*.caas-staging.msts.com
Issued by Amazon
About this certificate
This digital certificate with serial number 02:b4:13:b0:2d:5c:67:20:b3:9a:23:08:e9:5f:a0:fc was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.caas-staging.msts.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:b4:13:b0:2d:5c:67:20:b3:9a:23:08:e9:5f:a0:fcSerial Number (int): 3593468750083706235554889830565388540
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: ac:07:33:3d:77:fc:11:b9:a4:ee:f0:20:7f:65:04:44:87:81:60:bf
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 35:4f:0d:de:31:4b:93:32:69:cb:e4:a6:f5:56:0b:00:4d:13:01:3a
Fingerprint (sha256): 35:dd:7b:b4:cf:fb:bf:a9:49:25:a5:0d:09:a3:34:19:b4:0c:43:a3:4d:49:8a:20:44:0d:6d:3c:d3:ba:a6:aa
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.caas-staging.msts.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.caas-staging.msts.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.caas-staging.msts.com
*.staging.msts.com
*.staging.msts.com
Other certificates including the domain name msts.com
(limited to 100 certificates)
app.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
5687423342215168-fe4.pantheonsite.io
admin.wizer-training.com
5687423342215168-fe4.pantheonsite.io
discover.msts.com
5684049913839616-fe2.pantheonsite.io
iep-static.beta.msts.com
admin.wizer-training.com
beta.redwing.msts.com
admin.wizer-training.com
admin.wizerpartnerapp.xyz
5684049913839616-fe2.pantheonsite.io
admin.wizer-training.com
admin.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
*.beta.msts.com
5684049913839616-fe2.pantheonsite.io
*.bcaas.dev.msts.com
app.wizer-training.com
admin.wizerpartnerapp.xyz
*.caas-staging.msts.com
app.wizer-training.com
wfscorp.com
app.wizer-training.com
msts.com
*.msts.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
admin.wizerpartnerapp.xyz
5687423342215168-fe4.pantheonsite.io
app.wizer-training.com
app.wizer-training.com
5687423342215168-fe4.pantheonsite.io
*.msts.com
app.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
admin.wizer-training.com
5684049913839616-fe2.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
app.caas-staging-edge.msts.com
5684049913839616-fe2.pantheonsite.io
fltchg-static.prod.msts.com
5687423342215168-fe4.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
*.testing.msts.com
5687423342215168-fe4.pantheonsite.io
beta.bestbuy.msts.com
app.wizer-training.com
admin.wizerpartnerapp.xyz
admin.wizer-training.com
discover.msts.com
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
admin.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
5687423342215168-fe4.pantheonsite.io
admin.wizer-training.com
app.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
admin.wizer-training.com
5687423342215168-fe4.pantheonsite.io
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
app.wizer-training.com
*.msts.com
admin.wizer-training.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
beta.fleetcharge.msts.com
admin.wizer-training.com
admin.wizer-training.com
*.bcaas-staging.msts.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
*.bcaas.dev.msts.com
admin.wizer-training.com
multiserviceprepaid.com
fltchg-static.staging.msts.com
*.caas-staging.msts.com
email.wfscorp.com
app.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
5687423342215168-fe4.pantheonsite.io
admin.wizer-training.com
5687423342215168-fe4.pantheonsite.io
discover.msts.com
5684049913839616-fe2.pantheonsite.io
iep-static.beta.msts.com
admin.wizer-training.com
beta.redwing.msts.com
admin.wizer-training.com
admin.wizerpartnerapp.xyz
5684049913839616-fe2.pantheonsite.io
admin.wizer-training.com
admin.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
*.beta.msts.com
5684049913839616-fe2.pantheonsite.io
*.bcaas.dev.msts.com
app.wizer-training.com
admin.wizerpartnerapp.xyz
*.caas-staging.msts.com
app.wizer-training.com
wfscorp.com
app.wizer-training.com
msts.com
*.msts.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
admin.wizerpartnerapp.xyz
5687423342215168-fe4.pantheonsite.io
app.wizer-training.com
app.wizer-training.com
5687423342215168-fe4.pantheonsite.io
*.msts.com
app.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
admin.wizer-training.com
5684049913839616-fe2.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
app.caas-staging-edge.msts.com
5684049913839616-fe2.pantheonsite.io
fltchg-static.prod.msts.com
5687423342215168-fe4.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
*.testing.msts.com
5687423342215168-fe4.pantheonsite.io
beta.bestbuy.msts.com
app.wizer-training.com
admin.wizerpartnerapp.xyz
admin.wizer-training.com
discover.msts.com
app.wizer-training.com
5684049913839616-fe2.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
5687423342215168-fe4.pantheonsite.io
admin.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
app.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
5687423342215168-fe4.pantheonsite.io
admin.wizer-training.com
app.wizer-training.com
app.wizer-training.com
admin.wizer-training.com
admin.wizer-training.com
5687423342215168-fe4.pantheonsite.io
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
app.wizer-training.com
*.msts.com
admin.wizer-training.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
beta.fleetcharge.msts.com
admin.wizer-training.com
admin.wizer-training.com
*.bcaas-staging.msts.com
5684049913839616-fe2.pantheonsite.io
app.wizer-training.com
*.bcaas.dev.msts.com
admin.wizer-training.com
multiserviceprepaid.com
fltchg-static.staging.msts.com
*.caas-staging.msts.com
email.wfscorp.com
Certificate
The complete raw certificate details for *.caas-staging.msts.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmDCCA4CgAwIBAgIQArQTsC1cZyCzmiMI6V+g/DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA0MTcwMDAwMDBaFw0yMDA1MTcx MjAwMDBaMCIxIDAeBgNVBAMMFyouY2Fhcy1zdGFnaW5nLm1zdHMuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5c0ny/fRV8UIt9wtsdSz4/2L8yw Q1ICIcSsFvjczH49Gl9rIBSeHM580DeOgIeqJMZinozvRsXO8G4QjmS+zOsI4Eh9 /kiceBVwxyEhZuf8gkDg/DSdAElB/d4ccLlIWe3NxXRCHcY4WHgatlHbaR8cR9gz 4J3qGTjY+lL5zdZn+jR+h35tQM/Sv/2TZmvYPaRsTDObmBY72WwMAezp75Uv9kSN Dqqd9QCvPJQ5ipMnXOOvhgoBWvwrOUAwYRUbwcDPYq8Nlw3WjTG1PB5iN5DOqHmQ mwBDCPbHAPyAiMhiM4/P3Ew+MjOg+CIw3AA32qrG3VGhYPUNYChXJc0bpQIDAQAB o4IBpDCCAaAwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O BBYEFKwHMz13/BG5pO7wIH9lBESHgWC/MDYGA1UdEQQvMC2CFyouY2Fhcy1zdGFn aW5nLm1zdHMuY29tghIqLnN0YWdpbmcubXN0cy5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYD VR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAt BggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYG CCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex Yi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQsFAAOCAQEADsdfKzzs0UV5vizkM+qJsQD1giTuSwUHqhdp6mgqfrvzIG8Q awkseU0jl/uLlZ7DyYnfv9x9wDhaRb9S61fYXPpf55w6fRXVOsid6Uu85X3raGKL bzTTI4GCAchDJh7741JGK9k40dNybgDDOVG77Hu4cd8kBAikWbfJtVcdglSODE4a iLc6VwhcDuRnIhariPhELcTNn7SHM9MxcHirg8c4fnG0LOas4OjWudttTUUtwoEB 7perIYyFJCytgQXVK928vM5O6Bo1lybT0FsuMbZnJHq3vbW22An/d3pirbx4wLL0 xZ/vhTRiREzbU5ap6nvmFKQAxa4zNXWdLvZ/wA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5c0ny/fRV8UIt9wtsdS z4/2L8ywQ1ICIcSsFvjczH49Gl9rIBSeHM580DeOgIeqJMZinozvRsXO8G4QjmS+ zOsI4Eh9/kiceBVwxyEhZuf8gkDg/DSdAElB/d4ccLlIWe3NxXRCHcY4WHgatlHb aR8cR9gz4J3qGTjY+lL5zdZn+jR+h35tQM/Sv/2TZmvYPaRsTDObmBY72WwMAezp 75Uv9kSNDqqd9QCvPJQ5ipMnXOOvhgoBWvwrOUAwYRUbwcDPYq8Nlw3WjTG1PB5i N5DOqHmQmwBDCPbHAPyAiMhiM4/P3Ew+MjOg+CIw3AA32qrG3VGhYPUNYChXJc0b pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3593468750083706235554889830565388540 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.caas-staging.msts.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23681125266303442288364347027893814765089102674835601857602448700833810117165363681652339952004207305389902680497267632995038617288255655014290772275499699035008243046538656624702347743575659585567925106238346608980913622298556787622977456795703436449216401124527381897681874789334667732548292871898818149362525894989140552320239935905450961881985922213709263424214483883815910131239481200982228934533731200336436785636453494128690313665480354495817962199519859757304406380934717944340054228785769289737982207193361895813252828132172071705591561305011377524020619751992968125517926481004302583426509230698466848349093 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ac07333d77fc11b9a4eef0207f650444878160bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caas-staging.msts.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.msts.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000ec75f2b3cecd14579be2ce433ea89b100f58224ee4b0507aa1769ea682a7ebbf3206f106b092c794d2397fb8b959ec3c989dfbfdc7dc0385a45bf52eb57d85cfa5fe79c3a7d15d53ac89de94bbce57deb68628b6f34d323818201c843261efbe352462bd938d1d3726e00c33951bbec7bb871df240408a459b7c9b5571d82548e0c4e1a88b73a57085c0ee4672216ab88f8442dc4cd9fb48733d3317078ab83c7387e71b42ce6ace0e8d6b9db6d4d452dc28101ee97ab218c85242cad8105d52bddbcbcce4ee81a359726d3d05b2e31b667247ab7bdb5b6d809ff777a62adbc78c0b2f4c59fef853462444cdb5396a9ea7be614a400c5ae3335759d2ef67fc0