sg2.bookingmotor.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:02:64:33:50:58:d3:8b:b0:64:38:01:62:83:af:ed was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sg2.bookingmotor.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:02:64:33:50:58:d3:8b:b0:64:38:01:62:83:af:edSerial Number (int): 5329328883319571795365251462719582189
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 98:ac:4b:7a:70:2f:8e:02:d7:ad:0f:3a:5b:19:f7:00:62:82:35:d6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): cb:fc:a2:49:1e:b0:b0:23:5e:61:09:b0:e9:66:8b:45:27:fc:3c:43
Fingerprint (sha256): 4c:5c:89:10:ce:2b:8f:06:c5:82:19:d3:8c:25:be:eb:7f:6b:3f:ee:f1:e6:eb:48:38:45:5d:6a:b9:2d:2c:89
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate sg2.bookingmotor.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sg2.bookingmotor.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sg2.bookingmotor.com
*.travelgea.com.pe
*.imayorista.mx
*.hotelesenlinea.mx
*.lineafacil.com
*.vacancyrewards.com
*.viapuntocr.com
*.alasmundiales.com
*.turismoalvuelo.com
*.todoincluido.travel
*.travelgea.com.pe
*.imayorista.mx
*.hotelesenlinea.mx
*.lineafacil.com
*.vacancyrewards.com
*.viapuntocr.com
*.alasmundiales.com
*.turismoalvuelo.com
*.todoincluido.travel
Other certificates including the domain name bookingmotor.com
(limited to 100 certificates)
academy.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg10.bookingmotor.com
sg4.bookingmotor.com
bookingmotor.com
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
service.guardhomewarranty.com
help.controlfreq.uk
*.bookingmotor.com
sa2.bookingmotor.com
bookingmotor.com
support.pllenty.com
bookingmotor.com
support.prospectmaximizer.com
*.bookingmotor.com
bookingmotor.com
support.bookingmotor.com
sg2.bookingmotor.com
microsite.bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
service.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
help.controlfreq.uk
sg7.bookingmotor.com
hjalp.rfl.is
*.bookingmotor.com
bookingmotor.com
microsite.bookingmotor.com
help.controlfreq.uk
sa1.bookingmotor.com
sg4.bookingmotor.com
sg2.bookingmotor.com
sg10.bookingmotor.com
support.innoleadtech.com
hjalp.rfl.is
support.foysonis.com
sg6.bookingmotor.com
hjalp.rfl.is
helpdesk.orangerhythm.com
sg5.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
academy.bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg8.bookingmotor.com
support.bookingmotor.com
support.mjsia.com
help.controlfreq.uk
sg10.bookingmotor.com
*.bookingmotor.com
support.welldone.company
bookingmotor.com
support.amazingbusinessresults.com
help.controlfreq.uk
bookingmotor.com
hjalp.rfl.is
bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
*.bookingmotor.com
sg6.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg10.bookingmotor.com
sg4.bookingmotor.com
bookingmotor.com
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
service.guardhomewarranty.com
help.controlfreq.uk
*.bookingmotor.com
sa2.bookingmotor.com
bookingmotor.com
support.pllenty.com
bookingmotor.com
support.prospectmaximizer.com
*.bookingmotor.com
bookingmotor.com
support.bookingmotor.com
sg2.bookingmotor.com
microsite.bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
service.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
help.controlfreq.uk
sg7.bookingmotor.com
hjalp.rfl.is
*.bookingmotor.com
bookingmotor.com
microsite.bookingmotor.com
help.controlfreq.uk
sa1.bookingmotor.com
sg4.bookingmotor.com
sg2.bookingmotor.com
sg10.bookingmotor.com
support.innoleadtech.com
hjalp.rfl.is
support.foysonis.com
sg6.bookingmotor.com
hjalp.rfl.is
helpdesk.orangerhythm.com
sg5.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
academy.bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg8.bookingmotor.com
support.bookingmotor.com
support.mjsia.com
help.controlfreq.uk
sg10.bookingmotor.com
*.bookingmotor.com
support.welldone.company
bookingmotor.com
support.amazingbusinessresults.com
help.controlfreq.uk
bookingmotor.com
hjalp.rfl.is
bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
*.bookingmotor.com
sg6.bookingmotor.com
Certificate
The complete raw certificate details for sg2.bookingmotor.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIQBAJkM1BY04uwZDgBYoOv7TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MDgwMDAwMDBaFw0yMTA1MDgx MjAwMDBaMB8xHTAbBgNVBAMTFHNnMi5ib29raW5nbW90b3IuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PKJi4iWfF3CckYkQpE1Ypi96a4RtHoh X+UNuYxFzaykBoca0yQVOLu1gtAsTOO6bX8EzzsKypH9iLD7dMsJNPE/E4jgaY3h cE9TIRwd9FaLbvV/JOP4Pt2PWqP+shP20SSgJ7WAn0y1oSmK8pJurUbdQZ6iFl2s ThdCeE3jaBnqF0suXcifwmYx8NzmpfFBB3AKgNFXoU7eSAwEaKbVTBBHA3iUdUPL Pvqw6eJ3O8VTOjH3MdqYkGvJMA6UHv8t9nXTNjmCV/yBYIF7gLjyKuovDnTdjTg4 IWqi9VqnTBSOyt69rBzBIvuU3Kxrhf9xhl5+KkkUhIErn3ziH1ua8wIDAQABo4IC RjCCAkIwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FJisS3pwL44C160POlsZ9wBigjXWMIHXBgNVHREEgc8wgcyCFHNnMi5ib29raW5n bW90b3IuY29tghIqLnRyYXZlbGdlYS5jb20ucGWCDyouaW1heW9yaXN0YS5teIIT Ki5ob3RlbGVzZW5saW5lYS5teIIQKi5saW5lYWZhY2lsLmNvbYIUKi52YWNhbmN5 cmV3YXJkcy5jb22CECoudmlhcHVudG9jci5jb22CEyouYWxhc211bmRpYWxlcy5j b22CFCoudHVyaXNtb2FsdnVlbG8uY29tghUqLnRvZG9pbmNsdWlkby50cmF2ZWww DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNv bS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUG CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1h em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZu/ANejaL3cK0qy9IfqRJkdrYLA TlzbqQSxHvM9v9DPrwmAgUKNAOB1EHpOxEf2tJ8CJ42WeUF57YHPey0xCGYM/Ljt +5nrPEGYJ547NrrwTgsUKwk4iSf0eJD+60zE4B1E7woSod+xcGsJ4OgUfe8xJq/x yEx+I/xp+2ynR6v1udoxcLGUKl8RB0FgNcln16x9fLNfoO2uelyzS2WEKfh5P2RZ D4sLvcedtHWYNXePebpVg9EaegUZbdF2dJd5P3boAyac6R1ci+kf37T1k/XhsPbg MIfoZncRWhSoImiBvNmvYFrCEoxHwWnDnxb0cHeRQP900eG6yJFJt9QfBg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PKJi4iWfF3CckYkQpE1 Ypi96a4RtHohX+UNuYxFzaykBoca0yQVOLu1gtAsTOO6bX8EzzsKypH9iLD7dMsJ NPE/E4jgaY3hcE9TIRwd9FaLbvV/JOP4Pt2PWqP+shP20SSgJ7WAn0y1oSmK8pJu rUbdQZ6iFl2sThdCeE3jaBnqF0suXcifwmYx8NzmpfFBB3AKgNFXoU7eSAwEaKbV TBBHA3iUdUPLPvqw6eJ3O8VTOjH3MdqYkGvJMA6UHv8t9nXTNjmCV/yBYIF7gLjy KuovDnTdjTg4IWqi9VqnTBSOyt69rBzBIvuU3Kxrhf9xhl5+KkkUhIErn3ziH1ua 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5329328883319571795365251462719582189 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sg2.bookingmotor.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27892026685483240463669165610123322698860909675297745109107108052013671317300543943468598702751476045395835339738825897921411595654484384565664031119551876128071770776113910450535864698580801680062805906279609336821749048497657755533500547034648599920014180039328248346219309574361485609092795696116239890964423612542951643977809536342307670490934243483430644020324561973824141410801701051754201840765900994620657345632510179954352531113949681559637322800036429385510735083531977894643369150179392538285033081372114250810962483789185269358709393007826868220047977172795277681467823017203145540635594002847867160206067 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 98ac4b7a702f8e02d7ad0f3a5b19f700628235d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg2.bookingmotor.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelgea.com.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imayorista.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelesenlinea.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineafacil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacancyrewards.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viapuntocr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alasmundiales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turismoalvuelo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todoincluido.travel' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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