prod.api-graphql.appchoose.io
Issued by Amazon
About this certificate
This digital certificate with serial number 08:4f:04:c3:dd:01:f7:69:2c:7a:1d:c8:f0:4c:e1:34 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=prod.api-graphql.appchoose.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:4f:04:c3:dd:01:f7:69:2c:7a:1d:c8:f0:4c:e1:34Serial Number (int): 11044112065632247715083070415238390068
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 27:8b:b4:4a:59:3f:1d:5c:81:db:28:0a:6b:5e:a5:3b:42:ae:b8:6b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 67:5b:f8:ce:20:63:e7:21:ea:6a:43:f1:f3:53:29:f3:cd:9b:3e:c8
Fingerprint (sha256): 3a:95:f5:ad:35:ac:cd:6a:61:cc:7a:12:81:c2:56:f5:95:f6:d5:37:02:d1:50:c2:ec:b2:99:f3:2e:5d:b4:b5
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate prod.api-graphql.appchoose.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prod.api-graphql.appchoose.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prod.api-graphql.appchoose.io
www.prod.api-graphql.appchoose.io
www.prod.api-graphql.appchoose.io
Other certificates including the domain name appchoose.io
(limited to 100 certificates)
sni39014.cloudflaressl.com
applinks.appchoose.io
community.enhearten.io
aozora-higashisengoku.com
public.choose.app
*.appchoose.io
public.choose.app
golfpoolhub.com
public.choose.app
www.twinjack.com
blazeflashcourier.customercarenumber.net
justenkaufmann.com
www.tldrworldnews.com
*.appchoose.io
applinks.appchoose.io
radiantplatform.org
bitsbuddy.menu-helper.io
fb.appchoose.io
nextintake.ca
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
instagram.nguyendai.dev
appchoose.io
meusnidus.appchoose.io
test.everydish.app
api.appchoose.io
sharp.pixelplumbing.com
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
www.lantheusvirtual2020.com
app.bagelsandlocks.com
sakhishop.in
sni39014.cloudflaressl.com
appchoose.io
automate.goeoeck.net
public.choose.app
api-graphql.appchoose.io
timer.nordheim.digital
sni39014.cloudflaressl.com
privacy.baddi.link
www.civicactions.com
prod.api-graphql.appchoose.io
backend.myfugo.de
sni39014.cloudflaressl.com
www.juliocarlos.me
*.appchoose.io
www.frontalis.ch
dev.api-graphql.appchoose.io
prestoplatform.com
api.appchoose.io
sni39014.cloudflaressl.com
link.dnatalk.co.kr
cafecouture.fr
appchoose.io
budgie.ashray.dev
sistema.kinmaster.cl
sharp.pixelplumbing.com
www.frontalis.ch
www.planetavastar.io
api-graphql.appchoose.io
www.projectyang.com
meusnidus.appchoose.io
sni39014.cloudflaressl.com
api.appchoose.io
www.dec6.ca
appchoose.io
*.appchoose.io
app-staging.finspect.com.br
realtorpro.infospacesolutions.com
robotcontrolparty.com
dev.api-graphql.appchoose.io
www.ahatovaraida-biologiya.com
api.appchoose.io
shoplygrocery.com
vw.surv.in
api.eternalko.space
staging.gymstreak.com
caseyrwebb.com
sni39014.cloudflaressl.com
adaptilearn.academy
cdma-cloud.generalharmonics.com
appchoose.io
sni39014.cloudflaressl.com
public.choose.app
www.liveathome.no
sni39014.cloudflaressl.com
www.liveathome.no
admin.couraggo.com
www.infoverseny.hu
interns.codigofacilito.com
img.appchoose.io
www.meusnidus.appchoose.io
kenworthe.com
qualiarobotics.com
sni39014.cloudflaressl.com
wp.immodigi.app
appchoose.io
sni39014.cloudflaressl.com
servitizer.nl
meusnidus.dev.appchoose.io
applinks.appchoose.io
community.enhearten.io
aozora-higashisengoku.com
public.choose.app
*.appchoose.io
public.choose.app
golfpoolhub.com
public.choose.app
www.twinjack.com
blazeflashcourier.customercarenumber.net
justenkaufmann.com
www.tldrworldnews.com
*.appchoose.io
applinks.appchoose.io
radiantplatform.org
bitsbuddy.menu-helper.io
fb.appchoose.io
nextintake.ca
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
instagram.nguyendai.dev
appchoose.io
meusnidus.appchoose.io
test.everydish.app
api.appchoose.io
sharp.pixelplumbing.com
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
www.lantheusvirtual2020.com
app.bagelsandlocks.com
sakhishop.in
sni39014.cloudflaressl.com
appchoose.io
automate.goeoeck.net
public.choose.app
api-graphql.appchoose.io
timer.nordheim.digital
sni39014.cloudflaressl.com
privacy.baddi.link
www.civicactions.com
prod.api-graphql.appchoose.io
backend.myfugo.de
sni39014.cloudflaressl.com
www.juliocarlos.me
*.appchoose.io
www.frontalis.ch
dev.api-graphql.appchoose.io
prestoplatform.com
api.appchoose.io
sni39014.cloudflaressl.com
link.dnatalk.co.kr
cafecouture.fr
appchoose.io
budgie.ashray.dev
sistema.kinmaster.cl
sharp.pixelplumbing.com
www.frontalis.ch
www.planetavastar.io
api-graphql.appchoose.io
www.projectyang.com
meusnidus.appchoose.io
sni39014.cloudflaressl.com
api.appchoose.io
www.dec6.ca
appchoose.io
*.appchoose.io
app-staging.finspect.com.br
realtorpro.infospacesolutions.com
robotcontrolparty.com
dev.api-graphql.appchoose.io
www.ahatovaraida-biologiya.com
api.appchoose.io
shoplygrocery.com
vw.surv.in
api.eternalko.space
staging.gymstreak.com
caseyrwebb.com
sni39014.cloudflaressl.com
adaptilearn.academy
cdma-cloud.generalharmonics.com
appchoose.io
sni39014.cloudflaressl.com
public.choose.app
www.liveathome.no
sni39014.cloudflaressl.com
www.liveathome.no
admin.couraggo.com
www.infoverseny.hu
interns.codigofacilito.com
img.appchoose.io
www.meusnidus.appchoose.io
kenworthe.com
qualiarobotics.com
sni39014.cloudflaressl.com
wp.immodigi.app
appchoose.io
sni39014.cloudflaressl.com
servitizer.nl
meusnidus.dev.appchoose.io
Certificate
The complete raw certificate details for prod.api-graphql.appchoose.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEszCCA5ugAwIBAgIQCE8Ew90B92kseh3I8EzhNDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEyMjEwMDAwMDBaFw0yMDAxMjEx MjAwMDBaMCgxJjAkBgNVBAMTHXByb2QuYXBpLWdyYXBocWwuYXBwY2hvb3NlLmlv MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoybf1FAEz8JZC9oUUWtV SKNjYpVHN7EuhA10B2JoLXBISdK5xFmpQ0CAJpC5wQxHF2XwDF14SfRzPTtb9G+/ +ofxN5VdIrAWsDCzOWWK49u07Tcrgoai5rChjmK04dj9dC8yXlxmoFejOQTxNnoc I2tmsraNbhKCtCXA5AgbrQOPLcx3BG9N6v8IFBz8T1Ts88mgjDfeIqO6Q/f/ft9i oDCZJqV5dnZWN5rFaIYovhPqJ4rnqHD5cDyYdyetjtzymnCIFutaZuvKVSVabeLY unoTSrzHzv4CBMC1FIkv2U989Dy6hXD2/d+KDWuKVUX6+DA9yIPtx6xtvRziSPEr pwIDAQABo4IBuTCCAbUwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAw HQYDVR0OBBYEFCeLtEpZPx1cgdsoCmtepTtCrrhrMEsGA1UdEQREMEKCHXByb2Qu YXBpLWdyYXBocWwuYXBwY2hvb3NlLmlvgiF3d3cucHJvZC5hcGktZ3JhcGhxbC5h cHBjaG9vc2UuaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIw CAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j c3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0 LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbVW7LtWjDD8 okHZYP1JLpQYu7ii3j0VthxGHx1JRUBLnCsfv6737gOAP58L+uvVVegy49xplKQj izCeF+PIiG25K0xbScOivZZwhH7lzfHJOzggRzdj9SMEJPWh6cuAeag+9eE0LBFg ChDu4Chyi0WmdWcwxH4sMzS41ZjRQ3m0p5T+oip8mN+aE60osBlr5AMRAQVpR+6P DuSIHKGDYgxsCDG/Z1IQREWXnADCPJ2P7YQfpjj9zWG+vUuqLFlLsiuWWKCtTAPR qX6jYOqYOVzBvLJi6fFOWUFpUGGxRIfm7VCCrk31/5nnhsySgaAEIUVjfvqwWvzH 8NY37qTb3Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoybf1FAEz8JZC9oUUWtV SKNjYpVHN7EuhA10B2JoLXBISdK5xFmpQ0CAJpC5wQxHF2XwDF14SfRzPTtb9G+/ +ofxN5VdIrAWsDCzOWWK49u07Tcrgoai5rChjmK04dj9dC8yXlxmoFejOQTxNnoc I2tmsraNbhKCtCXA5AgbrQOPLcx3BG9N6v8IFBz8T1Ts88mgjDfeIqO6Q/f/ft9i oDCZJqV5dnZWN5rFaIYovhPqJ4rnqHD5cDyYdyetjtzymnCIFutaZuvKVSVabeLY unoTSrzHzv4CBMC1FIkv2U989Dy6hXD2/d+KDWuKVUX6+DA9yIPtx6xtvRziSPEr pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11044112065632247715083070415238390068 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.api-graphql.appchoose.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20596013357721175528314835658478493350226950423058281232042193426737097463704639838992123618188843485933410236412024508621369970438100346603043728232192409662199506813717430186042984258449301984617857225064306685725788437002369459489866668056256430913942523991483688444324035613386968556638264753894092673868376181193543922897140327543629618168231463664792532958959871857418057679282360537304565163593614778769640960333330778967644224868294622434622345845580555960953673872012680565516803866922230743641218696605693714310958048073240682691194585053872359816250696061142561948283364768140660689274561768323850920078247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 278bb44a593f1d5c81db280a6b5ea53b42aeb86b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.api-graphql.appchoose.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.api-graphql.appchoose.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b1b556ecbb568c30fca241d960fd492e9418bbb8a2de3d15b61c461f1d4945404b9c2b1fbfaef7ee03803f9f0bfaebd555e832e3dc6994a4238b309e17e3c8886db92b4c5b49c3a2bd9670847ee5cdf1c93b3820473763f5230424f5a1e9cb8079a83ef5e1342c11600a10eee028728b45a6756730c47e2c3334b8d598d14379b4a794fea22a7c98df9a13ad28b0196be4031101056947ee8f0ee4881ca183620c6c0831bf6752104445979c00c23c9d8fed841fa638fdcd61bebd4baa2c594bb22b9658a0ad4c03d1a97ea360ea98395cc1bcb262e9f14e5941695061b14487e6ed5082ae4df5ff99e786cc9281a0042145637efab05afcc7f0d637eea4dbdd