movies.showtimes.io
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:dc:79:4a:8b:aa:5a:2b:d0:5e:4b:54:e5:95:d1:f4 was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=movies.showtimes.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:dc:79:4a:8b:aa:5a:2b:d0:5e:4b:54:e5:95:d1:f4Serial Number (int): 19753957327536911782321713561736696308
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 24:91:09:0f:c7:fd:58:d0:b3:37:0b:49:ef:24:7e:21:f6:eb:2c:55
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 4c:99:3e:48:4b:bc:c9:75:77:4e:2d:dd:5f:c0:f7:69:e4:64:64:62
Fingerprint (sha256): 4e:49:2a:85:ba:da:4f:7a:ce:cc:15:7d:8e:c8:56:4e:1e:d8:af:c6:45:75:fd:ae:aa:32:24:43:df:33:9c:87
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate movies.showtimes.io
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for movies.showtimes.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
movies.showtimes.io
bfi.powio.com
amazonstudios.powio.com
marvel.powio.com
cbs.powio.com
paradisofilms.powio.com
bmg.powio.com
disney.powio.com
facebook.powio.com
universalshowtimes.com
bfi.powio.com
amazonstudios.powio.com
marvel.powio.com
cbs.powio.com
paradisofilms.powio.com
bmg.powio.com
disney.powio.com
facebook.powio.com
universalshowtimes.com
Other certificates including the domain name showtimes.io
(limited to 100 certificates)
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
a24.stage.powio.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.showtimes.io
artsalliance.powio.com
movies.showtimes.io
movies.showtimes.io
api.stage.showtimes.io
a24.stage.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
a24.stage.powio.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.showtimes.io
artsalliance.powio.com
movies.showtimes.io
movies.showtimes.io
api.stage.showtimes.io
a24.stage.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
artsalliance.powio.com
movies.powster.com
movies.powster.com
movies.powster.com
movies.powster.com
Certificate
The complete raw certificate details for movies.showtimes.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgIQDtx5SouqWivQXktU5ZXR9DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEwMDIwMDAwMDBaFw0yMjEwMzEy MzU5NTlaMB4xHDAaBgNVBAMTE21vdmllcy5zaG93dGltZXMuaW8wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5s/UKF4b6bbKZCZj9VonbyqvEv5zyB/8e 5lgr5aCNo/FDuimSoIfcs6KtEYT81pjn36OH5UC5ydYFJ4YwT8pAdif1nqlBC+kH lO+0KQlkcZV5Xc/2KSs/vFBClr8+OsLBaa6VhFAfUqOEYWhOASSuzBo05Dgi+JSX LMzNsXmzPu+Wo4xomyGF9HUGcstgAxk4VzDv3MN1ZIl2LeXaB2mAZxOh6ZkaTBuY zbd1gMIIXhEe6kNfxfNWErRHvSgkGUzdkuCaIMu/kKSkUDghOPRjGAV6CAY2RA/t w9ZHQp0eD+WLqOprOQQx7gOYKTFOzTZXcVNk2FejugXgC6yqHm/jAgMBAAGjggOg MIIDnDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU JJEJD8f9WNCzNwtJ7yR+IfbrLFUwgc8GA1UdEQSBxzCBxIITbW92aWVzLnNob3d0 aW1lcy5pb4INYmZpLnBvd2lvLmNvbYIXYW1hem9uc3R1ZGlvcy5wb3dpby5jb22C EG1hcnZlbC5wb3dpby5jb22CDWNicy5wb3dpby5jb22CF3BhcmFkaXNvZmlsbXMu cG93aW8uY29tgg1ibWcucG93aW8uY29tghBkaXNuZXkucG93aW8uY29tghJmYWNl Ym9vay5wb3dpby5jb22CFnVuaXZlcnNhbHNob3d0aW1lcy5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0 MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0x LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0 MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2ACl5vvCe OTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABfD/X5joAAAQDAEcwRQIhANyx HikeHYpvhlhmytU6XS7UES+Bimg+30hZYmY70ojqAiAvpzz/13Lpf5zZPWCK78d9 idaPxYi0HSyuM5WBYmSFAgB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBi lgb2AAABfD/X5oAAAAQDAEcwRQIhAMlVmTy6AV/x3hlqGWgBakemGQhNsmhMGyGW tK++HWtQAiBQdvvenz5npvtUyRN1lzHG0ZCXKZt/AvXzdQcL/qQ4pwB2AN+lXqto gk8fbK3uuF9OPlrqzaISpGpejjsSwCBEXCpzAAABfD/X5mgAAAQDAEcwRQIgByfc v+7KMr2phvOz+ODpGZ2mhLCjlxBCD7s+BvEktMMCIQDC/kb0iO+0JumrqV2bc/1E YU99yCzRix/q+YKukb7B4DANBgkqhkiG9w0BAQsFAAOCAQEAUS89Yj+8HHqW+M59 p6PhLQK/N9zOPcjn9MQWJfSwTjIeOu8I2AMH7gC04Z2tjuk2ztt7M+s2QPu3Ka1e YKWUfEwvb+GjSmL5yHL94+GS35nQvSe3/B4ovkXRJVV29LzTa+jjR+neAEK1YhB9 vRS8r1skIS+ivJekdC4XZLnA1Ahm55zAnODyIDPzTgnRTZ1U9musPYpQ1c2uMsWD TrPyKR8kYvw8oDJqkC4kl25Ov7rvtsIM1m4HJ0NRhsHvhMLrOmn8nNOZS7iRF1fx G2y0yZFbJNvukwV/qOqNB7sr74J1Wy5C8O+mWdz4irwwfy6dnXOTQfaP8RK8muvi GHkWDw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubP1CheG+m2ymQmY/VaJ 28qrxL+c8gf/HuZYK+WgjaPxQ7opkqCH3LOirRGE/NaY59+jh+VAucnWBSeGME/K QHYn9Z6pQQvpB5TvtCkJZHGVeV3P9ikrP7xQQpa/PjrCwWmulYRQH1KjhGFoTgEk rswaNOQ4IviUlyzMzbF5sz7vlqOMaJshhfR1BnLLYAMZOFcw79zDdWSJdi3l2gdp gGcToemZGkwbmM23dYDCCF4RHupDX8XzVhK0R70oJBlM3ZLgmiDLv5CkpFA4ITj0 YxgFeggGNkQP7cPWR0KdHg/li6jqazkEMe4DmCkxTs02V3FTZNhXo7oF4Ausqh5v 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19753957327536911782321713561736696308 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'movies.showtimes.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23442826614155177021963727322938060280573698018549322605243811829527369449402599931326226301672715623014338219065288913195765591081383329745929081895314547330079629358161629091112576558689369425650586017528102177730913282845014155106060714798006549432527503870272434924144513736927637541840462239808472343394804228078109314583165458337521738952304350090495225319242427780446559772645353548550336386698785200979059279302409037853073283745405426489522030808687147286240151202720708521589131569509395103569689663817213249544462619530679481545103200341701156775985555209354299541957484595694853443996392244861858240950243 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2491090fc7fd58d0b3370b49ef247e21f6eb2c55 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.showtimes.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfi.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonstudios.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvel.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbs.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradisofilms.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmg.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disney.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook.powio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalshowtimes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 01680076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017c3fd7e63a0000040300473045022100dcb11e291e1d8a6f865866cad53a5d2ed4112f818a683edf485962663bd288ea02202fa73cffd772e97f9cd93d608aefc77d89d68fc588b41d2cae3395816264850200760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c3fd7e6800000040300473045022100c955993cba015ff1de196a1968016a47a619084db2684c1b2196b4afbe1d6b5002205076fbde9f3e67a6fb54c913759731c6d19097299b7f02f5f375070bfea438a7007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017c3fd7e668000004030047304502200727dcbfeeca32bda986f3b3f8e0e9199da684b0a39710420fbb3e06f124b4c3022100c2fe46f488efb426e9aba95d9b73fd44614f7dc82cd18b1feaf982ae91bec1e0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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