*.prod.r53.j2.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:4b:21:9a:0e:0c:ed:a0:aa:6f:48:13:56:7c:43:1c was issued on by Amazon.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.prod.r53.j2.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:4b:21:9a:0e:0c:ed:a0:aa:6f:48:13:56:7c:43:1cSerial Number (int): 16340839738811469660768263981558940444
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 26:b7:4a:c8:3c:7f:cd:d2:87:47:85:7f:0b:1b:ac:2c:c2:22:4d:c2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): a5:46:30:01:1c:17:03:e5:fe:3d:4b:28:09:e8:10:c3:7a:54:4b:2a
Fingerprint (sha256): 27:10:98:83:4b:ab:3a:00:95:99:12:ea:79:0e:5c:1f:9b:cc:aa:e3:82:2c:e4:c6:7a:4b:e8:67:54:43:5b:44
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.prod.r53.j2.com
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.prod.r53.j2.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.prod.r53.j2.com
*.euw2.ccs.prod.r53.j2.com
*.euw2.prod.r53.j2.com
*.ccs1.prod.r53.j2.com
*.euw2.ccs2.prod.r53.j2.com
*.ccs.prod.r53.j2.com
*.euw2.afc.prod.r53.j2.com
*.euw2.prodfax.prod.r53.j2.com
*.ccs2.prod.r53.j2.com
*.euw2.ccs3.prod.r53.j2.com
*.afc.prod.r53.j2.com
*.prodfax.prod.r53.j2.com
*.euw2.ccs1.prod.r53.j2.com
*.euw2.ccs.prod.r53.j2.com
*.euw2.prod.r53.j2.com
*.ccs1.prod.r53.j2.com
*.euw2.ccs2.prod.r53.j2.com
*.ccs.prod.r53.j2.com
*.euw2.afc.prod.r53.j2.com
*.euw2.prodfax.prod.r53.j2.com
*.ccs2.prod.r53.j2.com
*.euw2.ccs3.prod.r53.j2.com
*.afc.prod.r53.j2.com
*.prodfax.prod.r53.j2.com
*.euw2.ccs1.prod.r53.j2.com
Other certificates including the domain name j2.com
(limited to 100 certificates)
*.euw1.fstor.dev.ccs.biz
sassets.j2global.com
images.j2.com
jconnect.j2.com
*.prod.r53.j2.com
sassets.j2global.com
sassets.j2global.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.qa.r53.j2.com
sassets.j2global.com
fir.fstor.int.eu.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
mdi.fstor.eu.j2.com
www.j2.com
livedrive.j2.com
jconnect.j2.com
*.dev.j2send.j2.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.fstor.prod.r53.j2.com
sendapi.j2.com
pages.inquiry.j2.com
pages.inquiry.j2.com
mdi.fstor.eu.j2.com
ads.j2.com
livedrive.j2.com
webmail.j2.com
amp.fstor.eu.j2.com
www.j2.com
www.j2.com
livedrive.j2.com
firimg.fstor.int.eu.dev.j2.com
tfnapp.j2.com
api.mobile.j2.com
corpaccmgr.j2.com
ads.j2.com
devapi.fax.j2.com
*.dev.j2send.j2.com
tracking.inquiry.j2.com
sassets.j2global.com
secure.j2.com
firimg.fstor.int.eu.dev.j2.com
dsv.dev.j2send.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
amp.fstor.eu.dev.j2.com
fproxy.fstor.int.eu.j2.com
sassets.j2global.com
*.cloudrast.ca.j2.com
*.prod.ccs.biz
qaapi.mobile.j2.com
fproxy.fstor.int.eu.dev.j2.com
sendapi.j2.com
amp.fstor.eu.j2.com
www.j2.com
sendapi.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
sassets.j2global.com
jconnect.j2.com
*.cac1.fstor.prod.r53.j2.com
devapi.mobile.j2.com
fdc.fstor.int.eu.dev.j2.com
api.mobile.j2.com
pages.inquiry.j2.com
jsign.j2.com
*.apse2.fstor.prod.r53.j2.com
fproxy.fstor.int.eu.j2.com
confluence.j2.com
api.fax.j2.com
amp.fstor.eu.j2.com
qaapi.mobile.j2.com
sassets.j2global.com
api.securedocex.test.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
auth-poc.dev.r53.j2.com
fnsproduce.fstor.int.eu.j2.com
fnsconsume.fstor.int.eu.j2.com
sassets.j2global.com
*.dev.ccs.biz
images.j2.com
tracking.inquiry.j2.com
*.prod.r53.j2.com
jsign.test.j2.com
sassets.j2global.com
*.fstor.dev.r53.j2.com
fmf.fstor.int.eu.dev.j2.com
j2global.com
tfnapp.j2.com
qaapi.mobile.j2.com
images.j2.com
*.dev.ccs.biz
fproxy.fstor.int.eu.j2.com
amp.fstor.eu.stage.j2.com
qaapi.mobile.j2.com
api.mobile.j2.com
fts.fstor.int.eu.test.j2.com
webdial.j2.com
j2global.com
sassets.j2global.com
images.j2.com
jconnect.j2.com
*.prod.r53.j2.com
sassets.j2global.com
sassets.j2global.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.qa.r53.j2.com
sassets.j2global.com
fir.fstor.int.eu.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
mdi.fstor.eu.j2.com
www.j2.com
livedrive.j2.com
jconnect.j2.com
*.dev.j2send.j2.com
amp.fstor.us.j2.com
sassets.j2global.com
*.usw2.fstor.prod.r53.j2.com
sendapi.j2.com
pages.inquiry.j2.com
pages.inquiry.j2.com
mdi.fstor.eu.j2.com
ads.j2.com
livedrive.j2.com
webmail.j2.com
amp.fstor.eu.j2.com
www.j2.com
www.j2.com
livedrive.j2.com
firimg.fstor.int.eu.dev.j2.com
tfnapp.j2.com
api.mobile.j2.com
corpaccmgr.j2.com
ads.j2.com
devapi.fax.j2.com
*.dev.j2send.j2.com
tracking.inquiry.j2.com
sassets.j2global.com
secure.j2.com
firimg.fstor.int.eu.dev.j2.com
dsv.dev.j2send.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
amp.fstor.eu.dev.j2.com
fproxy.fstor.int.eu.j2.com
sassets.j2global.com
*.cloudrast.ca.j2.com
*.prod.ccs.biz
qaapi.mobile.j2.com
fproxy.fstor.int.eu.dev.j2.com
sendapi.j2.com
amp.fstor.eu.j2.com
www.j2.com
sendapi.j2.com
*.faxops.j2.com
*.prod.r53.j2.com
sassets.j2global.com
jconnect.j2.com
*.cac1.fstor.prod.r53.j2.com
devapi.mobile.j2.com
fdc.fstor.int.eu.dev.j2.com
api.mobile.j2.com
pages.inquiry.j2.com
jsign.j2.com
*.apse2.fstor.prod.r53.j2.com
fproxy.fstor.int.eu.j2.com
confluence.j2.com
api.fax.j2.com
amp.fstor.eu.j2.com
qaapi.mobile.j2.com
sassets.j2global.com
api.securedocex.test.j2.com
fnsproduce.fstor.int.eu.dev.j2.com
auth-poc.dev.r53.j2.com
fnsproduce.fstor.int.eu.j2.com
fnsconsume.fstor.int.eu.j2.com
sassets.j2global.com
*.dev.ccs.biz
images.j2.com
tracking.inquiry.j2.com
*.prod.r53.j2.com
jsign.test.j2.com
sassets.j2global.com
*.fstor.dev.r53.j2.com
fmf.fstor.int.eu.dev.j2.com
j2global.com
tfnapp.j2.com
qaapi.mobile.j2.com
images.j2.com
*.dev.ccs.biz
fproxy.fstor.int.eu.j2.com
amp.fstor.eu.stage.j2.com
qaapi.mobile.j2.com
api.mobile.j2.com
fts.fstor.int.eu.test.j2.com
webdial.j2.com
j2global.com
Certificate
The complete raw certificate details for *.prod.r53.j2.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIQDEshmg4M7aCqb0gTVnxDHDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAyMDkwMDAwMDBaFw0yMzAzMTAy MzU5NTlaMBwxGjAYBgNVBAMMESoucHJvZC5yNTMuajIuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXIZtPOQKcvSrZFr0u+Wjs3ftVzXwE3lfIk FiVU3TcGdtPa4jSpenbrcWFfzb81oNV0jI2CmhMPyXvnt8MMMnPpXo2fRhx8F2W5 68gv8nXu4Lpx2AL70gQepzNVc7rvZZxSFXYen+6HJdWHgrZfghTBNC7kNkynfRUO Lot2nubm2Cfkspydu8PtLcWoSD0ssDIAKgMtW6P5twblAmlfdm26y4w8rrzqamV4 Pu55MuWu77eye8jOc8xV1WNWXIn3CMKlVaOeJgkNKgDdhUhzzsgyKuDfkcZ1WgW/ ovDYursEtyy0JU3/rLXHn6bbOXVwbbzYSM5RrrJME/iuGav+cwIDAQABo4ICxTCC AsEwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFCa3 Ssg8f83Sh0eFfwsbrCzCIk3CMIIBYAYDVR0RBIIBVzCCAVOCESoucHJvZC5yNTMu ajIuY29tghoqLmV1dzIuY2NzLnByb2QucjUzLmoyLmNvbYIWKi5ldXcyLnByb2Qu cjUzLmoyLmNvbYIWKi5jY3MxLnByb2QucjUzLmoyLmNvbYIbKi5ldXcyLmNjczIu cHJvZC5yNTMuajIuY29tghUqLmNjcy5wcm9kLnI1My5qMi5jb22CGiouZXV3Mi5h ZmMucHJvZC5yNTMuajIuY29tgh4qLmV1dzIucHJvZGZheC5wcm9kLnI1My5qMi5j b22CFiouY2NzMi5wcm9kLnI1My5qMi5jb22CGyouZXV3Mi5jY3MzLnByb2QucjUz LmoyLmNvbYIVKi5hZmMucHJvZC5yNTMuajIuY29tghkqLnByb2RmYXgucHJvZC5y NTMuajIuY29tghsqLmV1dzIuY2NzMS5wcm9kLnI1My5qMi5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0 MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0x LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0 MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBALLEjxPZVdEqAYV7Kz4yYrt+x3McOVe4uyFXFbmOVV3ef8IeEtaPKMbN tJc+9P2R9Z4k02i3DXfJG76epyA3N0t9VbzK7gnWi/CKkhpcUpjOvUUIX58Rr3kY a6UjbM10h2fP2J4XYnpfeWzOzspvZNsKmxoQtu1MF2H1nFdQgXOhIljd+3ksntKC U5Ucf+tHS/NNIxrDn+GcNLGbax8DERsV+CDdYmrVEv3B/KpndWbdBEGekNhivM+W 9uCQeA+XcX0fp6Znh602xsSC3d6+W9T1cA5Pwo3QGPdtlnCHR+HfdHmVcTkwNS8Z 0LVofLQao+CXMR60h8VMYT4+2YMXP5c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXIZtPOQKcvSrZFr0u+ Wjs3ftVzXwE3lfIkFiVU3TcGdtPa4jSpenbrcWFfzb81oNV0jI2CmhMPyXvnt8MM MnPpXo2fRhx8F2W568gv8nXu4Lpx2AL70gQepzNVc7rvZZxSFXYen+6HJdWHgrZf ghTBNC7kNkynfRUOLot2nubm2Cfkspydu8PtLcWoSD0ssDIAKgMtW6P5twblAmlf dm26y4w8rrzqamV4Pu55MuWu77eye8jOc8xV1WNWXIn3CMKlVaOeJgkNKgDdhUhz zsgyKuDfkcZ1WgW/ovDYursEtyy0JU3/rLXHn6bbOXVwbbzYSM5RrrJME/iuGav+ cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16340839738811469660768263981558940444 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prod.r53.j2.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17392178123414994832998469169250335993572236792946629105864178473677313400315400199689213466606532919857041800517686132487072216644901423441285552149228872945002239656598702105005355502887252224517514349955878433281017658796701353448029253865017824732408972532796537463130707349944629914723954262781877192002700888874972840251643417783556252412090121784307467016503520684056228751236936927237852828325035282867857114047132648610968229520587221586998803446198311595938658729961830200617713290048260696226801215726359776546396907293844239844769097028427698717009040293835628387689310239971255253088989240985881661931123 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 26b74ac83c7fcdd28747857f0b1bac2cc2224dc2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccs1.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs2.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccs.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.afc.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.prodfax.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccs2.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs3.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afc.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodfax.prod.r53.j2.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euw2.ccs1.prod.r53.j2.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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