forest-admin-api.liberty-rider.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:f4:f5:27:bc:a3:4c:a5:b9:d4:ea:9d:d7:95:e3:c4 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=forest-admin-api.liberty-rider.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:f4:f5:27:bc:a3:4c:a5:b9:d4:ea:9d:d7:95:e3:c4Serial Number (int): 11905716738393656352121044097926816708
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 84:b7:0c:86:6a:d4:ef:97:ea:8d:f7:78:30:4b:0c:2e:d9:ee:19:e9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 3b:68:a4:0e:b4:39:69:2e:7a:4a:0d:cc:f9:7c:ea:90:6a:b9:9a:54
Fingerprint (sha256): 26:09:27:42:f4:d7:38:bd:93:9f:70:b3:e2:f1:77:24:82:10:2b:ab:25:5e:d9:9c:0f:71:42:c6:50:5d:dd:0b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate forest-admin-api.liberty-rider.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for forest-admin-api.liberty-rider.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
forest-admin-api.liberty-rider.com
Other certificates including the domain name liberty-rider.com
(limited to 100 certificates)
www.masiorski.eu
dev.liberty-rider.com
roadbook-api.liberty-rider.com
api.liberty-rider.com
mydaytracker.net
www.aclaraadapters.com
angel-api.liberty-rider.com
dev.liberty-rider.com
api.liberty-rider.com
shop.liberty-rider.com
goldwing.liberty-rider.com
jobs.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
www.invoicehub.co
staging.api.liberty-rider.com
cloudfront.liberty-rider.com
staging.forest-admin-api.liberty-rider.com
lightproduction.vn
goldwing.liberty-rider.com
tiles.liberty-rider.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
holagraphcorporate.com
staging.liberty-rider.com
www.liberty-rider.com
roadbook-api.liberty-rider.com
app.beta.fund
forest-admin-api-production.liberty-rider.com
liberty-rider.com
staging.goldwing.liberty-rider.com
dev-pr.infinitydoctors.com
jobs.liberty-rider.com
staging.track-api.liberty-rider.com
api.e2e.agency
cdn.liberty-rider.com
api.liberty-rider.com
forest-admin-api.liberty-rider.com
staging.api.liberty-rider.com
auth.testnet.gamecredits.org
volks.teuestoque.com.br
help.liberty-rider.com
jobs.liberty-rider.com
www.liberty-rider.com
dev2.liberty-rider.com
staging.angel-api.liberty-rider.com
admin.starsanswer.com
www.muchon.co.kr
app.liberty-rider.com
medscienceanimations.com
api.liberty-rider.com
simplest.co.il
jobs.liberty-rider.com
boho.ekanek.app
dev.liberty-rider.com
www.liberty-rider.com
staging.track-api.liberty-rider.com
staging.root-origin.liberty-rider.com
api.liberty-rider.com
root-origin.liberty-rider.com
www.tracovid-19.ml
staging.api.liberty-rider.com
staging.cloudfront.liberty-rider.com
www.liberty-rider.com
wordpress.liberty-rider.com
reps.fabrictent.com
app.montera.io
expert.gardencompass.com
staging.ecall.liberty-rider.com
liberty-rider.com
www.hgs-ltd.com
jobs.liberty-rider.com
liberty-rider.fr
covid19safe.es
staging.app.liberty-rider.com
ssh-keys.online
maps-cloudfront.liberty-rider.com
jobs.liberty-rider.com
resume.christiannaths.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
www.liberty-rider.com
help.liberty-rider.com
staging.liberty-rider.com
api.liberty-rider.com
liberty-rider.com
www.iceberg-technology.com
forest-admin-api-staging.liberty-rider.com
dev2.liberty-rider.com
roadbook-api.liberty-rider.com
dev.liberty-rider.com
macif.liberty-rider.com
jobs.liberty-rider.com
ride.liberty-rider.com
shop.liberty-rider.com
dev.liberty-rider.com
staging.api.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
staging.ecall.liberty-rider.com
dev.liberty-rider.com
roadbook-api.liberty-rider.com
api.liberty-rider.com
mydaytracker.net
www.aclaraadapters.com
angel-api.liberty-rider.com
dev.liberty-rider.com
api.liberty-rider.com
shop.liberty-rider.com
goldwing.liberty-rider.com
jobs.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
www.invoicehub.co
staging.api.liberty-rider.com
cloudfront.liberty-rider.com
staging.forest-admin-api.liberty-rider.com
lightproduction.vn
goldwing.liberty-rider.com
tiles.liberty-rider.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
holagraphcorporate.com
staging.liberty-rider.com
www.liberty-rider.com
roadbook-api.liberty-rider.com
app.beta.fund
forest-admin-api-production.liberty-rider.com
liberty-rider.com
staging.goldwing.liberty-rider.com
dev-pr.infinitydoctors.com
jobs.liberty-rider.com
staging.track-api.liberty-rider.com
api.e2e.agency
cdn.liberty-rider.com
api.liberty-rider.com
forest-admin-api.liberty-rider.com
staging.api.liberty-rider.com
auth.testnet.gamecredits.org
volks.teuestoque.com.br
help.liberty-rider.com
jobs.liberty-rider.com
www.liberty-rider.com
dev2.liberty-rider.com
staging.angel-api.liberty-rider.com
admin.starsanswer.com
www.muchon.co.kr
app.liberty-rider.com
medscienceanimations.com
api.liberty-rider.com
simplest.co.il
jobs.liberty-rider.com
boho.ekanek.app
dev.liberty-rider.com
www.liberty-rider.com
staging.track-api.liberty-rider.com
staging.root-origin.liberty-rider.com
api.liberty-rider.com
root-origin.liberty-rider.com
www.tracovid-19.ml
staging.api.liberty-rider.com
staging.cloudfront.liberty-rider.com
www.liberty-rider.com
wordpress.liberty-rider.com
reps.fabrictent.com
app.montera.io
expert.gardencompass.com
staging.ecall.liberty-rider.com
liberty-rider.com
www.hgs-ltd.com
jobs.liberty-rider.com
liberty-rider.fr
covid19safe.es
staging.app.liberty-rider.com
ssh-keys.online
maps-cloudfront.liberty-rider.com
jobs.liberty-rider.com
resume.christiannaths.com
shop.liberty-rider.com
staging.roadbook-api.liberty-rider.com
www.liberty-rider.com
help.liberty-rider.com
staging.liberty-rider.com
api.liberty-rider.com
liberty-rider.com
www.iceberg-technology.com
forest-admin-api-staging.liberty-rider.com
dev2.liberty-rider.com
roadbook-api.liberty-rider.com
dev.liberty-rider.com
macif.liberty-rider.com
jobs.liberty-rider.com
ride.liberty-rider.com
shop.liberty-rider.com
dev.liberty-rider.com
staging.api.liberty-rider.com
help.liberty-rider.com
help.liberty-rider.com
staging.ecall.liberty-rider.com
Certificate
The complete raw certificate details for forest-admin-api.liberty-rider.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjzCCA3egAwIBAgIQCPT1J7yjTKW51Oqd15XjxDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMTcwMDAwMDBaFw0yNDAxMTMy MzU5NTlaMC0xKzApBgNVBAMTImZvcmVzdC1hZG1pbi1hcGkubGliZXJ0eS1yaWRl ci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXMQhvssgkm9H G830Z5/3zwUVg3095+cZhlUjcMESZ+PIyxqrycXhoZJB8FFfBTf+dnStJClf2mjB 8B5NduE85NhRHjWo9Sqa/n1NizawI9cnj84EzXYXvs4ZADUuSDrfTXPRlQcr9OuW /3fbBoU4FyrHG/+5a9dUmj+edp2k1djIGeNE6/7vGa1V5FWbMVqxwQjfvZoC0VvE oRL6N9z1d6MJT/xsave8v7HHk0WDvDqzEFoWpndcIVsUgHbvJ5Il61lKwLs8st2x PLz6nxL5YzxwX2bCcPA/HPb3TuCFWRDic19wzkwAM4sRCRh08uWC7aa4I4rN4dqm 0HpBSnoNAgMBAAGjggGQMIIBjDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0 W/k90DAdBgNVHQ4EFgQUhLcMhmrU75fqjfd4MEsMLtnuGekwLQYDVR0RBCYwJIIi Zm9yZXN0LWFkbWluLWFwaS5saWJlcnR5LXJpZGVyLmNvbTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAw oC6GLGh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3Js MBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw AYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC hipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYD VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOI41+YiIFbkw1w/jeggxzL7Qbsip7cYgzmHz1C7zgjqocN6VIZF0c1TBOuKg 126nsOgAk+PRlMhrFd+glt+gHbRhus0FjRg+KaavuPb3UzrURusGWC7wXGZINpvN Fssy81qXUUuIN7G8zirWAb7JTcPyv+YCWCy/U+78VxVSObwHhOpkvdvbq1tj6a/C 8G26OLjkacr5RaDbRjNmwv1Si9HWbVGqHSwZHVhRF06ETsLlothvDF9YZ/KNfVXr rwLmPqoRc7RkZ0SganaWaSOgbl14nOJSXsIWYxojjVDFBnJTU83QERJur8p1KmTQ TJK4mXibGFQ/XhGvHQNMw2sP4Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1zEIb7LIJJvRxvN9Gef 988FFYN9PefnGYZVI3DBEmfjyMsaq8nF4aGSQfBRXwU3/nZ0rSQpX9powfAeTXbh POTYUR41qPUqmv59TYs2sCPXJ4/OBM12F77OGQA1Lkg6301z0ZUHK/Trlv932waF OBcqxxv/uWvXVJo/nnadpNXYyBnjROv+7xmtVeRVmzFascEI372aAtFbxKES+jfc 9XejCU/8bGr3vL+xx5NFg7w6sxBaFqZ3XCFbFIB27yeSJetZSsC7PLLdsTy8+p8S +WM8cF9mwnDwPxz2907ghVkQ4nNfcM5MADOLEQkYdPLlgu2muCOKzeHaptB6QUp6 DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11905716738393656352121044097926816708 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forest-admin-api.liberty-rider.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26177073816492737788579590529968883797616703842775070624432170997439587104329235680345854080697272066185738651728328928467243975519685651315652730567176301586499112637029956402306210247409045579730164782104547995365964103516081002917474555677806419479688035007992973185571679827857676189813111799052521312463622864841784816939369307031475101399603355780190567113916488547030705099667395497991848261899715564981280872882277707656323846112909732650808093165025496919146073994226216776725494843489948745788390224020580385346403291938037359711933742732275882790464274673264023598829258193285990231222731312071067466103309 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 84b70c866ad4ef97ea8df778304b0c2ed9ee19e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forest-admin-api.liberty-rider.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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