wallet.subsplash.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:08:52:33:80:3a:a6:1c:9d:dd:b4:68:a8:48:13:25 was issued on by Amazon.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=wallet.subsplash.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:08:52:33:80:3a:a6:1c:9d:dd:b4:68:a8:48:13:25Serial Number (int): 5360117595916713172489707466380546853
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 2d:93:4d:58:38:75:99:a1:79:7b:b9:ec:c6:4f:07:04:7f:71:81:1b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 42:d7:b0:63:97:63:45:cc:b7:88:cb:44:c5:72:de:fe:26:dd:95:e4
Fingerprint (sha256): 62:d3:30:c3:b9:62:35:9b:7b:a7:74:2c:18:04:fe:5e:d3:d4:bc:5c:10:1f:95:df:3c:76:0b:5e:ab:a5:ae:cb
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate wallet.subsplash.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wallet.subsplash.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wallet.subsplash.com
*.proddr.giving.subsplash.net
proddr.giving.subsplash.net
*.giving.subsplash.net
giving.subsplash.net
*.proddr.giving.subsplash.net
proddr.giving.subsplash.net
*.giving.subsplash.net
giving.subsplash.net
Other certificates including the domain name subsplash.com
(limited to 100 certificates)
*.subsplash.com
dashboard.dev.subsplash.com
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
*.subsplash.com
*.static.subsplash.com
cg-status.isr.co.jp
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
subsplash.com
statuspage.io
casb.status.symantec.com
statuspage.io
statuspage.io
casb.status.symantec.com
subsplash.com
statuspage.io
cg-status.isr.co.jp
*.ci.subsplash.com
statuspage.io
cg-status.isr.co.jp
statuspage.io
hello.subsplash.com
hello.subsplash.com
secure.subsplash.com
*.cdn.subsplash.com
statuspage.io
www.subsplash.com
secure.subsplash.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.dev.subsplash.com
statuspage.io
cg-status.isr.co.jp
www.subsplash.com
statuspage.io
*.dev.subsplash.com
*.subsplash.com
*.stage.subsplash.com
statuspage.io
wallet.subsplash.com
www.subsplash.com
secure.subsplash.com
hello.subsplash.com
www.subsplash.com
cg-status.isr.co.jp
*.subsplash.com
cg-status.isr.co.jp
statuspage.io
www.subsplash.com
www.subsplash.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
wallet.subsplash.com
*.subsplash.com
secure.subsplash.com
statuspage.io
statuspage.io
support.subsplash.com
cg-status.isr.co.jp
subsplash.com
cg-status.isr.co.jp
secure.subsplash.com
subsplash.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
cg-status.isr.co.jp
hello.subsplash.com
www.subsplash.com
*.wallet.subsplash.com
statuspage.io
wallet.subsplash.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
support.subsplash.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
pi.subsplash.com
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
*.subsplash.com
*.thechurchapp.org
subsplash.com
support.subsplash.com
statuspage.io
dashboard.dev.subsplash.com
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
*.subsplash.com
*.static.subsplash.com
cg-status.isr.co.jp
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
subsplash.com
statuspage.io
casb.status.symantec.com
statuspage.io
statuspage.io
casb.status.symantec.com
subsplash.com
statuspage.io
cg-status.isr.co.jp
*.ci.subsplash.com
statuspage.io
cg-status.isr.co.jp
statuspage.io
hello.subsplash.com
hello.subsplash.com
secure.subsplash.com
*.cdn.subsplash.com
statuspage.io
www.subsplash.com
secure.subsplash.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.dev.subsplash.com
statuspage.io
cg-status.isr.co.jp
www.subsplash.com
statuspage.io
*.dev.subsplash.com
*.subsplash.com
*.stage.subsplash.com
statuspage.io
wallet.subsplash.com
www.subsplash.com
secure.subsplash.com
hello.subsplash.com
www.subsplash.com
cg-status.isr.co.jp
*.subsplash.com
cg-status.isr.co.jp
statuspage.io
www.subsplash.com
www.subsplash.com
cg-status.isr.co.jp
statuspage.io
statuspage.io
statuspage.io
wallet.subsplash.com
*.subsplash.com
secure.subsplash.com
statuspage.io
statuspage.io
support.subsplash.com
cg-status.isr.co.jp
subsplash.com
cg-status.isr.co.jp
secure.subsplash.com
subsplash.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
cg-status.isr.co.jp
hello.subsplash.com
www.subsplash.com
*.wallet.subsplash.com
statuspage.io
wallet.subsplash.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
support.subsplash.com
statuspage.io
statuspage.io
cg-status.isr.co.jp
pi.subsplash.com
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
statuspage.io
cg-status.isr.co.jp
*.subsplash.com
*.thechurchapp.org
subsplash.com
support.subsplash.com
statuspage.io
Certificate
The complete raw certificate details for wallet.subsplash.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIQBAhSM4A6phyd3bRoqEgTJTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MTQwMDAwMDBaFw0xOTEwMTQx MjAwMDBaMB8xHTAbBgNVBAMTFHdhbGxldC5zdWJzcGxhc2guY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ekQ/l4msr1K3OeWj3eC2HYsLXkUvLhy aDDbrAGpLhr0Irjv7/R177MrjNRNRhlii/LFYlgkNrL0Bpt9kU/HTezGt0l19ZJM WFPo5BsEBAtXreetvGXFC9m5Yciy6BzQJrV0Ph23yxxPK5PdLpQW3oP/iyUxmVKm IU2HGTISwEhwpkGGRZDPv5ztre0jk2mb9S9vHXZVcb8xn4m9kVf371XfeiDanKYD ikJf8/J2v14EkX10W8fDeBLo6/RcIkb+zM6e0pN8ZVpqsoa2DbROUUZDiUdfM79K M/yaDPkNhs2UnQUBbPtjo9hoKkf9BcfaY4ciLpZKWTjJZE6LE2oFLQIDAQABo4IC 7DCCAugwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE FC2TTVg4dZmheXu57MZPBwR/cYEbMIGLBgNVHREEgYMwgYCCFHdhbGxldC5zdWJz cGxhc2guY29tgh0qLnByb2Rkci5naXZpbmcuc3Vic3BsYXNoLm5ldIIbcHJvZGRy LmdpdmluZy5zdWJzcGxhc2gubmV0ghYqLmdpdmluZy5zdWJzcGxhc2gubmV0ghRn aXZpbmcuc3Vic3BsYXNoLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCG SAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMB Af8EAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAu9nfvB+KcbWTlCOXqpJ7 RzhXlQqrUugakJZkNo4e0YUAAAFl2Rp3mAAABAMARjBEAiBPLA69C2Yp2pQyBczD PWqSveCN/r/QSymC0CaG4rZIiQIgVCFXa/U/epYkTzqqyS748iZVvBW/DJ4m9sfp R/FtfCIAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWXZGneT AAAEAwBHMEUCIQCUsJ8ATWFaMSUUGh9cPjEkMamvKpxmpWw6BSp/UoUT4gIgFJZA CJdY27c6tgm24AvML5rvJyasKy5RaKsNMCBcV+8wDQYJKoZIhvcNAQELBQADggEB AIs9cYSxq1NqnLXRTiGWIyAg/aA+xMnbG6DOWmgUWnE43Urcins04MYumfmGTSuO 96nvfcVw/DKyZmEGSoFM1SsrPkqFkQvgNjkZdFw9pPODTCcUyT1kVKGhDjc1xXzC JNZMjxHWZ7fj3Ad7F0f4hZnQyJ1PjifoYlWDCs4iachcS1MzLAfHJ7ZHxQyjE2qd qBTyJxg68fOpp0QjeAjJ1L0xbffLdlRYzWRxvz45/oLo5lk9Fg96y1DMldZ+Pb6S muOsMq9V3Aud2senMbcX6BmaXjsDpC7Uby/WQqvRdE5T+xpBPYzoljmYZ4pV7Y/z lyz9G6GONZUjf0zBhbWB80Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ekQ/l4msr1K3OeWj3eC 2HYsLXkUvLhyaDDbrAGpLhr0Irjv7/R177MrjNRNRhlii/LFYlgkNrL0Bpt9kU/H TezGt0l19ZJMWFPo5BsEBAtXreetvGXFC9m5Yciy6BzQJrV0Ph23yxxPK5PdLpQW 3oP/iyUxmVKmIU2HGTISwEhwpkGGRZDPv5ztre0jk2mb9S9vHXZVcb8xn4m9kVf3 71XfeiDanKYDikJf8/J2v14EkX10W8fDeBLo6/RcIkb+zM6e0pN8ZVpqsoa2DbRO UUZDiUdfM79KM/yaDPkNhs2UnQUBbPtjo9hoKkf9BcfaY4ciLpZKWTjJZE6LE2oF LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5360117595916713172489707466380546853 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wallet.subsplash.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29528454373206789835492541085645927134415605997885168874563284637475415243456827946640352374106218631411156145367625552785781349937532118345050304615935579686108016912101583526456736828863373764418278558768625542581114849624235647487119468161061093047878998908783733478798941318550690529396223764898877014359948157991381047611327968012313947557692300183560603458669576992819845145255208225660357105233175201989402587739995885024317705375654125832289089187800456805821829720788016038397799309357895081061517704864261201497410674774615227104946451841199958425759000810377420034271026411412837904644689013495205814994221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d934d58387599a1797bb9ecc64f07047f71811b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallet.subsplash.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proddr.giving.subsplash.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proddr.giving.subsplash.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giving.subsplash.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.subsplash.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000165d91a7798000004030046304402204f2c0ebd0b6629da943205ccc33d6a92bde08dfebfd04b2982d02686e2b6488902205421576bf53f7a96244f3aaac92ef8f22655bc15bf0c9e26f6c7e947f16d7c220076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165d91a7793000004030047304502210094b09f004d615a3125141a1f5c3e312431a9af2a9c66a56c3a052a7f528513e20220149640089758dbb73ab609b6e00bcc2f9aef2726ac2b2e5168ab0d30205c57ef . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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