ssltest1.testing.portals.dev-spectrum.net
Issued by Amazon
About this certificate
This digital certificate with serial number 0d:d0:ae:c4:fd:ca:e5:97:51:24:45:ab:70:1f:3d:09 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ssltest1.testing.portals.dev-spectrum.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:d0:ae:c4:fd:ca:e5:97:51:24:45:ab:70:1f:3d:09Serial Number (int): 18363506438315033394540034754873343241
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f2:b5:f6:b0:13:62:da:93:92:73:c4:30:a2:e8:73:c3:36:08:1a:d2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 0f:aa:f0:55:e8:37:3c:46:f4:58:34:6b:d2:4a:69:57:80:e3:c2:6d
Fingerprint (sha256): 89:1d:ba:de:4f:3c:ea:16:6e:3d:04:8b:63:bf:94:ef:2e:23:70:c1:d7:0f:f1:ce:89:76:b2:5c:f3:fe:c7:1b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate ssltest1.testing.portals.dev-spectrum.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ssltest1.testing.portals.dev-spectrum.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ssltest1.testing.portals.dev-spectrum.net
Other certificates including the domain name dev-spectrum.net
(limited to 100 certificates)
*.portals.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
atvchtr.dev-spectrum.net
*.dev-spectrum.net
advisor2.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
*.shared.dev-spectrum.net
api.engprod-spectrum.net
pci.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
*.shared.dev-spectrum.net
*.dev-spectrum.net
api.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
drupal-cms.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
pcidev.dev-spectrum.net
pci.portals.dev-spectrum.net
*.testing.portals.dev-spectrum.net
*.dev-spectrum.net
testing.portals.dev-spectrum.net
*.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
api.engprod-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
ssltest1.testing.portals.dev-spectrum.net
drupal-cms.spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
*.portals.dev-spectrum.net
id.dev-spectrum.net
engprod-spectrum.net
pci.portals.dev-spectrum.net
hoh.engprod-spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
api.engprod-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
advisor2.engprod-spectrum.net
*.dev-spectrum.net
*.portals.dev-spectrum.net
ssltest2.testing.portals.dev-spectrum.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
troubleshooting.engprod-spectrum.net
api.engprod-spectrum.net
dev-spectrum.net
pci-lbf.dev-spectrum.net
tdcs.engprod-spectrum.net
*.dev-spectrum.net
*.dev-spectrum.net
dev-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
drupal-cms.prd.spectrum.net
*.eos.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
atvchtr.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
atvchtr.dev-spectrum.net
*.dev-spectrum.net
advisor2.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
*.shared.dev-spectrum.net
api.engprod-spectrum.net
pci.dev-spectrum.net
*.portals.dev-spectrum.net
*.dev-spectrum.net
*.shared.dev-spectrum.net
*.dev-spectrum.net
api.engprod-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
drupal-cms.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
pcidev.dev-spectrum.net
pci.portals.dev-spectrum.net
*.testing.portals.dev-spectrum.net
*.dev-spectrum.net
testing.portals.dev-spectrum.net
*.dev-spectrum.net
*.k8s.testing.portals.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
api.engprod-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
ssltest1.testing.portals.dev-spectrum.net
drupal-cms.spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
*.portals.dev-spectrum.net
id.dev-spectrum.net
engprod-spectrum.net
pci.portals.dev-spectrum.net
hoh.engprod-spectrum.net
*.dev-spectrum.net
drupal-cms.dev-spectrum.net
api.engprod-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
advisor2.engprod-spectrum.net
*.dev-spectrum.net
*.portals.dev-spectrum.net
ssltest2.testing.portals.dev-spectrum.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
troubleshooting.engprod-spectrum.net
api.engprod-spectrum.net
dev-spectrum.net
pci-lbf.dev-spectrum.net
tdcs.engprod-spectrum.net
*.dev-spectrum.net
*.dev-spectrum.net
dev-spectrum.net
api.engprod-spectrum.net
sspp-web-preprod.spectrumflow.net
www.public.dev-spectrum.net
*.dev-spectrum.net
pcidev.dev-spectrum.net
cobrowse-internal.engprod2-spectrumbusiness.net
drupal-cms.dev-spectrum.net
dev-spectrum.net
drupal-cms.prd.spectrum.net
*.eos.dev-spectrum.net
*.dev-spectrum.net
pci-lbf.dev-spectrum.net
atvchtr.dev-spectrum.net
*.k8s.portals.dev-spectrum.net
www.public.dev-spectrum.net
Certificate
The complete raw certificate details for ssltest1.testing.portals.dev-spectrum.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEqDCCA5CgAwIBAgIQDdCuxP3K5ZdRJEWrcB89CTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA1MjQwMDAwMDBaFw0yMDA2MjQx MjAwMDBaMDQxMjAwBgNVBAMTKXNzbHRlc3QxLnRlc3RpbmcucG9ydGFscy5kZXYt c3BlY3RydW0ubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WqR SFZjoN3ppkxdTfYxYRBbfFUuLkHZggt2oqKNM0Zfe0lEe4DscoQJxJFCSQr1l55i amYgShxLhbsINtVCzx9moL5R4+DLp9t2kUhOWcthRmeD40SPArqKhSjZpEvnX1tV wxMe6u930Y+H1gOsxv3g3hWpvSJmteUDNy9LeiGNYQh97ZlhFTiW1PpxEoXk00Ud knrZxWGxO5oIxQEjSQuof8o21xLxy6qpzKMmo84u7xlQZc3VUZOrLWURhjciBZu9 eSddia60RuLiOKDfPR4r0IbUReri/oo2KIM0Iv6r+aOYuD8nHeMk8AHwgI0pEE4Y x7zk5SzZSiNLvkqTXwIDAQABo4IBojCCAZ4wHwYDVR0jBBgwFoAUWaRmBlKge5WS PKOUByeWdFv5PdAwHQYDVR0OBBYEFPK19rATYtqTknPEMKLoc8M2CBrSMDQGA1Ud EQQtMCuCKXNzbHRlc3QxLnRlc3RpbmcucG9ydGFscy5kZXYtc3BlY3RydW0ubmV0 MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5j b20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1 BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFt YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6 b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBALB156Q93UjW8noJ8bPsOKpDMXxx fPGkykYeyyQCJ84hqV/CzvTxTxLVmin+sROlKCTbIvn/sznKLiZM62ytGovdYQ39 R5zpr/VswsYR88lVmGL0+/qwT0lPpRRCQCYNWbwxaJdjYaVf7vRg/4f5yR7Bz2eR P66jnhSlJhfZUNbndoOGkEhwQ4FmZ7vLaZOBbyYkcsWPq2Q1fOWaQXhePmjKyqfA Nhxmm/nZizo0ye+9Q9qcfmLXb+eOQJJ4L3ApaOLa0kncym8xrhca6vpFPYqpfaao v8GNa2tvdhPG8XH5wX0ZzYWZVMfhtO0iUgyTvg1EMNqc7ttz252mMGPPjrE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WqRSFZjoN3ppkxdTfYx YRBbfFUuLkHZggt2oqKNM0Zfe0lEe4DscoQJxJFCSQr1l55iamYgShxLhbsINtVC zx9moL5R4+DLp9t2kUhOWcthRmeD40SPArqKhSjZpEvnX1tVwxMe6u930Y+H1gOs xv3g3hWpvSJmteUDNy9LeiGNYQh97ZlhFTiW1PpxEoXk00UdknrZxWGxO5oIxQEj SQuof8o21xLxy6qpzKMmo84u7xlQZc3VUZOrLWURhjciBZu9eSddia60RuLiOKDf PR4r0IbUReri/oo2KIM0Iv6r+aOYuD8nHeMk8AHwgI0pEE4Yx7zk5SzZSiNLvkqT XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18363506438315033394540034754873343241 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssltest1.testing.portals.dev-spectrum.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28961122235004354966879508914539904396757688959386486490169458550931632878626542945374505094636140986585079581227597925535187234760096080608282933294978229633469019042463130976376731139299375520143303023132839801781873637873812152129738037193762488003768340900049675486535173879938131500366963228935455615138669589770660006375322061250491379790434402033779450044180891435872456967521579317590994032992084938136624908616033082687416717011029528626509725025519194233293059308756759692273136633395941966401165788965244985918290882545513319475573119432005017583486987383115343829062489150982686543988390676773286301045599 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f2b5f6b01362da939273c430a2e873c336081ad2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssltest1.testing.portals.dev-spectrum.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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