www1.thecomplianceengine.com
Issued by Amazon
About this certificate
This digital certificate with serial number 02:b2:e1:e4:6a:cf:d2:ca:56:1d:16:4e:84:3b:a6:91 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www1.thecomplianceengine.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:b2:e1:e4:6a:cf:d2:ca:56:1d:16:4e:84:3b:a6:91Serial Number (int): 3587266471627560056932053353605342865
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 70:7d:ce:39:c5:89:06:48:39:0a:3a:4b:c4:5a:22:49:8e:d0:eb:e5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 87:b8:6d:35:52:d3:6f:ae:18:23:32:a3:93:ce:38:b9:d8:15:a9:d3
Fingerprint (sha256): 35:d3:90:8a:d3:07:6f:e4:16:d5:32:33:d5:76:d6:ae:51:50:19:f1:ca:0e:8d:20:f3:ac:4c:9f:47:a9:c7:56
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate www1.thecomplianceengine.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www1.thecomplianceengine.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www1.thecomplianceengine.com
Other certificates including the domain name thecomplianceengine.com
(limited to 100 certificates)
status.sandsiv.com
status.asista.nl
status.sandsiv.com
foxtrot.status.descartes.com
status.quicklypos.com
status.smbstorm.com
status.detroitcatholic.com
supportitm.thecomplianceengine.com
status.ivey.ca
status.harleysplumbing.com.au
status.quicklypos.com
status.sandsiv.com
status.intermiles.com
trust.instasafe.com
status.sandsiv.com
status.uss.cl
status.sandsiv.com
status.sandsiv.com
status.intermiles.com
www1.thecomplianceengine.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.ampersand-dev.tv
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.detroitcatholic.com
statuspage.e2open.com
status.sandsiv.com
status.wmcws.com
status.intermiles.com
systemstatus.clinisys.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
*.thecomplianceengine.com
supportitm.thecomplianceengine.com
status.sandsiv.com
status.itabnz.net
www.thecomplianceengine.com
status.smbstorm.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
status.hdns.io
status.sandsiv.com
status.transvirtual.com
systemstatus.clinisys.com
status.asista.nl
status.sandsiv.com
supportitm.thecomplianceengine.com
www1.thecomplianceengine.com
status-namer-gtassurancetool.gtil.gt.com
www.thecomplianceengine.com
supportitm.thecomplianceengine.com
www1.thecomplianceengine.com
status.wmcws.com
status-namer-gtassurancetool.gtil.gt.com
status.sandsiv.com
status.intermiles.com
leapstatus.gtil.gt.com
*.thecomplianceengine.com
status.sandsiv.com
www.thecomplianceengine.com
status.sandsiv.com
status.sandsiv.com
status.wmcws.com
vamc.djltraining.com
status.sandsiv.com
status.plataformasintese.com
systemstatus.clinisys.com
status.sandsiv.com
status.hdns.io
supportahj.thecomplianceengine.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.wmcws.com
cdn.thecomplianceengine.com
status.etosoftware.com
status.hdns.io
supportitm.thecomplianceengine.com
status.sandsiv.com
*.thecomplianceengine.com
status.uss.cl
status.detroitcatholic.com
status.sandsiv.com
status.hdns.io
www.thecomplianceengine.com
status.ivey.ca
status.sandsiv.com
status.sandsiv.com
supportitm.thecomplianceengine.com
status.etosoftware.com
status.sogi.com.br
status.openpay.mx
status.sandsiv.com
status.ivey.ca
*.thecomplianceengine.com
status.socialpinpoint.com
status.asista.nl
status.sandsiv.com
foxtrot.status.descartes.com
status.quicklypos.com
status.smbstorm.com
status.detroitcatholic.com
supportitm.thecomplianceengine.com
status.ivey.ca
status.harleysplumbing.com.au
status.quicklypos.com
status.sandsiv.com
status.intermiles.com
trust.instasafe.com
status.sandsiv.com
status.uss.cl
status.sandsiv.com
status.sandsiv.com
status.intermiles.com
www1.thecomplianceengine.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.ampersand-dev.tv
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.detroitcatholic.com
statuspage.e2open.com
status.sandsiv.com
status.wmcws.com
status.intermiles.com
systemstatus.clinisys.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
*.thecomplianceengine.com
supportitm.thecomplianceengine.com
status.sandsiv.com
status.itabnz.net
www.thecomplianceengine.com
status.smbstorm.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
status.hdns.io
status.sandsiv.com
status.transvirtual.com
systemstatus.clinisys.com
status.asista.nl
status.sandsiv.com
supportitm.thecomplianceengine.com
www1.thecomplianceengine.com
status-namer-gtassurancetool.gtil.gt.com
www.thecomplianceengine.com
supportitm.thecomplianceengine.com
www1.thecomplianceengine.com
status.wmcws.com
status-namer-gtassurancetool.gtil.gt.com
status.sandsiv.com
status.intermiles.com
leapstatus.gtil.gt.com
*.thecomplianceengine.com
status.sandsiv.com
www.thecomplianceengine.com
status.sandsiv.com
status.sandsiv.com
status.wmcws.com
vamc.djltraining.com
status.sandsiv.com
status.plataformasintese.com
systemstatus.clinisys.com
status.sandsiv.com
status.hdns.io
supportahj.thecomplianceengine.com
status.sandsiv.com
status.sandsiv.com
status.sandsiv.com
status.wmcws.com
cdn.thecomplianceengine.com
status.etosoftware.com
status.hdns.io
supportitm.thecomplianceengine.com
status.sandsiv.com
*.thecomplianceengine.com
status.uss.cl
status.detroitcatholic.com
status.sandsiv.com
status.hdns.io
www.thecomplianceengine.com
status.ivey.ca
status.sandsiv.com
status.sandsiv.com
supportitm.thecomplianceengine.com
status.etosoftware.com
status.sogi.com.br
status.openpay.mx
status.sandsiv.com
status.ivey.ca
*.thecomplianceengine.com
status.socialpinpoint.com
Certificate
The complete raw certificate details for www1.thecomplianceengine.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjjCCA3agAwIBAgIQArLh5GrP0spWHRZOhDumkTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTExMDEwMDAwMDBaFw0yMDEyMDEx MjAwMDBaMCcxJTAjBgNVBAMTHHd3dzEudGhlY29tcGxpYW5jZWVuZ2luZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FB1N7WbgPK4IDIYBUev4 6heQpXMsqN0/7r5sBKRj0UJniRm96KJGTkwIf7wR0Hj+wukE7DFO/2hWBvRcUZPq oR9SGzNnn01DowrEJfrRRwXSvsIWlEucHkWDhP3kMrpNw0CinJXXrRSjNoxFdolQ oPd+QJtnKjViRGieGmaf70yeqtfuxGTTDvV3YEs1qiwiFs0UaIjJeZIwz/2qhCZ+ i7dX5hOBPhAOiqBJg8gyyauj/Vz9/h7wwT+zcY1+VFK13d3PTJ31ITGn4ndDqLRq noHJov71uX1qv4RPydwoyQjNWwbC0ES20LcRN9vaVGPUYl075pAawQ//U5cw5S45 AgMBAAGjggGVMIIBkTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAd BgNVHQ4EFgQUcH3OOcWJBkg5CjpLxFoiSY7Q6+UwJwYDVR0RBCAwHoIcd3d3MS50 aGVjb21wbGlhbmNlZW5naW5lLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsG CWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV HRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCX0h6I1Cp9y1o4S9hyEo67CJUxMLzXC9ICol94Iz9Wxj5CK9I625vTxfJ1qCCQ RUSjvQb9Y2KCBR6u1JwtFKsydNAcfHd+RCT16YF+rnK8A/PwCdwXRyw0nq1zTcSD 0vLnek7igN9SqLUHUwGjIsbly1CZDB21FNVPcRvZAdf2p2Zmb3kGEB/30IKBvcNW 0EYXG+sxJ3yxpdv3Kkr46Ut1s1E6C9IPyztQ0+jzh0N7pFWHMPT5NnPl311aqyzW HiMTVanVmsbPzaLT1fsRbM3HkJZYbprhfqsP9fTytYC+qABDJdott7gfYJRp7mRk 39tih4TLBc+Vz3md11jwTFhz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRQdTe1m4DyuCAyGAVHr +OoXkKVzLKjdP+6+bASkY9FCZ4kZveiiRk5MCH+8EdB4/sLpBOwxTv9oVgb0XFGT 6qEfUhszZ59NQ6MKxCX60UcF0r7CFpRLnB5Fg4T95DK6TcNAopyV160UozaMRXaJ UKD3fkCbZyo1YkRonhpmn+9MnqrX7sRk0w71d2BLNaosIhbNFGiIyXmSMM/9qoQm fou3V+YTgT4QDoqgSYPIMsmro/1c/f4e8ME/s3GNflRStd3dz0yd9SExp+J3Q6i0 ap6ByaL+9bl9ar+ET8ncKMkIzVsGwtBEttC3ETfb2lRj1GJdO+aQGsEP/1OXMOUu OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3587266471627560056932053353605342865 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www1.thecomplianceengine.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22859052013854157460357075743101586339674592680665028018565191581585328207253495920037494373642069241399081877747376060916994783148275569455972450049427574054321798725984185088807234378654943321752516827702585371408618800115292616207352268665860924650256560966254845278406628827225931844478007157001614679913980321316241138433119245339847555521273822539008450985460872691466709382902789021471362235765497305407439717387689942558413939646664260745709122556326292896081217750735117728080135807986118639947735612830700682644618666659818982678510240088699585703970333631719282772076211696641081603503085669101471598456377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 707dce39c5890648390a3a4bc45a22498ed0ebe5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.thecomplianceengine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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