assets.ipcdigital.co.uk
Issued by Amazon
About this certificate
This digital certificate with serial number 03:db:0f:78:a6:f9:8c:c0:b2:18:f9:9d:d2:73:24:3f was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=assets.ipcdigital.co.uk
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:db:0f:78:a6:f9:8c:c0:b2:18:f9:9d:d2:73:24:3fSerial Number (int): 5125110794573630201479539880791057471
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 9f:eb:9a:0c:74:9c:2d:6e:fa:7f:c6:19:67:b9:44:c1:84:29:e7:f4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 0e:67:c5:91:31:cf:20:7b:6a:ba:fc:ca:d2:3d:d2:42:14:2e:15:ae
Fingerprint (sha256): 3a:d3:d3:22:d1:ed:96:2e:17:00:97:06:e0:55:96:02:e7:e5:b4:89:2c:29:95:e7:a2:81:a0:fb:57:e5:7b:08
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate assets.ipcdigital.co.uk
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for assets.ipcdigital.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assets.ipcdigital.co.uk
assets.ti-media.net
secure.assets.ipcdigital.co.uk
assets.ti-media.net
secure.assets.ipcdigital.co.uk
Other certificates including the domain name ipcdigital.co.uk
(limited to 100 certificates)
office.timeinc.com
cms2.ipcmediasecure.com
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
office.timeinc.com
campaign.ipcdigital.co.uk
*.ti-media.net
tmpcaa.enterprise.corpad.timeinc.com
*.amateurgardening.com
keystone.ti-media.net
ti-media.map.fastly.net
test01.ti-media.net
keystone.ti-media.net
office.timeinc.com
dcs.secure.media.ipcdigital.co.uk
connect.secure.media.ipcdigital.co.uk
ti-media.map.fastly.net
keystone.ti-media.net
keystone.wp.timeincuk.net
cms2.ipcmediasecure.com
cms2.ipcmediasecure.com
*.bfb1.services.ipcdigital.co.uk
campaign.ipcdigital.co.uk
assets.ipcdigital.co.uk
*.bfb1.services.ipcdigital.co.uk
office.timeinc.com
keystone.ti-media.net
ipcdigital.co.uk
assets.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
office.timeinc.com
connect.secure.media.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
secure.trustedreviews.com
*.amateurgardening.com
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
test01.ti-media.net
assets.ipcdigital.co.uk
keystone.ti-media.net
cms2.ipcmediasecure.com
test1.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
*.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
campaign.ipcdigital.co.uk
assets.ipcdigital.co.uk
secure.trustedreviews.com
marieclaire.ipcmediasecure.com
assets.ipcdigital.co.uk
office.timeinc.com
office.timeinc.com
ti-media.map.fastly.net
office.timeinc.com
dcs.secure.media.ipcdigital.co.uk
connect.secure.media.ipcdigital.co.uk
campaign.ipcdigital.co.uk
campaign.ipcdigital.co.uk
secure.trustedreviews.com
*.ipcdigital.co.uk
secure.stage.zardoz.ipcdigital.co.uk
*.secure.media.ipcdigital.co.uk
*.ti-media.net
test01.ti-media.net
ti-media.map.fastly.net
office.timeinc.com
ti-media.map.fastly.net
ti-media.map.fastly.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
marieclaire.ipcmediasecure.com
keystone.wp.timeincuk.net
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
campaign.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
keystone.wp.timeincuk.net
keystone.ti-media.net
campaign.ipcdigital.co.uk
office.timeinc.com
keystone.ti-media.net
connect.secure.media.ipcdigital.co.uk
campaign.ipcdigital.co.uk
secure.trustedreviews.com
campaign.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
test01.ti-media.net
ipcdigital.co.uk
marieclaire.ipcmediasecure.com
campaign.ipcdigital.co.uk
campaign.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
marieclaire.ipcmediasecure.com
office.timeinc.com
internal.timeincuk.net
secure.trustedreviews.com
marieclaire.ipcmediasecure.com
cms2.ipcmediasecure.com
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
office.timeinc.com
campaign.ipcdigital.co.uk
*.ti-media.net
tmpcaa.enterprise.corpad.timeinc.com
*.amateurgardening.com
keystone.ti-media.net
ti-media.map.fastly.net
test01.ti-media.net
keystone.ti-media.net
office.timeinc.com
dcs.secure.media.ipcdigital.co.uk
connect.secure.media.ipcdigital.co.uk
ti-media.map.fastly.net
keystone.ti-media.net
keystone.wp.timeincuk.net
cms2.ipcmediasecure.com
cms2.ipcmediasecure.com
*.bfb1.services.ipcdigital.co.uk
campaign.ipcdigital.co.uk
assets.ipcdigital.co.uk
*.bfb1.services.ipcdigital.co.uk
office.timeinc.com
keystone.ti-media.net
ipcdigital.co.uk
assets.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
office.timeinc.com
connect.secure.media.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
secure.trustedreviews.com
*.amateurgardening.com
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
test01.ti-media.net
assets.ipcdigital.co.uk
keystone.ti-media.net
cms2.ipcmediasecure.com
test1.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
*.ti-media.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
campaign.ipcdigital.co.uk
assets.ipcdigital.co.uk
secure.trustedreviews.com
marieclaire.ipcmediasecure.com
assets.ipcdigital.co.uk
office.timeinc.com
office.timeinc.com
ti-media.map.fastly.net
office.timeinc.com
dcs.secure.media.ipcdigital.co.uk
connect.secure.media.ipcdigital.co.uk
campaign.ipcdigital.co.uk
campaign.ipcdigital.co.uk
secure.trustedreviews.com
*.ipcdigital.co.uk
secure.stage.zardoz.ipcdigital.co.uk
*.secure.media.ipcdigital.co.uk
*.ti-media.net
test01.ti-media.net
ti-media.map.fastly.net
office.timeinc.com
ti-media.map.fastly.net
ti-media.map.fastly.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
dcs.secure.media.ipcdigital.co.uk
marieclaire.ipcmediasecure.com
keystone.wp.timeincuk.net
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
campaign.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
keystone.wp.timeincuk.net
keystone.ti-media.net
campaign.ipcdigital.co.uk
office.timeinc.com
keystone.ti-media.net
connect.secure.media.ipcdigital.co.uk
campaign.ipcdigital.co.uk
secure.trustedreviews.com
campaign.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
test01.ti-media.net
ipcdigital.co.uk
marieclaire.ipcmediasecure.com
campaign.ipcdigital.co.uk
campaign.ipcdigital.co.uk
dcs.secure.media.ipcdigital.co.uk
marieclaire.ipcmediasecure.com
office.timeinc.com
internal.timeincuk.net
secure.trustedreviews.com
marieclaire.ipcmediasecure.com
Certificate
The complete raw certificate details for assets.ipcdigital.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEuTCCA6GgAwIBAgIQA9sPeKb5jMCyGPmd0nMkPzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMTgwMDAwMDBaFw0yMTAzMTgx MjAwMDBaMCIxIDAeBgNVBAMTF2Fzc2V0cy5pcGNkaWdpdGFsLmNvLnVrMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp45wyj+WMT0mcsFzutvLkjDSk4zG bHUsRpLpA4Vqtb2y4NmOFXvteExMT6zjfQF+AqK/jtvQFiD+UMIhYxL5H01OU8ut SF/fKZP7YQn0a9ch8wvqQOXZj3m4WrmzO4LfLDCeuqR84LhR/wWlo2U27DKfp4LC aZ08CvPhej0ydutDqoqkF/pU2zgyfmNUQ246oNNgJ/JW9AfR3LJmdyA/bLwEeuxl +yjtetxLdecr8V2ngYsKlOeFGogfuJ8SjyRYYsJ4RLY04OeaPA/SX5pufch2L2kX aWSpV43mYyZkGzAO5EasRYzU+L7OfPoMiRnUrJ4GZav4ND/sKsFDA+VntQIDAQAB o4IBxTCCAcEwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O BBYEFJ/rmgx0nC1u+n/GGWe5RMGEKef0MFcGA1UdEQRQME6CF2Fzc2V0cy5pcGNk aWdpdGFsLmNvLnVrghNhc3NldHMudGktbWVkaWEubmV0gh5zZWN1cmUuYXNzZXRz LmlwY2RpZ2l0YWwuY28udWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgB hv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/ BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQmp IOqQjx+RetlN2wf9VhIGhLooV/r9Fqh5BAduOS1QQJHUE69iFp9e+dPobN2LWX81 ZJoCkUpurCf6Bp9oOrCPetQSR+7JuXqJIFBhJpG8hmDG03SQwgrX5fCtWQD4cmFs WTKCLeCiXNevZXwrbP3F/LaeLadRwmhSo6QPFbT0yzOjfR4kM+CX3tGCLQtGKW87 pn/jmALTrS//ESgscF6hN/LfZKghQWG4fECW0qRVAcTwGZND6uXI0yGOCYQuCTyX idbaguLUX4iS05lDRUVkQkgepuOAxOEGSuPVLOfMFt3HIupzs0/T/wKJcfTWbvSb qbc2KXvFTL6AkDt/Rw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp45wyj+WMT0mcsFzutvL kjDSk4zGbHUsRpLpA4Vqtb2y4NmOFXvteExMT6zjfQF+AqK/jtvQFiD+UMIhYxL5 H01OU8utSF/fKZP7YQn0a9ch8wvqQOXZj3m4WrmzO4LfLDCeuqR84LhR/wWlo2U2 7DKfp4LCaZ08CvPhej0ydutDqoqkF/pU2zgyfmNUQ246oNNgJ/JW9AfR3LJmdyA/ bLwEeuxl+yjtetxLdecr8V2ngYsKlOeFGogfuJ8SjyRYYsJ4RLY04OeaPA/SX5pu fch2L2kXaWSpV43mYyZkGzAO5EasRYzU+L7OfPoMiRnUrJ4GZav4ND/sKsFDA+Vn tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5125110794573630201479539880791057471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.ipcdigital.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21152037000203956827761673103114587321928887980210782135603708796278125720219835937259533615985380172338401801983266212852498671242389111417811730520014068305626460305854282529352574618221063465304535377925576328976831362717839689565691333292222908958942394336418675829128534529033303068059554108811785478486906201571092987113531227395733736475956919698930459300976737905906618493190363016417442771600338350340602376920055768532566720910947384020541592099478652413913414920289076981135814473087244649323120114755174946948115731736236037686085245159387274626339728352893243543014716889854182014652402703403750250604469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9feb9a0c749c2d6efa7fc61967b944c18429e7f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.ipcdigital.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.ti-media.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.assets.ipcdigital.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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