sightandsounddigitaledition.bfi.org.uk
Issued by Amazon
About this certificate
This digital certificate with serial number 07:a4:04:b1:7d:08:05:b6:0c:1b:f4:50:a1:c5:10:e4 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sightandsounddigitaledition.bfi.org.uk
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:a4:04:b1:7d:08:05:b6:0c:1b:f4:50:a1:c5:10:e4Serial Number (int): 10156227847012627077112546633573535972
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 44:c9:0a:fa:5e:b9:7a:11:42:30:ee:72:85:3e:43:6d:50:55:e6:c4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 82:30:84:ac:fa:dd:02:82:ee:0e:49:23:b7:87:a7:81:03:1d:95:f3
Fingerprint (sha256): 39:be:02:ee:7e:20:1e:f4:90:83:0b:28:e2:1c:6a:13:a1:0e:5a:23:a6:90:98:8f:b9:34:dc:52:e9:dc:b7:0a
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate sightandsounddigitaledition.bfi.org.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sightandsounddigitaledition.bfi.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sightandsounddigitaledition.bfi.org.uk
Other certificates including the domain name bfi.org.uk
(limited to 100 certificates)
search-es.player.bfi.org.uk
testappstore.bfi.org.uk
mdm.bfi.org.uk
www2.bfi.org.uk
subscriber.pagesuite.com
bfimail.bfi.org.uk
bfijobsandopportunities.bfi.org.uk
stories.bfi.org.uk
www.pagesuite.co.uk
www.pagesuite.co.uk
courtamew.dev
owa.bfi.org.uk
adnoncentaur3.abasoft.co.uk
filmstore.bfi.org.uk
jasperdekorte.nl
www.bfi.org.uk
el3alamia.website
staging.core-cms.bfi.digital
core-cms.bfi.org.uk
adnoncentaur3.abasoft.co.uk
appstore.bfi.org.uk
tickets.bfi.org.uk
contribute.bfi.org.uk
drbfiportal.bfi.org.uk
*.player.bfi.org.uk
testappstore.bfi.org.uk
adnoncentaur3.abasoft.co.uk
stills.bfi.org.uk
www.bfi.org.uk
appstore.bfi.org.uk
www.reactnative.ga
digital-collection.bfi.org.uk
bfimail.bfi.org.uk
www.anomalymusic.dev
testappstore.bfi.org.uk
filmstore.bfi.org.uk
core-cms.bfi.org.uk
admin.gruve.link
digital-collection.bfi.org.uk
fan.bfi.org.uk
festivalaccreditation.bfi.org.uk
contribute.bfi.org.uk
pasteleriadonrafael.cl
www.stelliteautomation.com
planfile.com
BK-BFICTXADM1.bfi.org.uk
shop.bfi.org.uk
palrivercg.com
adnoncentaur3.abasoft.co.uk
subscriber.pagesuite.com
www.pagesuite.co.uk
www.shop.bfi.org.uk
filmography.bfi.org.uk
blueprint.currents.fm
ss-xfiles1.bfi.org.uk
www.shop.bfi.org.uk
player-skylark.bfi.org.uk
player.bfi.org.uk
www.pagesuite.co.uk
contribute.bfi.org.uk
bfimail.bfi.org.uk
appstore.bfi.org.uk
whatson.bfi.org.uk
shop.bfi.org.uk
filmography.bfi.org.uk
network.bfi.org.uk
owamob.bfi.org.uk
xmgateway.bfi.org.uk
www.pagesuite.co.uk
fftd.bfi.org.uk
adnoncentaur3.abasoft.co.uk
tempbfiportal.bfi.org.uk
bfidigitaldesktop.bfi.org.uk
sightandsounddigitaledition.bfi.org.uk
contribute.bfi.org.uk
admin.dheoab.dev
whatson.bfi.org.uk
www.bfi.org.uk
lf-cast.pearsports.com
adnoncentaur3.abasoft.co.uk
bfiftp.bfi.org.uk
adfe7.abasoft.co.uk
*.player.bfi.org.uk
collections-search.bfi.org.uk
adnoncentaur3.abasoft.co.uk
owa.bfi.org.uk
search-es.player.bfi.org.uk
www.pagesuite.co.uk
subscriber.pagesuite.com
explore.bfi.org.uk
adnoncentaur3.abasoft.co.uk
BFICTXNS02.bfi.org.uk
contribute.bfi.org.uk
stories.bfi.org.uk
app.dev.mazumago.com
www.tnguyen.dev
contribute.bfi.org.uk
contribute.bfi.org.uk
shop-cdn.bfi.org.uk
filmography.bfi.org.uk
testappstore.bfi.org.uk
mdm.bfi.org.uk
www2.bfi.org.uk
subscriber.pagesuite.com
bfimail.bfi.org.uk
bfijobsandopportunities.bfi.org.uk
stories.bfi.org.uk
www.pagesuite.co.uk
www.pagesuite.co.uk
courtamew.dev
owa.bfi.org.uk
adnoncentaur3.abasoft.co.uk
filmstore.bfi.org.uk
jasperdekorte.nl
www.bfi.org.uk
el3alamia.website
staging.core-cms.bfi.digital
core-cms.bfi.org.uk
adnoncentaur3.abasoft.co.uk
appstore.bfi.org.uk
tickets.bfi.org.uk
contribute.bfi.org.uk
drbfiportal.bfi.org.uk
*.player.bfi.org.uk
testappstore.bfi.org.uk
adnoncentaur3.abasoft.co.uk
stills.bfi.org.uk
www.bfi.org.uk
appstore.bfi.org.uk
www.reactnative.ga
digital-collection.bfi.org.uk
bfimail.bfi.org.uk
www.anomalymusic.dev
testappstore.bfi.org.uk
filmstore.bfi.org.uk
core-cms.bfi.org.uk
admin.gruve.link
digital-collection.bfi.org.uk
fan.bfi.org.uk
festivalaccreditation.bfi.org.uk
contribute.bfi.org.uk
pasteleriadonrafael.cl
www.stelliteautomation.com
planfile.com
BK-BFICTXADM1.bfi.org.uk
shop.bfi.org.uk
palrivercg.com
adnoncentaur3.abasoft.co.uk
subscriber.pagesuite.com
www.pagesuite.co.uk
www.shop.bfi.org.uk
filmography.bfi.org.uk
blueprint.currents.fm
ss-xfiles1.bfi.org.uk
www.shop.bfi.org.uk
player-skylark.bfi.org.uk
player.bfi.org.uk
www.pagesuite.co.uk
contribute.bfi.org.uk
bfimail.bfi.org.uk
appstore.bfi.org.uk
whatson.bfi.org.uk
shop.bfi.org.uk
filmography.bfi.org.uk
network.bfi.org.uk
owamob.bfi.org.uk
xmgateway.bfi.org.uk
www.pagesuite.co.uk
fftd.bfi.org.uk
adnoncentaur3.abasoft.co.uk
tempbfiportal.bfi.org.uk
bfidigitaldesktop.bfi.org.uk
sightandsounddigitaledition.bfi.org.uk
contribute.bfi.org.uk
admin.dheoab.dev
whatson.bfi.org.uk
www.bfi.org.uk
lf-cast.pearsports.com
adnoncentaur3.abasoft.co.uk
bfiftp.bfi.org.uk
adfe7.abasoft.co.uk
*.player.bfi.org.uk
collections-search.bfi.org.uk
adnoncentaur3.abasoft.co.uk
owa.bfi.org.uk
search-es.player.bfi.org.uk
www.pagesuite.co.uk
subscriber.pagesuite.com
explore.bfi.org.uk
adnoncentaur3.abasoft.co.uk
BFICTXNS02.bfi.org.uk
contribute.bfi.org.uk
stories.bfi.org.uk
app.dev.mazumago.com
www.tnguyen.dev
contribute.bfi.org.uk
contribute.bfi.org.uk
shop-cdn.bfi.org.uk
filmography.bfi.org.uk
Certificate
The complete raw certificate details for sightandsounddigitaledition.bfi.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEojCCA4qgAwIBAgIQB6QEsX0IBbYMG/RQocUQ5DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MDcwMDAwMDBaFw0yMTA1MDcx MjAwMDBaMDExLzAtBgNVBAMTJnNpZ2h0YW5kc291bmRkaWdpdGFsZWRpdGlvbi5i Zmkub3JnLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofxJ0eL8 pdmeAYe+6pTXF1YvkDEczi1KrXf66do2aRLsXEW/R2qaicolfJk1TopYTPKTu/66 ozx8xBpU/qTfWnG0MgA5jbrtMtv0eCVzr43Kwk2K6+5wj8Sj7s/EoTATu+a6pvDL hOEL5HSBEJDlIzulukTKlYSRm2aXSVj2DWLdVvoU81PP6uyfwYTIUPUr1dyJqJau h8cI2TcBxuGVMWQr7YS3donnXg3pzNexYLM7rkjmTS385eGX2TTomnGpUdJlLvSz Vg99sEx1FU0KdsKzNLf8IaX9keMYQI9yX6weYXobYaBFD8Bd+5Q9ZieK1EyVW6i1 7rnovE/veC/VmQIDAQABo4IBnzCCAZswHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOU ByeWdFv5PdAwHQYDVR0OBBYEFETJCvpeuXoRQjDucoU+Q21QVebEMDEGA1UdEQQq MCiCJnNpZ2h0YW5kc291bmRkaWdpdGFsZWRpdGlvbi5iZmkub3JnLnVrMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEF BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRy dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVz dC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBADekie33IlHMu/DUhY8JhRhCBov7yv/A8bto MzumOYqO8P0Z8LUjpZMiMkfLdy9aIKqlDBG6272/56/COvxIuTcjMgi6eVIXxhjF LtjvvT/vlSg5LumuEpsS2tleTiWfEBPB/C4PGw2kgvsIM0o3R7+HfkQ4Q1OI+yZq zi7xb9B2XftFSdlJEFnzvAvn6B77AaIi3ZnCPP9pleXTSBk84JjV/rH1Par4/Dc3 aIRplLiYDGs2rKSfxMacctEfETGuG0d5nkkBVfZVA+O84XbOUjtoYRfTSBsTHKZb Ll6htQkJ0hmM0v9Bzig4i1m4IMLLHwHrIFCHlu++y/mxs1mZicc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofxJ0eL8pdmeAYe+6pTX F1YvkDEczi1KrXf66do2aRLsXEW/R2qaicolfJk1TopYTPKTu/66ozx8xBpU/qTf WnG0MgA5jbrtMtv0eCVzr43Kwk2K6+5wj8Sj7s/EoTATu+a6pvDLhOEL5HSBEJDl IzulukTKlYSRm2aXSVj2DWLdVvoU81PP6uyfwYTIUPUr1dyJqJauh8cI2TcBxuGV MWQr7YS3donnXg3pzNexYLM7rkjmTS385eGX2TTomnGpUdJlLvSzVg99sEx1FU0K dsKzNLf8IaX9keMYQI9yX6weYXobYaBFD8Bd+5Q9ZieK1EyVW6i17rnovE/veC/V mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10156227847012627077112546633573535972 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sightandsounddigitaledition.bfi.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20448775126043100376618009549410656067452733139271556709594061158399724217140050344898338296167813037842015706669872350597271051099169733330790134350661290595109591169988081038699260929064920782672456129175505050418355590564492602012863100855219400310004817653754333509386671389539061857926922781203004206787117385106992375507555083994857699355247043234048509345012116452630713498764876332367043872023397312316429184353873566985309493127079741266826187559401812150259300082139528310178262788168379362204214482052267337241019793473614126731303909047405554102630490143163722869298171560018923477316558899133003135440281 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 44c90afa5eb97a114230ee72853e436d5055e6c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sightandsounddigitaledition.bfi.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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