ifood.com.br

Issued by Amazon

About this certificate

This digital certificate with serial number 06:72:73:08:bd:bb:ec:11:d0:60:b8:b5:39:25:4c:60 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ifood.com.br

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:72:73:08:bd:bb:ec:11:d0:60:b8:b5:39:25:4c:60
Serial Number (int): 8569622986232036434890738005589707872
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:e2:8e:4e:ff:4a:ed:72:bf:9e:ac:ed:8f:46:7a:82:7a:1f:41:7b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 90:95:28:d5:d0:3f:4c:5e:38:c2:51:14:be:26:10:3e:81:b8:63:76
Fingerprint (sha256): 2c:c3:17:22:b8:5d:d5:cb:f1:71:84:ba:e0:29:2d:8f:8b:e4:35:eb:bd:fa:a7:48:e1:b4:e2:2d:cf:4a:bf:46

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ifood.com.br

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ifood.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ifood.com.br
ifood.com.co
*.ifood.com.co
*.sindelantal.mx
sindelantal.mx
*.ifood.com.br
ifoodcorp.com.br
*.ifoodcorp.com.br
*.comeya.co
comeya.co

Other certificates including the domain name ifood.com.br

(limited to 100 certificates)
paymentwidget.ifood.com.br
entrega.ifood.com.br
akamai-san234.exacttarget.com
*.ifood.com.br
ifood.com.br
qrcode.ifood.com.br
san.cloudinary.com
tls.automattic.com
nexus.internal-services-production.dc-ifood.com
*.news.ifood.com.br
w42.ifood.com.br
e.ifood.com.br
fastdag.se
tls.automattic.com
blog.ifood.com.br
vpn-saopaulo.dc.ifood.com.br
san.cloudinary.com
trabalhoremoto.ifood.com.br
api.homolog.carreiras.ifood.com.br
incapsula.com
pop.ifood.com.br
tls.automattic.com
api.carreiras.ifood.com.br
api.carreiras.ifood.com.br
entrega.ifood.com.br
entrega.ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
lp.news.ifood.com.br
incapsula.com
api.carreiras.ifood.com.br
api.news.ifood.com.br
secmonitor.dc.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
blog-parceiros.ifood.com.br
portal-negocios.ifood.com.br
blog-parceiros.ifood.com.br
news.ifood.com.br
www.ifood.com.br
contrate-beneficios.ifood.com.br
api-homolog.sira.ifood.com.br
homolog.ifood.com.br
news.ifood.com.br
lp.news.ifood.com.br
blog-parceiros.ifood.com.br
contrate-beneficios.ifood.com.br
s2-cloudinary-pin.map.fastly.net
bqvndd.ifood.com.br
tracker-empresas.ifood.com.br
password.dc.ifood.com.br
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
www.ifood.com.br
www.ifood.com.br
*.ifood.com.br
nexus.yolo-02-dr.dr-ifood.com
ifood.com.br
jenkins-data-platform1.dc.ifood.com.br
mail.news.ifood.com.br
incapsula.com
s2-cloudinary-pin.map.fastly.net
maminha3.dc.ifood.com.br
s2-san.cloudinary.com
homolog.ifood.com.br
maminha3.dc.ifood.com.br
diogo-santos.com
trabalhoremoto.ifood.com.br
s2-cloudinary-pin.map.fastly.net
*.ifood.com.br
s2-cloudinary-pin.map.fastly.net
incapsula.com
contrate-beneficios.ifood.com.br
tools.dc.ifood.com.br
*.ifood.com.br
developer-deprecated.ifood.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
*.ifood.com.br
ldap-server-replica-us-east-2.dc.ifood.com.br
*.ifood.com.br
incapsula.com
incapsula.com
maminha3.dc.ifood.com.br
*.ifood.com.br
san.cloudinary.com
incapsula.com
click.relacionamento-empresas.ifood.com.br
w42.ifood.com.br
rocambole3.dc.ifood.com.br
chef.dc.ifood.com.br
vpn-dev.dc.ifood.com.br
*.ifood.com.br
blog-parceiros.ifood.com.br
ldap-aws-uswest2.dc.ifood.com.br
www.ifood.com.br
developer-deprecated.ifood.com.br
jenkins-financial.dc.ifood.com.br
materiais.ifood.com.br

Certificate

The complete raw certificate details for ifood.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIQBnJzCL277BHQYLi1OSVMYDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA1MDUwMDAwMDBaFw0yMjA2MDMy
MzU5NTlaMBcxFTATBgNVBAMTDGlmb29kLmNvbS5icjCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAOLyvOgJ3zvi+hpbOGNwby7Lm82kg8XNq2tXhWjblhwc
tiBKYJr8umQ6shEyRxwOVDxy84Fs7kcI2P0uNW00eXaEwChvu1I0gvkU1Yj/bf2p
sM5YsxB81stl7CS0jMEBGZAcD/FeZpsvEjKrr2q9vJsbv3QRE8ZSqw1hMfGkgDyY
ZWPLrPa/CTs35+Vpy0e3G5b0zPrwZOzjDfGQ5wCiQWRFPIWgU9uW3/fVY4QaF4Ok
3k3bm9z3olQGD5Hx6GiW3rlJ1TxqSqQWoiQTQOiGs0QMtrTA2TFMdUbAPXkRepbf
GQdGE7vLBXVG7+86ExPAzf4UsqC77nmYcQUp3DZbhK0CAwEAAaOCA3gwggN0MB8G
A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBT/4o5O/0rt
cr+erO2PRnqCeh9BezCBpwYDVR0RBIGfMIGcggxpZm9vZC5jb20uYnKCDGlmb29k
LmNvbS5jb4IOKi5pZm9vZC5jb20uY2+CECouc2luZGVsYW50YWwubXiCDnNpbmRl
bGFudGFsLm14gg4qLmlmb29kLmNvbS5icoIQaWZvb2Rjb3JwLmNvbS5icoISKi5p
Zm9vZGNvcnAuY29tLmJyggsqLmNvbWV5YS5jb4IJY29tZXlhLmNvMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQw
MjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu
Y3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF
BQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF
BzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQw
DAYDVR0TAQH/BAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcAKXm+8J45
OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF5OnwLegAABAMASDBGAiEA3QsY
DMTUV1mu0NNUhLeiHBqd1QvhOxi2R4J4kzsMZXICIQDr3jfY1IHfb4jtKfEhx/c3
+L3icgXpTiGrsQVKQaX4zgB3ACJFRQdZVSRWlj+hL/H3bYbgIyZjrcBLf13Gg1xu
4g8CAAABeTp8CzgAAAQDAEgwRgIhAK0d4Mxlqoyipjh4AYHcXmBd1F9josq6OUn5
sNbh3UibAiEAgPDEiO52+dAJdEhBucXAzUt/mk4muWadVDQ98mOYOiQAdgBRo7D1
/QF5nFZtuDd4jwykeswbJ8v3nohCmg3+1IsF5QAAAXk6fAmfAAAEAwBHMEUCIQCj
WsxkT8A+l0BqXeRQvP7FkYbi1heN2ZvXzWrEuRlFaAIgAQSdOvFTBP8jg3nBuf7B
S1mrx00ARzLA4BuSJphgKWEwDQYJKoZIhvcNAQELBQADggEBABiuKzX73lJOVT6H
1Av2FVphRNP2k91DivOhteja6YXVo9Dw4FRabOJv7q3uKgJm3ecIM9l3TOwGuErj
Gv6XevvxyotmncGyx8I0lPhtdLsSvJ7lq/zL0L8tMNLdjRY50IoQag6r9awotMCL
lpmo5m1cUD7hc0bcNDiixftbYrSmwdB5gKejzl5k2rLnA3QxniMCc19OF7QP27a5
PRv83mHW4BuESxNoaIkqdv5zxfO+88TciN6MRfDTyHJxgt7UZLvhwFc2qTw0tHBW
VesjDrH7Kpmg3F+FU5DfwbMMnRq5okNHmH1JorPUWId6T6wM5dSLS60Y+CDx9AnZ
R36JlMo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vK86AnfO+L6Gls4Y3Bv
LsubzaSDxc2ra1eFaNuWHBy2IEpgmvy6ZDqyETJHHA5UPHLzgWzuRwjY/S41bTR5
doTAKG+7UjSC+RTViP9t/amwzlizEHzWy2XsJLSMwQEZkBwP8V5mmy8SMquvar28
mxu/dBETxlKrDWEx8aSAPJhlY8us9r8JOzfn5WnLR7cblvTM+vBk7OMN8ZDnAKJB
ZEU8haBT25bf99VjhBoXg6TeTdub3PeiVAYPkfHoaJbeuUnVPGpKpBaiJBNA6Iaz
RAy2tMDZMUx1RsA9eRF6lt8ZB0YTu8sFdUbv7zoTE8DN/hSyoLvueZhxBSncNluE
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8569622986232036434890738005589707872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ifood.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28649555449750370615969943013179351763145014004282167540976474395591479640387864303174331284399136474503175050371939851383759809414228932765952487271978100317985767335492199883545237953693642638398209932571628251100631623604301152598615595734714116407894064824644112805104954114946211001162134723149801984722817603883933342322524564478634921797548189414276061569936851934604689076485576037089439714596848329621371784709494227386548686977464554022471359786908528522436102083523263508323915972875469208470183452315463030924533816363164485975990923203077645970605909594389043503351155225122363070164528251352330343777453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffe28e4eff4aed72bf9eaced8f467a827a1f417b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifood.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sindelantal.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sindelantal.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifood.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifoodcorp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comeya.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comeya.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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