synap.ac

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:06:4a:32:dd:db:7d:27:3f:54:f5:d2:f0:d4:77:6d was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=synap.ac

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:06:4a:32:dd:db:7d:27:3f:54:f5:d2:f0:d4:77:6d
Serial Number (int): 17312622654735444195158710701939521389
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:c4:17:8d:da:79:77:ff:ba:65:7a:e1:c6:78:9a:60:c9:e8:1a:82
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1c:c5:f6:21:d5:00:cc:6f:11:93:be:12:cc:14:69:e0:43:ac:ab:28
Fingerprint (sha256): 42:f1:72:22:c1:2c:e6:c1:00:cb:f3:9c:aa:75:ba:07:51:b8:81:4c:f3:f3:6b:8d:d9:e8:a6:02:21:4c:2d:2f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate synap.ac

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for synap.ac

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

synap.ac
synap.themdu.com
practice.law.ac.uk
manual.mytaxi.com
manual.free-now.com
practice.gpstcourses.co.uk
*.synap.ac
www.courses.purplebeelearning.com
courses.purplebeelearning.com
www.passle-academy.net
practice.liftlessons.co
www.manual.mytaxi.com
learning.thegradsoc.com
courses.beautifulnewbeginnings.co.uk
*.staging.synap.ac
testprep.crimsoneducation.org

Other certificates including the domain name synap.ac

(limited to 100 certificates)
bannerman.totemapp.net
synap.ac
about.ksting.com
synap.ac
*.synap.ac
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
synap.ac
synap.ac
archmission.totemapp.net
archmission.totemapp.net
updates2.synap.ac
*.staging.synap.ac
about.ksting.com
synap.ac
academy.synap.ac
archmission.totemapp.net
archmission.totemapp.net
app.synap.ac
business.synap.ac
app.synap.ac
synap.ac
about.ksting.com
academy.synap.ac
synap.ac
about.ksting.com
auth.powermyanalytics.com
about.ksting.com
*.synap.ac
oauth2.kyl191.net
www.synap.ac
business.synap.ac
about.ksting.com
*.synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
academy.synap.ac
updates.synap.ac
archmission.totemapp.net
synap.ac
business.synap.ac
synap.ac
archmission.totemapp.net
academy.synap.ac
*.synap.ac
synap.ac
archmission.totemapp.net
synap.ac
updates.synap.ac
updates.synap.ac
about.ksting.com
archmission.totemapp.net
archmission.totemapp.net
help.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
assets.synap.ac
synap.ac
docs.synap.ac
business.synap.ac
about.ksting.com
bannerman.totemapp.net
synap.ac
archmission.totemapp.net
marketing.synap.ac
archmission.totemapp.net
*.staging.synap.ac
archmission.totemapp.net
synap.ac
about.ksting.com
assets.synap.ac
synap.ac
synap.ac
archmission.totemapp.net
docs.synap.ac
*.synap.ac
synap.ac
synap.ac
marketing.synap.ac
about.ksting.com
synap.ac
staging.synap.ac
archmission.totemapp.net
about.ksting.com
about.ksting.com
synap.ac
business.synap.ac
synap.ac
staging.synap.ac
docs.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
about.ksting.com

Certificate

The complete raw certificate details for synap.ac in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIQDQZKMt3bfSc/VPXS8NR3bTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MTIwMDAwMDBaFw0yMDEwMTIx
MjAwMDBaMBMxETAPBgNVBAMTCHN5bmFwLmFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0+V/oe996tBDHK9l3cRhljE2m1Ec6a094MUCVTFUfYml6cOA
XgVHSjrpC0jM1wbi+oR+Or2B/tAt2V3YNHhUNWXAAUtdDzARptfgCwnlysfvjzpw
BpUmjaFCXLMPbxO8Y2A+AKnPWWu7UUCNb2WcYLp3M2LdjAsVZsT64eGqYjFJYZJV
QZUw/IVyo2HZZBuE/qUZ8R+J2JjAeAPqAlAg/S1yZpDiJIIVxylvJ371nxVfeBfV
VpnBZqpANQqhxk4f7SPoVUj53WT+13I8o/x09F5PiaBujYYvv+DquYdvQUUxzU+m
iEmBG21X2xGvnQa2tNdZRjmwa9oPwdFtp4KdSQIDAQABo4IC+TCCAvUwHwYDVR0j
BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFKzEF43aeXf/umV6
4cZ4mmDJ6BqCMIIBiQYDVR0RBIIBgDCCAXyCCHN5bmFwLmFjghBzeW5hcC50aGVt
ZHUuY29tghJwcmFjdGljZS5sYXcuYWMudWuCEW1hbnVhbC5teXRheGkuY29tghNt
YW51YWwuZnJlZS1ub3cuY29tghpwcmFjdGljZS5ncHN0Y291cnNlcy5jby51a4IK
Ki5zeW5hcC5hY4Ihd3d3LmNvdXJzZXMucHVycGxlYmVlbGVhcm5pbmcuY29tgh1j
b3Vyc2VzLnB1cnBsZWJlZWxlYXJuaW5nLmNvbYIWd3d3LnBhc3NsZS1hY2FkZW15
Lm5ldIIXcHJhY3RpY2UubGlmdGxlc3NvbnMuY2+CFXd3dy5tYW51YWwubXl0YXhp
LmNvbYIXbGVhcm5pbmcudGhlZ3JhZHNvYy5jb22CJGNvdXJzZXMuYmVhdXRpZnVs
bmV3YmVnaW5uaW5ncy5jby51a4ISKi5zdGFnaW5nLnN5bmFwLmFjgh10ZXN0cHJl
cC5jcmltc29uZWR1Y2F0aW9uLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j
cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsG
CWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB
hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG
Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV
HRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAt0yGZ/FZSpSevHmRi+NDeSKHesvvOl6F1jWOghGY1Z7bDuSW9217d1cIcER4i
tyxAeBfHzwV+GctS+1dbehq2zs/5zjAKgPn7crYqfqJvyeNkeKdyVKnZkSyB2BdY
l4CsDEK5kREDQMcb9hm/QvOyplTuShzqfRoMrg522UCPZ9uYpgY92lk2IkhgdbHk
qOwp3p3DUYPmYdQts9aLGGLtnf+luKI3HwSxg9hKMrWIhDUgOG6Ry8mmxV8+p3rs
aA/gG1GyhmT1Q+7J265hlA+wQCfpWNZmJkCT1arku8D9SIlXF5Y90TF6rmSL/ea9
amK05Wgu4UrrTu2YmS3ZTami
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+V/oe996tBDHK9l3cRh
ljE2m1Ec6a094MUCVTFUfYml6cOAXgVHSjrpC0jM1wbi+oR+Or2B/tAt2V3YNHhU
NWXAAUtdDzARptfgCwnlysfvjzpwBpUmjaFCXLMPbxO8Y2A+AKnPWWu7UUCNb2Wc
YLp3M2LdjAsVZsT64eGqYjFJYZJVQZUw/IVyo2HZZBuE/qUZ8R+J2JjAeAPqAlAg
/S1yZpDiJIIVxylvJ371nxVfeBfVVpnBZqpANQqhxk4f7SPoVUj53WT+13I8o/x0
9F5PiaBujYYvv+DquYdvQUUxzU+miEmBG21X2xGvnQa2tNdZRjmwa9oPwdFtp4Kd
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17312622654735444195158710701939521389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'synap.ac'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26749452307989119717479595601835184037753665545205356367508554747574062668275907566716767685130385811898755665656146021152719134238334189975070659876907320291143819971290896287118744431641615790024346050609029058530655951517636963799851135962131034755670720872128194756513941651833116012690512208959961475200999732448729761381992194476282247333777381183601098229607716043999050356464124373346268827989853584039744716259986426921944355048749260007535556733110004252178023806411759964614105847117723852908918020774227406080546577548748670951617111111963150050463740853804053185818914012637737380913107917011507711483209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acc4178dda7977ffba657ae1c6789a60c9e81a82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synap.themdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.law.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.mytaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.free-now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.gpstcourses.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courses.purplebeelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.purplebeelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passle-academy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.liftlessons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manual.mytaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.thegradsoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.beautifulnewbeginnings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testprep.crimsoneducation.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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