*.app.bcbm.pt

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:b7:8e:7f:a7:92:f8:a6:f0:db:18:28:d6:ac:af:51 was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.app.bcbm.pt

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:b7:8e:7f:a7:92:f8:a6:f0:db:18:28:d6:ac:af:51
Serial Number (int): 19562272482102727561676576958962249553
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:11:1d:4f:4d:7b:eb:23:26:7a:20:87:db:15:32:02:ea:16:67:ab
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 17:b7:99:c3:10:fe:ad:b6:a0:f8:77:04:2a:dc:c4:60:06:b6:73:05
Fingerprint (sha256): 75:a8:f0:46:74:79:f7:16:9b:2a:df:aa:57:e5:3f:1e:0e:64:0e:62:84:ce:57:78:79:84:02:a6:7a:4e:1e:d3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.app.bcbm.pt

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.app.bcbm.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.app.bcbm.pt
boacamaboamesa.pt
*.aws.impresa.pt
*.blitz.pt
tribunaexpresso.pt
*.tribunaexpresso.pt
expresso.pt
*.expresso.pt
*.impresa.pt
*.sites.aws.impresa.pt
boacamaboamesa.expresso.pt
*.portal-informa.impresa.pt
bcbm.pt
*.boacamaboamesa.expresso.pt
*.postal.pt
*.leitor.expresso.pt
*.beta.bcbm.pt
blitz.pt
*.bcbm.pt
postal.pt
*.boacamaboamesa.pt

Other certificates including the domain name bcbm.pt

(limited to 100 certificates)
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
boacamaboamesa.pt
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
bcbm.pt
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.bcbm.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.averdade.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.averdade.qas.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.bcbm.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
boacamaboamesa.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com

Certificate

The complete raw certificate details for *.app.bcbm.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIQDreOf6eS+Kbw2xgo1qyvUTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAyMDIwMDAwMDBaFw0yMzAzMDQy
MzU5NTlaMBgxFjAUBgNVBAMMDSouYXBwLmJjYm0ucHQwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCaeUyarEaeF9BiV5RSpjSlI9PD9gQOTLUHwQIOiDrC
UbmPXyzOxtIYP3QZ2f6HuNwnMklY2i2hTPTSyJnCOWB/u0wm+FeEuGX33heRa1N9
pQ6JFzibSHQnW5dYg2Yh1U43c3vOa6KxViihCVn+CxR93cVAEglaJ63SiagzVIrE
/mLC+BGmOEYMBbVktp+At2frTF0MuwO3MvXDJ6XAvPVH+tHreEF29SOKZgMXN+jU
IjaSI01dfJWIlgmNFJ0aDvoKkJB8OX9Ww2F5jZcJWb+FJo5nifrcvceFmL+CYeWR
kwWn74VMTasUPETyIFUHYFVMr6rDsOIU7a5o7fYPtFS/AgMBAAGjggRUMIIEUDAf
BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUehEdT017
6yMmeiCH2xUyAuoWZ6swggGBBgNVHREEggF4MIIBdIINKi5hcHAuYmNibS5wdIIR
Ym9hY2FtYWJvYW1lc2EucHSCECouYXdzLmltcHJlc2EucHSCCiouYmxpdHoucHSC
EnRyaWJ1bmFleHByZXNzby5wdIIUKi50cmlidW5hZXhwcmVzc28ucHSCC2V4cHJl
c3NvLnB0gg0qLmV4cHJlc3NvLnB0ggwqLmltcHJlc2EucHSCFiouc2l0ZXMuYXdz
LmltcHJlc2EucHSCGmJvYWNhbWFib2FtZXNhLmV4cHJlc3NvLnB0ghsqLnBvcnRh
bC1pbmZvcm1hLmltcHJlc2EucHSCB2JjYm0ucHSCHCouYm9hY2FtYWJvYW1lc2Eu
ZXhwcmVzc28ucHSCCyoucG9zdGFsLnB0ghQqLmxlaXRvci5leHByZXNzby5wdIIO
Ki5iZXRhLmJjYm0ucHSCCGJsaXR6LnB0ggkqLmJjYm0ucHSCCXBvc3RhbC5wdIIT
Ki5ib2FjYW1hYm9hbWVzYS5wdDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj
YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAX8G
CisGAQQB1nkCBAIEggFvBIIBawFpAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zr
aeF3fW0GvW4AAAF+t9d7qAAABAMARzBFAiB+hyDuGGSUe2BzKRrN1bG8eScXpSW7
l71PGok0mvdtngIhANsp17snOpxV+byUOjMM+3yqha4wsfgaavl59qPmudA0AHYA
Nc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAF+t9d7wwAABAMARzBF
AiBO5frbXDK/5YKeEiPHS9X33/ltJmrOXUAnAwZJae7CSwIhAMchkwM4lYnh2PN/
uvBOpItVe5EMXuxwqcGuX0CJZXNAAHcAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH
3PADDnk2pZoAAAF+t9d75QAABAMASDBGAiEA2uJ66m0yb8lu+Omfzvwkiob/rjxp
Ig4zPy8tSZAvpScCIQCdqrujSs5oUsAKRqwW8qnUIdaDMfqnMTLvvSjJrhtsvTAN
BgkqhkiG9w0BAQsFAAOCAQEANHU7YyGHfezIZMA0kNn/XHdZK2FjyQouY7ygQ9A5
E2QtEnfMJowD/uZBdnVgoUs7YqyxFOV3mEVp5NDQaA5p78Ak9lHEiZ7HhlMvzTDi
Gys5uFW09p5u1NFgO8qjpsSoy1iw8pZAr704F1BE94eTL04Xzw3pBRFmOjBdAQK1
Xrx+QHj8LhiPnIkxSYvQvaxdMYh6XPcUQiVWPkPW5e+a6t0swCBBbbmM08cYAUuR
9SNlIDIo0cSvn+ytiGZd5tU1cwS7fSW+bpTpyn/yqARQE7fVuD1dA4IjAeXUm0x9
r2bGVO56VFYEv//USm+4tArPHxNNfUg5vymxzugZVeN/ow==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnlMmqxGnhfQYleUUqY0
pSPTw/YEDky1B8ECDog6wlG5j18szsbSGD90Gdn+h7jcJzJJWNotoUz00siZwjlg
f7tMJvhXhLhl994XkWtTfaUOiRc4m0h0J1uXWINmIdVON3N7zmuisVYooQlZ/gsU
fd3FQBIJWiet0omoM1SKxP5iwvgRpjhGDAW1ZLafgLdn60xdDLsDtzL1wyelwLz1
R/rR63hBdvUjimYDFzfo1CI2kiNNXXyViJYJjRSdGg76CpCQfDl/VsNheY2XCVm/
hSaOZ4n63L3HhZi/gmHlkZMFp++FTE2rFDxE8iBVB2BVTK+qw7DiFO2uaO32D7RU
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19562272482102727561676576958962249553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app.bcbm.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19500513846942852783068428596077727348684051930599769378988766670336246247817799031311101503532249711202751030894983107576445585694914535442431056627903649090578983124811759804237166752930159715395819519207309552235508950433966058053015101713782236415814029907276280072316749417162499522205786616942901282833751016743598560330583043307427002447826706464500412629438077278218866245152237517687860475607234679495729677941252222340500485124117395226906880284486323976791921275041325775624856943790910055825599811105123735777122574981223623729169390943149423973078535412653336651161570085565382790890612643058101374964927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a111d4f4d7beb23267a2087db153202ea1667ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (376 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunaexpresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal-informa.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postal.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0034753b6321877decc864c03490d9ff5c77592b6163c90a2e63bca043d03913642d1277cc268c03fee641767560a14b3b62acb114e577984569e4d0d0680e69efc024f651c4899ec786532fcd30e21b2b39b855b4f69e6ed4d1603bcaa3a6c4a8cb58b0f29640afbd38175044f787932f4e17cf0de90511663a305d0102b55ebc7e4078fc2e188f9c8931498bd0bdac5d31887a5cf7144225563e43d6e5ef9aeadd2cc020416db98cd3c718014b91f52365203228d1c4af9fecad88665de6d5357304bb7d25be6e94e9ca7ff2a8045013b7d5b83d5d03822301e5d49b4c7daf66c654ee7a545604bfffd44a6fb8b40acf1f134d7d4839bf29b1cee81955e37fa3