origin.web.production.afar-media.brightspot.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:95:84:8a:26:dc:19:df:0a:f5:9e:ac:6d:80:4b:2d was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=origin.web.production.afar-media.brightspot.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:95:84:8a:26:dc:19:df:0a:f5:9e:ac:6d:80:4b:2d
Serial Number (int): 15397848409136389134669513543791954733
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: da:d2:66:2a:d0:e5:29:fe:8a:fa:d3:64:bf:39:3a:38:b2:42:ba:4c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fb:7c:5d:b7:5d:20:df:46:d7:a0:21:d8:37:39:63:75:db:f2:4b:ac
Fingerprint (sha256): 37:14:17:29:7f:6d:a9:ee:98:10:5c:88:e7:cd:91:7a:ad:2a:01:96:0a:88:77:1b:61:41:ad:df:e8:de:bd:5c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate origin.web.production.afar-media.brightspot.cloud

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin.web.production.afar-media.brightspot.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin.web.production.afar-media.brightspot.cloud
verify.cms.web.production.afar-media.brightspot.cloud
www.afar.com
cms.afar.com
cms.web.production.afar-media.brightspot.cloud
*.cms.web.production.afar-media.brightspot.cloud
verify.origin.web.production.afar-media.brightspot.cloud
web.production.afar-media.brightspot.cloud
static.web.production.afar-media.brightspot.cloud
afar.brightspotcdn.com
afar.com
*.origin.web.production.afar-media.brightspot.cloud
*.web.production.afar-media.brightspot.cloud

Other certificates including the domain name brightspot.cloud

(limited to 100 certificates)
cst-qa.lower.chorus.brightspot.cloud
origin.ser.production.k1.amazon.brightspot.cloud
origin.uat.lower.google-marketing.brightspot.cloud
entertainment.production.k1.amazon.brightspot.cloud
origin.relay-qa.lower.k1.amazon.brightspot.cloud
biospace-qa.lower.k1.m1.brightspot.cloud
origin.kpbs.kpbs.production.k3.m1.brightspot.cloud
cms.6amcity.com
origin.ajga-uat.ajga.lower.k1.m1.brightspot.cloud
amazon-hvh.lower.k3.m1.brightspot.cloud
static.amazon-hvh.lower.k3.m1.brightspot.cloud
origin.acertus.production.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
origin.medtech.production.jnj.brightspot.cloud
origin.web.production.hca.brightspot.cloud
intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.wwe-prod.production.k2.m1.brightspot.cloud
origin.jobs.production.amazon-jobs.brightspot.cloud
origin.berlin-2023-qa.berlin-2023.lower.k2.m1.brightspot.cloud
www.nbcsportsathletedirect.com
static.church-qa.church.lower.church.brightspot.cloud
origin.epe-uat.epe.lower.k2.m1.brightspot.cloud
lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.pitchbook-uat.lower.k2.m1.brightspot.cloud
fastmarkets.com
origin.deseret.production.chorus.brightspot.cloud
static.lexipol.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.bwater-uat.bridgewater.lower.k2.m1.brightspot.cloud
static.farm-journal-qa.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.web.production.teaching-strategies.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.intsys.inter-systems.production.k2.m1.brightspot.cloud
amazon-last-mile.lower.k3.m1.brightspot.cloud
origin.vpm.production.k1.m1.brightspot.cloud
origin.foods.wholefoods.production.k1.amazon.brightspot.cloud
static.biospace.production.k1.m1.brightspot.cloud
bsp.elpais.com.uy
origin.vpm.production.k1.m1.brightspot.cloud
origin.carrick.production.k1.m1.brightspot.cloud
cms.6amcity.com
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.chalkbeat.production.chorus.brightspot.cloud
origin.berlin-2023.berlin-2023.production.k2.m1.brightspot.cloud
acertus-qa.lower.k1.m1.brightspot.cloud
cms.6amcity.com
cms.6amcity.com
origin.marriott-news.production.k1.m1.brightspot.cloud
origin.ei.energy-intelligence.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
static.uat.lower.dispatch-health.brightspot.cloud
*.dispatchhealth.com
origin.chopra.chopra.production.k2.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.uat.lower.amazon-sell.brightspot.cloud
static.notmusa.production.k3.m1.brightspot.cloud
static.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
science-qa2.topics.lower.k1.amazon.brightspot.cloud
origin.im-qa.lower.jnj.brightspot.cloud
origin.uat.lower.dispatch-health.brightspot.cloud
sixam-city-uat.lower.k1.m1.brightspot.cloud
origin.rfdtv.k1.go.brightspot.cloud
static.web.production.forum-communications.brightspot.cloud
static.gbh.production.k1.m1.brightspot.cloud
origin.aji.production.k2.m1.brightspot.cloud
origin.notmusa.production.k3.m1.brightspot.cloud
origin.usnews-uat.lower.usnews.brightspot.cloud
verify.origin.prod-news.production.ap.brightspot.cloud
mattress-uat.mattress-firm.lower.k2.m1.brightspot.cloud
origin.qa-migration.lower.el-pais.brightspot.cloud
castle-qa.castle-connolly.lower.k2.m1.brightspot.cloud
origin.qa.lower.google-marketing.brightspot.cloud
sustainability.production.k1.amazon.brightspot.cloud
static.uat.lower.google-marketing.brightspot.cloud
origin.in-investor-qa2.lower.k2.m1.brightspot.cloud
static.acertus.production.k1.m1.brightspot.cloud
origin.lexis.production.ln-production.brightspot.cloud
origin.deseret-qa2.lower.chorus.brightspot.cloud
static.pay.production.k1.amazon.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.church-qa.church.lower.church.brightspot.cloud
static.epe.epe.production.k2.m1.brightspot.cloud
origin.pay.production.k1.amazon.brightspot.cloud
origin.sixam-city.production.k1.m1.brightspot.cloud
origin.realtymogul.k1.go.brightspot.cloud
epe-uat.epe.lower.k2.m1.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
origin.farm-journal.production.k1.m1.brightspot.cloud
origin.torridon.production.k2.m1.brightspot.cloud
origin.church-perf.church.lower.church.brightspot.cloud
brightspot-design.brightspotcdn.com
costar-qa.costar.lower.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
fastmarkets.com
costar-uat.costar.lower.k1.m1.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud

Certificate

The complete raw certificate details for origin.web.production.afar-media.brightspot.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH8zCCBtugAwIBAgIQC5WEiibcGd8K9Z6sbYBLLTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA2MDkwMDAwMDBaFw0yMzA3MDgy
MzU5NTlaMDwxOjA4BgNVBAMTMW9yaWdpbi53ZWIucHJvZHVjdGlvbi5hZmFyLW1l
ZGlhLmJyaWdodHNwb3QuY2xvdWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7Z99vS2/yDT/iIMcQEIDSc3kfUSSdvsQCuBJj3hOvEb/A9xmDqRLzokCB
BwCGSzcnNdw2c1exyRu1zqO4qSsXvEB2bN8zGXW2hikl27ZnqC7zQw9e2Bcad88f
MVkksy0Qa//zPkgID/OWVaQkIMiTrLjwhhUEyUZDNtXSATTPKEXoqAtVYqOZAFeY
nkYJAZAwq827A9WwwZjhTUO8wFlm/vg1HJepA5lYqiNnkVl4ma67DD5yh6ESeC8f
mogVvVbp65J1AciUzW9PZPilaHuV36hJFYWc0+/Lfq7JKoVWGcRMudg3Q8nJa/hL
B8bmAf7yklmJjEop//3Bst+4bOJFAgMBAAGjggTlMIIE4TAfBgNVHSMEGDAWgBRZ
pGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU2tJmKtDlKf6K+tNkvzk6OLJC
ukwwggITBgNVHREEggIKMIICBoIxb3JpZ2luLndlYi5wcm9kdWN0aW9uLmFmYXIt
bWVkaWEuYnJpZ2h0c3BvdC5jbG91ZII1dmVyaWZ5LmNtcy53ZWIucHJvZHVjdGlv
bi5hZmFyLW1lZGlhLmJyaWdodHNwb3QuY2xvdWSCDHd3dy5hZmFyLmNvbYIMY21z
LmFmYXIuY29tgi5jbXMud2ViLnByb2R1Y3Rpb24uYWZhci1tZWRpYS5icmlnaHRz
cG90LmNsb3VkgjAqLmNtcy53ZWIucHJvZHVjdGlvbi5hZmFyLW1lZGlhLmJyaWdo
dHNwb3QuY2xvdWSCOHZlcmlmeS5vcmlnaW4ud2ViLnByb2R1Y3Rpb24uYWZhci1t
ZWRpYS5icmlnaHRzcG90LmNsb3Vkgip3ZWIucHJvZHVjdGlvbi5hZmFyLW1lZGlh
LmJyaWdodHNwb3QuY2xvdWSCMXN0YXRpYy53ZWIucHJvZHVjdGlvbi5hZmFyLW1l
ZGlhLmJyaWdodHNwb3QuY2xvdWSCFmFmYXIuYnJpZ2h0c3BvdGNkbi5jb22CCGFm
YXIuY29tgjMqLm9yaWdpbi53ZWIucHJvZHVjdGlvbi5hZmFyLW1lZGlhLmJyaWdo
dHNwb3QuY2xvdWSCLCoud2ViLnByb2R1Y3Rpb24uYWZhci1tZWRpYS5icmlnaHRz
cG90LmNsb3VkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6
b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYI
KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6
b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u
dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIE
AgSCAW4EggFqAWgAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAA
AYFIjuEzAAAEAwBHMEUCIQD6O6xOqGrso/ta/+q64PT8sROni/XXFsz3oVBRmlfn
9QIgM7XvTGVCaTCqBaGrmuadZRvEJJEzIwycsYS7q+5IoBsAdgA1zxkbv7FsV78P
rUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYFIjuFKAAAEAwBHMEUCIQCb6ofGhiA7
wUzBZhUT4zcvL5exQRcSPog/KEFTdv+ELAIgFVtuIJgUXXPf2JnCi2xA3oZhYxEa
h4FuksjWLlyMSMUAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAA
AYFIjuFxAAAEAwBHMEUCIQDJHshF9RN0FEQ4zKxFWT4BuJywHpwtAsDHKH6LXUGx
rQIgZ7afzcfg+19dtSV225utbxXOAOi80w5et0SUK+qFk0MwDQYJKoZIhvcNAQEL
BQADggEBAJhnCSFa/hKNEWiAXYRSQsvG3UlXIOXyzLHOYprgMFeVoPuIqMHt135L
/OvaAwEeVjPJYdLszXXC5vdJNR6XQGtrYWUOYHtxawD8r9bsqSu1OnDcrt9JfH83
mTv38XWGVgHBPn6jofJ6VUMp/v63DdjaIC1gV7pKO5Lbm5wv7qJzP53H6BlTijCE
57ZHkzZikBdd6obVJB028uUqB+uiC1o8kCd95VcTnaO73b6u3axl1B7LFMvI2ajv
M4LIV7dGRsywbxUawTqSPuwGmOJ/0/QKh2Hro7AUKQzu9WMCrgB48AnwuM+0GFHL
Zv5j7U5IftI0CPKByiIMLHSToa4b11c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ffb0tv8g0/4iDHEBCA
0nN5H1Eknb7EArgSY94TrxG/wPcZg6kS86JAgQcAhks3JzXcNnNXsckbtc6juKkr
F7xAdmzfMxl1toYpJdu2Z6gu80MPXtgXGnfPHzFZJLMtEGv/8z5ICA/zllWkJCDI
k6y48IYVBMlGQzbV0gE0zyhF6KgLVWKjmQBXmJ5GCQGQMKvNuwPVsMGY4U1DvMBZ
Zv74NRyXqQOZWKojZ5FZeJmuuww+coehEngvH5qIFb1W6euSdQHIlM1vT2T4pWh7
ld+oSRWFnNPvy36uySqFVhnETLnYN0PJyWv4SwfG5gH+8pJZiYxKKf/9wbLfuGzi
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15397848409136389134669513543791954733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin.web.production.afar-media.brightspot.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23657784611428888654608453377945178170906207176727619125987546622715647894889332332470158776897894040817632956551647029085384598111067765892572643319969633868820304339316207550335258961427481906987688196799648751948484284931664586118900739617862691014820737924755987135473364133577539929992776177012040337387674848473734049940258055624650994502838518065769129049210278044755011682413753137095963237230850088517343174357521172951655841935532279163535106110563323120450997787483129688766180264823265707498752210033464761737247944846687460437429404407041664046104118111738212518107289052055127912802603742560815342740037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dad2662ad0e529fe8afad364bf393a38b242ba4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (522 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.cms.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.afar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.origin.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afar.brightspotcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.production.afar-media.brightspot.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00986709215afe128d1168805d845242cbc6dd495720e5f2ccb1ce629ae0305795a0fb88a8c1edd77e4bfcebda03011e5633c961d2eccd75c2e6f749351e97406b6b61650e607b716b00fcafd6eca92bb53a70dcaedf497c7f37993bf7f175865601c13e7ea3a1f27a554329fefeb70dd8da202d6057ba4a3b92db9b9c2feea2733f9dc7e819538a3084e7b64793366290175dea86d5241d36f2e52a07eba20b5a3c90277de557139da3bbddbeaeddac65d41ecb14cbc8d9a8ef3382c857b74646ccb06f151ac13a923eec0698e27fd3f40a8761eba3b014290ceef56302ae0078f009f0b8cfb41851cb66fe63ed4e487ed23408f281ca220c2c7493a1ae1bd757