fmair.ca
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:29:38:a2:53:c4:ae:8c:00:9d:61:e0:11:b7:7e:3a was issued on by Amazon.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=fmair.ca
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:29:38:a2:53:c4:ae:8c:00:9d:61:e0:11:b7:7e:3aSerial Number (int): 17493996792228995635058270179679501882
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e6:20:28:f3:32:25:7a:65:7d:0d:cd:f7:11:86:32:11:1f:70:e0:9c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 6d:4d:fa:ba:b2:97:2e:f4:07:7a:e4:95:3c:92:6f:4c:da:4d:ff:ef
Fingerprint (sha256): 44:e7:3c:77:d2:73:47:f4:3d:81:1b:2e:95:c1:6e:40:54:33:f0:d8:56:1a:a8:f1:25:ca:ce:f1:82:6b:33:db
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate fmair.ca
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fmair.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fmair.ca
fmairsite.com
fmairapp.com
fmaircdn.com
ephemerecreative.ca
fmairsite.com
fmairapp.com
fmaircdn.com
ephemerecreative.ca
Other certificates including the domain name fmair.ca
(limited to 100 certificates)
endotest.fmairsite.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
landing.fmair.ca
sni41867.cloudflaressl.com
sni.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
landing.fmair.ca
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.ephemerecreative.ca
landing.fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
i.justneedto.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
*.fmair.ca
fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
landing.fmair.ca
sni41867.cloudflaressl.com
sni.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
landing.fmair.ca
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.ephemerecreative.ca
landing.fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
i.justneedto.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
*.fmair.ca
fmair.ca
Certificate
The complete raw certificate details for fmair.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEpjCCA46gAwIBAgIQDSk4olPErowAnWHgEbd+OjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA3MDQwMDAwMDBaFw0xOTA4MDQx MjAwMDBaMBMxETAPBgNVBAMTCGZtYWlyLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAy7JN4d1oxvloRH59OZbgTUTfcEdZHOffk2MDwZe4ZvRwYaJW jaie6t80JUpWyfdn4M+5Zz2roUn5aYVAvwfFmnMHButwuMq6+3qEpO1rn/L2iFYA VGiBAPH2DF1VMGBM0bSb2UbSi74TJR9/OkMa9wDgSfiTIUt5NDO9EyD7PW9nkIN2 dATRR5z8kBxHpH7JU4aGiUnjvsZ3c2wbmpHZ8+PfjrzPl3qLn0lAqUojkvG0Xgz+ FMo0nvO+gOnWIryWuNAMwPLMefhkKcoZqStHuTbaYD3pzuN4Qe8x+gnODx5y9Gag lxwsDAzfOkyYjQDLlk3xIc7jTq6z93b4ptI9UQIDAQABo4IBwTCCAb0wHwYDVR0j BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFOYgKPMyJXplfQ3N 9xGGMhEfcOCcMFMGA1UdEQRMMEqCCGZtYWlyLmNhgg1mbWFpcnNpdGUuY29tggxm bWFpcmFwcC5jb22CDGZtYWlyY2RuLmNvbYITZXBoZW1lcmVjcmVhdGl2ZS5jYTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCj8F9Fum7laEtyfkwuhuykyb+XkqrW zp1f0Ao3CVUrsoa2KyPrWZjjCQ81qHiJooXFhbk8sEn8EUadGfgJD/jErHAkJPWJ w9SDtOaFrmUX8aimbkwrz+cziVe4Prj0Kj3TXU3IcFlAC/KUFyaABdf3N7efMS6k X1WP3t87vsUiMIIvaU/c1Qh2czodoY2l3gX4PzgSSb4Pg7+p33+nMkj+3svuKisA bGiPUw1RqZS0AV/tP1fi8TiMb7h7VGXk1Lkn8uQXXI5Jec2vN4nyQ6uuqz6uLxYf B6HS6RKs3EIhd4F3AHtKH9HMCLJ+crJEd2TZOpkhRn+METD6XVsBEYOH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7JN4d1oxvloRH59OZbg TUTfcEdZHOffk2MDwZe4ZvRwYaJWjaie6t80JUpWyfdn4M+5Zz2roUn5aYVAvwfF mnMHButwuMq6+3qEpO1rn/L2iFYAVGiBAPH2DF1VMGBM0bSb2UbSi74TJR9/OkMa 9wDgSfiTIUt5NDO9EyD7PW9nkIN2dATRR5z8kBxHpH7JU4aGiUnjvsZ3c2wbmpHZ 8+PfjrzPl3qLn0lAqUojkvG0Xgz+FMo0nvO+gOnWIryWuNAMwPLMefhkKcoZqStH uTbaYD3pzuN4Qe8x+gnODx5y9GaglxwsDAzfOkyYjQDLlk3xIc7jTq6z93b4ptI9 UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17493996792228995635058270179679501882 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fmair.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25714300999789270515251103815223090452783606793162757843757637993253974595197798449440862280950939670210143627579876781910907312642725408960530728469687705149506984246502198485957936438597570189685978166258116942026532280732039242048475241584099257316186809542169922342295634037339124084233428636634144581568433684195476202005559785002144121726468699276837969843752393366244746696633965832242488126469361095424810367039396515040957527533477499577465916084898389830083902607847109356979902252013916447075587977941323205159168725965335359865697781713910164741812764764465225839107397036932950801082686138341764600315217 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e62028f332257a657d0dcdf7118632111f70e09c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmair.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmairsite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmairapp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmaircdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ephemerecreative.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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