luckyorange.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:28:67:c2:87:54:2a:85:37:0e:44:92:cf:33:02:8b was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=luckyorange.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:28:67:c2:87:54:2a:85:37:0e:44:92:cf:33:02:8bSerial Number (int): 16160532324095314360827703467023991435
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 67:e3:8a:34:a2:7c:c3:d4:af:48:74:ff:06:e2:1b:59:e2:05:4f:86
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): f0:52:07:a4:60:8f:56:5d:b1:4d:95:75:7a:77:2b:a9:43:09:6b:53
Fingerprint (sha256): 44:d6:d6:de:10:a5:ab:4f:e8:0b:fc:1a:00:63:a0:ea:c6:e7:61:8b:b7:09:1c:3a:1a:8c:3b:75:c0:c7:6b:4f
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate luckyorange.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for luckyorange.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
luckyorange.com
*.luckyorange.com
*.luckyorange.com
Other certificates including the domain name luckyorange.com
(limited to 100 certificates)
ssl376280.cloudflaressl.com
api-preview.luckyorange.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
ssl278446.cloudflaressl.com
*.luckyorange.com
ssl376281.cloudflaressl.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
api-preview.luckyorange.com
api-preview.luckyorange.com
ssl278444.cloudflaressl.com
ssl376282.cloudflaressl.com
ssl376281.cloudflaressl.com
luckyorange.com
na-esnap.experian.com
ssl376282.cloudflaressl.com
na-esnap.experian.com
ssl376282.cloudflaressl.com
luckyorange.com
ssl376281.cloudflaressl.com
monitor.surflifesaving.com.au
na-esnap.experian.com
staging.luckyorange.com
settings.luckyorange.com
ssl278446.cloudflaressl.com
ssl278446.cloudflaressl.com
itstatus.essex.ac.uk
status-preview.luckyorange.com
luckyorange.com
luckyorange.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
ssl376280.cloudflaressl.com
api.luckyorange.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
*.luckyorange.com
status-preview.luckyorange.com
ssl6812.cloudflare.com
ssl376281.cloudflaressl.com
ssl278444.cloudflaressl.com
monitor.surflifesaving.com.au
ssl376280.cloudflaressl.com
ssl376282.cloudflaressl.com
luckyorange.com
ssl278446.cloudflaressl.com
status-preview.luckyorange.com
luckyorange.com
ssl376280.cloudflaressl.com
itstatus.essex.ac.uk
ssl376282.cloudflaressl.com
api.luckyorange.com
monitor.surflifesaving.com.au
monitor.surflifesaving.com.au
ssl376280.cloudflaressl.com
ssl6812.cloudflare.com
app-staging.luckyorange.com
ssl278446.cloudflaressl.com
ssl278446.cloudflaressl.com
status-preview.luckyorange.com
sni.cloudflaressl.com
ssl278444.cloudflaressl.com
ssl376282.cloudflaressl.com
monitor.surflifesaving.com.au
luckyorange.com
monitor.surflifesaving.com.au
ssl278446.cloudflaressl.com
na-esnap.experian.com
ssl6812.cloudflare.com
ssl376280.cloudflaressl.com
status-preview.luckyorange.com
ssl6812.cloudflare.com
app-staging.luckyorange.com
monitor.surflifesaving.com.au
api-preview.luckyorange.com
api.luckyorange.com
status-preview.luckyorange.com
status-preview.luckyorange.com
ssl376280.cloudflaressl.com
app.luckyorange.com
status-preview.luckyorange.com
ssl376281.cloudflaressl.com
ssl278444.cloudflaressl.com
ssl376282.cloudflaressl.com
ssl376282.cloudflaressl.com
luckyorange.com
status-preview.luckyorange.com
ssl6812.cloudflare.com
na-esnap.experian.com
ssl376281.cloudflaressl.com
ssl376282.cloudflaressl.com
ssl6812.cloudflare.com
ssl376281.cloudflaressl.com
ssl376282.cloudflaressl.com
luckyorange.com
ssl376281.cloudflaressl.com
ssl376280.cloudflaressl.com
app-staging.luckyorange.com
itstatus.essex.ac.uk
api-preview.luckyorange.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
ssl278446.cloudflaressl.com
*.luckyorange.com
ssl376281.cloudflaressl.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
api-preview.luckyorange.com
api-preview.luckyorange.com
ssl278444.cloudflaressl.com
ssl376282.cloudflaressl.com
ssl376281.cloudflaressl.com
luckyorange.com
na-esnap.experian.com
ssl376282.cloudflaressl.com
na-esnap.experian.com
ssl376282.cloudflaressl.com
luckyorange.com
ssl376281.cloudflaressl.com
monitor.surflifesaving.com.au
na-esnap.experian.com
staging.luckyorange.com
settings.luckyorange.com
ssl278446.cloudflaressl.com
ssl278446.cloudflaressl.com
itstatus.essex.ac.uk
status-preview.luckyorange.com
luckyorange.com
luckyorange.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
ssl376280.cloudflaressl.com
api.luckyorange.com
status-preview.luckyorange.com
ssl376282.cloudflaressl.com
*.luckyorange.com
status-preview.luckyorange.com
ssl6812.cloudflare.com
ssl376281.cloudflaressl.com
ssl278444.cloudflaressl.com
monitor.surflifesaving.com.au
ssl376280.cloudflaressl.com
ssl376282.cloudflaressl.com
luckyorange.com
ssl278446.cloudflaressl.com
status-preview.luckyorange.com
luckyorange.com
ssl376280.cloudflaressl.com
itstatus.essex.ac.uk
ssl376282.cloudflaressl.com
api.luckyorange.com
monitor.surflifesaving.com.au
monitor.surflifesaving.com.au
ssl376280.cloudflaressl.com
ssl6812.cloudflare.com
app-staging.luckyorange.com
ssl278446.cloudflaressl.com
ssl278446.cloudflaressl.com
status-preview.luckyorange.com
sni.cloudflaressl.com
ssl278444.cloudflaressl.com
ssl376282.cloudflaressl.com
monitor.surflifesaving.com.au
luckyorange.com
monitor.surflifesaving.com.au
ssl278446.cloudflaressl.com
na-esnap.experian.com
ssl6812.cloudflare.com
ssl376280.cloudflaressl.com
status-preview.luckyorange.com
ssl6812.cloudflare.com
app-staging.luckyorange.com
monitor.surflifesaving.com.au
api-preview.luckyorange.com
api.luckyorange.com
status-preview.luckyorange.com
status-preview.luckyorange.com
ssl376280.cloudflaressl.com
app.luckyorange.com
status-preview.luckyorange.com
ssl376281.cloudflaressl.com
ssl278444.cloudflaressl.com
ssl376282.cloudflaressl.com
ssl376282.cloudflaressl.com
luckyorange.com
status-preview.luckyorange.com
ssl6812.cloudflare.com
na-esnap.experian.com
ssl376281.cloudflaressl.com
ssl376282.cloudflaressl.com
ssl6812.cloudflare.com
ssl376281.cloudflaressl.com
ssl376282.cloudflaressl.com
luckyorange.com
ssl376281.cloudflaressl.com
ssl376280.cloudflaressl.com
app-staging.luckyorange.com
itstatus.essex.ac.uk
Certificate
The complete raw certificate details for luckyorange.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEZTCCA02gAwIBAgIQDChnwodUKoU3DkSSzzMCizANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNjA0MjgwMDAwMDBaFw0xNzA1Mjgx MjAwMDBaMBoxGDAWBgNVBAMTD2x1Y2t5b3JhbmdlLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK6+2BXVF+7rxb5e04SW6jUWme9JddDQOJRyU7OE PH4fds2icjt4mG49oq6iFD5o501q7BXZ2rc1b5jiqF+61UqezbUFloPNTBTnGKkC 1dQK0rc1MkuIKxyv0KZqbjPYEZoeBMSEHQGN1xAQViSL1RYnpVNKUSO8sKcUkLD8 LQcgN7jS5+7uvMrd9zyj3FIL9yGYWdI/VrtjTTIlkur5tC/NaizgxWKRK14qdvXW +/G8Fozm9lt7TDeWb7ibTCZAVSxiHIQd6UC+kKfg47hhMN2IMa+e69/mWMPgfOng hr7Psca8kiwhwApmAZgls+hf0YpNm9fUQwCD4zrPufOwO+8CAwEAAaOCAXkwggF1 MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBRn44o0 onzD1K9IdP8G4htZ4gVPhjAtBgNVHREEJjAkgg9sdWNreW9yYW5nZS5jb22CESou bHVja3lvcmFuZ2UuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2Ex Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFt YXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0B AQsFAAOCAQEAFU1ixZzq/GOmt8aE1iMTLmfSnyYwYeaW6uWqpYQpTJVpqbBfTmZ8 JO83OWCSiXHmmltZDpahOUvmpMybDybsQs1cCzIfTmVMIZAuyQubypOBV9KaOhsB U87A6vnMG6U5TFWvdRufLgCbcYbZPuj+Ig00Y0xC1lOEj7zgWAR7SI/IOQ9OAi0o 6uhDl/KAP3v6pSrkpSLvGPyoxqZ0ckjrMcmluweBTneDr5FpomASvic1rbhXPwuO UBNHXQyVSXaiMT45jSBSRZEWyQKQM+ZeP98Vwdg+eaQ4LwZtX5bvJ0hN7zWaDskQ CQrjMcOg/LqQ5uYEXNSOsUcd3dzygwQdPw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr7YFdUX7uvFvl7ThJbq NRaZ70l10NA4lHJTs4Q8fh92zaJyO3iYbj2irqIUPmjnTWrsFdnatzVvmOKoX7rV Sp7NtQWWg81MFOcYqQLV1ArStzUyS4grHK/QpmpuM9gRmh4ExIQdAY3XEBBWJIvV FielU0pRI7ywpxSQsPwtByA3uNLn7u68yt33PKPcUgv3IZhZ0j9Wu2NNMiWS6vm0 L81qLODFYpErXip29db78bwWjOb2W3tMN5ZvuJtMJkBVLGIchB3pQL6Qp+DjuGEw 3Ygxr57r3+ZYw+B86eCGvs+xxrySLCHACmYBmCWz6F/Rik2b19RDAIPjOs+587A7 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16160532324095314360827703467023991435 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luckyorange.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22059573788968737914177470808267398360645628088395164501433748902347759742094168354178303825719552771932199798713207505993645805556205283009900001294719674900497341613743970304422138425927241016575179490630861532481892703263938072647374940070500092763899190988897666563726099221067964888334542822373919464173449414949413315495183420181411521998980025678535040280042212928269222015015728403967207792756257116658177734817026704009232224534652458928639502912278756082042995155153210177578037712150145474651854730642040109295538313597035657550127236649917738934442539637445665105360242758697230785085364295059089164090351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 67e38a34a27cc3d4af4874ff06e21b59e2054f86 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckyorange.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckyorange.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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