edu.barco.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:41:30:02:00:f4:d5:4c:30:31:6a:cb:9c:76:0c:44 was issued on by Amazon.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=edu.barco.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:41:30:02:00:f4:d5:4c:30:31:6a:cb:9c:76:0c:44
Serial Number (int): 6984612989142628638554586783350656068
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 52:49:66:3d:be:e3:b0:a6:df:97:e3:2a:19:cf:60:e8:5e:62:19:4e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b2:c7:5b:1c:a8:f9:17:7e:c4:e1:ca:0f:81:46:97:e0:c2:8d:1b:ea
Fingerprint (sha256): 36:f4:5e:ec:41:e2:b9:d7:11:14:6d:7b:36:62:48:eb:4a:26:7b:0f:da:27:f5:78:b2:e0:c7:db:f0:60:34:62

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate edu.barco.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edu.barco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edu.barco.com
*.services.medialon.com
insights.barco.com
nexxis.barco.com
*.university.barco.com
*.insights.barco.com
cloud.barco.com
store.barco.com
*.bin.cloud.barco.com
*.activate.barco.com
*.cloud.barco.com
weconnect.barco.com
university.barco.com
services.medialon.com
cmp.barco.com
overture.barco.com
*.proj.barco.com
proj.barco.com
*.cmp.barco.com
*.overture.barco.com
medialon.barco.com
*.medialon.barco.com
*.store.barco.com
*.weconnect.barco.com
*.nexxis.barco.com
*.edu.barco.com
activate.barco.com

Other certificates including the domain name barco.com

(limited to 100 certificates)
outlet.barco.com
*.uat.eu-west-2.synergi.barco.com
edu.barco.com
*.healthcare.barco.com
ir.barco.com
ar.barco.com
*.preprod-10x.ads.healthcare.barco.com
*.healthcare.barco.com
*.qa.ads.healthcare.barco.com
sni.cloudflaressl.com
smartuptv.com
barco.support.com
edu.barco.com
*.cloud.barco.com
*.devitp.ads.healthcare.barco.com
test-serviceportal.barco.com
event.barco.com
link.socialsharing.kbccorporatebanking.be
access01.barco.com
maintenance.cloud.barco.com
*.cloud.barco.com
*.sandbox.synergi.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
barco.support.com
*.barco.com
www.register.barco.com
*.dev.synergi.barco.com
*.healthcare.barco.com
*.barco.com
modmed-mock-fhir.devops.ads.healthcare.barco.com
*.store.barco.com
us.cc.barco.com
store.barco.com
edu.barco.com
store.barco.com
go.barco.com
*.healthcare.barco.com
www.barco.com
demetra.barco.com
*.barco.com
barcozone-compliancetest.be
*.eu-west-2.synergi.barco.com
auth.barco.com
*.healthcare.barco.com
insights.barco.com
store.barco.com
cc.barco.com
demetra.barco.com
service.medical.barco.com
discover.barco.com
forwrd.it
university.barco.com
qa-web-backend.barco.com
*.uat.synergi.barco.com
ar.barco.com
cl.sw-t.ch
web-backend.barco.com
*.healthcare.barco.com
demetra.barco.com
insights.barco.com
*.prod.ads.healthcare.barco.com
www.trynow.barco.com
*.synergi.barco.com
*.healthcare.barco.com
ram.barco.com
*.preprod-10x.ads.healthcare.barco.com
infopages.barco.com
secure.barco.com
edu.barco.com
*.cloud.barco.com
jobs.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
cl.sw-t.ch
www.register.barco.com
*.barco.com
*.barco.com
infopages.barco.com
*.healthcare.barco.com
store.barco.com
*.healthcare.barco.com
sni.cloudflaressl.com
cc.barco.com
*.healthcare.barco.com
us.cc.barco.com
event.barco.com
*.healthcare.barco.com
activate.barco.com
*.prd.eu-west-2.synergi.barco.com
*.store.barco.com
ir.barco.com
*.preprod.ads.healthcare.barco.com
*.healthcare.barco.com
*.healthcare.barco.com
us.cc.barco.com
*.prod-14.ads.healthcare.barco.com
ar.barco.com

Certificate

The complete raw certificate details for edu.barco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgDCCBWigAwIBAgIQBUEwAgD01UwwMWrLnHYMRDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA1MjkwMDAwMDBaFw0yMDA2Mjkx
MjAwMDBaMBgxFjAUBgNVBAMTDWVkdS5iYXJjby5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDgRtJWxCdnDr4ZwoocMffl8Nr/tbPmbzgRqREiTHe7
PFELfIuGWKlJNlnNSdo9d+tK9LLBVE+8SCOS5PGQlysmboNaduITkk6RUWGBQd8V
Hnrgp+alleZysjGHNgs72cc28oeLUZi6ABh0PBfyILiTOGhP39ribs5akZs6CLGV
I6wHwuFGMie68UrHkFsJDLk49unYGUKNW9LuIlgBBRpKXCVunVhI3HKr3ED13bYD
Jb2Aa82/Gkrdh7ilx/owJzJZq8M9xwZmy/W5mvcJUa6mt4s782aID10a4Gx3aUwF
uszoMIBBi5LQxUcDferTP1uYVd+8Wo2jp4Qf9cWAzSZVAgMBAAGjggOWMIIDkjAf
BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUUklmPb7j
sKbfl+MqGc9g6F5iGU4wggImBgNVHREEggIdMIICGYINZWR1LmJhcmNvLmNvbYIX
Ki5zZXJ2aWNlcy5tZWRpYWxvbi5jb22CEmluc2lnaHRzLmJhcmNvLmNvbYIQbmV4
eGlzLmJhcmNvLmNvbYIWKi51bml2ZXJzaXR5LmJhcmNvLmNvbYIUKi5pbnNpZ2h0
cy5iYXJjby5jb22CD2Nsb3VkLmJhcmNvLmNvbYIPc3RvcmUuYmFyY28uY29tghUq
LmJpbi5jbG91ZC5iYXJjby5jb22CFCouYWN0aXZhdGUuYmFyY28uY29tghEqLmNs
b3VkLmJhcmNvLmNvbYITd2Vjb25uZWN0LmJhcmNvLmNvbYIUdW5pdmVyc2l0eS5i
YXJjby5jb22CFXNlcnZpY2VzLm1lZGlhbG9uLmNvbYINY21wLmJhcmNvLmNvbYIS
b3ZlcnR1cmUuYmFyY28uY29tghAqLnByb2ouYmFyY28uY29tgg5wcm9qLmJhcmNv
LmNvbYIPKi5jbXAuYmFyY28uY29tghQqLm92ZXJ0dXJlLmJhcmNvLmNvbYISbWVk
aWFsb24uYmFyY28uY29tghQqLm1lZGlhbG9uLmJhcmNvLmNvbYIRKi5zdG9yZS5i
YXJjby5jb22CFSoud2Vjb25uZWN0LmJhcmNvLmNvbYISKi5uZXh4aXMuYmFyY28u
Y29tgg8qLmVkdS5iYXJjby5jb22CEmFjdGl2YXRlLmJhcmNvLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH
AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz
dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu
Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQAu50b7HnHH4cxdFjBeWH3iJJnunYLfLiJkaGLI
gS49zEE5uS/q1AL0m9k7Q/+jgHBMk/qImNzSmRmQ/nCfCh8595PixZISMgD/kYhR
AIQx1MMbY20FdNe/kiw+W75F9/SxQHw9IUYcHQgOBRv70eFiXKfH2VTYRosGqqeZ
+KE424d5/u4Ge9QsgmmcKWC3Ex2PFEtHhX6iUEoVeNV94NfJHSIbMMoAjEt3NKls
WHyPDB2T39eJl5ftTcGnC0QpnAqA30NtpBqGIZ5RCIn2GHuW+0BefODo3NBV2GWN
fVfiPhFET/gfENeYrNdSzsC9wCreOSncVpafjqzQp3ii3ex1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EbSVsQnZw6+GcKKHDH3
5fDa/7Wz5m84EakRIkx3uzxRC3yLhlipSTZZzUnaPXfrSvSywVRPvEgjkuTxkJcr
Jm6DWnbiE5JOkVFhgUHfFR564KfmpZXmcrIxhzYLO9nHNvKHi1GYugAYdDwX8iC4
kzhoT9/a4m7OWpGbOgixlSOsB8LhRjInuvFKx5BbCQy5OPbp2BlCjVvS7iJYAQUa
Slwlbp1YSNxyq9xA9d22AyW9gGvNvxpK3Ye4pcf6MCcyWavDPccGZsv1uZr3CVGu
preLO/NmiA9dGuBsd2lMBbrM6DCAQYuS0MVHA33q0z9bmFXfvFqNo6eEH/XFgM0m
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6984612989142628638554586783350656068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edu.barco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28312303762944242233660015510222008357448095653666897628510018847977449880219038792751084135484213776224033380132262502994230333373541488846906257308650284665239872786098515927628558707212573968058756679250492375767082157488511858623016596387286406239199681919645272391788856407802733321094127616507098675397348025952054654110782843621066692836782501601471199443163790740186662285265463345568995444716024051334467117045568968404284741634384097857907036341047754243387341170414584809818794416173606644058171553807346254380732513303187469994422601248908092102855934262349210309539472635939775363555407716248057946121813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5249663dbee3b0a6df97e32a19cf60e85e62194e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (541 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.medialon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexxis.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.university.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insights.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bin.cloud.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activate.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weconnect.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.medialon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overture.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proj.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proj.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmp.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overture.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medialon.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medialon.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.store.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weconnect.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nexxis.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edu.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activate.barco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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