gillibrand-main.edge.bluestate.digital
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:ff:9d:7a:f4:77:a9:f9:a1:c5:fc:83:0e:b7:f4:12 was issued on by Amazon.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gillibrand-main.edge.bluestate.digital
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:ff:9d:7a:f4:77:a9:f9:a1:c5:fc:83:0e:b7:f4:12Serial Number (int): 19936421719717810572208539353382122514
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8b:5e:7d:3f:d7:0f:2c:4b:99:e4:09:0e:77:2e:b7:d2:93:22:a2:e0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): e7:ec:8e:8b:ad:b8:18:6b:ca:c3:c3:52:c1:db:c9:d7:06:c3:2c:2b
Fingerprint (sha256): 84:83:b2:b3:91:43:14:35:b0:f2:87:cb:a8:cb:2b:2c:9a:e2:7c:8e:56:0c:f7:64:35:6c:81:7d:f4:80:4d:cd
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate gillibrand-main.edge.bluestate.digital
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gillibrand-main.edge.bluestate.digital
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gillibrand-main.edge.bluestate.digital
secure.kirstengillibrand.com
main-gillibrand.cp.bsd.net
main-gillibrand.bsd.net
gillibrand.bsd.net
gillibrand.bluestatedigital.com
gillibrand.api.bsd.net
main-gillibrand.api.bsd.net
gillibrand.cp.bsd.net
secure.kirstengillibrand.com
main-gillibrand.cp.bsd.net
main-gillibrand.bsd.net
gillibrand.bsd.net
gillibrand.bluestatedigital.com
gillibrand.api.bsd.net
main-gillibrand.api.bsd.net
gillibrand.cp.bsd.net
Other certificates including the domain name bluestate.digital
(limited to 100 certificates)
rockefeller-context.edge.bluestate.digital
biss-main.edge.bluestate.digital
dccc-stephaniemurphy.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
glsen-southernnevada.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
lkitchen-sandbox.edge.bluestate.digital
ymcala-santaclarita.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
winpac-main.edge.bluestate.digital
precisiondemo-main.edge.bluestate.digital
mrosata-oa.int.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
test4-test4.edge.bluestate.digital
warren-gusn.edge.bluestate.digital
freemarry-georgia.edge.bluestate.digital
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
seiumaster-fightfor15childcare.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
seodemo-main.edge.bluestate.digital
glsen-downeastmaine.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
*.esse-macros-demo-project-docker.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
glsen-austin.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
civicnation-bettermakeroom.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
stream-api-int.bluestate.digital
civicnation-allinchallenge.edge.bluestate.digital
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
fairness-floridadecides.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
nwica-sandbox.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
client-database-api-int.bluestate.digital
lonelywhale-main.edge.bluestate.digital
glsen-connecticut.edge.bluestate.digital
porter-main.edge.bluestate.digital
searchlondon-main.edge.bluestate.digital
glsen-columbus.edge.bluestate.digital
wagr-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
glsen-colliercounty.edge.bluestate.digital
freemarry-wyomingunites.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
hubproject-peoplegreater.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
test4-branch.edge.bluestate.digital
glsen-dallasglsen.edge.bluestate.digital
seiumaster-1199ne.edge.bluestate.digital
autoprov-api-int.bluestate.digital
papac-main.edge.bluestate.digital
nrdclive-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
framework-int.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
googlemiyagi-afen.edge.bluestate.digital
gwindham-main.edge.bluestate.digital
biss-main.edge.bluestate.digital
dccc-stephaniemurphy.edge.bluestate.digital
deeds-main.edge.bluestate.digital
battletx-main.edge.bluestate.digital
inslee-main.edge.bluestate.digital
glsen-southernnevada.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
holdthehouse-main.edge.bluestate.digital
pocan-main.edge.bluestate.digital
lkitchen-sandbox.edge.bluestate.digital
ymcala-santaclarita.edge.bluestate.digital
jimhimes-main.edge.bluestate.digital
herding-main.edge.bluestate.digital
neademo-main.edge.bluestate.digital
haleystevens-main.edge.bluestate.digital
ctdems-main.edge.bluestate.digital
uchicago-main.edge.bluestate.digital
timesup-main.edge.bluestate.digital
forwardmaj-main.edge.bluestate.digital
stageplays-main.edge.bluestate.digital
madems-main.edge.bluestate.digital
commonwealth-main.edge.bluestate.digital
winpac-main.edge.bluestate.digital
precisiondemo-main.edge.bluestate.digital
mrosata-oa.int.edge.bluestate.digital
petersmi-main.edge.bluestate.digital
lebua-main.edge.bluestate.digital
northam-main.edge.bluestate.digital
test4-test4.edge.bluestate.digital
warren-gusn.edge.bluestate.digital
freemarry-georgia.edge.bluestate.digital
iowadems-main.edge.bluestate.digital
ccoons-main.edge.bluestate.digital
seiumaster-fightfor15childcare.edge.bluestate.digital
tonko-main.edge.bluestate.digital
chop-main.edge.bluestate.digital
mccready-main.edge.bluestate.digital
seodemo-main.edge.bluestate.digital
glsen-downeastmaine.edge.bluestate.digital
venturefund-main.edge.bluestate.digital
tnchk-main.edge.bluestate.digital
manning-main.edge.bluestate.digital
*.esse-macros-demo-project-docker.bluestate.digital
seiumaster-fightfor15.edge.bluestate.digital
horsford-main.edge.bluestate.digital
ditchfund-main.edge.bluestate.digital
betsy-main.edge.bluestate.digital
tomwolf-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
bsykes-main.edge.bluestate.digital
latinovictory-main.edge.bluestate.digital
glsen-austin.edge.bluestate.digital
google-main.edge.bluestate.digital
tulsi-main.edge.bluestate.digital
civicnation-bettermakeroom.edge.bluestate.digital
repgovernors-main.edge.bluestate.digital
stream-api-int.bluestate.digital
civicnation-allinchallenge.edge.bluestate.digital
brownley-main.edge.bluestate.digital
tuc-main.edge.bluestate.digital
bustos-main.edge.bluestate.digital
fairness-floridadecides.edge.bluestate.digital
vsinitiative-main.edge.bluestate.digital
guycaron-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
nwica-sandbox.edge.bluestate.digital
ourbodies-main.edge.bluestate.digital
economie-main.edge.bluestate.digital
mackler-main.edge.bluestate.digital
equalpac-main.edge.bluestate.digital
client-database-api-int.bluestate.digital
lonelywhale-main.edge.bluestate.digital
glsen-connecticut.edge.bluestate.digital
porter-main.edge.bluestate.digital
searchlondon-main.edge.bluestate.digital
glsen-columbus.edge.bluestate.digital
wagr-main.edge.bluestate.digital
businessfwd-main.edge.bluestate.digital
bsddemo2014-main.edge.bluestate.digital
crfb-main.edge.bluestate.digital
glsen-colliercounty.edge.bluestate.digital
freemarry-wyomingunites.edge.bluestate.digital
opportunity-main.edge.bluestate.digital
hubproject-peoplegreater.edge.bluestate.digital
*.bluestatedigital.com
court13-main.edge.bluestate.digital
test4-branch.edge.bluestate.digital
glsen-dallasglsen.edge.bluestate.digital
seiumaster-1199ne.edge.bluestate.digital
autoprov-api-int.bluestate.digital
papac-main.edge.bluestate.digital
nrdclive-main.edge.bluestate.digital
berimdemo-main.edge.bluestate.digital
ffaa-main.edge.bluestate.digital
framework-int.bluestate.digital
sinema-main.edge.bluestate.digital
warnerforva-main.edge.bluestate.digital
googlemiyagi-afen.edge.bluestate.digital
gwindham-main.edge.bluestate.digital
Certificate
The complete raw certificate details for gillibrand-main.edge.bluestate.digital in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIQDv+devR3qfmhxfyDDrf0EjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MjkwMDAwMDBaFw0yMDA5Mjkx MjAwMDBaMDExLzAtBgNVBAMTJmdpbGxpYnJhbmQtbWFpbi5lZGdlLmJsdWVzdGF0 ZS5kaWdpdGFsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspHvcUqm FY/qapACpQMGB2AtbX7JQIbuQc5FTf9xqOy6DEcvHRs4B8+IETWT+FKmgDSHu/tt fa9ry4YlGUt+JaPR9EiBQhcvyot3hFLhC3XodsLBqiIO6KOA73fGdKC+dkUkgBkl yoB8TKyIR4PqOj4wS1AtHf7tdmBaanGFdC32wKMGM/arsDhRUz3MlutT2kDXFNVr h5OswSpmK87MjWdafA2Bz9q3RV3wA8OnMmOo61his4lY/IhNzqYJvp+OCBB0kNdB 4JtJa8g3ZcFflKMpb2OPryxF69K5INFmTqI7AFSJEWN43mgyHu6AZ7va8DYoGZvB ENHQ6MgAC5THLwIDAQABo4IDazCCA2cwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOU ByeWdFv5PdAwHQYDVR0OBBYEFItefT/XDyxLmeQJDncut9KTIqLgMIIBBwYDVR0R BIH/MIH8giZnaWxsaWJyYW5kLW1haW4uZWRnZS5ibHVlc3RhdGUuZGlnaXRhbIIc c2VjdXJlLmtpcnN0ZW5naWxsaWJyYW5kLmNvbYIabWFpbi1naWxsaWJyYW5kLmNw LmJzZC5uZXSCF21haW4tZ2lsbGlicmFuZC5ic2QubmV0ghJnaWxsaWJyYW5kLmJz ZC5uZXSCH2dpbGxpYnJhbmQuYmx1ZXN0YXRlZGlnaXRhbC5jb22CFmdpbGxpYnJh bmQuYXBpLmJzZC5uZXSCG21haW4tZ2lsbGlicmFuZC5hcGkuYnNkLm5ldIIVZ2ls bGlicmFuZC5jcC5ic2QubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0 dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0 cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB /wQCMAAwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwCkuQmQtBhYFIe7E6LMZ3AK PDWYBPkb37jjd80OyA3cEAAAAWzfDbfdAAAEAwBIMEYCIQCpMjaouRbmcDiAsyAF JMMFP0HwxRrYEAUhj11qbV34CAIhAJa1JfEusnAfvE6PXPXoxAczxUoUe5X2e9Pr /m9ceRH2AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFs3w24 aAAABAMARzBFAiEAo2CekFrHjiQJaP0bNO6Af4v5uk6cr08sfv9oXWZxTnsCIAKO VLgy+EqOVKPeuy9k57VkZv+OjlssPJmcdeYrgfRFMA0GCSqGSIb3DQEBCwUAA4IB AQAZkYcCuLoKHraPlmyLRgnECvH8jy/hjMMnNTM9SvD7XlCcYQtcKo2UfGcg3O+A 5TwKxB2Tpoe4IKX8GmdVeJKNiN6NsNf0SSdTE/0rNe2M1R6UoLbNFnPZv3M9clwK /R2LpEbW7HSC/ft2Z6J2i/uJi3nPTApe1OMIoYbGdAX/PWv38P3figw3jHzgX958 ez4kicxsxFa2KMSZVhxFkjZAPWr0GDFcGTzhfYxHFe+333BEuH9+TkvL6+X4p+hz 9/taXwv1HvjDVcexfgn0ibJ1yNyXgq+cB09AJ5DbykHV2us/LziweVz5WC1NqXPJ 1Jc+y4feO1q1QYyqKaWOL1+W -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspHvcUqmFY/qapACpQMG B2AtbX7JQIbuQc5FTf9xqOy6DEcvHRs4B8+IETWT+FKmgDSHu/ttfa9ry4YlGUt+ JaPR9EiBQhcvyot3hFLhC3XodsLBqiIO6KOA73fGdKC+dkUkgBklyoB8TKyIR4Pq Oj4wS1AtHf7tdmBaanGFdC32wKMGM/arsDhRUz3MlutT2kDXFNVrh5OswSpmK87M jWdafA2Bz9q3RV3wA8OnMmOo61his4lY/IhNzqYJvp+OCBB0kNdB4JtJa8g3ZcFf lKMpb2OPryxF69K5INFmTqI7AFSJEWN43mgyHu6AZ7va8DYoGZvBENHQ6MgAC5TH LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19936421719717810572208539353382122514 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gillibrand-main.edge.bluestate.digital' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22542381673567130736133070985314023502362999549517586849554151916305350030084590450684600960564729383317701021987347038188464106872614600282632698395988618593371706335278936558818605041741107261796070372195756232749364511619432855448167422018520834778940489880128485023769114934911994197387582258735539503842405635070146131645293935824758622884697953502506317916731582794766059663888347102270048502604229799466625981649170155346315291036825689961424452591922769888982214478439738239182797335938378186721255217744503216094267990418456344890268440252816009038884450459677169139761348535556601618685553829959662554105647 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8b5e7d3fd70f2c4b99e4090e772eb7d29322a2e0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillibrand-main.edge.bluestate.digital' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kirstengillibrand.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-gillibrand.cp.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-gillibrand.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillibrand.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillibrand.bluestatedigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillibrand.api.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-gillibrand.api.bsd.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gillibrand.cp.bsd.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cdf0db7dd0000040300483046022100a93236a8b916e6703880b3200524c3053f41f0c51ad81005218f5d6a6d5df80802210096b525f12eb2701fbc4e8f5cf5e8c40733c54a147b95f67bd3ebfe6f5c7911f60076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cdf0db8680000040300473045022100a3609e905ac78e240968fd1b34ee807f8bf9ba4e9caf4f2c7eff685d66714e7b0220028e54b832f84a8e54a3debb2f64e7b56466ff8e8e5b2c3c999c75e62b81f445 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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