*.ffxblue.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 05:1b:b8:71:f3:44:85:1c:f9:f5:7b:74:fd:f0:65:b7 was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ffxblue.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1b:b8:71:f3:44:85:1c:f9:f5:7b:74:fd:f0:65:b7
Serial Number (int): 6790072985542148681300653304821343671
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 79:e6:1b:77:e4:f0:de:e3:44:f2:91:c5:5c:10:77:d0:f5:6a:a5:f5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b6:f1:f4:28:fc:c9:4c:52:a0:cb:f5:f8:a7:19:e1:c4:48:27:83:12
Fingerprint (sha256): 44:87:2f:7b:9c:37:63:d5:91:79:56:c9:43:62:09:62:a6:68:16:14:6b:f3:f9:fc:df:9c:ec:da:54:4c:b5:5f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.ffxblue.com.au

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ffxblue.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ffxblue.com.au
*.theage.com.au
watoday.com.au
*.watoday.com.au
afr.com
*.afr.com
brisbanetimes.com.au
*.brisbanetimes.com.au
canberratimes.com.au
*.canberratimes.com.au
smh.com.au
*.smh.com.au
theage.com.au

Other certificates including the domain name ffxblue.com.au

(limited to 100 certificates)
b2.shared.global.fastly.net
b2.shared.global.fastly.net
*.9pub.io
nine.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
ffxblue.com.au
nine.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
nine.com.au
*.9pub.io
b2.shared.global.fastly.net
*.9pub.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
nine.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
nine.com.au
b2.shared.global.fastly.net
*.pe-infra-01a.apse2.k8s.ninetech.dev
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
nine.com.au
*.9pub.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
*.ffxblue.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
*.9pub.io
b2.shared.global.fastly.net
ffxblue.com.au
nine.com.au
b2.shared.global.fastly.net
*.ffxblue.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
*.ffxblue.com.au
*.ffxblue.com.au
*.9pub.io
b2.shared.global.fastly.net
*.ffxblue.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
*.ffxblue.com.au
nine.com.au
*.ffxblue.com.au
*.9pub.io
b2.shared.global.fastly.net
*.ffxblue.com.au
*.ffxblue.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net
*.9pub.io
*.ffxblue.com.au
*.9pub.io
b2.shared.global.fastly.net
*.ffxblue.com.au
*.9pub.io
ffxblue.com.au
b2.shared.global.fastly.net
*.9pub.io
b2.shared.global.fastly.net
b2.shared.global.fastly.net
*.9pub.io
*.watoday.com.au
*.9pub.io
b2.shared.global.fastly.net
*.9pub.io
nine.com.au
b2.shared.global.fastly.net
b2.shared.global.fastly.net
b2.shared.global.fastly.net

Certificate

The complete raw certificate details for *.ffxblue.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIQBRu4cfNEhRz59Xt0/fBltzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMDEwMDAwMDBaFw0yMTAyMDEx
MjAwMDBaMBsxGTAXBgNVBAMMECouZmZ4Ymx1ZS5jb20uYXUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDPYkOZhV/SDilh9DkDeDs+O190y9fRQNxbs5Kl
mmaMhSaUA304Ec9fWeYPoHm2ljiokueTcKoTUnGkCvr5d4R1qNy0OmMJJj7r5nhg
M9eY4wvufet2OdDJaoCDhbi7brLQIsk8qgnwbOcSpO4jtkx6O0QduBtvuMwQuCG8
T48URj3cfqtnM/YCfgwApsaztP3GnQJWYBxpeDWb4hoqhe5EJYx73KImJV3riJvd
ggWM+ZefZAIlw8LNQEyWllH8GQcEoExLj8WTn9gleG7cPkfCx9vo5+WVaKqqWkHK
3SagB6LvkzyDEK8LUf3jUeLmeQAdnwAo9Poqt2z+ipGROl2XAgMBAAGjggJYMIIC
VDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUeeYb
d+Tw3uNE8pHFXBB30PVqpfUwgekGA1UdEQSB4TCB3oIQKi5mZnhibHVlLmNvbS5h
dYIPKi50aGVhZ2UuY29tLmF1gg53YXRvZGF5LmNvbS5hdYIQKi53YXRvZGF5LmNv
bS5hdYIHYWZyLmNvbYIJKi5hZnIuY29tghRicmlzYmFuZXRpbWVzLmNvbS5hdYIW
Ki5icmlzYmFuZXRpbWVzLmNvbS5hdYIUY2FuYmVycmF0aW1lcy5jb20uYXWCFiou
Y2FuYmVycmF0aW1lcy5jb20uYXWCCnNtaC5jb20uYXWCDCouc21oLmNvbS5hdYIN
dGhlYWdlLmNvbS5hdTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIu
YW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwB
AjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v
b2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j
cnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAA
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbgdbd5uoB
0wP9/qiEywWINgSZ+axO+e8EhkOCJyKpC4tHNZb5ripRDcajBrwiYZ53gVIx3yC+
Q7RxL5h2GkAnbFOGCEuvi/kT46rxOBN0x22FL3jsH9h0pZrqioHQUL95fDBEyMYQ
/WbTdSPDPZZmY9rwabUijkpPWzFjxyLPeAlxVmVSao7CUzfRPur/yCXK3zYp7VXb
p0sA6w42peJoqvYqdLlosWq+tGfd1NkOOsiO2O3OaO3KjkWT6DUrxCwFC0onMikQ
6DCiND0JUKsXc01puAp4lfPAEwywVVEmqVhbchCW3np33uHvJudqdwe60IHp3J70
wZMVyr3HqEuK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2JDmYVf0g4pYfQ5A3g7
PjtfdMvX0UDcW7OSpZpmjIUmlAN9OBHPX1nmD6B5tpY4qJLnk3CqE1JxpAr6+XeE
dajctDpjCSY+6+Z4YDPXmOML7n3rdjnQyWqAg4W4u26y0CLJPKoJ8GznEqTuI7ZM
ejtEHbgbb7jMELghvE+PFEY93H6rZzP2An4MAKbGs7T9xp0CVmAcaXg1m+IaKoXu
RCWMe9yiJiVd64ib3YIFjPmXn2QCJcPCzUBMlpZR/BkHBKBMS4/Fk5/YJXhu3D5H
wsfb6OfllWiqqlpByt0moAei75M8gxCvC1H941Hi5nkAHZ8AKPT6Krds/oqRkTpd
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6790072985542148681300653304821343671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ffxblue.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26179784942571372292759205113816441636126445471548873830617411021870382666712668234836814372254661955663379600188967366044762910375520071852924789974910681697724898688642345909828192980829549180031696701016078205240544152935724908846050859993616436763874448117761206397225162377092590940388116364182807172480484119288437746090468782531250029301666714759776011651554381841654384072865744863809510261857296838842909028278700277248772342561528542567655693147887971606624471084764216056155799216528397485180680590607746208975558957247852139240194425887223043141483052015993762858443791107342734687280701013820659136617879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79e61b77e4f0dee344f291c55c1077d0f56aa5f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffxblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watoday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watoday.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanetimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canberratimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canberratimes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theage.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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