*.freedca.mp

Issued by Amazon

About this certificate

This digital certificate with serial number 03:ff:ce:b0:fc:1f:d9:81:dd:90:28:59:bf:99:f0:f7 was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.freedca.mp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:ce:b0:fc:1f:d9:81:dd:90:28:59:bf:99:f0:f7
Serial Number (int): 5315911884844809743126531431856730359
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f3:ab:4f:f7:ec:1e:7f:31:11:54:8e:13:dd:57:35:4e:0a:07:69:17
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ee:19:02:ff:6d:9e:a0:5d:c6:ac:dd:5c:80:84:20:b7:38:45:d6:be
Fingerprint (sha256): 53:66:d7:b5:59:44:95:6f:22:9c:7a:07:f2:88:19:a8:32:82:f0:3d:c5:5f:90:ca:3b:b2:6a:72:b2:33:f2:85

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.freedca.mp

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freedca.mp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freedca.mp
projects.codevelopment.com.au
portal.1stsupport.com
projects.optsus.com
projects.sixvirtual.com
portail.easytek.io
project.digitalmindsbpo.com
camp.texonica.com
portal.phoenixallsaas.com
projects.experiacreative.com
team.danugrahregency.com
huddle.isev.co.uk
team.owl.la

Other certificates including the domain name freedca.mp

(limited to 100 certificates)
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
freedcamp.com
*.freedca.mp
*.freedca.mp
*.freedca.mp
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
aws.freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
*.freedca.mp
freedcamp.com
*.freedca.mp
*.freedca.mp
*.freedca.mp
freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
freedcamp.com
*.freedca.mp
freedcamp.com
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
freedcamp.com
*.freedca.mp
*.freedca.mp
*.freedca.mp
aws.freedcamp.com
*.freedca.mp
freedcamp.com
*.freedca.mp
aws.freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
*.freedca.mp
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
freedcamp.com
*.freedca.mp
freedcamp.com
*.freedca.mp
aws.freedcamp.com
*.freedca.mp
freedcamp.com
*.freedca.mp

Certificate

The complete raw certificate details for *.freedca.mp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgIQA//OsPwf2YHdkChZv5nw9zANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMjAwMDAwMDBaFw0yMTAyMjAx
MjAwMDBaMBcxFTATBgNVBAMMDCouZnJlZWRjYS5tcDCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAMUID8AeIjnN18zFN8qsgA0EvRZMeEozk+eTsTn+S+j0
oivtgnPLn5PALbT1eCymHYMbjFFsvtAMH61xJyOjw5PIvLyYHkioYJg+GqPGPFE+
+2gk2Nx5nYVcIZ5AnNMwmJqsvbnWUkAWHj4lfKjSGaY9UUEEZ1rWI8TwjeT5Gwe/
llDnFT4SxAL67rDln7c4parxdeSFkev4f5UMDtpvTELa3hF7SmxKstwya1iE9lAV
cX/UTFzgFhwnU9o+ceB1aE8zMlaiATqQMw+rm7VLP1UrN5WmuZ/Au7wiJCFEP889
ZvB+Cg6GqekWD/60Ptwy4VAZ2vegqHkyI0jwz6cyvbECAwEAAaOCA5owggOWMB8G
A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTzq0/37B5/
MRFUjhPdVzVOCgdpFzCCATYGA1UdEQSCAS0wggEpggwqLmZyZWVkY2EubXCCHXBy
b2plY3RzLmNvZGV2ZWxvcG1lbnQuY29tLmF1ghVwb3J0YWwuMXN0c3VwcG9ydC5j
b22CE3Byb2plY3RzLm9wdHN1cy5jb22CF3Byb2plY3RzLnNpeHZpcnR1YWwuY29t
ghJwb3J0YWlsLmVhc3l0ZWsuaW+CG3Byb2plY3QuZGlnaXRhbG1pbmRzYnBvLmNv
bYIRY2FtcC50ZXhvbmljYS5jb22CGXBvcnRhbC5waG9lbml4YWxsc2Fhcy5jb22C
HHByb2plY3RzLmV4cGVyaWFjcmVhdGl2ZS5jb22CGHRlYW0uZGFudWdyYWhyZWdl
bmN5LmNvbYIRaHVkZGxlLmlzZXYuY28udWuCC3RlYW0ub3dsLmxhMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQw
MjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu
Y3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcB
AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0
LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5j
b20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAW/BYv8/AAAE
AwBIMEYCIQDKDjYr4Eyx/1iHOCQZIWD8MafWnJA4pFLlcdW/7/Ru3AIhAJ3K59J2
ZQrvWcZhKFwy61C8qynreohTxnu2hhwtmwMpAHYAh3W/51l8+IxDmV+9827/Vo1H
Vjb/SrVgwbTq/16ggw8AAAFvwWL/0AAABAMARzBFAiEApYC9Ep9mkgGjWaWQw1YV
VvDIimB9hQDqrNt/psejFa8CIF/UO4egfrTtiD4U6S5YWvmuCtdDKdJx2FAfAy+b
ZleZMA0GCSqGSIb3DQEBCwUAA4IBAQCBqEoRUfjtA4doatNRJ9OPjT5Oz3K9Svpm
yAjKCmbOMfAA4w3/wWXtcu1nxwvX72+tvanAVfffKiwuI/HBzPqOtXfSRJ/hUih6
jnSFghqJu6+/bM4QvGNCNNWJ0rg1+DoeH9637jQoD4WnvVrC5IdLiuxOU4hdQCfz
uFJqtKD29kpHr9GHu1SgYNYvkIGQjY7f+hVnGWh2jhUVVAgSXW7GGG8lPzo04Bgb
69QerbDjeholuXGgPpWL9ohs4X9q6PEJLQmaE0aWhG4K4HNnuHvZSJCDTakVAiKB
aSbfAlxIDl/AzkMsJtTHHtX5xXZEaFqbAiNWyYCdrU+FrD0IwrSp
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQgPwB4iOc3XzMU3yqyA
DQS9Fkx4SjOT55OxOf5L6PSiK+2Cc8ufk8AttPV4LKYdgxuMUWy+0AwfrXEnI6PD
k8i8vJgeSKhgmD4ao8Y8UT77aCTY3HmdhVwhnkCc0zCYmqy9udZSQBYePiV8qNIZ
pj1RQQRnWtYjxPCN5PkbB7+WUOcVPhLEAvrusOWftzilqvF15IWR6/h/lQwO2m9M
QtreEXtKbEqy3DJrWIT2UBVxf9RMXOAWHCdT2j5x4HVoTzMyVqIBOpAzD6ubtUs/
VSs3laa5n8C7vCIkIUQ/zz1m8H4KDoap6RYP/rQ+3DLhUBna96CoeTIjSPDPpzK9
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5315911884844809743126531431856730359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freedca.mp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24872921364567188444621374559172198639683372451804134953717101643103486526363500549048948725070704654509217906215272376195031939025672651554481070031682411936726357914788568090367895497300256072613928092169979410868562311160979878840515368288271901538723252753864085409439889816379446861129218476120015307092074541057402196105819366647609666785180035094545739435514471804228147477683755401024125066071712416191423214180709489897780844556786216334469107955193834572009047122896419520749316257894253070229553524757713336432522777852616132100769494348579094361874681632794819023464296301652590274586870206979504157670833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3ab4ff7ec1e7f3111548e13dd57354e0a076917
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedca.mp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.codevelopment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.1stsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.sixvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.easytek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.digitalmindsbpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.texonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.phoenixallsaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.experiacreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.danugrahregency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huddle.isev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.owl.la'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016fc162ff3f0000040300483046022100ca0e362be04cb1ff58873824192160fc31a7d69c9038a452e571d5bfeff46edc0221009dcae7d276650aef59c661285c32eb50bcab29eb7a8853c67bb6861c2d9b03290076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016fc162ffd00000040300473045022100a580bd129f669201a359a590c3561556f0c88a607d8500eaacdb7fa6c7a315af02205fd43b87a07eb4ed883e14e92e585af9ae0ad74329d271d8501f032f9b665799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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