acquiadev.flightcentre.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:0a:a8:32:e7:e0:af:91:2a:8b:31:a1:72:43:9e:1c was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquiadev.flightcentre.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:0a:a8:32:e7:e0:af:91:2a:8b:31:a1:72:43:9e:1c
Serial Number (int): 17335298391773459562185278789538520604
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:be:ce:02:cf:ba:c8:2d:35:43:5c:f9:75:27:7a:ab:f4:52:24:5d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b3:31:d1:a1:50:24:5e:27:54:32:dd:c2:e4:81:ab:cf:c6:45:c5:3d
Fingerprint (sha256): 39:bb:ff:f9:14:d9:6f:6d:bb:33:72:9e:ee:ed:aa:c8:23:4d:6d:f0:f3:88:17:2e:88:85:59:e8:dd:8f:f7:0a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate acquiadev.flightcentre.com.au

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquiadev.flightcentre.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquiadev.flightcentre.com.au
acquiadev.studentflights.com.au
acquiadev.travel-associates.com.au
acquiadev.cruiseabout.com.au
acquiadev.myadventuretravel.com
acquiadev.escapetravel.com.au
acquiadev.new.escapetravel.com.au
acquiadev.infinityholidays.com.au
acquiadev.infinityholidays.co.nz
acquiadev.platform.fclmedia.com
acquiadev.ao.fclmedia.com
acquiadev.fclmedia.com

Other certificates including the domain name flightcentre.com.au

(limited to 100 certificates)
customer.stg.eca.fcl.cloud
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
redirect.aws.fclweb.net
acquiastage.flightcentre.com.au
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
cruises.flightcentre.com.au
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiatestau.flitech.net
acquiadev.flitech.net
alerts.flightcentre.com.au
www.studentflights.com.au
acquiadev.flightcentre.com.au
flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
stg-packages.flightcentre.com.au
acquiastage.flightcentre.com.au
acquiaprod.flitech.net
dev-account.flightcentre.com.au
www.studentflights.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
acquiatestau.flitech.net
partner.flightcentre.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
www.studentflights.com.au
flightcentre.com.hk
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.studentflights.com.au
www.studentflights.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
pages.travel.flightcentre.com.au
acquiatestau.flitech.net
stg-account.flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
acquiadev.flitech.net
giftcards.flightcentre.com.au
giftcards.flightcentre.com.au
*.flightcentre.com.au
redirect.aws.fclweb.net
acquiadev.4dconsulting.com.au
www.cievents.com.au
www.studentflights.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
flightcentre.com.hk
www.studentflights.com.au
acquiatestau.flitech.net
account.flightcentre.com.au
www.flightcentre.com
acquiatest.flitech.net
akamai-san60.exacttarget.com
giftcards.flightcentre.com.au
prod.31.slot.cdn.salesforce-communities.com
giftcards.flightcentre.com.au
redirect.aws.fclweb.net
flightcentre.com.hk
acquiatest.4dconsulting.com.au
redirect.aws.fclweb.net
alerts.flightcentre.com.au
redirect.aws.fclweb.net
acquiatest.flitech.net
www.studentflights.com.au
redirect.aws.fclweb.net
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
www.studentflights.com.au
click.travel.flightcentre.com.au

Certificate

The complete raw certificate details for acquiadev.flightcentre.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgIQDQqoMufgr5EqizGhckOeHDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNzA4MTAwMDAwMDBaFw0xODA5MTAx
MjAwMDBaMCgxJjAkBgNVBAMTHWFjcXVpYWRldi5mbGlnaHRjZW50cmUuY29tLmF1
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqdbg6fxb4bAJ4adkols
IZYr5Uge95lNjb3oRoA8Ry23zJdnEHufmn7vcnJc6dsmr+/g4m+FDy6JK3qOh1Zg
4WMDTlJvI4EERPT9lUjSw/J0hEYA17yFa4OG7XC1qvTKE3xq4FVi+7Gl7hTkBPG2
S/rE1WzQBYcDQnHj69owP+Rp5O2SEisEKKvZdst+onYNUA0kbfk2NxCc8KKWAiX1
XXcRpGjxQB3+HGaqUgwX8N5QAcvxZ3AfX/FTxv+zaLdo7rZGHOe0HVplxiv+oIKp
PZAzrMV9Rae+pi6q5YL5iY785/NF4HSPtvs/FX3cov9eZZTRPRNDB3xEk3b9xg6n
KQIDAQABo4IC2TCCAtUwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAw
HQYDVR0OBBYEFP++zgLPusgtNUNc+XUneqv0UiRdMIIBiwYDVR0RBIIBgjCCAX6C
HWFjcXVpYWRldi5mbGlnaHRjZW50cmUuY29tLmF1gh9hY3F1aWFkZXYuc3R1ZGVu
dGZsaWdodHMuY29tLmF1giJhY3F1aWFkZXYudHJhdmVsLWFzc29jaWF0ZXMuY29t
LmF1ghxhY3F1aWFkZXYuY3J1aXNlYWJvdXQuY29tLmF1gh9hY3F1aWFkZXYubXlh
ZHZlbnR1cmV0cmF2ZWwuY29tgh1hY3F1aWFkZXYuZXNjYXBldHJhdmVsLmNvbS5h
dYIhYWNxdWlhZGV2Lm5ldy5lc2NhcGV0cmF2ZWwuY29tLmF1giFhY3F1aWFkZXYu
aW5maW5pdHlob2xpZGF5cy5jb20uYXWCIGFjcXVpYWRldi5pbmZpbml0eWhvbGlk
YXlzLmNvLm56gh9hY3F1aWFkZXYucGxhdGZvcm0uZmNsbWVkaWEuY29tghlhY3F1
aWFkZXYuYW8uZmNsbWVkaWEuY29tghZhY3F1aWFkZXYuZmNsbWVkaWEuY29tMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYD
VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20v
c2NhMWIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAt
BggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYG
CCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex
Yi5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEACTcx1esNipOL
zq0WBk5KJ2QPtLtO2/xGX9zRJfU/PztZCDkagDH2PzzdyJGBwUwM7rxm3kQ9MNC1
dUnyhGFnYo/Dy5hmnsrjJKsXsJpted4+vBht+JJnjaLkJT8cLxfEYcPoOEJn+FnV
3tAMsuysPny9r0pTLYflkM+V+o/8fMCn2yPosCOipzP2oEd/8Hs6XtVWppi1C52+
6zB2sLVNK0hCqczinUNc3yRvFhUkNTuNhyAFzrHi8wcc7K4QNXx+BHOECxvERzuD
czi9uvZzrOcncxR8cNL6PEbF3cOIq9819sr3YUPw0jrP/n//PQDlguqxWbpH6Pre
hESLkJpuqg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqdbg6fxb4bAJ4adkols
IZYr5Uge95lNjb3oRoA8Ry23zJdnEHufmn7vcnJc6dsmr+/g4m+FDy6JK3qOh1Zg
4WMDTlJvI4EERPT9lUjSw/J0hEYA17yFa4OG7XC1qvTKE3xq4FVi+7Gl7hTkBPG2
S/rE1WzQBYcDQnHj69owP+Rp5O2SEisEKKvZdst+onYNUA0kbfk2NxCc8KKWAiX1
XXcRpGjxQB3+HGaqUgwX8N5QAcvxZ3AfX/FTxv+zaLdo7rZGHOe0HVplxiv+oIKp
PZAzrMV9Rae+pi6q5YL5iY785/NF4HSPtvs/FX3cov9eZZTRPRNDB3xEk3b9xg6n
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17335298391773459562185278789538520604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquiadev.flightcentre.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19523226012833144667926089089288119600159873713054465976130910105450332357316973432602089504848035349516654785929214699680422379824042203166806071967321963564427313736586243755818474502508374060309244512521226981133365765850102653642519470859232215836759636411243306785639280443985765149041512830105575591468417582242773274460825887250653092509448368198602924953062469458164947829026376970618356440025941679444734990705293471946595415480842639304006244465912644001152335874768098564002149664516367424286669198486851722439672352257176679628896879170635455015930207518536726171340582992113757814519028981793493028349737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffbece02cfbac82d35435cf975277aabf452245d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.studentflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.myadventuretravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.new.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.infinityholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.infinityholidays.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.platform.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.ao.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiadev.fclmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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