keystone-image-converter.test.ti-media.net
Issued by Amazon
About this certificate
This digital certificate with serial number 07:ec:8e:f0:1c:49:79:24:46:41:8f:39:33:de:83:d1 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=keystone-image-converter.test.ti-media.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:ec:8e:f0:1c:49:79:24:46:41:8f:39:33:de:83:d1Serial Number (int): 10532877154785756326620298182538462161
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 5e:27:e3:0d:2f:8e:b3:eb:74:99:a4:23:c0:61:ae:51:aa:02:6d:e6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 61:c6:29:81:8d:be:5b:fb:6c:f9:ac:aa:3a:8b:ed:bf:08:fd:b0:d3
Fingerprint (sha256): 2d:39:06:08:fe:29:88:b9:bd:a9:9a:84:bd:6b:bf:bd:78:44:87:69:4b:7d:df:b9:3b:f6:27:01:4e:60:34:62
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate keystone-image-converter.test.ti-media.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for keystone-image-converter.test.ti-media.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
keystone-image-converter.test.ti-media.net
Other certificates including the domain name ti-media.net
(limited to 100 certificates)
dns-vetting1m.map.fastly.net
ti-media.net
dns-vetting1m.map.fastly.net
ti-media.net
dns-vetting1m.map.fastly.net
*.ti-media.net
*.amateurgardening.com
keystone.ti-media.net
ti-media.map.fastly.net
test4.ti-media.net
test01.ti-media.net
keystone.ti-media.net
ti-media.map.fastly.net
dns-vetting1m.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
wine-review.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
ti-media.map.fastly.net
wine-review.ti-media.net
ti-media.net
keystone-image-converter.test.ti-media.net
digitaleditions-issues.ti-media.net
assets.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
keystone.ti-media.net
ti-media.net
assets.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
*.ti-media.net
test1.ti-media.net
*.amateurgardening.com
dns-vetting1m.map.fastly.net
affiliate-api.ti-media.net
keystone-image-converter.test.ti-media.net
test01.ti-media.net
assets.ipcdigital.co.uk
keystone.ti-media.net
test1.ti-media.net
dns-vetting1m.map.fastly.net
test1.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
digitaleditions-issues.ti-media.net
*.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
*.ti-media.net
assets.ipcdigital.co.uk
keystone-image-converter.test.ti-media.net
dns-vetting1m.map.fastly.net
test01.ti-media.net
assets.ipcdigital.co.uk
keystone-image-converter.test.ti-media.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
digitaleditions-issues.ti-media.net
wine-review.ti-media.net
cdodd-test.ti-media.net
test.wine-reviews.ti-media.net
ti-media.map.fastly.net
*.ti-media.net
test01.ti-media.net
ti-media.map.fastly.net
affiliate-api.ti-media.net
ti-media.map.fastly.net
keystone-image-converter.test.ti-media.net
ti-media.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
ti-media.map.fastly.net
web.prod.subs.aws.ti-media.net
test1.ti-media.net
keystone.ti-media.net
dns-vetting1m.map.fastly.net
keystone.ti-media.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
test01.ti-media.net
ti-media.net
digitaleditions-issues.ti-media.net
ti-media.net
ti-media.map.fastly.net
test3.ti-media.net
*.ti-media.net
dns-vetting1m.map.fastly.net
test1.ti-media.net
*.ti-media.net
dcs.secure.media.ipcdigital.co.uk
test.affiliate-api.ti-media.net
*.ti-media.net
dns-vetting1m.map.fastly.net
*.amateurgardening.com
ti-media.map.fastly.net
web.staging.subs.aws.ti-media.net
dns-vetting1m.map.fastly.net
ti-media.net
dns-vetting1m.map.fastly.net
ti-media.net
dns-vetting1m.map.fastly.net
*.ti-media.net
*.amateurgardening.com
keystone.ti-media.net
ti-media.map.fastly.net
test4.ti-media.net
test01.ti-media.net
keystone.ti-media.net
ti-media.map.fastly.net
dns-vetting1m.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
wine-review.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
ti-media.map.fastly.net
wine-review.ti-media.net
ti-media.net
keystone-image-converter.test.ti-media.net
digitaleditions-issues.ti-media.net
assets.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
keystone.ti-media.net
ti-media.net
assets.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
*.ti-media.net
test1.ti-media.net
*.amateurgardening.com
dns-vetting1m.map.fastly.net
affiliate-api.ti-media.net
keystone-image-converter.test.ti-media.net
test01.ti-media.net
assets.ipcdigital.co.uk
keystone.ti-media.net
test1.ti-media.net
dns-vetting1m.map.fastly.net
test1.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
digitaleditions-issues.ti-media.net
*.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
*.ti-media.net
assets.ipcdigital.co.uk
keystone-image-converter.test.ti-media.net
dns-vetting1m.map.fastly.net
test01.ti-media.net
assets.ipcdigital.co.uk
keystone-image-converter.test.ti-media.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
digitaleditions-issues.ti-media.net
wine-review.ti-media.net
cdodd-test.ti-media.net
test.wine-reviews.ti-media.net
ti-media.map.fastly.net
*.ti-media.net
test01.ti-media.net
ti-media.map.fastly.net
affiliate-api.ti-media.net
ti-media.map.fastly.net
keystone-image-converter.test.ti-media.net
ti-media.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
ti-media.map.fastly.net
web.prod.subs.aws.ti-media.net
test1.ti-media.net
keystone.ti-media.net
dns-vetting1m.map.fastly.net
keystone.ti-media.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
test01.ti-media.net
ti-media.net
digitaleditions-issues.ti-media.net
ti-media.net
ti-media.map.fastly.net
test3.ti-media.net
*.ti-media.net
dns-vetting1m.map.fastly.net
test1.ti-media.net
*.ti-media.net
dcs.secure.media.ipcdigital.co.uk
test.affiliate-api.ti-media.net
*.ti-media.net
dns-vetting1m.map.fastly.net
*.amateurgardening.com
ti-media.map.fastly.net
web.staging.subs.aws.ti-media.net
dns-vetting1m.map.fastly.net
Certificate
The complete raw certificate details for keystone-image-converter.test.ti-media.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEqjCCA5KgAwIBAgIQB+yO8BxJeSRGQY85M96D0TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMTUwMDAwMDBaFw0yMTAyMTUx MjAwMDBaMDUxMzAxBgNVBAMTKmtleXN0b25lLWltYWdlLWNvbnZlcnRlci50ZXN0 LnRpLW1lZGlhLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMtB uHHIn5yGi4DyeVSwYfTLummh2JMfaQiEp58wcGxJqdVUOSZY3s7YWq50805vN7Fm /upVllG9FgJAEqlxYIr29v2Tq3ub2sVOkH39pD5Ml7OiQEsAtehBPQGsqScMm533 Uo7j8gs3LT6QPr339n2LHJJTs8K4TTb+U0OnguGIr1Xqq6+qKUFUDrdq7Gh7v8Q2 U9xFd+S9X5r4cr5nXM3UruLvXHW7satfUQm06rlRMMA/su64g87dixrrLb8HQ5Wn Vv6bivtnGYiak5J+KPYSIoKYx6pd+PIASlGvJiX47l6hrCnS7Sl4GUF2oXFwoH9y 2xc102noIQuzEczDcnUCAwEAAaOCAaMwggGfMB8GA1UdIwQYMBaAFFmkZgZSoHuV kjyjlAcnlnRb+T3QMB0GA1UdDgQWBBReJ+MNL46z63SZpCPAYa5RqgJt5jA1BgNV HREELjAsgiprZXlzdG9uZS1pbWFnZS1jb252ZXJ0ZXIudGVzdC50aS1tZWRpYS5u ZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYY9E3OpboqUAOZlXgkSwk53 DMP+TseOGNQS9TcnU4ve/9vdhfkosKvd8Dp4gf3xUrR5o2i7P1WjVKYDodslBwxN I1JoKpkeMy/ap/8NFi2BfP+IOy8G6Zvi80KbEf0tTxLfyX570OoRrM310Lfmb7Jc +wtnK21aREvvts+97YtWWooh9OjvRbsHbWA7W+asqmJzozJmlXaQMyaUPMt5MQui tUjwqS80XgDKxPPcFxUKGXmRNEK1tlKNtRWbE8CmjmMf4HerzjXoWbAms+PTc8Ia KVsE1H+eKed9TYTmZzTAFs1QiMi/kl0MzqL8fKCAbdEDBC1+pZbJ+SrkpBkLVw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0G4ccifnIaLgPJ5VLBh 9Mu6aaHYkx9pCISnnzBwbEmp1VQ5JljeztharnTzTm83sWb+6lWWUb0WAkASqXFg ivb2/ZOre5vaxU6Qff2kPkyXs6JASwC16EE9AaypJwybnfdSjuPyCzctPpA+vff2 fYscklOzwrhNNv5TQ6eC4YivVeqrr6opQVQOt2rsaHu/xDZT3EV35L1fmvhyvmdc zdSu4u9cdbuxq19RCbTquVEwwD+y7riDzt2LGustvwdDladW/puK+2cZiJqTkn4o 9hIigpjHql348gBKUa8mJfjuXqGsKdLtKXgZQXahcXCgf3LbFzXTaeghC7MRzMNy dQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10532877154785756326620298182538462161 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keystone-image-converter.test.ti-media.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25658783887717680527201848981164917114647422304053014723637165237244185651100130013504914976187360904855300694384801526728235203587070659873084262497409468315788172201880870307598849141327916868297019437944400421664546540000109260438629710995470265817063285247237654527740284970177539593913592183323222535803995995220620864013680128160261535328563268797499431736533618665958800725586835396845054932916161945490602843437260691727038099489800998671902715105345158267175734377513665906375096528365387980163127764928808278425957738929403272337003909699942431199610905659493678523806131649008017808854316593249534441910901 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5e27e30d2f8eb3eb7499a423c061ae51aa026de6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keystone-image-converter.test.ti-media.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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