api.appchoose.io
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:dc:6d:e0:c0:4d:18:4a:bd:bc:16:d5:91:cd:39:e9 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.appchoose.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:dc:6d:e0:c0:4d:18:4a:bd:bc:16:d5:91:cd:39:e9Serial Number (int): 18424497843351093542649089823230212585
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 88:6b:e1:94:72:4a:dc:a2:2c:10:55:ed:4f:d6:ec:fb:9f:04:d8:87
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): aa:c6:c1:46:ce:e8:ac:3c:b5:01:a6:32:48:13:0a:03:11:b6:ec:0a
Fingerprint (sha256): 45:0d:91:53:24:02:35:a6:2e:0c:42:aa:fa:45:48:73:ce:a9:04:c7:b7:7f:ea:91:a5:a3:f5:ea:04:1d:3a:91
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate api.appchoose.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.appchoose.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.appchoose.io
www.api.appchoose.io
www.api.appchoose.io
Other certificates including the domain name appchoose.io
(limited to 100 certificates)
sni39014.cloudflaressl.com
applinks.appchoose.io
community.enhearten.io
aozora-higashisengoku.com
public.choose.app
*.appchoose.io
public.choose.app
golfpoolhub.com
public.choose.app
www.twinjack.com
blazeflashcourier.customercarenumber.net
justenkaufmann.com
www.tldrworldnews.com
*.appchoose.io
applinks.appchoose.io
radiantplatform.org
bitsbuddy.menu-helper.io
fb.appchoose.io
nextintake.ca
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
instagram.nguyendai.dev
appchoose.io
meusnidus.appchoose.io
test.everydish.app
api.appchoose.io
sharp.pixelplumbing.com
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
www.lantheusvirtual2020.com
app.bagelsandlocks.com
sakhishop.in
sni39014.cloudflaressl.com
appchoose.io
automate.goeoeck.net
public.choose.app
api-graphql.appchoose.io
timer.nordheim.digital
sni39014.cloudflaressl.com
privacy.baddi.link
www.civicactions.com
prod.api-graphql.appchoose.io
backend.myfugo.de
sni39014.cloudflaressl.com
www.juliocarlos.me
*.appchoose.io
www.frontalis.ch
dev.api-graphql.appchoose.io
prestoplatform.com
api.appchoose.io
sni39014.cloudflaressl.com
link.dnatalk.co.kr
cafecouture.fr
appchoose.io
budgie.ashray.dev
sistema.kinmaster.cl
sharp.pixelplumbing.com
www.frontalis.ch
www.planetavastar.io
api-graphql.appchoose.io
www.projectyang.com
meusnidus.appchoose.io
sni39014.cloudflaressl.com
api.appchoose.io
www.dec6.ca
appchoose.io
*.appchoose.io
app-staging.finspect.com.br
realtorpro.infospacesolutions.com
robotcontrolparty.com
dev.api-graphql.appchoose.io
www.ahatovaraida-biologiya.com
api.appchoose.io
shoplygrocery.com
vw.surv.in
api.eternalko.space
staging.gymstreak.com
caseyrwebb.com
sni39014.cloudflaressl.com
adaptilearn.academy
cdma-cloud.generalharmonics.com
appchoose.io
sni39014.cloudflaressl.com
public.choose.app
www.liveathome.no
sni39014.cloudflaressl.com
www.liveathome.no
admin.couraggo.com
www.infoverseny.hu
interns.codigofacilito.com
img.appchoose.io
www.meusnidus.appchoose.io
kenworthe.com
qualiarobotics.com
sni39014.cloudflaressl.com
wp.immodigi.app
appchoose.io
sni39014.cloudflaressl.com
servitizer.nl
meusnidus.dev.appchoose.io
applinks.appchoose.io
community.enhearten.io
aozora-higashisengoku.com
public.choose.app
*.appchoose.io
public.choose.app
golfpoolhub.com
public.choose.app
www.twinjack.com
blazeflashcourier.customercarenumber.net
justenkaufmann.com
www.tldrworldnews.com
*.appchoose.io
applinks.appchoose.io
radiantplatform.org
bitsbuddy.menu-helper.io
fb.appchoose.io
nextintake.ca
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
instagram.nguyendai.dev
appchoose.io
meusnidus.appchoose.io
test.everydish.app
api.appchoose.io
sharp.pixelplumbing.com
sni39014.cloudflaressl.com
sni39014.cloudflaressl.com
www.lantheusvirtual2020.com
app.bagelsandlocks.com
sakhishop.in
sni39014.cloudflaressl.com
appchoose.io
automate.goeoeck.net
public.choose.app
api-graphql.appchoose.io
timer.nordheim.digital
sni39014.cloudflaressl.com
privacy.baddi.link
www.civicactions.com
prod.api-graphql.appchoose.io
backend.myfugo.de
sni39014.cloudflaressl.com
www.juliocarlos.me
*.appchoose.io
www.frontalis.ch
dev.api-graphql.appchoose.io
prestoplatform.com
api.appchoose.io
sni39014.cloudflaressl.com
link.dnatalk.co.kr
cafecouture.fr
appchoose.io
budgie.ashray.dev
sistema.kinmaster.cl
sharp.pixelplumbing.com
www.frontalis.ch
www.planetavastar.io
api-graphql.appchoose.io
www.projectyang.com
meusnidus.appchoose.io
sni39014.cloudflaressl.com
api.appchoose.io
www.dec6.ca
appchoose.io
*.appchoose.io
app-staging.finspect.com.br
realtorpro.infospacesolutions.com
robotcontrolparty.com
dev.api-graphql.appchoose.io
www.ahatovaraida-biologiya.com
api.appchoose.io
shoplygrocery.com
vw.surv.in
api.eternalko.space
staging.gymstreak.com
caseyrwebb.com
sni39014.cloudflaressl.com
adaptilearn.academy
cdma-cloud.generalharmonics.com
appchoose.io
sni39014.cloudflaressl.com
public.choose.app
www.liveathome.no
sni39014.cloudflaressl.com
www.liveathome.no
admin.couraggo.com
www.infoverseny.hu
interns.codigofacilito.com
img.appchoose.io
www.meusnidus.appchoose.io
kenworthe.com
qualiarobotics.com
sni39014.cloudflaressl.com
wp.immodigi.app
appchoose.io
sni39014.cloudflaressl.com
servitizer.nl
meusnidus.dev.appchoose.io
Certificate
The complete raw certificate details for api.appchoose.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjDCCA3SgAwIBAgIQDdxt4MBNGEq9vBbVkc056TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEwMDIwMDAwMDBaFw0xOTExMDIx MjAwMDBaMBsxGTAXBgNVBAMTEGFwaS5hcHBjaG9vc2UuaW8wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDeSFBUxJhfvK2tHAYrGlffIOKhxal1tn/mqmJa lv6k5/7OGfQHKrydtMxqspSkqBbvb1h+vw4TwGF8BsiNe2DbOqe4o0veuUJKDHZa i/AuK/O9W639/j/N+TEPgpYzDdzb89x5Rs9/b2fn9UR7wm20iG+JIx4HhMnzmNEC Lr/3pGWIPsYF97Xno3mjDU8gRb61TpaAiBuM3zj2KIaLvQcTONgqr4WrjEXq+GpT wKsYY10oAHk8Sla3FYZrgmrrrhOBcitGxVy+JjfudG5+ojEjSIWKhJvLbhUYgSuy KectKEnS64+/CxuvXRNKQmT/QZgw3FVlKqmJ5wUgyvdbTGw7AgMBAAGjggGfMIIB mzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUiGvh lHJK3KIsEFXtT9bs+58E2IcwMQYDVR0RBCowKIIQYXBpLmFwcGNob29zZS5pb4IU d3d3LmFwaS5hcHBjaG9vc2UuaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglg hkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYh aHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipo dHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0T AQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA BATgZIMa56xwJh3UvcJMrCNoT2tix76ebgVBEtSR0TtYeligbmcHoEREkgFhCIID EiG0KCoQyiKhUxPviYY0r9lyIL/WZnw1fnpaHDl0vaALEwA8tPVRZS6zWqxQYXO3 b0ZzkH1PEbvEk3Dgx6euet4es6OQRTACwCARA8iJCS7X5I2GVsz1C368NU+oXTSh EG53nTKQV+lWIv8cNV6qRtxQDGltgYOTj5vr104jhebrmHF/GhXP1yB55l6hAlnw 7PReghVG8eUWlu2ZSIkjV5f01ptBUq5xdQlvTU2IzmzXyuiv/gMvSAnTrE//k9qh 5b9oPz0dsm8cd1HXDGVVFg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3khQVMSYX7ytrRwGKxpX 3yDiocWpdbZ/5qpiWpb+pOf+zhn0Byq8nbTMarKUpKgW729Yfr8OE8BhfAbIjXtg 2zqnuKNL3rlCSgx2WovwLivzvVut/f4/zfkxD4KWMw3c2/PceUbPf29n5/VEe8Jt tIhviSMeB4TJ85jRAi6/96RliD7GBfe156N5ow1PIEW+tU6WgIgbjN849iiGi70H EzjYKq+Fq4xF6vhqU8CrGGNdKAB5PEpWtxWGa4Jq664TgXIrRsVcviY37nRufqIx I0iFioSby24VGIErsinnLShJ0uuPvwsbr10TSkJk/0GYMNxVZSqpiecFIMr3W0xs OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18424497843351093542649089823230212585 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.appchoose.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28060562963057143264162688122482917708200261572181022923322945732078233732404756130862784969577926701304530191911081664712204788658417450916510602006414834288657948157186469816694049433275535123568017659890208305949741543703508765291412695150418513792105689363803243143041654137640001449484571513830073277162006953161079856326520899853552562039766856236746293559854957763330627316886857514810158002228806394939025854315634043364184281702897504377982695508007835429808956559588524965053561411799402459185253508535986717120030297141810793791150660349559806958509547844152534734419019354383568786109009492855751550200891 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 886be194724adca22c1055ed4fd6ecfb9f04d887 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.appchoose.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.appchoose.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000404e064831ae7ac70261dd4bdc24cac23684f6b62c7be9e6e054112d491d13b587a58a06e6707a044449201610882031221b4282a10ca22a15313ef898634afd97220bfd6667c357e7a5a1c3974bda00b13003cb4f551652eb35aac506173b76f4673907d4f11bbc49370e0c7a7ae7ade1eb3a390453002c0201103c889092ed7e48d8656ccf50b7ebc354fa85d34a1106e779d329057e95622ff1c355eaa46dc500c696d8183938f9bebd74e2385e6eb98717f1a15cfd72079e65ea10259f0ecf45e821546f1e51696ed994889235797f4d69b4152ae7175096f4d4d88ce6cd7cae8affe032f4809d3ac4fff93daa1e5bf683f3d1db26f1c7751d70c655516