sim-prov.mno-intg-d.aws.dishcloud.io
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:c0:7c:36:17:4f:d5:ba:50:81:c7:e7:52:e8:51:6f was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sim-prov.mno-intg-d.aws.dishcloud.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:c0:7c:36:17:4f:d5:ba:50:81:c7:e7:52:e8:51:6fSerial Number (int): 16950176250583975623527218350358286703
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8f:a9:a4:48:3c:ba:97:5b:c8:33:6e:8a:10:de:4c:0c:3b:7f:71:29
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 4e:79:2f:7d:93:c5:4a:86:fb:7a:8b:31:19:2d:4d:d1:00:e8:4c:a0
Fingerprint (sha256): 44:37:84:00:41:2d:04:3c:38:7e:11:5c:b7:86:fe:77:ed:6b:e9:60:7e:51:5d:57:be:4e:2b:e8:ee:ad:5f:8b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate sim-prov.mno-intg-d.aws.dishcloud.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sim-prov.mno-intg-d.aws.dishcloud.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sim-prov.mno-intg-d.aws.dishcloud.io
Other certificates including the domain name dishcloud.io
(limited to 100 certificates)
scm-device-api.wl-supplychain-dev.aws.dishcloud.io
ski-api-pub.wl-supplychain-prod.aws.dishcloud.io
rw.dish.com
swagger.wireless-billing-int.aws.dishcloud.io
workbench-api-k8s.hansen-catalog-prod.aws.dishcloud.io
ski-api.wl-supplychain-test.aws.dishcloud.io
rw.dish.com
ski-api.wl-supplychain-dev.aws.dishcloud.io
rw.dish.com
scm-device-api-pub.wl-supplychain-dev.aws.dishcloud.io
basic-java-client-pro.wireless-mno-intg-prod.aws.dishcloud.io
rw.dish.com
pims-sils-api.wl-supplychain-int.aws.dishcloud.io
ski-api.wl-supplychain-prod.aws.dishcloud.io
acm-poc.cpni-bssaa-d.aws.dishcloud.io
sim-prov.mno-intg-d.aws.dishcloud.io
pims-activation.wl-supplychain-dev.aws.dishcloud.io
wholesale-catalog-ui-k8s.hansen-catalog-prod.aws.dishcloud.io
scm-device-api.wl-supplychain-test.aws.dishcloud.io
wholesale-workbench-ui-k8s.hansen-catalog-prod.aws.dishcloud.io
ski-api.wl-supplychain-int.aws.dishcloud.io
subscriberservice.wireless-mno-intg-prod.aws.dishcloud.io
pims-ods-api.wl-supplychain-dev.aws.dishcloud.io
device-tenants-pub.wl-intg-cpni-prod.aws.dishcloud.io
rw-test.dish.com
scm-device-api-pub.wl-supplychain-prod.aws.dishcloud.io
scm-device-api-pub.wl-supplychain-test.aws.dishcloud.io
pims-procurement-api.wl-supplychain-int.aws.dishcloud.io
acm-poc.cpni-bssaa-t.aws.dishcloud.io
catalog-api-k8s.hansen-catalog-prod.aws.dishcloud.io
of-fs-pub.wl-supplychain-prod.aws.dishcloud.io
dsim-simota-agw.mno-intg-d.aws.dishcloud.io
rw.dish.com
rw.dish.com
ski-api-pub.wl-supplychain-int.aws.dishcloud.io
rw-dev4.dish.com
ski-api.wl-supplychain-int.aws.dishcloud.io
api.dishcloud.io
ski-api.wl-supplychain-test.aws.dishcloud.io
ski-api.wl-supplychain-dev.aws.dishcloud.io
wholesale-management-ui-k8s.hansen-catalog-prod.aws.dishcloud.io
basic-java-client-con.wireless-mno-intg-prod.aws.dishcloud.io
scm-device-api.wl-supplychain-int.aws.dishcloud.io
of-atp-pub.wl-supplychain-prod.aws.dishcloud.io
wholesale-catalogapi-k8s.hansen-catalog-prod.aws.dishcloud.io
pims-ods-api.wl-supplychain-int.aws.dishcloud.io
test.api.dishcloud.io
wholesale-catalogservice-k8s.hansen-catalog-dev.aws.dishcloud.io
pims-procurement-api.wl-supplychain-dev.aws.dishcloud.io
ski-api-pub.wl-supplychain-prod.aws.dishcloud.io
rw.dish.com
swagger.wireless-billing-int.aws.dishcloud.io
workbench-api-k8s.hansen-catalog-prod.aws.dishcloud.io
ski-api.wl-supplychain-test.aws.dishcloud.io
rw.dish.com
ski-api.wl-supplychain-dev.aws.dishcloud.io
rw.dish.com
scm-device-api-pub.wl-supplychain-dev.aws.dishcloud.io
basic-java-client-pro.wireless-mno-intg-prod.aws.dishcloud.io
rw.dish.com
pims-sils-api.wl-supplychain-int.aws.dishcloud.io
ski-api.wl-supplychain-prod.aws.dishcloud.io
acm-poc.cpni-bssaa-d.aws.dishcloud.io
sim-prov.mno-intg-d.aws.dishcloud.io
pims-activation.wl-supplychain-dev.aws.dishcloud.io
wholesale-catalog-ui-k8s.hansen-catalog-prod.aws.dishcloud.io
scm-device-api.wl-supplychain-test.aws.dishcloud.io
wholesale-workbench-ui-k8s.hansen-catalog-prod.aws.dishcloud.io
ski-api.wl-supplychain-int.aws.dishcloud.io
subscriberservice.wireless-mno-intg-prod.aws.dishcloud.io
pims-ods-api.wl-supplychain-dev.aws.dishcloud.io
device-tenants-pub.wl-intg-cpni-prod.aws.dishcloud.io
rw-test.dish.com
scm-device-api-pub.wl-supplychain-prod.aws.dishcloud.io
scm-device-api-pub.wl-supplychain-test.aws.dishcloud.io
pims-procurement-api.wl-supplychain-int.aws.dishcloud.io
acm-poc.cpni-bssaa-t.aws.dishcloud.io
catalog-api-k8s.hansen-catalog-prod.aws.dishcloud.io
of-fs-pub.wl-supplychain-prod.aws.dishcloud.io
dsim-simota-agw.mno-intg-d.aws.dishcloud.io
rw.dish.com
rw.dish.com
ski-api-pub.wl-supplychain-int.aws.dishcloud.io
rw-dev4.dish.com
ski-api.wl-supplychain-int.aws.dishcloud.io
api.dishcloud.io
ski-api.wl-supplychain-test.aws.dishcloud.io
ski-api.wl-supplychain-dev.aws.dishcloud.io
wholesale-management-ui-k8s.hansen-catalog-prod.aws.dishcloud.io
basic-java-client-con.wireless-mno-intg-prod.aws.dishcloud.io
scm-device-api.wl-supplychain-int.aws.dishcloud.io
of-atp-pub.wl-supplychain-prod.aws.dishcloud.io
wholesale-catalogapi-k8s.hansen-catalog-prod.aws.dishcloud.io
pims-ods-api.wl-supplychain-int.aws.dishcloud.io
test.api.dishcloud.io
wholesale-catalogservice-k8s.hansen-catalog-dev.aws.dishcloud.io
pims-procurement-api.wl-supplychain-dev.aws.dishcloud.io
Certificate
The complete raw certificate details for sim-prov.mno-intg-d.aws.dishcloud.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkzCCA3ugAwIBAgIQDMB8NhdP1bpQgcfnUuhRbzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMDQwMDAwMDBaFw0yNDAxMDMy MzU5NTlaMC8xLTArBgNVBAMTJHNpbS1wcm92Lm1uby1pbnRnLWQuYXdzLmRpc2hj bG91ZC5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALB4dg6eK4yv sc+nUNVRctWKpBP2EuSKmzlow0ER1W7lPeoAP2kdDBVIiDdYmgEb+8YVz7vFANtv l6S0a4NxqytY5z/Bj774q9B4H3WG9SpGXviLTHIuxXTuwo/V3306EPgRWG/uPYvV cN5bhlykwOoWRFydUPdLmgs+Xxh3rUlZK7X8SlCndYk9Bwc7kknHr62sfm+THnn9 xbkIQ6tiyOgphhGkel8inAieiFCaO97tcupAotUutIaakwlRJMLBzuX6gcTt0oCd aIjbOBj7iXx33I6hJWYRgAsez1LVZeVA8tlPkCEM9c6K1TG6nDU6pG6zf+AIvS6Z km+CeNTwoZkCAwEAAaOCAZIwggGOMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcn lnRb+T3QMB0GA1UdDgQWBBSPqaRIPLqXW8gzbooQ3kwMO39xKTAvBgNVHREEKDAm giRzaW0tcHJvdi5tbm8taW50Zy1kLmF3cy5kaXNoY2xvdWQuaW8wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0 MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0x LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0 MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAApgcZBHG7lA2GJW+Uo4cqhZJoXj3USHTthl6JnwQeeqB/R7nZ/YBYOp FCF1xsBcVZAIPmGPRjaMQF+PV9PoL+uUfjdh2Kp5o8J4/hJZtj/hUFMo/OOl8y3Y HsxsudbG9OPSLvsPi/KCblPeUFdQWt8AnZPWmsRywwG/euC6sL2YHg/R7WKGQUEO Yk0Gtwo9iaDEmT54JGkPgnB107nzrgOJ7MH1tt9CoFrUha7ULpAp/m6Hf1GrEFFF B8ljd0G6W6GEmQajtj6oO6fvcuWypZMEcaf9VfQQqikfPcJlR4KwFQymklt3xnza j6eHL8R1Jn9pCdWytZdNzmu2YzvvlTY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHh2Dp4rjK+xz6dQ1VFy 1YqkE/YS5IqbOWjDQRHVbuU96gA/aR0MFUiIN1iaARv7xhXPu8UA22+XpLRrg3Gr K1jnP8GPvvir0HgfdYb1KkZe+ItMci7FdO7Cj9XffToQ+BFYb+49i9Vw3luGXKTA 6hZEXJ1Q90uaCz5fGHetSVkrtfxKUKd1iT0HBzuSScevrax+b5Meef3FuQhDq2LI 6CmGEaR6XyKcCJ6IUJo73u1y6kCi1S60hpqTCVEkwsHO5fqBxO3SgJ1oiNs4GPuJ fHfcjqElZhGACx7PUtVl5UDy2U+QIQz1zorVMbqcNTqkbrN/4Ai9LpmSb4J41PCh mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16950176250583975623527218350358286703 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sim-prov.mno-intg-d.aws.dishcloud.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22277343286222283123453171585374191640224457624329781365686971887842892617412862882453125388058384957664119533969113565867848746064181114207281811190476462022350628183163949194649826225382905751112148940628874542659668587809587610270139607585049290009721312944493782945584346271535867529651093789952571026050595931202215860714125097286548748523940556423432610012817249709044694595723135200370440153896568275986869034357161324790832928113366597505141375501879257227878006023764331090050718092713481934084969104326466526599979665875650218146026053912781983562325368885723351167437839530572268615349122987651089642332569 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8fa9a4483cba975bc8336e8a10de4c0c3b7f7129 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sim-prov.mno-intg-d.aws.dishcloud.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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