payments.magazines.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:00:ca:2c:a9:c1:14:c4:14:2b:8f:39:79:95:9c:9c was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=payments.magazines.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:00:ca:2c:a9:c1:14:c4:14:2b:8f:39:79:95:9c:9cSerial Number (int): 10637924551594802655624796609891900572
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 66:fa:70:51:70:14:cb:81:1c:5f:22:7d:fe:0c:c0:da:5b:65:56:17
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 2c:c8:03:a5:6e:40:95:70:b8:30:88:0c:1a:99:dc:2c:f5:1c:61:34
Fingerprint (sha256): 26:3d:c6:39:ee:f4:46:2a:57:02:12:a0:6c:bb:d9:d1:3f:e2:9c:cb:63:46:e7:13:d5:7c:d3:2e:14:4f:ca:9d
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate payments.magazines.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for payments.magazines.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
payments.magazines.com
payments.magazine.store
payments.magazines2.com
payments.meredithcsa.com
payments.magazine.store
payments.magazines2.com
payments.meredithcsa.com
Other certificates including the domain name magazines.com
(limited to 100 certificates)
*.imgix.net
con-nhc.magazines.com
imgix3.map.fastly.net
imgix3.map.fastly.net
imgix3.map.fastly.net
*.imgix.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
imgix3.map.fastly.net
imgix3.map.fastly.net
imgix3.map.fastly.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
specialoffers.meredith.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
media5.adlegend.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
*.agriculture.com
imgix3.map.fastly.net
imgix3.map.fastly.net
*.magazines.com
imgix3.map.fastly.net
*.imgix.net
imgix3.map.fastly.net
*.magazines.com
imgix3.map.fastly.net
secure.meredith.com
ssl379523.cloudflaressl.com
media5.adlegend.com
media5.adlegend.com
*.imgix.net
*.imgix.net
*.imgix.net
magazines.com
payments.magazines.com
imgix3.map.fastly.net
staging.payments.magazines.com
www.track.magazines.com
imgix3.map.fastly.net
*.imgix.net
*.imgix.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
*.imgix.net
payments.magazines.com
imgix3.map.fastly.net
imgix3.map.fastly.net
exchange1.magazines.com
www.magazines.com
*.imgix.net
*.imgix.net
*.imgix.net
imgix3.map.fastly.net
ssl379523.cloudflaressl.com
*.imgix.net
*.imgix.net
imgix3.map.fastly.net
www.magazines.com
*.imgix.net
imgix3.map.fastly.net
imgix3.map.fastly.net
ssl379524.cloudflaressl.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
*.imgix.net
*.secure.magazines.com
imgix3.map.fastly.net
stat.magazines.com
*.secure.magazines2.com
lockhart.magazines.com
media5.adlegend.com
*.imgix.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
imgix3.map.fastly.net
*.imgix.net
ssl379524.cloudflaressl.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
*.imgix.net
*.imgix.net
*.imgix.net
imgix3.map.fastly.net
www.magazines.com
imgix3.map.fastly.net
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
exchange1.magazines.com
stat.magazines.com
ssl379523.cloudflaressl.com
*.agriculture.com
con-nhc.magazines.com
imgix3.map.fastly.net
imgix3.map.fastly.net
imgix3.map.fastly.net
*.imgix.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
imgix3.map.fastly.net
imgix3.map.fastly.net
imgix3.map.fastly.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
specialoffers.meredith.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
media5.adlegend.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
*.agriculture.com
imgix3.map.fastly.net
imgix3.map.fastly.net
*.magazines.com
imgix3.map.fastly.net
*.imgix.net
imgix3.map.fastly.net
*.magazines.com
imgix3.map.fastly.net
secure.meredith.com
ssl379523.cloudflaressl.com
media5.adlegend.com
media5.adlegend.com
*.imgix.net
*.imgix.net
*.imgix.net
magazines.com
payments.magazines.com
imgix3.map.fastly.net
staging.payments.magazines.com
www.track.magazines.com
imgix3.map.fastly.net
*.imgix.net
*.imgix.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
*.imgix.net
payments.magazines.com
imgix3.map.fastly.net
imgix3.map.fastly.net
exchange1.magazines.com
www.magazines.com
*.imgix.net
*.imgix.net
*.imgix.net
imgix3.map.fastly.net
ssl379523.cloudflaressl.com
*.imgix.net
*.imgix.net
imgix3.map.fastly.net
www.magazines.com
*.imgix.net
imgix3.map.fastly.net
imgix3.map.fastly.net
ssl379524.cloudflaressl.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
*.imgix.net
*.secure.magazines.com
imgix3.map.fastly.net
stat.magazines.com
*.secure.magazines2.com
lockhart.magazines.com
media5.adlegend.com
*.imgix.net
ssl379523.cloudflaressl.com
imgix3.map.fastly.net
imgix3.map.fastly.net
*.imgix.net
ssl379524.cloudflaressl.com
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
*.imgix.net
*.imgix.net
*.imgix.net
imgix3.map.fastly.net
www.magazines.com
imgix3.map.fastly.net
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
imgix3.map.fastly.net
*.imgix.net
exchange1.magazines.com
stat.magazines.com
ssl379523.cloudflaressl.com
*.agriculture.com
Certificate
The complete raw certificate details for payments.magazines.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIQCADKLKnBFMQUK485eZWcnDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEwMTYwMDAwMDBaFw0yMDExMTYx MjAwMDBaMCExHzAdBgNVBAMTFnBheW1lbnRzLm1hZ2F6aW5lcy5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2Fr07oBEKKFpvUkLoseQxFyPp14j E5x9LxaZRHtnUiTS/MwQUkiUH1sMsBLM/zRRUekrlxpE6NP46ewz2Cqzlk2uOpXT Z3/PX+1e/iUPBRB/nSUJKCiRnyedpmLn09RRK9b0U/2HvdKMaitEM7iuVhDnMzUq X1XxfLvuaJGjU017anHj9xweEzGewU62JFMP1/u7Cj6jYidSj3WuMgfqDGRz3WJ3 j45TwTBUKl58OI+HRBEXbgo2mJDw27yVI/TYuJc5X+EYdNJQVx1AwN7Zqrxny2rj DHHNtT0sgJ9I1UsGIMcXEXJEJGxm3tbIc3Y2nXZ7c1FLd2WMNp9Mdut1AgMBAAGj ggLPMIICyzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUZvpwUXAUy4EcXyJ9/gzA2ltlVhcwbQYDVR0RBGYwZIIWcGF5bWVudHMubWFn YXppbmVzLmNvbYIXcGF5bWVudHMubWFnYXppbmUuc3RvcmWCF3BheW1lbnRzLm1h Z2F6aW5lczIuY29tghhwYXltZW50cy5tZXJlZGl0aGNzYS5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEB BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3Qu Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNv bS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQUGCisGAQQB1nkCBAIEgfYEgfMA 8QB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABbdU2eggAAAQD AEcwRQIgMgLms+The6AssNMwHhObUjpYBcYmxpG+CREkTS3b7/gCIQDYcPAiP1U1 n+ePa1usmCDjh5IrGatrKFv8BU43DMvhXwB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2 /0q1YMG06v9eoIMPAAABbdU2el0AAAQDAEgwRgIhAKPBcezkWBGDGZmQSKBdMoGI 98Ad02LsYon7/3lQrFh0AiEAmqAcOlxj25o51WYsnLXXGZMdgFc1Iw7S0MzLvCaq 2NAwDQYJKoZIhvcNAQELBQADggEBAC4Ww1IgsZbBdkfeYQ41hwhUvRG2LsUIOCwC eDgUPXF56oj/rOdKF8MsokGQumP+4+BS4AmQFXPai7gstPoRO7SIOCSTAPRtIDHv R3HAhBSrdYqXOYSQLRy5OAHpdKuDbjpwf7c9O24CQd+YB9Tqpa3/RhnqN/ch0Blh 120rUNkmMXWWS0ZEZvZJMYsDeFOjye/WifbY+Rv5SPtCp0/aWUNi1bdRtwoyvIGJ amYMGYoXtiIG7K2Tz55Kb+5hPaLgOM1oy+9+zPpdQdd6WnmGI2FWAsakkXK6h4k0 eETpmqov/zF8eswXjHIgaJo5hSeeXUiMD6buFN8G3euZiiYlpGI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dha9O6ARCihab1JC6LH kMRcj6deIxOcfS8WmUR7Z1Ik0vzMEFJIlB9bDLASzP80UVHpK5caROjT+OnsM9gq s5ZNrjqV02d/z1/tXv4lDwUQf50lCSgokZ8nnaZi59PUUSvW9FP9h73SjGorRDO4 rlYQ5zM1Kl9V8Xy77miRo1NNe2px4/ccHhMxnsFOtiRTD9f7uwo+o2InUo91rjIH 6gxkc91id4+OU8EwVCpefDiPh0QRF24KNpiQ8Nu8lSP02LiXOV/hGHTSUFcdQMDe 2aq8Z8tq4wxxzbU9LICfSNVLBiDHFxFyRCRsZt7WyHN2Np12e3NRS3dljDafTHbr dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10637924551594802655624796609891900572 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'payments.magazines.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26995447732476688654349946886708237737031215963379749351798880916619007140272653508224346265767027978503679797925566878320415478126732747133077742393680923189225388008756590164015238199604878304560416670954755753810931076119426415118252962612736243656483001409805601425560167205302615406266108733700422070110577353981921602328469011560689957716024842191349297956119349422599789526962127680343806556521966087358423833744471310597384323489516820893948907567982947598296231068378180482223282994135861404706002798826261380420202089000203407126337932948487929770990730959796929869743496085448497294861215921442801921223541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 66fa70517014cb811c5f227dfe0cc0da5b655617 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.magazines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.magazine.store' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.magazines2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payments.meredithcsa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016dd5367a08000004030047304502203202e6b3e4e17ba02cb0d3301e139b523a5805c626c691be0911244d2ddbeff8022100d870f0223f55359fe78f6b5bac9820e387922b19ab6b285bfc054e370ccbe15f0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016dd5367a5d0000040300483046022100a3c171ece458118319999048a05d328188f7c01dd362ec6289fbff7950ac58740221009aa01c3a5c63db9a39d5662c9cb5d719931d805735230ed2d0cccbbc26aad8d0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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