pci.portals.dev-spectrum.net
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:da:fd:ac:cc:28:93:ea:e8:91:b6:41:2c:ed:8b:bc was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pci.portals.dev-spectrum.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:da:fd:ac:cc:28:93:ea:e8:91:b6:41:2c:ed:8b:bcSerial Number (int): 18417029800422172654360915079739575228
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8d:16:82:cb:0f:a3:bb:44:34:84:7a:8e:5b:e1:3e:c4:f5:b5:33:0d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 5d:76:2b:94:65:c6:6a:9e:fb:b2:0d:31:75:8d:b3:f7:46:d1:7c:04
Fingerprint (sha256): 61:31:44:81:6e:32:59:a8:e8:df:11:35:13:9d:45:31:1f:8d:59:9c:f9:f8:9f:c2:82:54:94:83:11:34:c2:8e
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate pci.portals.dev-spectrum.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pci.portals.dev-spectrum.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pci.portals.dev-spectrum.net
Other certificates including the domain name dev-spectrum.net
(limited to 100 certificates)
*.portals.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
atvchtr.dev-spectrum.net
*.dev-spectrum.net
advisor2.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
*.shared.dev-spectrum.net
api.engprod-spectrum.net
pci.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
*.shared.dev-spectrum.net
*.dev-spectrum.net
api.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
drupal-cms.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
pcidev.dev-spectrum.net
pci.portals.dev-spectrum.net
*.testing.portals.dev-spectrum.net
*.dev-spectrum.net
testing.portals.dev-spectrum.net
*.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
api.engprod-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
ssltest1.testing.portals.dev-spectrum.net
drupal-cms.spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
*.portals.dev-spectrum.net
id.dev-spectrum.net
engprod-spectrum.net
pci.portals.dev-spectrum.net
hoh.engprod-spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
api.engprod-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
advisor2.engprod-spectrum.net
*.dev-spectrum.net
*.portals.dev-spectrum.net
ssltest2.testing.portals.dev-spectrum.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
troubleshooting.engprod-spectrum.net
api.engprod-spectrum.net
dev-spectrum.net
pci-lbf.dev-spectrum.net
tdcs.engprod-spectrum.net
*.dev-spectrum.net
*.dev-spectrum.net
dev-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
drupal-cms.prd.spectrum.net
*.eos.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
atvchtr.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
atvchtr.dev-spectrum.net
*.dev-spectrum.net
advisor2.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
*.shared.dev-spectrum.net
api.engprod-spectrum.net
pci.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
*.shared.dev-spectrum.net
*.dev-spectrum.net
api.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
drupal-cms.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
pcidev.dev-spectrum.net
pci.portals.dev-spectrum.net
*.testing.portals.dev-spectrum.net
*.dev-spectrum.net
testing.portals.dev-spectrum.net
*.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
api.engprod-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
ssltest1.testing.portals.dev-spectrum.net
drupal-cms.spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
*.portals.dev-spectrum.net
id.dev-spectrum.net
engprod-spectrum.net
pci.portals.dev-spectrum.net
hoh.engprod-spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
api.engprod-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
advisor2.engprod-spectrum.net
*.dev-spectrum.net
*.portals.dev-spectrum.net
ssltest2.testing.portals.dev-spectrum.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
troubleshooting.engprod-spectrum.net
api.engprod-spectrum.net
dev-spectrum.net
pci-lbf.dev-spectrum.net
tdcs.engprod-spectrum.net
*.dev-spectrum.net
*.dev-spectrum.net
dev-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
drupal-cms.prd.spectrum.net
*.eos.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
atvchtr.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
www.public.dev-spectrum.net
Certificate
The complete raw certificate details for pci.portals.dev-spectrum.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjjCCA3agAwIBAgIQDdr9rMwok+rokbZBLO2LvDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAyMjYwMDAwMDBaFw0yMDAzMjYx MjAwMDBaMCcxJTAjBgNVBAMTHHBjaS5wb3J0YWxzLmRldi1zcGVjdHJ1bS5uZXQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtanG/CVlNT0laCcR7K8x/ Enp2S9ctQZ2Y02KHa0gOj13tGjfCA9gVdC35eVELr6nC/djT45YKV1skrjkM9/vK mpmPJgCNkZFQDt/30rp92pG7Q8KM9RsAxe99h7Tav5qnsAgPEfh2xO6gCu1nK2zo wfxF3I5wCAZbNzbnXzXOBcfs7xVD52aOfJYuE/DJqQZi/iTdnZdoVy2l+nRKyBWe AQ4iwwRZ3wc6Oju1l6sdvWADsWiIg6zBsmzPHOA0Cy5Ebdn/fOKcJR5mY7N48Y7w 1wo9CLh0CddbnCuXZLeUb8CvL4TZE6wVbmarQbvH0ZrkCdaHYy3ASq0Pl0ixLVxX AgMBAAGjggGVMIIBkTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAd BgNVHQ4EFgQUjRaCyw+ju0Q0hHqOW+E+xPW1Mw0wJwYDVR0RBCAwHoIccGNpLnBv cnRhbHMuZGV2LXNwZWN0cnVtLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsG CWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB hiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG Kmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNV HRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAtdstaO/xxHQAqjQONxv0CbR8117AapR3uDeNCvD9Uboe8BqfwuQ3UT7/KScQ cZBxO8JA0vDpXDEqka1umRSv4051Iw8m/iJ0e3mBNolgFbAbSB6hQxYnTrU3IrQz e8qoZkMKbZA2qN5QttLyhBS34BLXw+bKsoBQKmPvvaDjQD5zbOfLZYjRB3vS/8sc dC5hWEJyRuLEX1gOtFTNYwOgNQSw4iXymnTZ8GrPdLTkdCMjRWK3XefWzmvHkjO/ JATwxU13hvplbrGnORPiEu1lHP7F0EJAp9qbo9C8SS4+2XhjkPgvl6p2xE0mnB7t nfxZy8/aD1YEBsOcot+6jD/E -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWpxvwlZTU9JWgnEeyvM fxJ6dkvXLUGdmNNih2tIDo9d7Ro3wgPYFXQt+XlRC6+pwv3Y0+OWCldbJK45DPf7 ypqZjyYAjZGRUA7f99K6fdqRu0PCjPUbAMXvfYe02r+ap7AIDxH4dsTuoArtZyts 6MH8RdyOcAgGWzc25181zgXH7O8VQ+dmjnyWLhPwyakGYv4k3Z2XaFctpfp0SsgV ngEOIsMEWd8HOjo7tZerHb1gA7FoiIOswbJszxzgNAsuRG3Z/3zinCUeZmOzePGO 8NcKPQi4dAnXW5wrl2S3lG/Ary+E2ROsFW5mq0G7x9Ga5AnWh2MtwEqtD5dIsS1c VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18417029800422172654360915079739575228 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pci.portals.dev-spectrum.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21891716410245674201271908575487094660058324884909810208184353894920104553539658142057514377359201198972177594733261242722905312973518030503301414409407193970707326225091807616567817622975219137476133417992111381786360601884977911642350092035653925274072399458030711219562918140081613931352925476826876007891138676518613654312309774227947224657790344862645370810032768028890014574243928212952387032091648948264087100973165937368269395972113424146793489388629894133231251689459450896435801869859597169664497993356068079990919399413641249209319291885919897594251349570502560376936130933539079162130618513243409230945367 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d1682cb0fa3bb4434847a8e5be13ec4f5b5330d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pci.portals.dev-spectrum.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0000b5db2d68eff1c47400aa340e371bf409b47cd75ec06a9477b8378d0af0fd51ba1ef01a9fc2e437513eff2927107190713bc240d2f0e95c312a91ad6e9914afe34e75230f26fe22747b798136896015b01b481ea14316274eb53722b4337bcaa866430a6d9036a8de50b6d2f28414b7e012d7c3e6cab280502a63efbda0e3403e736ce7cb6588d1077bd2ffcb1c742e6158427246e2c45f580eb454cd6303a03504b0e225f29a74d9f06acf74b4e47423234562b75de7d6ce6bc79233bf2404f0c54d7786fa656eb1a73913e212ed651cfec5d04240a7da9ba3d0bc492e3ed9786390f82f97aa76c44d269c1eed9dfc59cbcfda0f560406c39ca2dfba8c3fc4