ourkin.com
Issued by Amazon
About this certificate
This digital certificate with serial number 02:d9:4d:82:8d:11:3a:47:db:29:47:bf:6a:61:7a:7a was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ourkin.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:d9:4d:82:8d:11:3a:47:db:29:47:bf:6a:61:7a:7aSerial Number (int): 3786756498730710720695434437829163642
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: bd:bb:2a:82:4e:ce:1e:df:72:5c:37:a2:c4:8e:71:da:95:9d:77:43
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 7c:23:56:d5:f7:7b:c1:be:d1:d0:92:e0:90:47:f4:5d:f3:10:20:e3
Fingerprint (sha256): 8d:a9:4c:e3:4a:15:33:16:8e:12:4f:c1:22:1f:01:fe:4a:b3:3f:0e:a7:e6:f7:18:3f:b2:5a:65:e5:ac:a8:50
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate ourkin.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ourkin.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ourkin.com
*.triiibes.io
*.ourkin.com
triiibes.io
*.triiibes.io
*.ourkin.com
triiibes.io
Other certificates including the domain name ourkin.com
(limited to 100 certificates)
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
tasks.unibs.it
community.ourkin.com
ourkin.com
theostattoos.co.uk
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
auth.ourkin.com
sni115205.cloudflaressl.com
ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.irenegallego.com
cal.divest.app
sni115205.cloudflaressl.com
app.getminerva.co
ourkin.com
ourkinsites.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.superlist.at
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
selfie.actimotive.app
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
staging.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.norabau.hu
sni115205.cloudflaressl.com
www.henkoti.com.br
sni115205.cloudflaressl.com
community.ourkin.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.beedots.app
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
auth.ourkin.com
sni115205.cloudflaressl.com
maps.ourkin.com
staging-maps.ourkin.com
sni115205.cloudflaressl.com
gold.dsignage.app
ourkin.com
maps.ourkin.com
sni115205.cloudflaressl.com
community.ourkin.com
ofatv2020.ondagoapp.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.showchampions.com
ourkin.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
cellinus.net
sni115205.cloudflaressl.com
ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
tasks.unibs.it
community.ourkin.com
ourkin.com
theostattoos.co.uk
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
auth.ourkin.com
sni115205.cloudflaressl.com
ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.irenegallego.com
cal.divest.app
sni115205.cloudflaressl.com
app.getminerva.co
ourkin.com
ourkinsites.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.superlist.at
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
selfie.actimotive.app
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
staging.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.norabau.hu
sni115205.cloudflaressl.com
www.henkoti.com.br
sni115205.cloudflaressl.com
community.ourkin.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.beedots.app
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
auth.ourkin.com
sni115205.cloudflaressl.com
maps.ourkin.com
staging-maps.ourkin.com
sni115205.cloudflaressl.com
gold.dsignage.app
ourkin.com
maps.ourkin.com
sni115205.cloudflaressl.com
community.ourkin.com
ofatv2020.ondagoapp.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.showchampions.com
ourkin.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
cellinus.net
sni115205.cloudflaressl.com
ourkin.com
sni115205.cloudflaressl.com
Certificate
The complete raw certificate details for ourkin.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElDCCA3ygAwIBAgIQAtlNgo0ROkfbKUe/amF6ejANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEyMDkwMDAwMDBaFw0yMTAxMDkx MjAwMDBaMBUxEzARBgNVBAMTCm91cmtpbi5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpPcKvz2XSRNzsHlN3Qb6cqyqpWT1Dc3lmauCIpTIMht2K yY8RpUGY70NlBdqgQ9NlZTy7tyTgAuV0yHF6sVRRfUrX/YzAsxwCmipuRls6DWkr UQpSYKq60KBwpCb5F2ilok2ui1Qg2+4VttNkPlVeFqwqvEpewOX1eiDJN8P6TeQK J2JMYMT8TzXv3jtDgndBC9E2XI6NU8CDXqXPigfou4owCL3FCzn3BOipHSvXdwRd iVT2pZUi4DOVNWitKgWDc/Yle+pnATcrrx+t2VDISgyOdLXN04h7krg/DCS3YlLq xZON3+f2kfjRcU2Jc4Z5MtVlTmIJ3zuL/8r94yBjAgMBAAGjggGtMIIBqTAfBgNV HSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUvbsqgk7OHt9y XDeixI5x2pWdd0MwPwYDVR0RBDgwNoIKb3Vya2luLmNvbYINKi50cmlpaWJlcy5p b4IMKi5vdXJraW4uY29tggt0cmlpaWJlcy5pbzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0 dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAE GTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsG AQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYB BQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy dDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+5X1hSa+hqULBbaeEWE8haKI3Ic1UZLgiKu8z2n+PrNlCuJx8zbHD +4aDPiI7C0VPJPR0Wt11QDpz7nELlGXeGhKODtml9/KOSQD7ttgYv+x2fybF6nso aM8y5MEDvEx7VAYfhv6zgB05CCjqEaI2TLWpHxx/i6+4yL2GXLh0Glil24mPi7tH CUV6YY+pVFcyKiHn75qodebA/ylN4svdWA4B9/7pff/4CVvdXDjyJ9ObDv93ENO+ 1/hvZxCebFfU8KeLnh72dXWYTy0LJs02+S1BQQxL5HUCkEjuCxB7SVQWRARVDL2l lX91v5Nuf8xVCEwMldZhqGcMdKcuY4CL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T3Cr89l0kTc7B5Td0G+ nKsqqVk9Q3N5ZmrgiKUyDIbdismPEaVBmO9DZQXaoEPTZWU8u7ck4ALldMhxerFU UX1K1/2MwLMcApoqbkZbOg1pK1EKUmCqutCgcKQm+RdopaJNrotUINvuFbbTZD5V XhasKrxKXsDl9XogyTfD+k3kCidiTGDE/E817947Q4J3QQvRNlyOjVPAg16lz4oH 6LuKMAi9xQs59wToqR0r13cEXYlU9qWVIuAzlTVorSoFg3P2JXvqZwE3K68frdlQ yEoMjnS1zdOIe5K4Pwwkt2JS6sWTjd/n9pH40XFNiXOGeTLVZU5iCd87i//K/eMg YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3786756498730710720695434437829163642 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ourkin.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29443980292332263463562431321896591864211671338144181964697750387903730858068081156190013054077150455555170296053301359981276160412988437497428995094768884685018544336694053355017759403318592787312606108937825364250858016418128255702759048718948444347044590976491857706968596328886264189114923328562293693372670729705782906611983910336908536963077218085387060495793106305267481228042945319209112863664699589677809104619735157093820512664154085615112788264394805824875918473300298891466958101322874725321340759786951856858130561052196285590273985818702094739971788046690933202267098900951302974191415665178135979303011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bdbb2a824ece1edf725c37a2c48e71da959d7743 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourkin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triiibes.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourkin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triiibes.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00bee57d6149afa1a942c16da784584f2168a23721cd5464b8222aef33da7f8facd942b89c7ccdb1c3fb86833e223b0b454f24f4745add75403a73ee710b9465de1a128e0ed9a5f7f28e4900fbb6d818bfec767f26c5ea7b2868cf32e4c103bc4c7b54061f86feb3801d390828ea11a2364cb5a91f1c7f8bafb8c8bd865cb8741a58a5db898f8bbb4709457a618fa95457322a21e7ef9aa875e6c0ff294de2cbdd580e01f7fee97dfff8095bdd5c38f227d39b0eff7710d3bed7f86f67109e6c57d4f0a78b9e1ef67575984f2d0b26cd36f92d41410c4be475029048ee0b107b4954164404550cbda5957f75bf936e7fcc55084c0c95d661a8670c74a72e63808b