mvp01.stg.shared.use1.aws.mckinsey.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 07:ea:e3:7b:91:a0:2c:ff:07:9a:11:1a:a9:7b:80:94 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mvp01.stg.shared.use1.aws.mckinsey.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ea:e3:7b:91:a0:2c:ff:07:9a:11:1a:a9:7b:80:94
Serial Number (int): 10524207332504546002928675399208239252
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ca:40:71:68:26:e2:2c:51:dc:93:44:18:93:fd:6c:d7:d9:b4:c5:4a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 44:e5:a4:b2:58:39:1a:3c:a1:8a:23:5a:26:ee:f0:8d:0b:c9:7e:01
Fingerprint (sha256): 62:23:f1:4f:e9:18:35:76:33:01:60:91:86:47:79:3b:e5:b1:3d:f8:2a:81:76:4a:fc:44:24:16:d8:36:90:05

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate mvp01.stg.shared.use1.aws.mckinsey.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mvp01.stg.shared.use1.aws.mckinsey.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mvp01.stg.shared.use1.aws.mckinsey.cloud
*.mvp01.stg.shared.use1.aws.mckinsey.cloud

Other certificates including the domain name mckinsey.cloud

(limited to 100 certificates)
hub01.shared.nvt.mckinsey.cloud
mbaharn.test.nvt.mckinsey.cloud
sample-application1.beta.btcmp-team1.mckinsey.cloud
*.mvp03.dev.azr.nvt.mckinsey.cloud
biab.beta.leapdna.mckinsey.cloud
git.spike.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
alpha.jamming.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
xdg.mckinsey.cloud
spike.mckinsey.cloud
git.btcmp-team1.mckinsey.cloud
prime.spike.mckinsey.cloud
data.alpha.sandbox.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
github.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
strongbox.security.sandbox.mckinsey.cloud
gitlab.spike.mckinsey.cloud
site.alpha.btcmp-team5.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
demo.alpha.btcmp-team1.mckinsey.cloud
sample-mvp.alpha.sandbox.mckinsey.cloud
biab.alpha.leapdna.mckinsey.cloud
github.mckinsey.cloud
dna01.test.use1.aws.platform.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
app1.beta.btcmp-team3.mckinsey.cloud
app1.alpha.btcmp-team1.mckinsey.cloud
git.btcmp-team1.mckinsey.cloud
*.mvp03.stg.azr.nvt.mckinsey.cloud
xdg-github.mckinsey.cloud
snoodle.alpha.btcmp-team1.mckinsey.cloud
mvp02.prod.euc1.aws.mckinsey.cloud
*.mvp03.prod.azr.nvt.mckinsey.cloud
cntas.test.use1.aws.platform.mckinsey.cloud
sample2-application2.alpha.sandbox.mckinsey.cloud
data.alpha.sandbox.mckinsey.cloud
lending.alpha.leapdna.mckinsey.cloud
sample-application1.alpha.sandbox.mckinsey.cloud
jmanders-kubeadm.test.nvt.mckinsey.cloud
strongbox.security.shiftleft-demo.mckinsey.cloud
git.btcmp-team1.mckinsey.cloud
git.btcmp-team1.mckinsey.cloud
strivedi.test.nvt.mckinsey.cloud
*.mvp03.prod.azr.nvt.mckinsey.cloud
snoodle.alpha.btcmp-team3.mckinsey.cloud
*.nvt.mckinsey.cloud
sample-application2.alpha.sandbox.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
confluence.mckinsey.cloud
*.mvp03.stg.azr.nvt.mckinsey.cloud
shiftleft.mckinsey.digital
*.alpha.sandbox.mckinsey.cloud
snoodle.alpha.btcmp-team4.mckinsey.cloud
*.alpha.sandbox.mckinsey.cloud
test-cert.dev.azr.nvt.mckinsey.cloud
*.mckube.test.nvt.mckinsey.cloud
git.team1.btcmp.mckinsey.cloud
jskeates-kubeadm.test.nvt.mckinsey.cloud
hub02.prod.use1.aws.mckinsey.cloud
demo.beta.leapdna.mckinsey.cloud
nvt.mckinsey.cloud
dna01.test.use1.aws.platform.mckinsey.cloud
git.sandbox.mckinsey.cloud
dna02.prod.euc1.aws.platform.mckinsey.cloud
datalake-app.prod.sandbox.mckinsey.cloud
gitlab.sandbox.mckinsey.cloud
prime.spike.mckinsey.cloud
dmytro-tmp.test.nvt.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
sample-app.alpha.jamming.mckinsey.cloud
git.btcmp-team1.mckinsey.cloud
git.spike.mckinsey.cloud
strivedi-kubeadm.test.nvt.mckinsey.cloud
dna01.prod.use1.aws.platform.mckinsey.cloud
xdg-github.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
*.jskeates-kubeadm.test.nvt.mckinsey.cloud
app1.alpha.btcmp-team5.mckinsey.cloud
showcase.beta.shiftleft-demo.mckinsey.cloud
showcase.alpha.shiftleft-demo.mckinsey.cloud
mbaharn1.test.nvt.mckinsey.cloud
app1.beta.btcmp-team2.mckinsey.cloud
datalake-app.prod.sandbox.mckinsey.cloud
app1.beta.btcmp-team5.mckinsey.cloud
sample-application1.alpha.btcmp-team1.mckinsey.cloud
test.alpha.btcmp-team1.mckinsey.cloud
app1.beta.btcmp-team4.mckinsey.cloud
prime.spike.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
sample-application2.beta.sandbox.mckinsey.cloud
*.mvp03.stg.azr.nvt.mckinsey.cloud
dmytro.test.nvt.mckinsey.cloud
mbaharn.test.nvt.mckinsey.cloud
git.btcmp-team5.mckinsey.cloud
gitlab-01.spike.mckinsey.cloud
alpha.btcmp-team1.mckinsey.cloud

Certificate

The complete raw certificate details for mvp01.stg.shared.use1.aws.mckinsey.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIQB+rje5GgLP8HmhEaqXuAlDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMDMwMDAwMDBaFw0yNDAxMDEy
MzU5NTlaMDMxMTAvBgNVBAMTKG12cDAxLnN0Zy5zaGFyZWQudXNlMS5hd3MubWNr
aW5zZXkuY2xvdWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHeuq
4edW2nlrRaLSaSb5GLY+PBg+iHZQjrzDUgvIF9LRio6KCOOoeurucvVv7ee43cua
AI4lXEmWUAEPYaVte9Ay62L8ZP2g+NDOOCUFIfnxP8LDNT3DijcFviGuW+c57tr4
lKt4pQxEtqEfVFMBZapxa1iQ+1pKwNBYo5/qHNg2lP7Uv+7s3f3gwbfpJXH5qrkg
OViyvxaU2+JlfWSwbJM5xWXRlCPv7Rb/iPviRYDJpqBn7gE8LrZqWxwVa4uip4Fa
hBq3ZIP54wz6qB3i2UWjj7QIRIVWOLhl9ti2HgT8iOxEhYNFdvtuJsj6QDCiHu78
jxwL/NawrV+EU4UZAgMBAAGjggHCMIIBvjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8
o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUykBxaCbiLFHck0QYk/1s19m0xUowXwYDVR0R
BFgwVoIobXZwMDEuc3RnLnNoYXJlZC51c2UxLmF3cy5tY2tpbnNleS5jbG91ZIIq
Ki5tdnAwMS5zdGcuc2hhcmVkLnVzZTEuYXdzLm1ja2luc2V5LmNsb3VkMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0f
BDYwNDAyoDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh
MWItMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G
CCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYI
KwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQBk05RjxobQJ66J9O+VfOmoPim2JFVhTuwNF+TShTOq2MPwIWxd
r6txWXWmBkhJjS5WTpRV7MwLLsApdhVl+C3VsA7uPZlctDc9dLZPEe3d3miIGsYa
9acepfbyNGbmioPhNTx2dx96CJVhLVGzfZLePrLmoxZ2MFHV5HWdQ7oQ5Lo5kFW9
k3ZgKyDl3ByJyT7wGxzeXrW6OXIC6wmH2gwnfaosqyMOJaHh46mvwylu5/XPz3mr
w9HtMaMZKutNKxWtSowTedChB7+0/FXzflLG4ksEH6/3hodSsNCQpY92H8Pp0sg8
715+buSHTlTzDz3bP8J0wwWF7NxUXo2Roi9M
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h3rquHnVtp5a0Wi0mkm
+Ri2PjwYPoh2UI68w1ILyBfS0YqOigjjqHrq7nL1b+3nuN3LmgCOJVxJllABD2Gl
bXvQMuti/GT9oPjQzjglBSH58T/CwzU9w4o3Bb4hrlvnOe7a+JSreKUMRLahH1RT
AWWqcWtYkPtaSsDQWKOf6hzYNpT+1L/u7N394MG36SVx+aq5IDlYsr8WlNviZX1k
sGyTOcVl0ZQj7+0W/4j74kWAyaagZ+4BPC62alscFWuLoqeBWoQat2SD+eMM+qgd
4tlFo4+0CESFVji4ZfbYth4E/IjsRIWDRXb7bibI+kAwoh7u/I8cC/zWsK1fhFOF
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10524207332504546002928675399208239252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mvp01.stg.shared.use1.aws.mckinsey.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26524798428904490643828522736415830969173466234652221962414729006221759025639956056829006124619131497272067784004521002198399225442209496124797915217853631120582492664588235604596516532619446985752813253303193034331516124387757771247345765005666348298917566689034866777195812824535979658243686937353659458050343441817087834973037807901739713599342007667521584532329233184748561248855223831665088820322967268687616964321386634085064915706576947783663741623167939884571614423846445368536215717326601405163189610356278258370481753411391249136368933135115396802906999098485631013411720895195174292198487149212780897469721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca40716826e22c51dc93441893fd6cd7d9b4c54a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mvp01.stg.shared.use1.aws.mckinsey.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mvp01.stg.shared.use1.aws.mckinsey.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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