paidy.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:9d:2b:cb:91:34:3f:7b:e3:7e:80:72:37:3e:70:cf was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=paidy.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:9d:2b:cb:91:34:3f:7b:e3:7e:80:72:37:3e:70:cfSerial Number (int): 19425270819647227936966966446657532111
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 24:48:e5:6e:44:20:7b:bc:04:01:14:de:1f:20:3e:26:45:5d:b2:60
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 86:29:da:b8:a6:32:fd:92:68:c3:f7:1a:cb:0a:65:62:d3:1e:18:87
Fingerprint (sha256): 4c:0a:08:46:9b:7e:fd:c0:da:22:a4:bd:8a:37:6f:d9:f4:c7:e4:1c:7c:6d:5f:17:35:97:65:bc:86:b8:21:87
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate paidy.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paidy.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paidy.com
www.paidy.com
new.paidy.com
www.paidy.com
new.paidy.com
Other certificates including the domain name paidy.com
(limited to 100 certificates)
amosstatus.ifsleasing.com
apps-1.paidy.com
j.ssl.fastly.net
policy.meetyourmentor.vn
amosstatus.ifsleasing.com
links.paidy.com
unknowncharges.paidy.com
Paidy, Inc.
careers-1.paidy.com
cirjunior.com
paidy.com
faq.paidy.com
amosstatus.ifsleasing.com
apis.paidy.com
j.ssl.fastly.net
apps-1.paidy.com
centralnicstatus.com
unknowncharges.paidy.com
terms.paidy.com
amosstatus.ifsleasing.com
app.m-t.io
my.paidy.com
amosstatus.ifsleasing.com
support.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
assets.paidy.com
j.ssl.fastly.net
lets.dobee.it
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
campaign.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
donate.tfkhdyt.my.id
engineering-1.paidy.com
centralnicstatus.com
*.paidy.com
campaign.paidy.com
zipcode.paidy.com
merchant-support.paidy.com
my.paidy.com
ir.paidy.com
centralnicstatus.com
amosstatus.ifsleasing.com
assets.paidy.com
support.paidy.com
amosstatus.ifsleasing.com
Paidy, Inc.
ir.paidy.com
*.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
links.paidy.com
j.ssl.fastly.net
j.ssl.fastly.net
paidy.com
atlasstatus.trackhs.com
careers01.paidy.com
paidy.com
*.paidy.com
*.paidy.com
eltilingolingo.com
*.paidy.com
j.ssl.fastly.net
atlasstatus.trackhs.com
atlasstatus.trackhs.com
j.ssl.fastly.net
amosstatus.ifsleasing.com
apps-1.paidy.com
paidy.com
j.ssl.fastly.net
www.ogden.co
amosstatus.ifsleasing.com
centralnicstatus.com
j.ssl.fastly.net
www.uniever.ru
amosstatus.ifsleasing.com
terms.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
email.paidy.com
careers.paidy.com
amosstatus.ifsleasing.com
apps-1.paidy.com
marketing.paidy.com
cs.paidy.com
*.paidy.com
links-test.paidy.com
www.memcap.net
amosstatus.ifsleasing.com
careers01.paidy.com
paidy.com
*.paidy.com
atlasstatus.trackhs.com
assets.paidy.com
j.ssl.fastly.net
eu-status.gainsight.com
amosstatus.ifsleasing.com
jblongandsonbodyshop.com
apps-1.paidy.com
j.ssl.fastly.net
policy.meetyourmentor.vn
amosstatus.ifsleasing.com
links.paidy.com
unknowncharges.paidy.com
Paidy, Inc.
careers-1.paidy.com
cirjunior.com
paidy.com
faq.paidy.com
amosstatus.ifsleasing.com
apis.paidy.com
j.ssl.fastly.net
apps-1.paidy.com
centralnicstatus.com
unknowncharges.paidy.com
terms.paidy.com
amosstatus.ifsleasing.com
app.m-t.io
my.paidy.com
amosstatus.ifsleasing.com
support.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
assets.paidy.com
j.ssl.fastly.net
lets.dobee.it
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
campaign.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
donate.tfkhdyt.my.id
engineering-1.paidy.com
centralnicstatus.com
*.paidy.com
campaign.paidy.com
zipcode.paidy.com
merchant-support.paidy.com
my.paidy.com
ir.paidy.com
centralnicstatus.com
amosstatus.ifsleasing.com
assets.paidy.com
support.paidy.com
amosstatus.ifsleasing.com
Paidy, Inc.
ir.paidy.com
*.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
links.paidy.com
j.ssl.fastly.net
j.ssl.fastly.net
paidy.com
atlasstatus.trackhs.com
careers01.paidy.com
paidy.com
*.paidy.com
*.paidy.com
eltilingolingo.com
*.paidy.com
j.ssl.fastly.net
atlasstatus.trackhs.com
atlasstatus.trackhs.com
j.ssl.fastly.net
amosstatus.ifsleasing.com
apps-1.paidy.com
paidy.com
j.ssl.fastly.net
www.ogden.co
amosstatus.ifsleasing.com
centralnicstatus.com
j.ssl.fastly.net
www.uniever.ru
amosstatus.ifsleasing.com
terms.paidy.com
amosstatus.ifsleasing.com
amosstatus.ifsleasing.com
email.paidy.com
careers.paidy.com
amosstatus.ifsleasing.com
apps-1.paidy.com
marketing.paidy.com
cs.paidy.com
*.paidy.com
links-test.paidy.com
www.memcap.net
amosstatus.ifsleasing.com
careers01.paidy.com
paidy.com
*.paidy.com
atlasstatus.trackhs.com
assets.paidy.com
j.ssl.fastly.net
eu-status.gainsight.com
amosstatus.ifsleasing.com
jblongandsonbodyshop.com
Certificate
The complete raw certificate details for paidy.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhjCCA26gAwIBAgIQDp0ry5E0P3vjfoByNz5wzzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA5MTgwMDAwMDBaFw0yMDEwMTgx MjAwMDBaMBQxEjAQBgNVBAMTCXBhaWR5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANqgaejGif66EH4MYaqYqjfyGILW1UlIPwBCqmgvWlx7kCJG L8ADnbi/VII0hNfyQOyc/PODWgcVNNlBtAzFwis4dw5ylUGyLlIoIVXSLwVeE6vb TwGFbHKDXhy36Xwa+/qoFfRbnL7WzvQyAWnNtycsE5xMTpgvn5eMF2jFGx5SvP4L P0YxXMt2/2/2VU1z9SKmpLqUjfJPzPvwFCi6XuHhRUIanCoDdkKQ9//y/l5yE4Qy pgKgi0TyMsjeakROp8x383UmZsJEVR6e2GQJ2r24MlAXRTGSX4Q9AbDQAxZx6IbV c71Gut23YpvFcXwn9QZOe7px96KMRysi0Mg6w/0CAwEAAaOCAaAwggGcMB8GA1Ud IwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQkSOVuRCB7vAQB FN4fID4mRV2yYDAyBgNVHREEKzApgglwYWlkeS5jb22CDXd3dy5wYWlkeS5jb22C DW5ldy5wYWlkeS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1s AQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov L29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v Y3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIw ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIH4FGj6 JqRWYEPbeR9N+Y2/tJIzskTL5ti6EQy108obWpyWETbl/yFAw2XSx1bfm4eVtWfS qpUHoHAa5C3gl2h2VMXx8PLnDFAQ7xhmd8hh7FLBqVgn5TLOg0cTetLmEO3VCtO2 XLA6xF7k3nFhP0uG5PzSVG0iYF7fCLQ2qP7YUzcDtV4QXwxgzLA/UQV5TrEzWVTy mUgRucK4uvz7zz9WLT20ny55MWXYnzpiLLUYkOSXYyuC+GgmiGbMojfJaQZlAO73 H1OpMKEpOZE+S/4MrBA9B0UP2IZlF/0aoOGmp0BuWT2CPKhvQtIsRG63Fu9KIkGi bR09sUaRwnI5ww== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qBp6MaJ/roQfgxhqpiq N/IYgtbVSUg/AEKqaC9aXHuQIkYvwAOduL9UgjSE1/JA7Jz884NaBxU02UG0DMXC Kzh3DnKVQbIuUighVdIvBV4Tq9tPAYVscoNeHLfpfBr7+qgV9FucvtbO9DIBac23 JywTnExOmC+fl4wXaMUbHlK8/gs/RjFcy3b/b/ZVTXP1IqakupSN8k/M+/AUKLpe 4eFFQhqcKgN2QpD3//L+XnIThDKmAqCLRPIyyN5qRE6nzHfzdSZmwkRVHp7YZAna vbgyUBdFMZJfhD0BsNADFnHohtVzvUa63bdim8VxfCf1Bk57unH3ooxHKyLQyDrD /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19425270819647227936966966446657532111 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paidy.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27599053430283421976322270179339406640127522826526442626459939361688111517104467049004963525836686613969351844635421949567790669467558837480047279359509625018651413377045343870620730464731283184882598735773238950343175271880066924767360030849718224235696904389168423945946773669684459934339119461885134021944046693395626172384392386812647741819693585629412291844386937170148596787591686710454710422692739574988485636645896672051452944252647384903935753852483266251219152324677012720544646612544459850535411280040316702479323716701534373674380284397357581099600761168587248353623778429930496294666569921268653871514621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2448e56e44207bbc040114de1f203e26455db260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paidy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paidy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.paidy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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