurosportplayer.com
*.eurosportplayer.com
usercomm.ses.tracking.svcs.eurosportplayer.com
promo-ro.eurosportplayer.com
t.adbmarketing.eurosport.com
promo-gb.eurosportplayer.com
promo-se.eurosportplayer.com
promo-ro.eurosportplayer.com
promo-fi.eurosportplayer.com
promo-pl.eurosportplayer.com
www.120sports.com
www.120sports.com
promo-gb.eurosportplayer.com
promo-ro.eurosportplayer.com
promo-fi.eurosportplayer.com
*.disco-api.com
*.eurosport.com
promo-se.eurosportplayer.com
t.adbmarketing.eurosport.com
promo-dk.eurosportplayer.com
*.eurosport.com
*.eurosportplayer.com
promo-ie.eurosportplayer.com
promo-at.eurosportplayer.com
promo-gb.eurosportplayer.com
promo-no.eurosportplayer.com
promo-ru.eurosportplayer.com
*.eurosportplayer.com
*.eurosport.com
*.eurosport.no
eurosport.com
*.eurosport.com
promo-de.eurosportplayer.com
*.disco-api.com
www.120sports.com
*.disco-api.com
promo-fr.eurosportplayer.com
*.rugbyrama.fr
web.eurosportplayer.com
promo-gb.eurosportplayer.com
*.eurosport.com
promo-tr.eurosportplayer.com
promo-ie.eurosportplayer.com
promo-ie.eurosportplayer.com
promo-hu.eurosportplayer.com
promo-fi.eurosportplayer.com
promo-de.eurosportplayer.com
*.disco-api.com
*.discoveryplus.com
*.discoveryplus.com
*.discoveryplus.com
promo-pt.eurosportplayer.com
promo-ro.eurosportplayer.com

Certificate

The complete raw certificate details for *.eurosportplayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIQCqI7NMOPNbtVNOct3a7SvTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMzAwMDAwMDBaFw0yMTA0MzAx
MjAwMDBaMCAxHjAcBgNVBAMMFSouZXVyb3Nwb3J0cGxheWVyLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMxZpXp+txPqhNg/6tS5J6aYvmhi/uVE
x5E9cWyFi8BijTJUVGen8KrTtvcCp560A0uvvVyAoPEOwbCMiuA5OdReJfssncOh
oTdMIWRODWDtO2Lrar67REOjHQ3ZBqe8qq9UfwCijyuhmwNNT+1F6ZZowtBDpRro
6Oa15+98hLEiu0HTGtNkTDPpUED42y5o/JI38GAt+1DwXWYh0A2JtPph1M7EqI7/
oGbg60zxZ2o3QD3Q1V7HX2IkLqIMR3U8+vzzXIepphrJaI2MclV6eCWhhD8i2LUI
5vUNVM3FxDFUghmYPLxie8JMJBSo/o6Tmc48iN8OaeaERoDP4EVhB5UCAwEAAaOC
A1cwggNTMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW
BBRUWTGYNZ2e62oi7Sdu4SOixETKeDCCAecGA1UdEQSCAd4wggHaghUqLmV1cm9z
cG9ydHBsYXllci5jb22CEiouYXUuZXVyb3Nwb3J0LmNvbYIOKi5ldXJvc3BvcnQu
cHSCEiouZXVyb3Nwb3J0LmNvbS50coIPKi5ldXJvc3BvcnQuY29tgg4qLmV1cm9z
cG9ydC5odYIRKi5ldXJvc3BvcnQuY28udWuCDiouZXVyb3Nwb3J0LmRrghMqLm1l
cmN1cnkuZG5pdHYuY29tgg4qLmV1cm9zcG9ydC5yb4IOKi5ldXJvc3BvcnQucnOC
DiouZXVyb3Nwb3J0LmZygg4qLmV1cm9zcG9ydC5iZ4IOKi5ldXJvc3BvcnQuZGWC
DiouZXVyb3Nwb3J0Lm5sghIqLml0LmV1cm9zcG9ydC5jb22CDiouZXVyb3Nwb3J0
LnJ1gg4qLmV1cm9zcG9ydC5lc4IOKi5ldXJvc3BvcnQuZmmCDiouZXVyb3Nwb3J0
Lm5vghIqLnRyLmV1cm9zcG9ydC5jb22CDiouZXVyb3Nwb3J0LmN6gg4qLmV1cm9z
cG9ydC5pdIIPKi5kaXNjby1hcGkuY29tgg4qLmV1cm9zcG9ydC5zZYIOKi5ldXJv
c3BvcnQucGyCFyouZXNwYW5vbC5ldXJvc3BvcnQuY29tMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g
LIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAG
A1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2
BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh
MWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBADyELMH0tvOlis8sUbbSsF9UPNjBmn/YuRtluKvs/xoVjxJq
2u3iBsonin0XICiQ/OEz/DjHJOKOmssmtb0wG3bXe7FvrX2ZXDV6itGKItt8knlO
EJwl5mWKYr6NWkqVzTNB4eh48ZDIus+OVdVywLZiIPcegYY+ZScjE8aNRSjT3im1
JLHpCqv2bOOuMSrD0xM63+6YdmAXFG1kaLSx7rQgpzpDK9czf8gqEBzBJ539bAHQ
7moWpe3OZanKOb/jOZbXva+Hx42l/fDZ7luWCVVxlACGHpLZFW0dPJht8hw/G1Al
KnxNu/9ut17QioRKf5pT2lbvHmfn/DZiy9wBRf0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFmlen63E+qE2D/q1Lkn
ppi+aGL+5UTHkT1xbIWLwGKNMlRUZ6fwqtO29wKnnrQDS6+9XICg8Q7BsIyK4Dk5
1F4l+yydw6GhN0whZE4NYO07YutqvrtEQ6MdDdkGp7yqr1R/AKKPK6GbA01P7UXp
lmjC0EOlGujo5rXn73yEsSK7QdMa02RMM+lQQPjbLmj8kjfwYC37UPBdZiHQDYm0
+mHUzsSojv+gZuDrTPFnajdAPdDVXsdfYiQuogxHdTz6/PNch6mmGslojYxyVXp4
JaGEPyLYtQjm9Q1UzcXEMVSCGZg8vGJ7wkwkFKj+jpOZzjyI3w5p5oRGgM/gRWEH
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14134632891485574043632279384637756093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eurosportplayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25796820500691811914946717930818497170150696809312675559446575604328228136577372819926095932531417947689486071482629119628184592717828422785665313936806992447785920013060860624933089372737153341717999962296626830491627050404010611426684024943908498609268983736427206302789194573185813548508049307219495902459621205565812162162436879998930495692478414131464706578185405893820470730197419689873374254711207691726578262075979440087300701569040570589352468792771866525737562553806014334315308442756392334304327851060226083002961550679773562971735090678548079725321887034368573043332318908618235573331744133225943226451861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54593198359d9eeb6a22ed276ee123a2c444ca78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (478 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosportplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.au.eurosport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercury.dnitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it.eurosport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tr.eurosport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disco-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espanol.eurosport.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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