digital.olivesoftware.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:37:b0:7a:bd:ac:9f:58:8a:6f:3a:a2:ba:a5:db:41 was issued on by Amazon.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=digital.olivesoftware.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:37:b0:7a:bd:ac:9f:58:8a:6f:3a:a2:ba:a5:db:41Serial Number (int): 14910663709480914142522301227081259841
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 99:ea:9c:fa:62:28:23:31:66:4c:cf:18:d5:3d:c2:04:3b:ee:17:74
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): c5:64:67:72:f4:13:89:e4:6c:53:ff:38:58:80:71:74:0c:76:bd:3e
Fingerprint (sha256): 24:5f:cf:b9:22:d5:4b:7b:4a:6c:f6:5b:d0:b0:81:b9:7f:5d:92:c8:90:7e:e3:6d:2d:0e:2c:68:90:ef:7c:aa
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate digital.olivesoftware.com
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for digital.olivesoftware.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
digital.olivesoftware.com
ireader.olivesoftware.com
staging.olivesoftware.com
iamdd.olivesoftware.com
digitalaws.olivesoftware.com
origin.olivesoftware.com
yp.olivesoftware.com
tablet.olivesoftware.com
digital2.olivesoftware.com
ireader.olivesoftware.com
staging.olivesoftware.com
iamdd.olivesoftware.com
digitalaws.olivesoftware.com
origin.olivesoftware.com
yp.olivesoftware.com
tablet.olivesoftware.com
digital2.olivesoftware.com
Other certificates including the domain name olivesoftware.com
(limited to 100 certificates)
support.engineyard.com
dev.olivesoftware.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
status.accept360.com
*.olivesoftware.com
*.qa.olivesoftware.com
staging1.olivesoftware.com
connect.olivesoftware.com
test.qa.olivesoftware.com
support.crossover.com
dev.olivesoftware.com
staging1.olivesoftware.com
onescm.com
connect.olivesoftware.com
support.symphonycommerce.com
imports.versata.com
supportsurvey.cardinal-mark.com
aliases.ignitetech.com
dev.olivesoftware.com
test.qa.olivesoftware.com
*.qa.olivesoftware.com
digital.olivesoftware.com
cse.olivesoftware.com
digital.olivesoftware.com
support.engineyard.com
classichelp.kayako.com
test.qa.olivesoftware.com
connect.olivesoftware.com
connect.olivesoftware.com
classichelp.kayako.com
support.engineyard.com
connect.olivesoftware.com
preview.olivesoftware.com
connect.olivesoftware.com
test.qa.olivesoftware.com
connect.olivesoftware.com
staging.qa.olivesoftware.com
staging.olivesoftware.com
dev.olivesoftware.com
classichelp.kayako.com
*.olivesoftware.com
connect.olivesoftware.com
cse.olivesoftware.com
connect.olivesoftware.com
status.biznessapps.com
digital.olivesoftware.com
digital2.olivesoftware.com
*.qa.olivesoftware.com
support.symphonycommerce.com
support.cardinal-mark.com
connect.olivesoftware.com
connect.olivesoftware.com
support.engineyard.com
connect.olivesoftware.com
aliases.ignitetech.com
staging.qa.olivesoftware.com
support.engineyard.com
sample.olivesoftware.com
connect.olivesoftware.com
supportsurvey.cardinal-mark.com
connect.olivesoftware.com
connect.olivesoftware.com
dnnsupport.dnnsoftware.com
classichelp.kayako.com
support.olivesoftware.com
staging1.olivesoftware.com
support.cardinal-mark.com
*.olivesoftware.com
classichelp.kayako.com
test.qa.olivesoftware.com
*.olivesoftware.com
staging1.olivesoftware.com
dev.olivesoftware.com
onescm.com
devlabs.olivesoftware.com
status.biznessapps.com
digital.olivesoftware.com
support.crossover.com
classichelp.kayako.com
support.cardinal-mark.com
staging.olivesoftware.com
supportsurvey.cardinal-mark.com
support.cardinal-mark.com
staging.qa.olivesoftware.com
support.zephyrtel.com
connect.olivesoftware.com
*.ua.olivesoftware.com
imports.versata.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
aliases.ignitetech.com
connect.olivesoftware.com
sample.olivesoftware.com
connect.olivesoftware.com
aliases.ignitetech.com
staging3.olivesoftware.com
dev.olivesoftware.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
status.accept360.com
*.olivesoftware.com
*.qa.olivesoftware.com
staging1.olivesoftware.com
connect.olivesoftware.com
test.qa.olivesoftware.com
support.crossover.com
dev.olivesoftware.com
staging1.olivesoftware.com
onescm.com
connect.olivesoftware.com
support.symphonycommerce.com
imports.versata.com
supportsurvey.cardinal-mark.com
aliases.ignitetech.com
dev.olivesoftware.com
test.qa.olivesoftware.com
*.qa.olivesoftware.com
digital.olivesoftware.com
cse.olivesoftware.com
digital.olivesoftware.com
support.engineyard.com
classichelp.kayako.com
test.qa.olivesoftware.com
connect.olivesoftware.com
connect.olivesoftware.com
classichelp.kayako.com
support.engineyard.com
connect.olivesoftware.com
preview.olivesoftware.com
connect.olivesoftware.com
test.qa.olivesoftware.com
connect.olivesoftware.com
staging.qa.olivesoftware.com
staging.olivesoftware.com
dev.olivesoftware.com
classichelp.kayako.com
*.olivesoftware.com
connect.olivesoftware.com
cse.olivesoftware.com
connect.olivesoftware.com
status.biznessapps.com
digital.olivesoftware.com
digital2.olivesoftware.com
*.qa.olivesoftware.com
support.symphonycommerce.com
support.cardinal-mark.com
connect.olivesoftware.com
connect.olivesoftware.com
support.engineyard.com
connect.olivesoftware.com
aliases.ignitetech.com
staging.qa.olivesoftware.com
support.engineyard.com
sample.olivesoftware.com
connect.olivesoftware.com
supportsurvey.cardinal-mark.com
connect.olivesoftware.com
connect.olivesoftware.com
dnnsupport.dnnsoftware.com
classichelp.kayako.com
support.olivesoftware.com
staging1.olivesoftware.com
support.cardinal-mark.com
*.olivesoftware.com
classichelp.kayako.com
test.qa.olivesoftware.com
*.olivesoftware.com
staging1.olivesoftware.com
dev.olivesoftware.com
onescm.com
devlabs.olivesoftware.com
status.biznessapps.com
digital.olivesoftware.com
support.crossover.com
classichelp.kayako.com
support.cardinal-mark.com
staging.olivesoftware.com
supportsurvey.cardinal-mark.com
support.cardinal-mark.com
staging.qa.olivesoftware.com
support.zephyrtel.com
connect.olivesoftware.com
*.ua.olivesoftware.com
imports.versata.com
status.biznessapps.com
classichelp.kayako.com
support.engineyard.com
aliases.ignitetech.com
connect.olivesoftware.com
sample.olivesoftware.com
connect.olivesoftware.com
aliases.ignitetech.com
staging3.olivesoftware.com
Certificate
The complete raw certificate details for digital.olivesoftware.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIQCzewer2sn1iKbzqiuqXbQTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNzA1MjMwMDAwMDBaFw0xODA2MjMx MjAwMDBaMCQxIjAgBgNVBAMTGWRpZ2l0YWwub2xpdmVzb2Z0d2FyZS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBOVQM3MdbaIIngfntnBnH8GI Ed8tm86tcFQOh9u2B//B99sNq3Yuu15bDz1FBc1X7eAjy3uEv3mewJmOIayyn4Wj dydi7YU/ensUn224w7vllQhkg192t/c8K757QdQ3Ekovj/6+hB3++S6x67MD7TXy Sx6xYN+onxDwtvYCSuf1DvBAQvuVphceKkJ9SfHdeQvBwIrJiGMxw467aRNt+/k5 pq3ZHLnpTV649tLUh+v1T9lnkgpot01knv5bFHfIfv1L9Wy888rGtgiBVQIVX3DA ZUfOo5HYTltMiSPNncGKiQ7PsnOXClTC8TI01nLwnfeb+wcMpKZr32XtoTP7AgMB AAGjggJGMIICQjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNV HQ4EFgQUmeqc+mIoIzFmTM8Y1T3CBDvuF3QwgfkGA1UdEQSB8TCB7oIZZGlnaXRh bC5vbGl2ZXNvZnR3YXJlLmNvbYIZaXJlYWRlci5vbGl2ZXNvZnR3YXJlLmNvbYIZ c3RhZ2luZy5vbGl2ZXNvZnR3YXJlLmNvbYIXaWFtZGQub2xpdmVzb2Z0d2FyZS5j b22CHGRpZ2l0YWxhd3Mub2xpdmVzb2Z0d2FyZS5jb22CGG9yaWdpbi5vbGl2ZXNv ZnR3YXJlLmNvbYIUeXAub2xpdmVzb2Z0d2FyZS5jb22CGHRhYmxldC5vbGl2ZXNv ZnR3YXJlLmNvbYIaZGlnaXRhbDIub2xpdmVzb2Z0d2FyZS5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAM BgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBbggSOyNzaZLn6Wdks+Dg/ gsvGyuaoN2nxdWq0QmStVNBpkqvq7Lc3IdjCTWdvmepg7RDm6YWUjVRqwgSMOh2C Jlmu6dck79LW5RJFtYJz2oqRzjT0Is3poJ9tQGuKFyjOx6CCqYNlSpCBNtwV4hVT +moV14XMk45nUaEBycj1YZxGmk8Z+FXWqdL4uzPxI0oRnUKYWUkxDSOex8H9qlWn lOooourVAkyKr1exL1wbLHIPI9soYmJ3Ciu6P8z6Zpw4MVZ/ap3YUFNdCWtl4Mjl HIHpTYkq/NhTLocJmNM1W9soFVpvihaQ2czY0yyl566U2WsfIVvIJ0DJ15kXiajG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwTlUDNzHW2iCJ4H57Zw Zx/BiBHfLZvOrXBUDofbtgf/wffbDat2LrteWw89RQXNV+3gI8t7hL95nsCZjiGs sp+Fo3cnYu2FP3p7FJ9tuMO75ZUIZINfdrf3PCu+e0HUNxJKL4/+voQd/vkuseuz A+018ksesWDfqJ8Q8Lb2Akrn9Q7wQEL7laYXHipCfUnx3XkLwcCKyYhjMcOOu2kT bfv5Oaat2Ry56U1euPbS1Ifr9U/ZZ5IKaLdNZJ7+WxR3yH79S/VsvPPKxrYIgVUC FV9wwGVHzqOR2E5bTIkjzZ3BiokOz7JzlwpUwvEyNNZy8J33m/sHDKSma99l7aEz +wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14910663709480914142522301227081259841 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-23 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital.olivesoftware.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20074304676381540088935587563771296368801057990500005783916531219034535646582853214308933527522579559504014183570936094093009985598321763011967533920552992960748446055438426210849665509264198392645069407288808189636652037051469057822459680043932550871467255957763680307821136371373924815467258858455061187078783151419639744433983735493557486578590895470225588958911671603464525811854358507184049995756853313496242678942243432405731859602858617603765259027217578021253982766615943525975990973545653261289039271454247825801073330258268084312952858245696664320652437802726139403204850672593112693752466896790514363872251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 99ea9cfa62282331664ccf18d53dc2043bee1774 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ireader.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamdd.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalaws.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yp.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.olivesoftware.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital2.olivesoftware.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005b82048ec8dcda64b9fa59d92cf8383f82cbc6cae6a83769f1756ab44264ad54d06992abeaecb73721d8c24d676f99ea60ed10e6e985948d546ac2048c3a1d822659aee9d724efd2d6e51245b58273da8a91ce34f422cde9a09f6d406b8a1728cec7a082a983654a908136dc15e21553fa6a15d785cc938e6751a101c9c8f5619c469a4f19f855d6a9d2f8bb33f1234a119d42985949310d239ec7c1fdaa55a794ea28a2ead5024c8aaf57b12f5c1b2c720f23db286262770a2bba3fccfa669c3831567f6a9dd850535d096b65e0c8e51c81e94d892afcd8532e870998d3355bdb28155a6f8a1690d9ccd8d32ca5e7ae94d96b1f215bc82740c9d7991789a8c6