api-c28a670f.test2.projectkappa.xyz
Issued by Amazon
About this certificate
This digital certificate with serial number 05:57:4b:93:16:0f:ac:51:4a:a3:45:80:f1:6e:c5:2d was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api-c28a670f.test2.projectkappa.xyz
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:57:4b:93:16:0f:ac:51:4a:a3:45:80:f1:6e:c5:2dSerial Number (int): 7099402639704890690303964075986437421
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 23:d0:82:23:0d:f6:cb:59:a2:b4:3e:d2:33:6f:b6:f1:ac:ce:41:12
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 50:0b:63:14:9e:36:93:e8:53:f4:13:94:6a:24:86:6a:4b:36:c9:1c
Fingerprint (sha256): 8d:ad:7b:a3:4b:e9:87:0e:06:f9:d5:57:5d:fa:be:b5:18:3c:29:70:56:4e:5e:aa:34:2b:11:91:68:3f:e4:ee
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate api-c28a670f.test2.projectkappa.xyz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api-c28a670f.test2.projectkappa.xyz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-c28a670f.test2.projectkappa.xyz
Other certificates including the domain name projectkappa.xyz
(limited to 100 certificates)
email-339137ce.test3.projectkappa.xyz
vt-api-b178f3a6.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-584e0cc0.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-02544e97.test3.projectkappa.xyz
api-fc45ac63.test2.projectkappa.xyz
api-86d7f780.test2.projectkappa.xyz
email-01813519.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-c68403c4.test2.projectkappa.xyz
email-5252ae92.test2.projectkappa.xyz
api-0a2f2edd.test2.projectkappa.xyz
api-08b2bd97.test2.projectkappa.xyz
email-f30660ce.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-2530578c.test3.projectkappa.xyz
api-884ecac7.test2.projectkappa.xyz
vt-api-438742e5.test3.projectkappa.xyz
email-7be941c5.test2.projectkappa.xyz
vt-api-5252ae92.test2.projectkappa.xyz
email-2b6d8474.test3.projectkappa.xyz
email-83cfc8a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-0f3802d0.test2.projectkappa.xyz
api-3d5a66a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-eccb9f2a.test2.projectkappa.xyz
email-b1a05c10.test3.projectkappa.xyz
email-02995b38.test2.projectkappa.xyz
email-0a2f2edd.test2.projectkappa.xyz
email-c28a670f.test2.projectkappa.xyz
email-db5c2f25.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-fe9c02fb.test3.projectkappa.xyz
api-af321842.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
api-dc0ccb68.test2.projectkappa.xyz
email-3091c79a.test2.projectkappa.xyz
vt-api-faaad55e.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-dc0ccb68.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-1e4e782c.test2.projectkappa.xyz
vt-api-86d7f780.test2.projectkappa.xyz
email-ca4ee977.test2.projectkappa.xyz
api-68d3bd5b.test2.projectkappa.xyz
email-ca89238a.test3.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
vt-api-55f65dd3.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-ca89238a.test3.projectkappa.xyz
api-b7112385.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-580959a5.test2.projectkappa.xyz
vt-api-af321842.test2.projectkappa.xyz
email-08b2bd97.test2.projectkappa.xyz
vt-api-68d3bd5b.test2.projectkappa.xyz
api-c28a670f.test2.projectkappa.xyz
vt-api-b5e1a5c4.test2.projectkappa.xyz
api-2b6d8474.test3.projectkappa.xyz
email-884ecac7.test2.projectkappa.xyz
email-438742e5.test3.projectkappa.xyz
email-b5e1a5c4.test2.projectkappa.xyz
api-5252ae92.test2.projectkappa.xyz
email-612e2729.test2.projectkappa.xyz
api-ca4ee977.test2.projectkappa.xyz
api-b5e1a5c4.test2.projectkappa.xyz
projectkappa.xyz
gamma.projectkappa.xyz
vt-api-2b6d8474.test3.projectkappa.xyz
api-339137ce.test3.projectkappa.xyz
email-fe9c02fb.test3.projectkappa.xyz
email-6ea5122c.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-83cfc8a7.test2.projectkappa.xyz
api-1699f3b6.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
gerrit.prod.projectkappa.xyz
email-86d7f780.test2.projectkappa.xyz
email-89712a91.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-01813519.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
api-5847f569.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-6ea5122c.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-7be941c5.test2.projectkappa.xyz
vt-api-6ea5122c.test3.projectkappa.xyz
api-811dc1b3.test2.projectkappa.xyz
vt-api-83cfc8a7.test2.projectkappa.xyz
api-7671c583.test2.projectkappa.xyz
api-b330482d.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-c28a670f.test2.projectkappa.xyz
email-b330482d.test2.projectkappa.xyz
vt-api-86d7f780.test2.projectkappa.xyz
email-0f3802d0.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
vt-api-b178f3a6.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-584e0cc0.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-02544e97.test3.projectkappa.xyz
api-fc45ac63.test2.projectkappa.xyz
api-86d7f780.test2.projectkappa.xyz
email-01813519.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-c68403c4.test2.projectkappa.xyz
email-5252ae92.test2.projectkappa.xyz
api-0a2f2edd.test2.projectkappa.xyz
api-08b2bd97.test2.projectkappa.xyz
email-f30660ce.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-2530578c.test3.projectkappa.xyz
api-884ecac7.test2.projectkappa.xyz
vt-api-438742e5.test3.projectkappa.xyz
email-7be941c5.test2.projectkappa.xyz
vt-api-5252ae92.test2.projectkappa.xyz
email-2b6d8474.test3.projectkappa.xyz
email-83cfc8a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-0f3802d0.test2.projectkappa.xyz
api-3d5a66a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-eccb9f2a.test2.projectkappa.xyz
email-b1a05c10.test3.projectkappa.xyz
email-02995b38.test2.projectkappa.xyz
email-0a2f2edd.test2.projectkappa.xyz
email-c28a670f.test2.projectkappa.xyz
email-db5c2f25.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-fe9c02fb.test3.projectkappa.xyz
api-af321842.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
api-dc0ccb68.test2.projectkappa.xyz
email-3091c79a.test2.projectkappa.xyz
vt-api-faaad55e.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-dc0ccb68.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-1e4e782c.test2.projectkappa.xyz
vt-api-86d7f780.test2.projectkappa.xyz
email-ca4ee977.test2.projectkappa.xyz
api-68d3bd5b.test2.projectkappa.xyz
email-ca89238a.test3.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
vt-api-55f65dd3.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-ca89238a.test3.projectkappa.xyz
api-b7112385.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-580959a5.test2.projectkappa.xyz
vt-api-af321842.test2.projectkappa.xyz
email-08b2bd97.test2.projectkappa.xyz
vt-api-68d3bd5b.test2.projectkappa.xyz
api-c28a670f.test2.projectkappa.xyz
vt-api-b5e1a5c4.test2.projectkappa.xyz
api-2b6d8474.test3.projectkappa.xyz
email-884ecac7.test2.projectkappa.xyz
email-438742e5.test3.projectkappa.xyz
email-b5e1a5c4.test2.projectkappa.xyz
api-5252ae92.test2.projectkappa.xyz
email-612e2729.test2.projectkappa.xyz
api-ca4ee977.test2.projectkappa.xyz
api-b5e1a5c4.test2.projectkappa.xyz
projectkappa.xyz
gamma.projectkappa.xyz
vt-api-2b6d8474.test3.projectkappa.xyz
api-339137ce.test3.projectkappa.xyz
email-fe9c02fb.test3.projectkappa.xyz
email-6ea5122c.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-83cfc8a7.test2.projectkappa.xyz
api-1699f3b6.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
gerrit.prod.projectkappa.xyz
email-86d7f780.test2.projectkappa.xyz
email-89712a91.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-01813519.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
api-5847f569.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-6ea5122c.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-7be941c5.test2.projectkappa.xyz
vt-api-6ea5122c.test3.projectkappa.xyz
api-811dc1b3.test2.projectkappa.xyz
vt-api-83cfc8a7.test2.projectkappa.xyz
api-7671c583.test2.projectkappa.xyz
api-b330482d.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-c28a670f.test2.projectkappa.xyz
email-b330482d.test2.projectkappa.xyz
vt-api-86d7f780.test2.projectkappa.xyz
email-0f3802d0.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
Certificate
The complete raw certificate details for api-c28a670f.test2.projectkappa.xyz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkTCCA3mgAwIBAgIQBVdLkxYPrFFKo0WA8W7FLTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMDUwMDAwMDBaFw0yMzAxMDMy MzU5NTlaMC4xLDAqBgNVBAMTI2FwaS1jMjhhNjcwZi50ZXN0Mi5wcm9qZWN0a2Fw cGEueHl6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrDph+RDZeiV rObsbynoxqpJLEkORU9usULvYTBpIq9HxVxi2coRLi23eI3ZAITSsB0uZbKUVCnK ECXwPVWZD22GXFVQLetm/sQmkaaWZUPjmoTW2O85toy4QFxKwlaaXvMTxRp/dZRX gaUL31ttwkhAAGycHh2TgdPPjlyqx7o9RvIkDsO3u+AithwnRKv/mNdj6bjtbNp+ M+H2NeUwHBAwEpB2u3qZoXMlM/gD3MOhPAWeComtnrI+bNBunMJW7sGkCvu/ONd+ qEMBMlf/xn8UDlbfURWLu9xt5O3lEbPNm4rIM/xxBz/TS/uDPrEEJIfnwREM6cGd YD+/4hAGmwIDAQABo4IBkTCCAY0wHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeW dFv5PdAwHQYDVR0OBBYEFCPQgiMN9stZorQ+0jNvtvGszkESMC4GA1UdEQQnMCWC I2FwaS1jMjhhNjcwZi50ZXN0Mi5wcm9qZWN0a2FwcGEueHl6MA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAy oDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQA9o8yBBXMlnuZ3+b2Ifq8/jv27crFkawx7K1TWkwcvkTL9Bp72ljN4Alxs /ah2m2HfrfVTpUJmITZDSDnNuizh3PcL54nhQe21I7no2UHliHHBtEwTtnaM/l4U Exa6I2pNpB/rAHo4qoyx/ydx4tePgnCAPbyN81md+Qdf4n7AWOVg91O19vXwOh3E WozP/2ZRzmnN+iyfMUBB9qk7TFLP7eKwQtRqPou0YVbaQsEObWO7eWVva3bsUqn3 WZqJO7t/FuUNRK1w4eYV39iU0udGVA+1z5V8x7q/Pvyp7IcwKznIne9M8f8FgViZ 4ey16zZyxz1U3dQMGcX4RV4LKXsV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrDph+RDZeiVrObsbyno xqpJLEkORU9usULvYTBpIq9HxVxi2coRLi23eI3ZAITSsB0uZbKUVCnKECXwPVWZ D22GXFVQLetm/sQmkaaWZUPjmoTW2O85toy4QFxKwlaaXvMTxRp/dZRXgaUL31tt wkhAAGycHh2TgdPPjlyqx7o9RvIkDsO3u+AithwnRKv/mNdj6bjtbNp+M+H2NeUw HBAwEpB2u3qZoXMlM/gD3MOhPAWeComtnrI+bNBunMJW7sGkCvu/ONd+qEMBMlf/ xn8UDlbfURWLu9xt5O3lEbPNm4rIM/xxBz/TS/uDPrEEJIfnwREM6cGdYD+/4hAG mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7099402639704890690303964075986437421 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-c28a670f.test2.projectkappa.xyz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21547750516170268045143576684653632499062148587216278807428778821696402474865029393943643143806725099314778872245128001409362651484929944411244906204928108782581864914098672728729626511652772515455056348528721403577400333261643390343167982354932547092715194670808522555080508719896330653642952705666775724171469242465244424857584389277188419953804669563988429520900147406284258692538327089945925720885887453345498136446076600919790551159312034022959252527954209028169361408630653713461249258173008516648387334538404449308581207878502489012173533074844661294786952281415589690962804379431275305982326996563232912574107 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23d082230df6cb59a2b43ed2336fb6f1acce4112 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-c28a670f.test2.projectkappa.xyz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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