ksassets.timeincuk.net
Issued by Amazon
About this certificate
This digital certificate with serial number 06:2e:fa:a4:0d:8c:83:77:41:7b:e7:8d:21:d2:47:2f was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ksassets.timeincuk.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:2e:fa:a4:0d:8c:83:77:41:7b:e7:8d:21:d2:47:2fSerial Number (int): 8219297230214838137606551647640766255
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ce:ad:ca:16:28:37:57:6e:7f:ce:1b:6c:cf:89:a4:da:b0:7a:04:77
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 8c:34:62:8c:a0:26:ba:44:f8:f4:52:46:f0:f6:48:92:3c:26:71:12
Fingerprint (sha256): 2e:e7:0b:b8:2a:b8:b3:20:7b:86:89:0d:89:5e:a9:c9:a9:82:b2:d2:54:a2:21:57:d1:1a:27:c1:9b:0d:e6:2c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate ksassets.timeincuk.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ksassets.timeincuk.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ksassets.timeincuk.net
Other certificates including the domain name timeincuk.net
(limited to 100 certificates)
timeincuk.net
keystone.wp.timeincuk.net
ksassets.timeincuk.net
keyassets.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
*.ti-media.net
*.amateurgardening.com
wadeassets.timeincuk.net
keystone.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
timeincuk.net
wadeassets.timeincuk.net
timeincuk.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
keystone.ti-media.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
cms2.ipcmediasecure.com
timeincuk.net
ksassets.timeincuk.net
keyassets-p2.timeincuk.net
keyassets.timeincuk.net
ksassets-preprod.timeincuk.net
ksassets.timeincuk.net
keystone.ti-media.net
*.amateurgardening.com
keystone.wp.timeincuk.net
timeincuk.net
campaign.ipcdigital.co.uk
keystone.ti-media.net
ksassets-preprod.timeincuk.net
cms2.ipcmediasecure.com
ti-media.map.fastly.net
*.ti-media.net
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
wade.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
timeincuk.net
keystone.wp.timeincuk.net
secure.tablet.timeincuk.net
campaign.ipcdigital.co.uk
blogs.internal.timeincuk.net
assets.timeincuk.net
*.ti-media.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
keystone.wp.timeincuk.net
timeincuk.net
ti-media.map.fastly.net
marieclaire.ipcmediasecure.com
keystone.wp.timeincuk.net
assets.timeincuk.net
keystone.wp.timeincuk.net
wade.timeincuk.net
ksassets.timeincuk.net
campaign.ipcdigital.co.uk
ksassets.timeincuk.net
keystone.wp.timeincuk.net
keystone.ti-media.net
keystone.ti-media.net
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
*.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p1.timeincuk.net
assets.timeincuk.net
internal.timeincuk.net
marieclaire.ipcmediasecure.com
wpe.timeincuk.net
*.ti-media.net
*.amateurgardening.com
ti-media.map.fastly.net
timeincuk.net
*.amateurgardening.com
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
internal.timeincuk.net
marieclaire.ipcmediasecure.com
internal.timeincuk.net
keyassets.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
keyassets.timeincuk.net
timeincuk.net
timeincuk.net
keystone.wp.timeincuk.net
ksassets.timeincuk.net
keyassets.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
*.ti-media.net
*.amateurgardening.com
wadeassets.timeincuk.net
keystone.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
timeincuk.net
wadeassets.timeincuk.net
timeincuk.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
keystone.ti-media.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
cms2.ipcmediasecure.com
timeincuk.net
ksassets.timeincuk.net
keyassets-p2.timeincuk.net
keyassets.timeincuk.net
ksassets-preprod.timeincuk.net
ksassets.timeincuk.net
keystone.ti-media.net
*.amateurgardening.com
keystone.wp.timeincuk.net
timeincuk.net
campaign.ipcdigital.co.uk
keystone.ti-media.net
ksassets-preprod.timeincuk.net
cms2.ipcmediasecure.com
ti-media.map.fastly.net
*.ti-media.net
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
wade.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
timeincuk.net
keystone.wp.timeincuk.net
secure.tablet.timeincuk.net
campaign.ipcdigital.co.uk
blogs.internal.timeincuk.net
assets.timeincuk.net
*.ti-media.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
keystone.wp.timeincuk.net
timeincuk.net
ti-media.map.fastly.net
marieclaire.ipcmediasecure.com
keystone.wp.timeincuk.net
assets.timeincuk.net
keystone.wp.timeincuk.net
wade.timeincuk.net
ksassets.timeincuk.net
campaign.ipcdigital.co.uk
ksassets.timeincuk.net
keystone.wp.timeincuk.net
keystone.ti-media.net
keystone.ti-media.net
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
*.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p1.timeincuk.net
assets.timeincuk.net
internal.timeincuk.net
marieclaire.ipcmediasecure.com
wpe.timeincuk.net
*.ti-media.net
*.amateurgardening.com
ti-media.map.fastly.net
timeincuk.net
*.amateurgardening.com
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
internal.timeincuk.net
marieclaire.ipcmediasecure.com
internal.timeincuk.net
keyassets.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
keyassets.timeincuk.net
timeincuk.net
timeincuk.net
Certificate
The complete raw certificate details for ksassets.timeincuk.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdzCCA1+gAwIBAgIQBi76pA2Mg3dBe+eNIdJHLzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMDEwMDAwMDBaFw0yMzEyMjky MzU5NTlaMCExHzAdBgNVBAMTFmtzYXNzZXRzLnRpbWVpbmN1ay5uZXQwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJ6kb+fCX8oRnB3lKQ8S3VjoQKIYT 7wX814MBL0dIKmPc1SK+XexmeCI7moXEZ8z1DW2RNvBPhJ7c5iRnM57AayrJeoOC LGN55NrK5vixpVZowC36ZmJCqJpHszBJVST6V/4T85+iw3ZNAjOD9H8VmpKbZ1vc CfSzWAxG8IgVFtNqLGSNChX45sW8gJb0025daa0TLuBP0XoQM6OpsAhKN4MXspZp BNRxPZxKrmm3D0OlvirggQ9Hgv4/NJ1/Sg6s05NHvRfzbvxtLdRj1rN8lDQZUuIZ hO/xDsqBm3Uski/RJCqAb8Kf5ug2DeFnhy9dXSJFrB8sE605d7nypsNZAgMBAAGj ggGEMIIBgDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUzq3KFig3V25/zhtsz4mk2rB6BHcwIQYDVR0RBBowGIIWa3Nhc3NldHMudGlt ZWluY3VrLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUG CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1h em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgN/k2f1OODkbC8FcXsZZcE91x0t3 jR9SGBB9jteYKDemOzgEVTz9SGWKcCKanq7wfW2yn9/ju7NJsqOUqEy+wC07WFun Jp47FQbX/JJzTh7PC/q1y+yJ2Sx+kooPWWRIldJ6sOijBdWDLZwNmnf3aF4wO0o0 Ol5pXY/zZTdyrX8uNjsEJ3bP/+kdChfh0pMnty3o6OHSFb5Cfuqt2X4k8U/IhzEj mvGtw3OV7WyfRn8BXZlox1r/kydIkl6tgC4beQ/uOUJ/UJd7KOWyk/mDGOL+1De4 7QP6prGoXgpIdDR5E9F/ctqA8pbMH7Zqv5ILXkClxJL97ZEsUzMlyFS99g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiepG/nwl/KEZwd5SkPE t1Y6ECiGE+8F/NeDAS9HSCpj3NUivl3sZngiO5qFxGfM9Q1tkTbwT4Se3OYkZzOe wGsqyXqDgixjeeTayub4saVWaMAt+mZiQqiaR7MwSVUk+lf+E/OfosN2TQIzg/R/ FZqSm2db3An0s1gMRvCIFRbTaixkjQoV+ObFvICW9NNuXWmtEy7gT9F6EDOjqbAI SjeDF7KWaQTUcT2cSq5ptw9Dpb4q4IEPR4L+PzSdf0oOrNOTR70X8278bS3UY9az fJQ0GVLiGYTv8Q7KgZt1LJIv0SQqgG/Cn+boNg3hZ4cvXV0iRawfLBOtOXe58qbD WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8219297230214838137606551647640766255 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ksassets.timeincuk.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18450349887501248497810839093722927821213583577219460540064880617359484604410899521185381160224186001201306701325212525086279186114515718660285550142869321343832080885042909263339559777902133140140806924455898586630189987696484559524011850135611659657286977307523587084008173227360046210882392884675342064241800013974409318060473701198604807801481783372465415667623875019430373235090160019054627036430440071411580577570642810382344738730294773281985161455727656992320787302947748176008696643573652659579808806013898547002235080214346676288706259550631657245357747457969289080424697573710963024819108761395192700257113 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ceadca162837576e7fce1b6ccf89a4dab07a0477 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksassets.timeincuk.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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