*.prod.r53.j2.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:4b:21:9a:0e:0c:ed:a0:aa:6f:48:13:56:7c:43:1c was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.prod.r53.j2.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:4b:21:9a:0e:0c:ed:a0:aa:6f:48:13:56:7c:43:1c
Serial Number (int): 16340839738811469660768263981558940444
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:b7:4a:c8:3c:7f:cd:d2:87:47:85:7f:0b:1b:ac:2c:c2:22:4d:c2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a5:46:30:01:1c:17:03:e5:fe:3d:4b:28:09:e8:10:c3:7a:54:4b:2a
Fingerprint (sha256): 27:10:98:83:4b:ab:3a:00:95:99:12:ea:79:0e:5c:1f:9b:cc:aa:e3:82:2c:e4:c6:7a:4b:e8:67:54:43:5b:44

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.prod.r53.j2.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prod.r53.j2.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prod.r53.j2.com
*.euw2.ccs.prod.r53.j2.com
*.euw2.prod.r53.j2.com
*.ccs1.prod.r53.j2.com
*.euw2.ccs2.prod.r53.j2.com
*.ccs.prod.r53.j2.com
*.euw2.afc.prod.r53.j2.com
*.euw2.prodfax.prod.r53.j2.com
*.ccs2.prod.r53.j2.com
*.euw2.ccs3.prod.r53.j2.com
*.afc.prod.r53.j2.com
*.prodfax.prod.r53.j2.com
*.euw2.ccs1.prod.r53.j2.com

Other certificates including the domain name j2.com

(limited to 100 certificates)
*.euw1.fstor.dev.ccs.biz
sassets.j2global.com
images.j2.com
jconnect.j2.com
*.prod.r53.j2.com
sassets.j2global.com
sassets.j2global.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.qa.r53.j2.com
sassets.j2global.com
fir.fstor.int.eu.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
mdi.fstor.eu.j2.com
www.j2.com
livedrive.j2.com
jconnect.j2.com
*.dev.j2send.j2.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.fstor.prod.r53.j2.com
sendapi.j2.com
pages.inquiry.j2.com
pages.inquiry.j2.com
mdi.fstor.eu.j2.com
ads.j2.com
livedrive.j2.com
webmail.j2.com
amp.fstor.eu.j2.com
www.j2.com
www.j2.com
livedrive.j2.com
firimg.fstor.int.eu.dev.j2.com
tfnapp.j2.com
api.mobile.j2.com
corpaccmgr.j2.com
ads.j2.com
devapi.fax.j2.com
*.dev.j2send.j2.com
tracking.inquiry.j2.com
sassets.j2global.com
secure.j2.com
firimg.fstor.int.eu.dev.j2.com
dsv.dev.j2send.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
amp.fstor.eu.dev.j2.com
fproxy.fstor.int.eu.j2.com
sassets.j2global.com
*.cloudrast.ca.j2.com
*.prod.ccs.biz
qaapi.mobile.j2.com
fproxy.fstor.int.eu.dev.j2.com
sendapi.j2.com
amp.fstor.eu.j2.com
www.j2.com
sendapi.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
sassets.j2global.com
jconnect.j2.com
*.cac1.fstor.prod.r53.j2.com
devapi.mobile.j2.com
fdc.fstor.int.eu.dev.j2.com
api.mobile.j2.com
pages.inquiry.j2.com
jsign.j2.com
*.apse2.fstor.prod.r53.j2.com
fproxy.fstor.int.eu.j2.com
confluence.j2.com
api.fax.j2.com
amp.fstor.eu.j2.com
qaapi.mobile.j2.com
sassets.j2global.com
api.securedocex.test.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
auth-poc.dev.r53.j2.com
fnsproduce.fstor.int.eu.j2.com
fnsconsume.fstor.int.eu.j2.com
sassets.j2global.com
*.dev.ccs.biz
images.j2.com
tracking.inquiry.j2.com
*.prod.r53.j2.com
jsign.test.j2.com
sassets.j2global.com
*.fstor.dev.r53.j2.com
fmf.fstor.int.eu.dev.j2.com
j2global.com
tfnapp.j2.com
qaapi.mobile.j2.com
images.j2.com
*.dev.ccs.biz
fproxy.fstor.int.eu.j2.com
amp.fstor.eu.stage.j2.com
qaapi.mobile.j2.com
api.mobile.j2.com
fts.fstor.int.eu.test.j2.com
webdial.j2.com
j2global.com

Certificate

The complete raw certificate details for *.prod.r53.j2.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIQDEshmg4M7aCqb0gTVnxDHDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAyMDkwMDAwMDBaFw0yMzAzMTAy
MzU5NTlaMBwxGjAYBgNVBAMMESoucHJvZC5yNTMuajIuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXIZtPOQKcvSrZFr0u+Wjs3ftVzXwE3lfIk
FiVU3TcGdtPa4jSpenbrcWFfzb81oNV0jI2CmhMPyXvnt8MMMnPpXo2fRhx8F2W5
68gv8nXu4Lpx2AL70gQepzNVc7rvZZxSFXYen+6HJdWHgrZfghTBNC7kNkynfRUO
Lot2nubm2Cfkspydu8PtLcWoSD0ssDIAKgMtW6P5twblAmlfdm26y4w8rrzqamV4
Pu55MuWu77eye8jOc8xV1WNWXIn3CMKlVaOeJgkNKgDdhUhzzsgyKuDfkcZ1WgW/
ovDYursEtyy0JU3/rLXHn6bbOXVwbbzYSM5RrrJME/iuGav+cwIDAQABo4ICxTCC
AsEwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFCa3
Ssg8f83Sh0eFfwsbrCzCIk3CMIIBYAYDVR0RBIIBVzCCAVOCESoucHJvZC5yNTMu
ajIuY29tghoqLmV1dzIuY2NzLnByb2QucjUzLmoyLmNvbYIWKi5ldXcyLnByb2Qu
cjUzLmoyLmNvbYIWKi5jY3MxLnByb2QucjUzLmoyLmNvbYIbKi5ldXcyLmNjczIu
cHJvZC5yNTMuajIuY29tghUqLmNjcy5wcm9kLnI1My5qMi5jb22CGiouZXV3Mi5h
ZmMucHJvZC5yNTMuajIuY29tgh4qLmV1dzIucHJvZGZheC5wcm9kLnI1My5qMi5j
b22CFiouY2NzMi5wcm9kLnI1My5qMi5jb22CGyouZXV3Mi5jY3MzLnByb2QucjUz
LmoyLmNvbYIVKi5hZmMucHJvZC5yNTMuajIuY29tghkqLnByb2RmYXgucHJvZC5y
NTMuajIuY29tghsqLmV1dzIuY2NzMS5wcm9kLnI1My5qMi5jb20wDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0
MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0x
LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF
BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0
MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL
BQADggEBALLEjxPZVdEqAYV7Kz4yYrt+x3McOVe4uyFXFbmOVV3ef8IeEtaPKMbN
tJc+9P2R9Z4k02i3DXfJG76epyA3N0t9VbzK7gnWi/CKkhpcUpjOvUUIX58Rr3kY
a6UjbM10h2fP2J4XYnpfeWzOzspvZNsKmxoQtu1MF2H1nFdQgXOhIljd+3ksntKC
U5Ucf+tHS/NNIxrDn+GcNLGbax8DERsV+CDdYmrVEv3B/KpndWbdBEGekNhivM+W
9uCQeA+XcX0fp6Znh602xsSC3d6+W9T1cA5Pwo3QGPdtlnCHR+HfdHmVcTkwNS8Z
0LVofLQao+CXMR60h8VMYT4+2YMXP5c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXIZtPOQKcvSrZFr0u+
Wjs3ftVzXwE3lfIkFiVU3TcGdtPa4jSpenbrcWFfzb81oNV0jI2CmhMPyXvnt8MM
MnPpXo2fRhx8F2W568gv8nXu4Lpx2AL70gQepzNVc7rvZZxSFXYen+6HJdWHgrZf
ghTBNC7kNkynfRUOLot2nubm2Cfkspydu8PtLcWoSD0ssDIAKgMtW6P5twblAmlf
dm26y4w8rrzqamV4Pu55MuWu77eye8jOc8xV1WNWXIn3CMKlVaOeJgkNKgDdhUhz
zsgyKuDfkcZ1WgW/ovDYursEtyy0JU3/rLXHn6bbOXVwbbzYSM5RrrJME/iuGav+
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16340839738811469660768263981558940444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prod.r53.j2.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17392178123414994832998469169250335993572236792946629105864178473677313400315400199689213466606532919857041800517686132487072216644901423441285552149228872945002239656598702105005355502887252224517514349955878433281017658796701353448029253865017824732408972532796537463130707349944629914723954262781877192002700888874972840251643417783556252412090121784307467016503520684056228751236936927237852828325035282867857114047132648610968229520587221586998803446198311595938658729961830200617713290048260696226801215726359776546396907293844239844769097028427698717009040293835628387689310239971255253088989240985881661931123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26b74ac83c7fcdd28747857f0b1bac2cc2224dc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccs1.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs2.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccs.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.afc.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.prodfax.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccs2.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs3.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afc.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodfax.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs1.prod.r53.j2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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