img.otz.de
Issued by Amazon
About this certificate
This digital certificate with serial number 01:5f:eb:56:a0:f1:87:4a:95:08:bb:2a:0a:bc:7b:f8 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=img.otz.de
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:5f:eb:56:a0:f1:87:4a:95:08:bb:2a:0a:bc:7b:f8Serial Number (int): 1827269427034150456112489444776115192
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 06:c2:98:32:d3:c4:81:6d:1a:46:90:6a:e8:4e:a2:f8:5c:9f:94:6e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 03:24:0e:73:c9:47:f3:40:ba:af:78:30:68:2d:41:4a:65:bd:8b:b8
Fingerprint (sha256): 80:d8:89:5e:47:aa:2b:b0:89:86:72:d7:68:fa:20:30:e7:1c:92:50:e0:73:9a:e6:8a:23:0b:2f:0d:87:c3:88
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate img.otz.de
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for img.otz.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
img.otz.de
img.thueringer-allgemeine.de
img.tlz.de
img.thueringen24.de
img.thueringer-allgemeine.de
img.tlz.de
img.thueringen24.de
Other certificates including the domain name otz.de
(limited to 100 certificates)
sso.zgt.de
*.otz.de
origin-interaktiv.fnki.de
reader.otz.de
trauer.otz.de
www.funkedigital.de
trauer.otz.de
*.funkemedien.de
sso.zgt.de
dev3.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
trauer.otz.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
*.fabo-live.funkemedien.de
voting.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
trauer.otz.de
www.funkedigital.de
emag.otz.de
trauer.otz.de
trauer.otz.de
www.funkedigital.de
dev1.aws.funkedigital.de
*.thueringer-allgemeine.de
reader.otz.de
otz.de
origin-interaktiv.fnki.de
*.funkemedien.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
*.otz.de
www.funkedigital.de
trauer.otz.de
*.waz.de
anzeigen.funkemedien.de
sso.zgt.de
sso.zgt.de
anzeigenbuchung-in-thueringen.de
www.funkedigital.de
*.fabo-live.funkemedien.de
*.funkemedien.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
*.funkemedien.de
emag.otz.de
*.thueringer-allgemeine.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
trauer.otz.de
dev2.aws.funkedigital.de
*.waz.de
reader.otz.de
img.otz.de
uat.aws.bildderfrau.de
www.funkedigital.de
funkedigital.de
www.funkedigital.de
sso.zgt.de
interaktiv.derwesten.de
anzeigen.meinanzeiger.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
dev1.aws.funkedigital.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.otz.de
*.otz.de
trauer.otz.de
www.funkedigital.de
www.funkedigital.de
anzeigen.funkemedien.de
anzeigen.otz.de
www.funkedigital.de
img.otz.de
sso.zgt.de
trauer.otz.de
emag.otz.de
*.fabo-live.funkemedien.de
*.funkemedien.de
funkedigital.de
funkedigital.de
*.waz.de
funkedigital.de
anmeldung.otz.de
funkedigital.de
*.waz.de
emag.otz.de
www.funkedigital.de
*.otz.de
origin-interaktiv.fnki.de
reader.otz.de
trauer.otz.de
www.funkedigital.de
trauer.otz.de
*.funkemedien.de
sso.zgt.de
dev3.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
trauer.otz.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
*.fabo-live.funkemedien.de
voting.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
trauer.otz.de
www.funkedigital.de
emag.otz.de
trauer.otz.de
trauer.otz.de
www.funkedigital.de
dev1.aws.funkedigital.de
*.thueringer-allgemeine.de
reader.otz.de
otz.de
origin-interaktiv.fnki.de
*.funkemedien.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
*.otz.de
www.funkedigital.de
trauer.otz.de
*.waz.de
anzeigen.funkemedien.de
sso.zgt.de
sso.zgt.de
anzeigenbuchung-in-thueringen.de
www.funkedigital.de
*.fabo-live.funkemedien.de
*.funkemedien.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
*.funkemedien.de
emag.otz.de
*.thueringer-allgemeine.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
trauer.otz.de
dev2.aws.funkedigital.de
*.waz.de
reader.otz.de
img.otz.de
uat.aws.bildderfrau.de
www.funkedigital.de
funkedigital.de
www.funkedigital.de
sso.zgt.de
interaktiv.derwesten.de
anzeigen.meinanzeiger.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
dev1.aws.funkedigital.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.otz.de
*.otz.de
trauer.otz.de
www.funkedigital.de
www.funkedigital.de
anzeigen.funkemedien.de
anzeigen.otz.de
www.funkedigital.de
img.otz.de
sso.zgt.de
trauer.otz.de
emag.otz.de
*.fabo-live.funkemedien.de
*.funkemedien.de
funkedigital.de
funkedigital.de
*.waz.de
funkedigital.de
anmeldung.otz.de
funkedigital.de
*.waz.de
emag.otz.de
www.funkedigital.de
Certificate
The complete raw certificate details for img.otz.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEqTCCA5GgAwIBAgIQAV/rVqDxh0qVCLsqCrx7+DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMDQwMDAwMDBaFw0yMTA0MDQx MjAwMDBaMBUxEzARBgNVBAMTCmltZy5vdHouZGUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWhVwrxaTH5lm+h7laljK/K8jie2qyicjTCzV5uuAF/b1D HvPoeszVbm0ySCUCUe6mEg8bgnxuP66w/bIdyvv74ocFhK4ntnSdTdvHD0PrPFip 72qrevZuMJaMkyfkk1WBYRNwrs1BD7GLydLWKIZortJEGSooBqUhnMYb5AClCgYi 3x7O+1IC5KhShLkpXDy5WxOrIoet92eqriXuhxjRwf5OSYBm1tFqopNb7vZJUT0H CegDaRfxpwgqdkTZlCm8Il8gTQLLBPIv+kRZWUcFTSWxXTk5hWSuAQXUEVnTO+NE LNldvZVhibfClPLgre9GLNAAbM3z94jYwDzE5TG3AgMBAAGjggHCMIIBvjAfBgNV HSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUBsKYMtPEgW0a RpBq6E6i+FyflG4wVAYDVR0RBE0wS4IKaW1nLm90ei5kZYIcaW1nLnRodWVyaW5n ZXItYWxsZ2VtZWluZS5kZYIKaW1nLnRsei5kZYITaW1nLnRodWVyaW5nZW4yNC5k ZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3Qu Y29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEw dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1h em9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ+ayzcVwxgi5co9+3IwKZQ4Xy QY8SZyyvxjXHrDquzytYOTmoRI1/bKCRX8V1TqCwUD7aJuWHoBb7xCrkt2lrDpGT X0qvaqn8o8CZnh55MbjwV6Hbv1uT3OSXdlnu8ZOpHqNczWojqiTVPUryX/DOXLJD smgxUKWowaODyycxpeBdHKmAh9aTdAhG+ehzjQmEHh2zt5edDwJSb41DtXI3CCaW qRzAeNeR4AsJVDjLgts0JbGmVU9aE2yteoR/9TapLJ3SXEY7d7eQs4Wb/EVW06th j8/Q/IzAY/z7cwXVBsxF+hfsCoLxjrFH/0eBLM0YrMiUToYuU9TfZYQ249ee -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oVcK8Wkx+ZZvoe5WpYy vyvI4ntqsonI0ws1ebrgBf29Qx7z6HrM1W5tMkglAlHuphIPG4J8bj+usP2yHcr7 ++KHBYSuJ7Z0nU3bxw9D6zxYqe9qq3r2bjCWjJMn5JNVgWETcK7NQQ+xi8nS1iiG aK7SRBkqKAalIZzGG+QApQoGIt8ezvtSAuSoUoS5KVw8uVsTqyKHrfdnqq4l7ocY 0cH+TkmAZtbRaqKTW+72SVE9BwnoA2kX8acIKnZE2ZQpvCJfIE0CywTyL/pEWVlH BU0lsV05OYVkrgEF1BFZ0zvjRCzZXb2VYYm3wpTy4K3vRizQAGzN8/eI2MA8xOUx twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1827269427034150456112489444776115192 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'img.otz.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27080759550888727269644702049334834938632749676455751578536076807191143375115624207247967414728906008614484687133556988766343643391051250112548091563755379422463263780477477375706649972537521892765840608718541802108417757518247912819545891026939166079100180578371764768715529619391718289619289185308214341956115724918286266451146205052017071937607136079774834990264595578329312449438648911079467010351937877862247180653538623876866853656808574562673761725343579548340399430477162518895302577862652062589938994770116022147495746440353972884005127250496950204278202718264885824420817193050285344893687852164855722488247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 06c29832d3c4816d1a46906ae84ea2f85c9f946e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.otz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.thueringer-allgemeine.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.tlz.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.thueringen24.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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