carsgenius.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:b0:34:ac:c2:7c:74:7a:a7:b0:8d:f6:65:78:b5:8c was issued on by Amazon.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=carsgenius.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:b0:34:ac:c2:7c:74:7a:a7:b0:8d:f6:65:78:b5:8cSerial Number (int): 16865648569255011241866424535253300620
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0f:ad:4d:ae:f3:98:49:65:7b:e0:2c:30:ca:bc:0e:60:6d:c9:f9:0e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): a7:cc:09:1d:6f:be:f4:dd:a7:ad:ab:f7:f9:2f:ed:ab:a8:15:79:09
Fingerprint (sha256): 60:32:3e:5a:a2:57:56:c5:01:be:f9:76:46:2c:aa:79:6e:60:d5:11:33:cd:47:75:52:be:a3:de:9e:c7:09:48
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate carsgenius.com
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for carsgenius.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
carsgenius.com
*.stage.askandsearch.com
*.startpage-cms.com
*.blog.s1-sp.com
*.askandsearch.com
*.searchthedeals.com
*.stage.startpage-cms.com
*.searchthis.net
*.intelligentintent.net
*.stage.reviews.howstuffworks.com
askandsearch.com
*.stage.searchthedeals.com
*.wealthversed.com
searchthedeals.com
*.stage.searchthis.net
searchthis.net
*.stage.intelligentintent.net
reviews.howstuffworks.com
intelligentintent.net
*.reviews.howstuffworks.com
*.stage.blog.s1-sp.com
blog.s1-sp.com
*.stage.wealthversed.com
*.stage.askandsearch.com
*.startpage-cms.com
*.blog.s1-sp.com
*.askandsearch.com
*.searchthedeals.com
*.stage.startpage-cms.com
*.searchthis.net
*.intelligentintent.net
*.stage.reviews.howstuffworks.com
askandsearch.com
*.stage.searchthedeals.com
*.wealthversed.com
searchthedeals.com
*.stage.searchthis.net
searchthis.net
*.stage.intelligentintent.net
reviews.howstuffworks.com
intelligentintent.net
*.reviews.howstuffworks.com
*.stage.blog.s1-sp.com
blog.s1-sp.com
*.stage.wealthversed.com
Other certificates including the domain name carsgenius.com
(limited to 100 certificates)
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
pubwp-admin-prod.k.system1.company
carsgenius.com
carsgenius.com
*.myloveluxe.com
content.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
pubwp-admin-prod.k.system1.company
carsgenius.com
carsgenius.com
*.myloveluxe.com
content.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
cdn.buy.carsgenius.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
carsgenius.com
carsgenius.com
*.myloveluxe.com
goto.net
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
search.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
*.carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
Certificate
The complete raw certificate details for carsgenius.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIQDLA0rMJ8dHqnsI32ZXi1jDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAxMzAwMDAwMDBaFw0yMTAyMjgx MjAwMDBaMBkxFzAVBgNVBAMTDmNhcnNnZW5pdXMuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAoCyt/ExalqjzObBAil+30vtom6k5MDEXcBRkv0l8 kOs8//An+vB6EFcDm3jkwPbzhb+qsLrYi7OeSupFgt6yhD2B2M13uUGrEjxpqJ4i 5vzBBhsLFf5/8N+HTJ52ATd/1DY90bpdMCyKWYRIvcnw25ni+i1ZKYQP3IL9qlDI vd31SA3+RjCVGDnUpCivU7U3oB+e2KbIZULUCOkqBZf+AD9CXYShdkSRMl1xqsfY MygmVNFy2jYNya3D4rQ19az9fSM+hjLyKx6LpnNvSpZ1qUBmfmzTlEJQkI0kwJ3u 72Kv5x2Z42IqgLBLRcW8I76/ChGdlCPjJjxbVnlTzmrZTwIDAQABo4IDjzCCA4sw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFA+tTa7z mElle+AsMMq8DmBtyfkOMIICHwYDVR0RBIICFjCCAhKCDmNhcnNnZW5pdXMuY29t ghgqLnN0YWdlLmFza2FuZHNlYXJjaC5jb22CEyouc3RhcnRwYWdlLWNtcy5jb22C ECouYmxvZy5zMS1zcC5jb22CEiouYXNrYW5kc2VhcmNoLmNvbYIUKi5zZWFyY2h0 aGVkZWFscy5jb22CGSouc3RhZ2Uuc3RhcnRwYWdlLWNtcy5jb22CECouc2VhcmNo dGhpcy5uZXSCFyouaW50ZWxsaWdlbnRpbnRlbnQubmV0giEqLnN0YWdlLnJldmll d3MuaG93c3R1ZmZ3b3Jrcy5jb22CEGFza2FuZHNlYXJjaC5jb22CGiouc3RhZ2Uu c2VhcmNodGhlZGVhbHMuY29tghIqLndlYWx0aHZlcnNlZC5jb22CEnNlYXJjaHRo ZWRlYWxzLmNvbYIWKi5zdGFnZS5zZWFyY2h0aGlzLm5ldIIOc2VhcmNodGhpcy5u ZXSCHSouc3RhZ2UuaW50ZWxsaWdlbnRpbnRlbnQubmV0ghlyZXZpZXdzLmhvd3N0 dWZmd29ya3MuY29tghVpbnRlbGxpZ2VudGludGVudC5uZXSCGyoucmV2aWV3cy5o b3dzdHVmZndvcmtzLmNvbYIWKi5zdGFnZS5ibG9nLnMxLXNwLmNvbYIOYmxvZy5z MS1zcC5jb22CGCouc3RhZ2Uud2VhbHRodmVyc2VkLmNvbTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu oCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAg BgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBn MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20w NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3Nj YTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBFWbjwoF1794hdKcq43kqFR+7Lh8JZ9XuEH+/v0zg2ri7X QYnXlxrUUUgR2fczhmFF54rxziuiNTIMWXDx82Nd0mLwuxd/NP6O3ZzN1eWjYAO5 R0vjZn1YXHycw1vzPt7LP1TEcdrUAm3I/TBh7s+/7Yt2aAA6HXWltVFSWEnEwtPX yhdsXoiYMhA2oErXiWjFGJUjTbc7lSho1mcLLTORlUv8zG2gasx5zpUzPiHBV6iP XGmyonq5OWvsDn2LVmn7LADbFOM6Te8vai/PW5AsrkNMKSk0cUCY1ySQlwL6gWrp zyMEUyBoEn+QEUKPCHSJKG5hB0LJIxexkpM44Iyd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCyt/ExalqjzObBAil+3 0vtom6k5MDEXcBRkv0l8kOs8//An+vB6EFcDm3jkwPbzhb+qsLrYi7OeSupFgt6y hD2B2M13uUGrEjxpqJ4i5vzBBhsLFf5/8N+HTJ52ATd/1DY90bpdMCyKWYRIvcnw 25ni+i1ZKYQP3IL9qlDIvd31SA3+RjCVGDnUpCivU7U3oB+e2KbIZULUCOkqBZf+ AD9CXYShdkSRMl1xqsfYMygmVNFy2jYNya3D4rQ19az9fSM+hjLyKx6LpnNvSpZ1 qUBmfmzTlEJQkI0kwJ3u72Kv5x2Z42IqgLBLRcW8I76/ChGdlCPjJjxbVnlTzmrZ TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16865648569255011241866424535253300620 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-28 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'carsgenius.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20220161141780140143147469094053597534366632708036100982707810567464947911102244098684483725953775162116160399628133190843856504244832120604635130608214562440490871156889599561473806117733970956031721892116261964701505290366430515914383619305128903097607866608550273922999535958996657365364368017707279629501544676638099555810037940389828309141840791553944461676191540768163698267575541609386045060412056805164277822746874593843428746817622228228664755925751576552531645250383504276376669872150821991079571888769026940751363662683268155041297947368431845164212623953065488419758473360691071890017347701120886614186319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0fad4daef39849657be02c30cabc0e606dc9f90e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (534 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsgenius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.askandsearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startpage-cms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.s1-sp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askandsearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchthedeals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.startpage-cms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchthis.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelligentintent.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.reviews.howstuffworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askandsearch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.searchthedeals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wealthversed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchthedeals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.searchthis.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchthis.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.intelligentintent.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews.howstuffworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentintent.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviews.howstuffworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.blog.s1-sp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.s1-sp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.wealthversed.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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