onyo.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:53:50:a2:c3:7d:44:51:00:f7:5d:e1:0f:b7:aa:bb was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=onyo.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:53:50:a2:c3:7d:44:51:00:f7:5d:e1:0f:b7:aa:bbSerial Number (int): 11066420093769352378645943306769902267
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 43:c8:5b:94:46:02:24:e8:80:3b:6e:1f:b2:f0:c6:91:78:20:f1:98
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 60:73:b3:12:6f:d7:d3:07:5f:d1:7b:43:77:a4:bd:7b:3e:52:63:f3
Fingerprint (sha256): 28:97:34:74:bd:1f:a9:92:d0:2f:5d:f3:09:02:5f:98:af:0f:c5:ea:e6:d8:9c:2a:76:4c:e0:2b:67:76:17:6f
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate onyo.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for onyo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
onyo.com
api.onyo.com
pos.onyo.com
api.onyo.com
pos.onyo.com
Other certificates including the domain name onyo.com
(limited to 100 certificates)
ssl377491.cloudflaressl.com
ssl377491.cloudflaressl.com
wolfml.com
www.spangee.com
site.onyo.com
form.onyo.com
malm.al
pos.staging.onyo.com
dash.brightlive.com
le.ai
ssl377491.cloudflaressl.com
auth.onyo.com
trekmates.tours
3rein.com
www.titusnjiru.dev
we-24.com
ssl377490.cloudflaressl.com
ssl377491.cloudflaressl.com
mb.logicside.net
sni.cloudflaressl.com
ssl377490.cloudflaressl.com
api.reports.staging.onyo.com
ssl377491.cloudflaressl.com
ssl377489.cloudflaressl.com
ssl377491.cloudflaressl.com
cevremde.com
ssl377491.cloudflaressl.com
ssl377491.cloudflaressl.com
kiosk.onyo.com
www.coopcery.shop
ssl377490.cloudflaressl.com
ssl377489.cloudflaressl.com
www.cycleconnect.com.br
api.staging.onyo.com
app.oficinadaaprovacao.com.br
ssl377490.cloudflaressl.com
api.onyo.com
getmarketingtips.io
ssl377491.cloudflaressl.com
ssl377491.cloudflaressl.com
images.onyo.com
ssl377491.cloudflaressl.com
ssl377489.cloudflaressl.com
ssl377491.cloudflaressl.com
demo.happybuilding.app
dixons-pay.mishipay.com
ssl377489.cloudflaressl.com
sgm.overlay.staging.onyo.com
www.thegoattalent.es
onyo.com
ssl377490.cloudflaressl.com
www.callforcake.com
www.cpimenta.com
*.k8s.onyo.com
onyo.com
ssl377490.cloudflaressl.com
kiosk.onyo.com
onyo.com
onyo.com
ssl377491.cloudflaressl.com
*.k8s.onyo.com
catalog-qa.itxi.aero
ssl377491.cloudflaressl.com
suterapines.cf
www.targetz.mx
*.staging.onyo.com
www.novoda.cc
onyo.com
onelink.chaayos.com
my.getonify.com
team.ziggu.app
ssl377491.cloudflaressl.com
web-app.staging.onyo.com
ssl377491.cloudflaressl.com
onyo.com
site.onyo.com
ssl377490.cloudflaressl.com
onyo.app
ssl377491.cloudflaressl.com
evolvedappraisals.com
ssl377490.cloudflaressl.com
onyo.com
ssl377491.cloudflaressl.com
ssl377489.cloudflaressl.com
www.kubeshield.app
onyo.com
pos.onyo.com
api.staging.onyo.com
sgm.overlay.onyo.com
admin.pedepronto.com.br
onyo.com
ssl377490.cloudflaressl.com
girokstn.com
ssl377491.cloudflaressl.com
portal.vml.visma.ai
ssl377490.cloudflaressl.com
www.ciner8.com
cn.touhougarakuta.com
api.staging.onyo.com
cloud.onyo.com
ssl377491.cloudflaressl.com
wolfml.com
www.spangee.com
site.onyo.com
form.onyo.com
malm.al
pos.staging.onyo.com
dash.brightlive.com
le.ai
ssl377491.cloudflaressl.com
auth.onyo.com
trekmates.tours
3rein.com
www.titusnjiru.dev
we-24.com
ssl377490.cloudflaressl.com
ssl377491.cloudflaressl.com
mb.logicside.net
sni.cloudflaressl.com
ssl377490.cloudflaressl.com
api.reports.staging.onyo.com
ssl377491.cloudflaressl.com
ssl377489.cloudflaressl.com
ssl377491.cloudflaressl.com
cevremde.com
ssl377491.cloudflaressl.com
ssl377491.cloudflaressl.com
kiosk.onyo.com
www.coopcery.shop
ssl377490.cloudflaressl.com
ssl377489.cloudflaressl.com
www.cycleconnect.com.br
api.staging.onyo.com
app.oficinadaaprovacao.com.br
ssl377490.cloudflaressl.com
api.onyo.com
getmarketingtips.io
ssl377491.cloudflaressl.com
ssl377491.cloudflaressl.com
images.onyo.com
ssl377491.cloudflaressl.com
ssl377489.cloudflaressl.com
ssl377491.cloudflaressl.com
demo.happybuilding.app
dixons-pay.mishipay.com
ssl377489.cloudflaressl.com
sgm.overlay.staging.onyo.com
www.thegoattalent.es
onyo.com
ssl377490.cloudflaressl.com
www.callforcake.com
www.cpimenta.com
*.k8s.onyo.com
onyo.com
ssl377490.cloudflaressl.com
kiosk.onyo.com
onyo.com
onyo.com
ssl377491.cloudflaressl.com
*.k8s.onyo.com
catalog-qa.itxi.aero
ssl377491.cloudflaressl.com
suterapines.cf
www.targetz.mx
*.staging.onyo.com
www.novoda.cc
onyo.com
onelink.chaayos.com
my.getonify.com
team.ziggu.app
ssl377491.cloudflaressl.com
web-app.staging.onyo.com
ssl377491.cloudflaressl.com
onyo.com
site.onyo.com
ssl377490.cloudflaressl.com
onyo.app
ssl377491.cloudflaressl.com
evolvedappraisals.com
ssl377490.cloudflaressl.com
onyo.com
ssl377491.cloudflaressl.com
ssl377489.cloudflaressl.com
www.kubeshield.app
onyo.com
pos.onyo.com
api.staging.onyo.com
sgm.overlay.onyo.com
admin.pedepronto.com.br
onyo.com
ssl377490.cloudflaressl.com
girokstn.com
ssl377491.cloudflaressl.com
portal.vml.visma.ai
ssl377490.cloudflaressl.com
www.ciner8.com
cn.touhougarakuta.com
api.staging.onyo.com
cloud.onyo.com
Certificate
The complete raw certificate details for onyo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgjCCA2qgAwIBAgIQCFNQosN9RFEA913hD7equzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMDcwMDAwMDBaFw0xOTEyMDcx MjAwMDBaMBMxETAPBgNVBAMTCG9ueW8uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAxAs0HwyoeoOdGzI+i57psNJksXzd73wIO5IHOqlOQuY1+e6N kHAXxi4/5ngg/uCBnFn+qM1/puPUsmZuL2p6Hn93/53qdQYlz7HAGfGMyjHcaH8P EpRPdf0fNXBZ0k+jNxfRT0EFWMcs5qvhZPxwFvvCUQbsgAIF9cJVGON7D7pL2c5C a5DAmDXZvY5mImufOFxUq9qB3d8APbfns/EuPyTT0PCM8sdNJAOnPnzGbLUcMT/r 540DBqm5VQ4yLhVEzAY9YAJKB6jl99OIvAJZKBd7sh2c054FOVW317BARabzQ9Ry vn4SnH1WqyYDMAmsTTZ4pU36PTGQhQE9cEQ6eQIDAQABo4IBnTCCAZkwHwYDVR0j BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFEPIW5RGAiTogDtu H7LwxpF4IPGYMC8GA1UdEQQoMCaCCG9ueW8uY29tggxhcGkub255by5jb22CDHBv cy5vbnlvLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgr3PiiPvL5QOu n9QpehIVQI4qXT8087k+2R8ETFgLM8d/gsRoDQ86Xxb7sCGgB/7Q6Q6AZ6tpoNYc AXonwPHGquv84Ymb9lCVq+UR7oHt2ETAxrmCqtidepCYN3ptZLpd5V/kcCvBvlmz X+PgQhYqsazHbaU5rjRQ4tWMUK2tGlRPaSxOypifc8JFrlfiGRlQPkaWmAH2Fynv 5EKI+KppK3tOTXykkaUySSfRHZBFw5/6MsWC7Om1nsSsDSP4dht4cNMExhuuEXhB shQNn14DCtorQRFaFKUnqkyw7b7J1njj/X8yRxz0Q50sCdgv/TMYFR2f4UPe5tpP f9vB507v -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAs0HwyoeoOdGzI+i57p sNJksXzd73wIO5IHOqlOQuY1+e6NkHAXxi4/5ngg/uCBnFn+qM1/puPUsmZuL2p6 Hn93/53qdQYlz7HAGfGMyjHcaH8PEpRPdf0fNXBZ0k+jNxfRT0EFWMcs5qvhZPxw FvvCUQbsgAIF9cJVGON7D7pL2c5Ca5DAmDXZvY5mImufOFxUq9qB3d8APbfns/Eu PyTT0PCM8sdNJAOnPnzGbLUcMT/r540DBqm5VQ4yLhVEzAY9YAJKB6jl99OIvAJZ KBd7sh2c054FOVW317BARabzQ9Ryvn4SnH1WqyYDMAmsTTZ4pU36PTGQhQE9cEQ6 eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11066420093769352378645943306769902267 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onyo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24748232473812807049519296411545397576772055902103328266166599938905556671702347494596938446604407280907675475462426354829352980159536052489339167863681362787924352858960000844951156309723777581218706245895501212865657684583901967025624447778845531750178449597709903601773160389170194291844384536267611140411741393931717420474527759971042957473070880288104459750011504440420983539145356218199630500405215149922079024100927587937403451219756954503668959195770401400317091422725129055107947308524864416163659548133132993138785078105286573090752900189263418332865464877937484276346806986735996324020953413842801168497273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 43c85b94460224e8803b6e1fb2f0c6917820f198 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onyo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.onyo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos.onyo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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