assets2.fnlondon.com
Issued by Amazon
About this certificate
This digital certificate with serial number 06:e9:e3:d0:15:a1:c9:94:65:99:f9:d8:d7:af:39:f4 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=assets2.fnlondon.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:e9:e3:d0:15:a1:c9:94:65:99:f9:d8:d7:af:39:f4Serial Number (int): 9189793735880716167347442316617923060
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 28:fe:4f:1a:fb:7a:ce:20:ce:5e:7b:11:c5:b8:0c:43:92:b2:ef:fa
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 89:28:30:7d:32:c3:cc:6c:71:d8:21:90:ad:3b:29:5b:f7:d4:92:1b
Fingerprint (sha256): 5d:8f:19:29:45:ef:d7:ad:8e:09:e5:ef:89:9e:76:af:e1:99:7c:58:59:e9:3c:35:da:75:5c:5e:82:3f:01:14
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate assets2.fnlondon.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for assets2.fnlondon.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assets2.fnlondon.com
assets.fnlondon.com
assets.fnlondon.com
Other certificates including the domain name fnlondon.com
(limited to 100 certificates)
media.fnlondon.com
www.fnlondon.com
*.s.dev.fnlondon.com
events.fnlondon.com
fnlondon.com
www.s.dev.wsj.com
www.s.dev.wsj.com
*.s.dev.fnlondon.com
*.d.dev.fnlondon.com
events.fnlondon.com
partners.wsj.com
v2.pixel.djp.data.newscorp.com
fncs.fnlondon.com
fnlondon.com
subs.fnlondon.com
partner.s.dev.fnlondon.com
*.s.dev.fnlondon.com
assets.fnlondon.com
nid.fnlondon.com
www.fnlondon.com
fnlondon.com
assets.fnlondon.com
www.fnlondon.com
lists.fnlondon.com
rac.fnlondon.com
fnlondon.com
lists.fnlondon.com
*.s.dev.fnlondon.com
cs.fnlondon.com
www2.fnlondon.com
*.d.dev.fnlondon.com
www.stg.fnlondon.com
onboarding.wsj.com
*.s.dev.fnlondon.com
blue-store.fnlondon.com
*.d.dev.fnlondon.com
*.fnlondon.com
media.fnlondon.com
www.s.dev.wsj.com
fnlondon.com
www.stg.fnlondon.com
subs.fnlondon.com
www.s.dev.wsj.com
*.fnlondon.com
assets.fnlondon.com
assets.fnlondon.com
api-onboarding.wsj.com
subs.stg.fnlondon.com
*.d.dev.fnlondon.com
fnlondon.com
ace.stg.wsj.com
lists.cms.fnlondon.com
www.fnlondon.com
onboarding.wsj.com
ace.wsj.com
ace.wsj.com
events.fnlondon.com
blue-store.fnlondon.com
www.s.dev.wsj.com
api.fnlondon.com
media.fnlondon.com
www.fnlondon.com
store.fnlondon.com
api-onboarding.wsj.com
fncs.fnlondon.com
www2.fnlondon.com
jf.fnlondon.com
*.d.dev.fnlondon.com
www.stg.fnlondon.com
subs.fnlondon.com
blue-customercenter.fnlondon.com
*.fnlondon.com
fnlondon.com
nid.fnlondon.com
lists.stg.fnlondon.com
assets2.fnlondon.com
caj-qa.smpdev.fnlondon.com
*.s.dev.fnlondon.com
caj-qa.smpdev.fnlondon.com
caj-uat.smpdev.fnlondon.com
assets.fnlondon.com
caj-uat.smpdev.fnlondon.com
*.d.dev.fnlondon.com
*.fnlondon.com
*.fnlondon.com
follow-api.wsj.com
www.stg.fnlondon.com
store.fnlondon.com
api.fnlondon.com
images.fnlondon.com
subs.fnlondon.com
cn.s.dev.wsj.com
nid.fnlondon.com
lists2.fnlondon.com
fnlondon.com
api.fnlondon.com
onboarding-blue.wsj.com
assets.fnlondon.com
onboarding-qa.smpdev.wsj.com
partner.s.dev.fnlondon.com
www.fnlondon.com
*.s.dev.fnlondon.com
events.fnlondon.com
fnlondon.com
www.s.dev.wsj.com
www.s.dev.wsj.com
*.s.dev.fnlondon.com
*.d.dev.fnlondon.com
events.fnlondon.com
partners.wsj.com
v2.pixel.djp.data.newscorp.com
fncs.fnlondon.com
fnlondon.com
subs.fnlondon.com
partner.s.dev.fnlondon.com
*.s.dev.fnlondon.com
assets.fnlondon.com
nid.fnlondon.com
www.fnlondon.com
fnlondon.com
assets.fnlondon.com
www.fnlondon.com
lists.fnlondon.com
rac.fnlondon.com
fnlondon.com
lists.fnlondon.com
*.s.dev.fnlondon.com
cs.fnlondon.com
www2.fnlondon.com
*.d.dev.fnlondon.com
www.stg.fnlondon.com
onboarding.wsj.com
*.s.dev.fnlondon.com
blue-store.fnlondon.com
*.d.dev.fnlondon.com
*.fnlondon.com
media.fnlondon.com
www.s.dev.wsj.com
fnlondon.com
www.stg.fnlondon.com
subs.fnlondon.com
www.s.dev.wsj.com
*.fnlondon.com
assets.fnlondon.com
assets.fnlondon.com
api-onboarding.wsj.com
subs.stg.fnlondon.com
*.d.dev.fnlondon.com
fnlondon.com
ace.stg.wsj.com
lists.cms.fnlondon.com
www.fnlondon.com
onboarding.wsj.com
ace.wsj.com
ace.wsj.com
events.fnlondon.com
blue-store.fnlondon.com
www.s.dev.wsj.com
api.fnlondon.com
media.fnlondon.com
www.fnlondon.com
store.fnlondon.com
api-onboarding.wsj.com
fncs.fnlondon.com
www2.fnlondon.com
jf.fnlondon.com
*.d.dev.fnlondon.com
www.stg.fnlondon.com
subs.fnlondon.com
blue-customercenter.fnlondon.com
*.fnlondon.com
fnlondon.com
nid.fnlondon.com
lists.stg.fnlondon.com
assets2.fnlondon.com
caj-qa.smpdev.fnlondon.com
*.s.dev.fnlondon.com
caj-qa.smpdev.fnlondon.com
caj-uat.smpdev.fnlondon.com
assets.fnlondon.com
caj-uat.smpdev.fnlondon.com
*.d.dev.fnlondon.com
*.fnlondon.com
*.fnlondon.com
follow-api.wsj.com
www.stg.fnlondon.com
store.fnlondon.com
api.fnlondon.com
images.fnlondon.com
subs.fnlondon.com
cn.s.dev.wsj.com
nid.fnlondon.com
lists2.fnlondon.com
fnlondon.com
api.fnlondon.com
onboarding-blue.wsj.com
assets.fnlondon.com
onboarding-qa.smpdev.wsj.com
partner.s.dev.fnlondon.com
Certificate
The complete raw certificate details for assets2.fnlondon.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkzCCA3ugAwIBAgIQBunj0BWhyZRlmfnY16859DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMDcwMDAwMDBaFw0yMTAyMDcx MjAwMDBaMB8xHTAbBgNVBAMTFGFzc2V0czIuZm5sb25kb24uY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m3SeO0qHUAuuUTXOvSZh9hgK3t53oRZ bz984Db6o8wAd1k5p/EVXAI2gUn7oZ48XgZm36aoMmg9V/58Xuj+iwdV8EYeMnJ8 CCXLEdEEh9AL1x7GNKIIOmXoWxlaQNpUE/14kYvM38pKJFPdw9APTVNA4OISuOi9 BeJPoKeSi1LHdzJHZHq6a+ywJSnQ3ZyjRDLxS1Mnt514DtjU8Ip9SF4XVI5tTb1r xjaitoGAyqcPAm3ZusuRL9YVwkl1oZIpiU7VaHsdRVNyZ+5c4hd6Zgh553OXqbS5 aNuV9F3qqMReYnyNJsy/r6L0nkDG0fUjFD3WnbPTyAOqjwF6GATQHQIDAQABo4IB ojCCAZ4wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FCj+Txr7es4gzl57EcW4DEOSsu/6MDQGA1UdEQQtMCuCFGFzc2V0czIuZm5sb25k b24uY29tghNhc3NldHMuZm5sb25kb24uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0 cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZ MBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0 MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAAorl9BLlUqeuTtdkQMgPrVHAZ/u2c1sQN4dt1uRv8/cNQ0giTZF/zxY 3bbcbBMAGhHz9DK364/U/TSs7BBdzuf1suoRNrQOZP5VaBHvHEVI+UMYRrDUUMnx So2o0wi6+tCbbWNLkGTIhwSUM0ggQAElBu6UCw2CGKzCwORUwbscpnUlLN2mvpat 52/sqedQLofTCLPf5If4uLoQfvtLVtm81xE0Uy4yrfXvrYRFrJZE9YF3sbXXoM4S E3m6HO4hE7d9BqifFOGJ+DznaHslFD6zYwFoJlVUnIAR6M/F88ku6zdw07El8gmM XvfFAMP/mYYErSMX6gLNqVuX3f6fNYE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m3SeO0qHUAuuUTXOvSZ h9hgK3t53oRZbz984Db6o8wAd1k5p/EVXAI2gUn7oZ48XgZm36aoMmg9V/58Xuj+ iwdV8EYeMnJ8CCXLEdEEh9AL1x7GNKIIOmXoWxlaQNpUE/14kYvM38pKJFPdw9AP TVNA4OISuOi9BeJPoKeSi1LHdzJHZHq6a+ywJSnQ3ZyjRDLxS1Mnt514DtjU8Ip9 SF4XVI5tTb1rxjaitoGAyqcPAm3ZusuRL9YVwkl1oZIpiU7VaHsdRVNyZ+5c4hd6 Zgh553OXqbS5aNuV9F3qqMReYnyNJsy/r6L0nkDG0fUjFD3WnbPTyAOqjwF6GATQ HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9189793735880716167347442316617923060 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets2.fnlondon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28079059026818924332467201607559998758931192082572263593337986133673365111726737768777703815987969945649026901455824008705982042991656302376327060663184406933859109367103777468701871884602273700064577425909398683317126262998144122078625053054966692189419836722906578722325819736147392592237363646278772343701124379632318357023858442231217583194205932885354296218949632476440008933071831820635381918702887021885061753376688960199963482805445355725072296641475138729164984441129195479207770292903638083672846648170369694295396217211748338350727059186200788550300322019679337925501585687734097251697143424642154682961949 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28fe4f1afb7ace20ce5e7b11c5b80c4392b2effa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.fnlondon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.fnlondon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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