*.karttaselain.fi
Issued by Amazon
About this certificate
This digital certificate with serial number 01:1e:40:9f:b3:b2:e7:20:9d:e1:54:15:ad:7d:84:d1 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.karttaselain.fi
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:1e:40:9f:b3:b2:e7:20:9d:e1:54:15:ad:7d:84:d1Serial Number (int): 1486307628647531198938523075107194065
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: b6:81:ac:64:9e:dd:fa:10:12:9f:c8:df:c8:75:9a:82:a2:27:3d:5c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): a5:a0:d1:f3:f0:7a:73:55:f7:5d:00:45:e3:45:df:28:5a:2d:14:6e
Fingerprint (sha256): 5f:0e:fc:03:31:58:f8:6a:94:7d:9f:ca:64:c0:a7:e7:a8:52:d9:68:de:8c:18:0c:79:79:e2:9d:6e:1e:c5:80
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.karttaselain.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.karttaselain.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.karttaselain.fi
Other certificates including the domain name karttaselain.fi
(limited to 100 certificates)
statuspage.io
store.karttaselain.fi
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
mapsv2.karttaselain.fi
statuspage.io
statuspage.io
vivobrazil.platformkids.com
sni.cloudflaressl.com
statuspage.io
picturestartprops.com
statuspage.io
ssl376255.cloudflaressl.com
applink.karttaselain.fi
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
blog.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
*.karttaselain.fi
statuspage.io
blog.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
vivobrazil.platformkids.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
solwall.net
*.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
mindlike.de
blog.karttaselain.fi
ssl376254.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
ssl376254.cloudflaressl.com
store.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
*.karttaselain.fi
blog.karttaselain.fi
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
mapsv3.karttaselain.fi
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
statuspage.io
store.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
sni.cloudflaressl.com
statuspage.io
*.karttaselain.fi
ssl376253.cloudflaressl.com
www.kaatsh.com
statuspage.io
statuspage.io
login.rtrfm.com.au
store.karttaselain.fi
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
ssl376254.cloudflaressl.com
statuspage.io
*.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
mapsv2.karttaselain.fi
statuspage.io
statuspage.io
vivobrazil.platformkids.com
sni.cloudflaressl.com
statuspage.io
picturestartprops.com
statuspage.io
ssl376255.cloudflaressl.com
applink.karttaselain.fi
*.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
blog.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
*.karttaselain.fi
statuspage.io
blog.karttaselain.fi
statuspage.io
statuspage.io
statuspage.io
vivobrazil.platformkids.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
solwall.net
*.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
mindlike.de
blog.karttaselain.fi
ssl376254.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
ssl376254.cloudflaressl.com
store.karttaselain.fi
ssl376255.cloudflaressl.com
statuspage.io
*.karttaselain.fi
blog.karttaselain.fi
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
mapsv3.karttaselain.fi
statuspage.io
statuspage.io
ssl376253.cloudflaressl.com
sni.cloudflaressl.com
statuspage.io
ssl376255.cloudflaressl.com
statuspage.io
store.karttaselain.fi
statuspage.io
ssl376255.cloudflaressl.com
ssl376255.cloudflaressl.com
ssl376253.cloudflaressl.com
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
statuspage.io
store.karttaselain.fi
statuspage.io
sni.cloudflaressl.com
statuspage.io
*.karttaselain.fi
ssl376253.cloudflaressl.com
www.kaatsh.com
statuspage.io
statuspage.io
login.rtrfm.com.au
Certificate
The complete raw certificate details for *.karttaselain.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIQAR5An7Oy5yCd4VQVrX2E0TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA2MTgwMDAwMDBaFw0yMDA3MTgx MjAwMDBaMBwxGjAYBgNVBAMMESoua2FydHRhc2VsYWluLmZpMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4QdZWg8X5oR0LPeEZX3q5GyveQxsU5AHgXT RlMjRLtOnmROR0UZHUSvDgB9eCkOpLENxJA8eYGTMazelD0LW6hvLQMOhS8RKCd3 JTo3dq/kF42A4Pt8VpFj2KIeemtymu1OeS4grlFWnz5VzJubrXwonzWtEzAWHeQR ujl4mQmtDRbm17iRUesP2NgRO65EU0HGzb9ZBs4GQQU1Zj87lBZYDw07v8YQMtuX O6zmyOFkwkQqHH9+nGUkkQwdBrdmr3q5HYd7+a9KGMTkNMO8hWG9IFW4jk5sIEnl IpollUa49HVxY2SP2maxhmjP1H0O5oDl4duDxqkf44CWFpBhYwIDAQABo4ICfjCC AnowHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFLaB rGSe3foQEp/I38h1moKiJz1cMBwGA1UdEQQVMBOCESoua2FydHRhc2VsYWluLmZp MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5j b20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1 BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFt YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6 b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEFBgorBgEEAdZ5 AgQCBIH2BIHzAPEAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAA AWtphsmzAAAEAwBIMEYCIQDQAUuykLIE9WX6gvGUAUDOtkIIJDRDNG/D6qRyVj/n 8QIhAJE9PK2W3sXPDgHeG8WZN5KKT1QOng5RldCoPKmE0/KFAHYAh3W/51l8+IxD mV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFraYbF4gAABAMARzBFAiAvj4MSZebP xVmp822haakFL37FQ/Dxw6/x+8Xiw5fwpwIhANAQQhr6bdWyjudZHyRwbvk0zg0d sQSpnO+BsqU2CMYXMA0GCSqGSIb3DQEBCwUAA4IBAQC8GRuia88t1ZBOwufD94dx jk+3gD7jDJWnDpmVnUsUltyurJVwMkJCdEAumRE3GShVWPSkQ3xePviW4gZ/f3WX cDB7yxdTXLx2eBAIqSiZjRlK93m4yH2FQOth+uiGb2l+R/lrg117t8SpQC0ajLQg zTdQ6AfZVmnV8TS7kO/kXMEiB4M7Eqhnp6Z1ALOItzuv66hw720QUJa7D4Ai/NR2 fFt8Kw5JQ2qtosPiYEwIrpSasZO+ZYXVT2C2FucEVI1RbIbPyVXx4J5KrcmTkuFa x2bmNxwMi+/4pBTHKZwUp2Ddbe/ki6/tDKjl6Whv2FtADzQ3QwsPORajVs6jIqVR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4QdZWg8X5oR0LPeEZX3 q5GyveQxsU5AHgXTRlMjRLtOnmROR0UZHUSvDgB9eCkOpLENxJA8eYGTMazelD0L W6hvLQMOhS8RKCd3JTo3dq/kF42A4Pt8VpFj2KIeemtymu1OeS4grlFWnz5VzJub rXwonzWtEzAWHeQRujl4mQmtDRbm17iRUesP2NgRO65EU0HGzb9ZBs4GQQU1Zj87 lBZYDw07v8YQMtuXO6zmyOFkwkQqHH9+nGUkkQwdBrdmr3q5HYd7+a9KGMTkNMO8 hWG9IFW4jk5sIEnlIpollUa49HVxY2SP2maxhmjP1H0O5oDl4duDxqkf44CWFpBh YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1486307628647531198938523075107194065 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.karttaselain.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18622179080102123508054912198186225006374023268626704078414035966512866084274987463992305409423655938253839100150402282089971618534363218533851132332653571942951068590830534019486530166936078890271695908866749958840483347834068496570518977786127059484032383951629786251924816989933578263127870614966849853759899537403562946737555894087661631759374395425233953469317024070588580412473044696179890731809345465467081459139747934455098444481254721773222429521721881846448568332225502441709270409295487967169593254220868125409777752464258652727327819030755525613858359917641813234230504412487186632273383244108823367016803 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b681ac649eddfa10129fc8dfc8759a82a2273d5c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karttaselain.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b6986c9b30000040300483046022100d0014bb290b204f565fa82f1940140ceb64208243443346fc3eaa472563fe7f1022100913d3cad96dec5cf0e01de1bc59937928a4f540e9e0e5195d0a83ca984d3f2850076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b6986c5e2000004030047304502202f8f831265e6cfc559a9f36da169a9052f7ec543f0f1c3aff1fbc5e2c397f0a7022100d010421afa6dd5b28ee7591f24706ef934ce0d1db104a99cef81b2a53608c617 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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