tenable.trackhs.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:4c:5b:e1:3e:fc:8b:24:32:ff:39:be:e3:b9:08:af was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tenable.trackhs.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:4c:5b:e1:3e:fc:8b:24:32:ff:39:be:e3:b9:08:afSerial Number (int): 19005670047341344124071059972377086127
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fd:e4:ee:75:de:10:fa:fd:a4:f4:51:12:3e:2c:07:20:2b:ca:c0:92
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): bf:c8:a1:63:91:c4:7d:be:2d:1c:9f:f5:7f:97:b1:08:bd:fc:19:ae
Fingerprint (sha256): 46:9c:d4:ee:f7:7e:1a:99:90:92:d7:2c:b3:e7:05:de:ac:65:09:72:8b:17:d2:18:b0:aa:fe:d0:3b:0a:08:fa
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate tenable.trackhs.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tenable.trackhs.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tenable.trackhs.com
Other certificates including the domain name trackhs.com
(limited to 100 certificates)
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
info.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
info.trackhs.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
cdn.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
trackhs.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
ops.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
www.trackhs.com
smtp.marketing.trackhs.com
ansible.ops.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
info.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
training.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
www.trackhs.com
tenable.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
www.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
info.trackhs.com
cdn.trackhs.com
apricot-status.sharegate.com
www.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
automation.marketing.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
automation.marketing.trackhs.com
trackhs.com
bastion.trackhs.com
apricot-status.sharegate.com
marketing.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
info.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
info.trackhs.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
cdn.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
trackhs.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
ops.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
www.trackhs.com
smtp.marketing.trackhs.com
ansible.ops.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
info.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
training.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
www.trackhs.com
tenable.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
atlasstatus.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
www.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
info.trackhs.com
cdn.trackhs.com
apricot-status.sharegate.com
www.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
automation.marketing.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
*.trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
automation.marketing.trackhs.com
trackhs.com
bastion.trackhs.com
apricot-status.sharegate.com
marketing.trackhs.com
apricot-status.sharegate.com
trackhs.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
apricot-status.sharegate.com
Certificate
The complete raw certificate details for tenable.trackhs.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIQDkxb4T78iyQy/zm+47kIrzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEyMTAwMDAwMDBaFw0yMDAxMTAx MjAwMDBaMB4xHDAaBgNVBAMTE3RlbmFibGUudHJhY2tocy5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDu1Ky8WP1UEsDR4Zo5BBJoKVvz+m6G8b p7GvpjeW+bWJIUIMEpzWhkkvGIfcS9svvJCR29URHqF9nflV2Da818s5b3mNa9z8 HNW7h74xMvTmXrsrzQIXuakIhbRVi0QiWEoKxun23dCB641tQusLICvUhm+ILTGs IP+idVIArYwPM0EoNZYoJJYJs7qtZROO2XTJlFBTkReA4vY7+IVUJsrX532sXiRM i2vNBD33QwMTNhhmhD9+aVY3ZOCjUMfWimpfMfVvp8MQJ6eh58KuiSxcqvAq9Fx+ HeB5QG1ZEQw/dV3KaSXFoLB7dxZQ8+XAu+NQSnpGSfLpY0+/5JdlAgMBAAGjggGM MIIBiDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU /eTudd4Q+v2k9FESPiwHICvKwJIwHgYDVR0RBBcwFYITdGVuYWJsZS50cmFja2hz LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC88HBjttt7gdgchrFhl5OR /eZxVEME682wVNzlmtI6gZvPgYFym++XtqgO2kgg4nhK9n8N4+lYJBqYuwTuqqD/ rSQuD6Q0NYCl3at4WAT10FtLged+/CDDHqYVLjVl+SD/SH9zzux+bRX36ZunSosZ i7ZHUiSP++FN7vCIa7qOkZQQgKASBj+dR/JW8tFIpBgf3tF3Ln4LUfwOMKshFiaj NlIx3VpVLWKDReTgjHA68PyNI//qzJrv1nsPWaMq9MgJUhMwsmUuOGUSsGvIfF0N +D6GqfWalv9CkCNbvJDRowmR2hzjX1v5ZsVHUY8swupmbUidMDjSl355M0DKyTxv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA7tSsvFj9VBLA0eGaOQ QSaClb8/puhvG6exr6Y3lvm1iSFCDBKc1oZJLxiH3EvbL7yQkdvVER6hfZ35Vdg2 vNfLOW95jWvc/BzVu4e+MTL05l67K80CF7mpCIW0VYtEIlhKCsbp9t3QgeuNbULr CyAr1IZviC0xrCD/onVSAK2MDzNBKDWWKCSWCbO6rWUTjtl0yZRQU5EXgOL2O/iF VCbK1+d9rF4kTItrzQQ990MDEzYYZoQ/fmlWN2Tgo1DH1opqXzH1b6fDECenoefC roksXKrwKvRcfh3geUBtWREMP3VdymklxaCwe3cWUPPlwLvjUEp6Rkny6WNPv+SX ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19005670047341344124071059972377086127 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tenable.trackhs.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21215395974143877226448556719966915234646262914549833393127816949458004964390406298244434607802501740911518508631151770022502210624879400284284965523161427833047034507925314741364192033513183017887377751513907764378727438086619416937583907706831297684646426252053389918295239318808077264772040009067202195621418219251736771008031360512285514635323126974799276305838720748372185357490852290382385403755547118458513451162965185090003259856353007299703075987025046948547690804364245285584883044371153520144511821903875383436795255165076396144117565104354099835324555330375871996450771386024713186701462447167813846341477 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fde4ee75de10fafda4f451123e2c07202bcac092 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenable.trackhs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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