api.demo.modum.io
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:63:c7:1c:dd:7a:da:0e:cd:1d:c4:a0:5c:8b:0e:f1 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.demo.modum.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:63:c7:1c:dd:7a:da:0e:cd:1d:c4:a0:5c:8b:0e:f1Serial Number (int): 15139583829073405488420328229120446193
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9a:f1:67:12:da:02:92:17:fb:b3:11:3e:f4:95:3c:e8:e4:35:4a:ec
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 54:72:64:14:41:e7:42:0c:c7:0e:fb:6c:0d:f1:12:ee:17:85:58:88
Fingerprint (sha256): 2e:58:8c:af:9e:87:14:30:3c:07:17:3b:7b:91:c2:d7:94:29:6e:4d:30:cb:00:98:46:a4:3c:a4:8e:d3:0e:57
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api.demo.modum.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.demo.modum.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.demo.modum.io
swisspost.api.demo.modum.io
swisspost.api.demo.modum.io
Other certificates including the domain name modum.io
(limited to 100 certificates)
voting.modum.io
dashboard.dev.modum.io
internal.modum.io
api.demo.modum.io
modum.io
app-versioncheck.modum.io
dashboard.trial.modum.io
dashboard.prod.modum.io
dashboard.sta.modum.io
dashboard.modum.io
app-versioncheck.trial.modum.io
dashboard.trial.modum.io
nfc-mapping.dev.modum.io
app.dev.tokenswap.modum.io
modum.io
*.modum.io
app.dev.tokenswap.modum.io
support.briscoes.co.nz
voting.modum.io
support.briscoes.co.nz
app-versioncheck.dev.modum.io
nfc-mapping.modum.io
api.demo.modum.io
modum.io
app.stage.tokenswap.modum.io
provisioning.dev.modum.io
modum.io
modum.io
core.modum.io
nfc-mapping.dev.modum.io
modum.io
dashboard.prod.modum.io
provisioning.dev.modum.io
api.demo.modum.io
api.sta.modum.io
app-versioncheck.dev.modum.io
api.sta.modum.io
*.prod.modum.io
swisspost.api.modum.io
support.briscoes.co.nz
dashboard.modsight.modum.io
api.prod.modum.io
support.briscoes.co.nz
support.briscoes.co.nz
provisioning.modum.io
api.prod.modum.io
dashboard.demo.modum.io
app.dev.tokenswap.modum.io
*.modum.io
jira.modum.io
support.briscoes.co.nz
provisioning.modum.io
dashboard.sta.modum.io
proofx-backend.dev.modum.io
nfc-mapping.dev.modum.io
provisioning.modum.io
api.prod.modum.io
dashboard.modsight.modum.io
provisioningdev.modum.io
shop.modum.io
modum.io
igr.modum.io
dashboard.modum.io
*.modum.io
fdus-54.freshdesk.com
staging.dashboard.modum.io
support.briscoes.co.nz
api.modum.io
igr.modum.io
e2e.modum.io
*.sta.modum.io
core.modum.io
*.playground.modum.io
provisioning.sta.modum.io
*.modum.io
*.modum.io
*.sta.modum.io
support.briscoes.co.nz
nfc-mapping.dev.modum.io
api.prod.modum.io
shitservice.dev.modum.io
dashboard.dev.modum.io
voting.modum.io
*.modum.io
nfc-mapping.dev.modum.io
dashboard.demo.modum.io
api.sta.modum.io
dashboard.modum.io
proofx.dev.modum.io
api.modum.io
support.briscoes.co.nz
dashboard.demo.modum.io
swisspost.api.modum.io
modum.io
api.dev.modum.io
provisioning.prod.modum.io
modum.io
app.dev.tokenswap.modum.io
dashboard.sta.modum.io
swisspost.api.modum.io
dashboard.dev.modum.io
internal.modum.io
api.demo.modum.io
modum.io
app-versioncheck.modum.io
dashboard.trial.modum.io
dashboard.prod.modum.io
dashboard.sta.modum.io
dashboard.modum.io
app-versioncheck.trial.modum.io
dashboard.trial.modum.io
nfc-mapping.dev.modum.io
app.dev.tokenswap.modum.io
modum.io
*.modum.io
app.dev.tokenswap.modum.io
support.briscoes.co.nz
voting.modum.io
support.briscoes.co.nz
app-versioncheck.dev.modum.io
nfc-mapping.modum.io
api.demo.modum.io
modum.io
app.stage.tokenswap.modum.io
provisioning.dev.modum.io
modum.io
modum.io
core.modum.io
nfc-mapping.dev.modum.io
modum.io
dashboard.prod.modum.io
provisioning.dev.modum.io
api.demo.modum.io
api.sta.modum.io
app-versioncheck.dev.modum.io
api.sta.modum.io
*.prod.modum.io
swisspost.api.modum.io
support.briscoes.co.nz
dashboard.modsight.modum.io
api.prod.modum.io
support.briscoes.co.nz
support.briscoes.co.nz
provisioning.modum.io
api.prod.modum.io
dashboard.demo.modum.io
app.dev.tokenswap.modum.io
*.modum.io
jira.modum.io
support.briscoes.co.nz
provisioning.modum.io
dashboard.sta.modum.io
proofx-backend.dev.modum.io
nfc-mapping.dev.modum.io
provisioning.modum.io
api.prod.modum.io
dashboard.modsight.modum.io
provisioningdev.modum.io
shop.modum.io
modum.io
igr.modum.io
dashboard.modum.io
*.modum.io
fdus-54.freshdesk.com
staging.dashboard.modum.io
support.briscoes.co.nz
api.modum.io
igr.modum.io
e2e.modum.io
*.sta.modum.io
core.modum.io
*.playground.modum.io
provisioning.sta.modum.io
*.modum.io
*.modum.io
*.sta.modum.io
support.briscoes.co.nz
nfc-mapping.dev.modum.io
api.prod.modum.io
shitservice.dev.modum.io
dashboard.dev.modum.io
voting.modum.io
*.modum.io
nfc-mapping.dev.modum.io
dashboard.demo.modum.io
api.sta.modum.io
dashboard.modum.io
proofx.dev.modum.io
api.modum.io
support.briscoes.co.nz
dashboard.demo.modum.io
swisspost.api.modum.io
modum.io
api.dev.modum.io
provisioning.prod.modum.io
modum.io
app.dev.tokenswap.modum.io
dashboard.sta.modum.io
swisspost.api.modum.io
Certificate
The complete raw certificate details for api.demo.modum.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElTCCA32gAwIBAgIQC2PHHN162g7NHcSgXIsO8TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMDgwMDAwMDBaFw0yMDA0MDgx MjAwMDBaMBwxGjAYBgNVBAMTEWFwaS5kZW1vLm1vZHVtLmlvMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDkOL0a+UdcYunlGgvF66jwJvNUqudHpnNk4 hWbHcnrWsAhYM8pZYy7YrskewO24yJXOTOniI8xzkK8n3VyXYsFaZWAOy/dGYci/ N59ZN7Ol/pjcn6DuYFhDnDBcst5ifxiZHRqzr24AdXyDUD9lPzu17UePzSV9oqvI dzhawfxsocVkpL/TjAtHOSk46UmDjZYbgpO09G9ELVx/W20uS+0qFde69WNcuPUx 7xnmwBy5VBww8oe85bM6QLAJsVx+KP/9dzwMfOSNAXWXpsfVrnHknPVvy0ZXppUc dmzdDI0r/WNYdmkVnPkGAHtdfw0JFPMNDE/KMa1jLXE6TCP/BQIDAQABo4IBpzCC AaMwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFJrx ZxLaApIX+7MRPvSVPOjkNUrsMDkGA1UdEQQyMDCCEWFwaS5kZW1vLm1vZHVtLmlv ghtzd2lzc3Bvc3QuYXBpLmRlbW8ubW9kdW0uaW8wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0g BBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5j cnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEAbCHWJza0XWtH9A4qMOHIqMNRpBkb7sfJTkKiA5fdbKuP0KUyJeTb S/uBzEiw5Km7cI1k6kTrckMTI+1RlGrji1NUtOsLrqm7hcIlryzWBeDJ4RKRbIqT iSje2n9UKGl8lnfH8VfT7ddUrPOh0/wxtRvdXRU2EOoWkdIEx273cpSYIfCxdFMX KOt3Y++3pvQ2pJDhwTF4isZbhL4FV7BCdbVJF8mAStVcHKPgIKHZ2SIEsSRbyspK 5giz6we08F2X4DIBWrKMWRrOO7wGAldYBIl1CR68ih6UcY+CQCHJhmeov+O302ZU fTCDsNbU4J5f/u4jHR+79C4ljMSuiExpIw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDkOL0a+UdcYunlGgvF6 6jwJvNUqudHpnNk4hWbHcnrWsAhYM8pZYy7YrskewO24yJXOTOniI8xzkK8n3VyX YsFaZWAOy/dGYci/N59ZN7Ol/pjcn6DuYFhDnDBcst5ifxiZHRqzr24AdXyDUD9l Pzu17UePzSV9oqvIdzhawfxsocVkpL/TjAtHOSk46UmDjZYbgpO09G9ELVx/W20u S+0qFde69WNcuPUx7xnmwBy5VBww8oe85bM6QLAJsVx+KP/9dzwMfOSNAXWXpsfV rnHknPVvy0ZXppUcdmzdDI0r/WNYdmkVnPkGAHtdfw0JFPMNDE/KMa1jLXE6TCP/ BQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15139583829073405488420328229120446193 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.demo.modum.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22751029964617589830679597382665657633425159417714201500272303048859634497090430656562883287116572519987434930721782440168784889465978437749763608657779840173425645462214173916629475516959530463114083067318548825363190732399625904050843032895267826864136990124453840421581558583001158158397055523807373883370215126050089564825616038798833221222943461344449698803886395998725200316450967811406184008924275207210629762722862882938297973081517959145678827609538204283723077627628258410672724847551034157090605019009643318210468468935507682710806946131849852376373382922095389988957917398373368012475384438153454545010437 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9af16712da029217fbb3113ef4953ce8e4354aec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.demo.modum.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisspost.api.demo.modum.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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