ign.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0b:c4:05:1d:31:71:5c:1e:d8:da:ee:22:02:a6:b7:e0 was issued on by Amazon.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ign.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:c4:05:1d:31:71:5c:1e:d8:da:ee:22:02:a6:b7:e0Serial Number (int): 15639301862873441114758936262500333536
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e8:f7:e5:53:88:5b:21:e6:e3:8c:9a:02:ef:d1:df:51:45:75:bc:61
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 91:5d:f8:9b:43:4f:d4:01:04:8b:e3:7f:03:45:b4:64:e8:b9:da:9f
Fingerprint (sha256): 40:90:a4:fe:5b:73:57:4a:24:e4:f0:67:8b:f8:73:c3:7d:40:2a:1b:7a:49:25:29:a1:34:dd:b9:e1:6d:b9:5d
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate ign.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ign.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ign.com
*.ign.com
ign-inc.com
*.ign-inc.com
ignimgs.com
*.ignimgs.com
*.ign.com
ign-inc.com
*.ign-inc.com
ignimgs.com
*.ignimgs.com
Other certificates including the domain name ign.com
(limited to 100 certificates)
ign.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
corp.ign.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1j.map.fastly.net
ssl003.insnw.net
dns-vetting1-mims-pawel.map.fastly.net
ziffdavis.com
ziffdavis.com
dns-vetting1-mims-pawel.map.fastly.net
ign.map.fastly.net
k3.shared.global.fastly.net
store.ign.com
playlist.ign.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
ziffdavis.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
store.ign.com
dns-vetting1l.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.ign.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
sli.ziffdavis.com
ign.map.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1l.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ign.map.fastly.net
k3.shared.global.fastly.net
g01.ign.com
ign.com
sslvpn.ign.com
www.ziffdavis.com
prospective2.shared.global.fastly.net
sli.ziffdavis.com
dns-vetting1l.map.fastly.net
secure.statusupdate.askmen.com
ign.map.fastly.net
dns-vetting1j.map.fastly.net
www.ziffdavis.com
k3.shared.global.fastly.net
ziffdavis.com
k3.shared.global.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ign.map.fastly.net
g02.ign.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
k3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
*.apis.stg.ign.com
prospective2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
events.ign.com
dns-vetting1j.map.fastly.net
ziffdavis.com
*.stg.ign.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
k3.shared.global.fastly.net
g01.ign.com
prospective2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
sli.ziffdavis.com
www.playlist.ign.com
k3.shared.global.fastly.net
prospective2.shared.global.fastly.net
events.ign.com
store.ign.com
ziffdavis.com
dns-vetting1-mims-pawel.map.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
k3.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
k3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
k3.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
prospective2.shared.global.fastly.net
ign.map.fastly.net
opt-out.1up.com
dns-vetting1j.map.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
corp.ign.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1j.map.fastly.net
ssl003.insnw.net
dns-vetting1-mims-pawel.map.fastly.net
ziffdavis.com
ziffdavis.com
dns-vetting1-mims-pawel.map.fastly.net
ign.map.fastly.net
k3.shared.global.fastly.net
store.ign.com
playlist.ign.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
ziffdavis.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
store.ign.com
dns-vetting1l.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.ign.com
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
ssl003.insnw.net
sli.ziffdavis.com
ign.map.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1l.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ign.map.fastly.net
k3.shared.global.fastly.net
g01.ign.com
ign.com
sslvpn.ign.com
www.ziffdavis.com
prospective2.shared.global.fastly.net
sli.ziffdavis.com
dns-vetting1l.map.fastly.net
secure.statusupdate.askmen.com
ign.map.fastly.net
dns-vetting1j.map.fastly.net
www.ziffdavis.com
k3.shared.global.fastly.net
ziffdavis.com
k3.shared.global.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ign.map.fastly.net
g02.ign.com
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
k3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
*.apis.stg.ign.com
prospective2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
events.ign.com
dns-vetting1j.map.fastly.net
ziffdavis.com
*.stg.ign.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
k3.shared.global.fastly.net
g01.ign.com
prospective2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
sli.ziffdavis.com
www.playlist.ign.com
k3.shared.global.fastly.net
prospective2.shared.global.fastly.net
events.ign.com
store.ign.com
ziffdavis.com
dns-vetting1-mims-pawel.map.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
k3.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
k3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
k3.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
ssl003.insnw.net
prospective2.shared.global.fastly.net
ign.map.fastly.net
opt-out.1up.com
dns-vetting1j.map.fastly.net
prospective2.shared.global.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
prospective2.shared.global.fastly.net
prospective2.shared.global.fastly.net
Certificate
The complete raw certificate details for ign.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEpzCCA4+gAwIBAgIQC8QFHTFxXB7Y2u4iAqa34DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMjQwMDAwMDBaFw0yMDAyMjQx MjAwMDBaMBIxEDAOBgNVBAMTB2lnbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMCkqqX+zOkkSnHhuuVpOcPQqKW6ZRYh6lhRByCis1LyCh7fdY R5iH8CLi1m/GTfbRHZi7shfOKrEfZGrE3nkcPNTuhe/d2TO8WNYs+KXG7IAS0DzK B/eE1G5LGFc6zun3BvI9UULwo7GfQk/VcGKpKU5/T05NsQo55NIZJOF5Zrw/xqGe pEJ4nJ5wSERRJuwipcolHYVo3zng1/CsjKHp4Lo48nNWFT3Q832CuoO/p5LeHLzF SpyAEEbejAygX7jBhfBvYe8/QrcN2827kbbUGl+ylzVnJOmZV60J8IAUDLgVRSw+ UP+gGOlpNYU++E2E4bzq/zzCcpzWysYx9fZpAgMBAAGjggHDMIIBvzAfBgNVHSME GDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU6PflU4hbIebjjJoC 79HfUUV1vGEwVQYDVR0RBE4wTIIHaWduLmNvbYIJKi5pZ24uY29tggtpZ24taW5j LmNvbYINKi5pZ24taW5jLmNvbYILaWduaW1ncy5jb22CDSouaWduaW1ncy5jb20w DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNv bS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUG CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1h em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCC1AvF/qePrEr2jt0VOEn60XseK G105+dt9WrEyZQ2jt4hB2/dnje+Z21ss1+dBdM397KWnKZfqxlDqffJ1K097+GZe h7Dok1J3g9tT9u4jn6QaVX4kZXSe68i8ywUGJ3HM3Ll4yUNEjKAet2JIa/hXvQNN UlA3SKRsreezxTYyJOsbzhDj2Jl26R3LUFYIO/VeR9rCdWa9g2Bth3QiQVcalTCk 37DmHwGnu9FwMXZs2PT3aazWkjweEwvFsAol36BX0gLWA2fF2S5JDWpyuoaaGusE W4QTSD1proBe0l6s/tH5u5DGZWuh9XsHmNZS8cQ29G+EbVttlfz7cOHKKg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzApKql/szpJEpx4brlaT nD0KilumUWIepYUQcgorNS8goe33WEeYh/Ai4tZvxk320R2Yu7IXziqxH2RqxN55 HDzU7oXv3dkzvFjWLPilxuyAEtA8ygf3hNRuSxhXOs7p9wbyPVFC8KOxn0JP1XBi qSlOf09OTbEKOeTSGSTheWa8P8ahnqRCeJyecEhEUSbsIqXKJR2FaN854NfwrIyh 6eC6OPJzVhU90PN9grqDv6eS3hy8xUqcgBBG3owMoF+4wYXwb2HvP0K3DdvNu5G2 1Bpfspc1ZyTpmVetCfCAFAy4FUUsPlD/oBjpaTWFPvhNhOG86v88wnKc1srGMfX2 aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15639301862873441114758936262500333536 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ign.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25757689220860687424256275566065126775859698818151629898952883573045645317891007340720421349870267007239557502063102666722913608936707415300028546992570803622950749975137494791525515947694903667176480361230740799348054102612824388126930865516399089778900477702947657790116982085560741540844183593500612978364256261855274810246426758517691560966431150127462529539980231963618680098411786461216245983620918296007972560429078702336400513497226579541521574078841937750936068856767295746537695306016347073142020367558606054256064850987809456715129116235289732577462736021097326249106918048749787285549463614585344414316137 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e8f7e553885b21e6e38c9a02efd1df514575bc61 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ign-inc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ign-inc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignimgs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ignimgs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a820b502f17fa9e3eb12bda3b7454e127eb45ec78a1b5d39f9db7d5ab132650da3b78841dbf7678def99db5b2cd7e74174cdfdeca5a72997eac650ea7df2752b4f7bf8665e87b0e893527783db53f6ee239fa41a557e2465749eebc8bccb05062771ccdcb978c943448ca01eb762486bf857bd034d52503748a46cade7b3c5363224eb1bce10e3d89976e91dcb5056083bf55e47dac27566bd83606d87742241571a9530a4dfb0e61f01a7bbd17031766cd8f4f769acd6923c1e130bc5b00a25dfa057d202d60367c5d92e490d6a72ba869a1aeb045b8413483d69ae805ed25eacfed1f9bb90c6656ba1f57b0798d652f1c436f46f846d5b6d95fcfb70e1ca2a