*.kronos-web.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:01:0e:f2:91:f9:d3:ca:bc:81:66:23:79:fb:aa:77 was issued on by Amazon.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.kronos-web.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:01:0e:f2:91:f9:d3:ca:bc:81:66:23:79:fb:aa:77Serial Number (int): 19943915405759401608873785567435532919
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c3:ef:50:0a:a8:3c:3d:5e:92:fa:55:ac:23:71:d1:46:04:45:54:48
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): bf:5a:8f:6d:f0:1a:67:6d:4c:56:d5:1f:03:09:46:4e:19:f9:e6:59
Fingerprint (sha256): 93:b9:94:47:45:0f:cc:0c:c6:61:2b:79:20:36:77:44:56:55:b9:b9:68:7e:04:d4:05:70:c3:e3:bc:05:0e:99
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.kronos-web.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kronos-web.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kronos-web.com
kronos-web.com
*.kronostechnologies.com
kronostechnologies.com
*.kronos-finance.ca
kronos-finance.ca
*.kronos-fna.ca
kronos-fna.ca
*.kronos-abf.ca
kronos-abf.ca
*.scansquad.ca
scansquad.ca
kronos-web.com
*.kronostechnologies.com
kronostechnologies.com
*.kronos-finance.ca
kronos-finance.ca
*.kronos-fna.ca
kronos-fna.ca
*.kronos-abf.ca
kronos-abf.ca
*.scansquad.ca
scansquad.ca
Other certificates including the domain name kronos-web.com
(limited to 100 certificates)
secure.accp.dfs.kronos-web.com
*.accp.dsf.kronos-web.com
fr.wiki-crm.kronos-web.com
secure.fnct.kronos-web.com
*.accp.dsf.kronos-web.com
kronos-web.com
kronos-web.com
*.kronos-crm.com
edge.fnct.kronos-web.com
secure.dfs.kronos-web.com
*.kronos-crm.com
depot.kronos-web.com
kronos-web.com
*.accp.kronos-web.com
fr.wiki-crm.kronos-web.com
dsf.kronos-web.com
secure.accp.dsf.kronos-web.com
auth-accp.kronos-web.com
*.kronos-crm.com
*.kronos-crm.com
fr.wiki-crm.kronos-web.com
static.kronos-web.com
*.kronos-web.com
*.kronos-web.com
*.accp.kronos-web.com
*.kronos-crm.com
*.kronos-crm.com
fr.wiki-crm.kronos-web.com
*.dsf.kronos-web.com
static.kronos-web.com
fr.wiki-crm.kronos-web.com
*.kronos-crm.com
secure.dfs.kronos-web.com
*.accp.dsf.kronos-web.com
*.kronos-web.com
kronos-web.com
depot.kronos-web.com
secure.dsf.kronos-web.com
kronos-web.com
*.kronos-web.com
secure.accp.dfs.kronos-web.com
depot.kronos-web.com
fr.wiki-crm.kronos-web.com
kronos-web.com
*.accp.kronos-web.com
cache.kronos-web.com
*.kronos-web.com
*.dsf.kronos-web.com
*.kronos-crm.com
dsf.kronos-web.com
fr.wiki-crm.kronos-web.com
*.kronos-crm.com
secure.accp.kronos-web.com
*.kronos-web.com
*.kronos-web.com
*.accp.kronos-web.com
dsf.kronos-web.com
static.kronos-web.com
*.dsf.kronos-web.com
cache.kronos-web.com
*.kronos-crm.com
*.accp.dsf.kronos-web.com
fr.wiki-crm.kronos-web.com
secure.fnct.kronos-web.com
*.accp.dsf.kronos-web.com
kronos-web.com
kronos-web.com
*.kronos-crm.com
edge.fnct.kronos-web.com
secure.dfs.kronos-web.com
*.kronos-crm.com
depot.kronos-web.com
kronos-web.com
*.accp.kronos-web.com
fr.wiki-crm.kronos-web.com
dsf.kronos-web.com
secure.accp.dsf.kronos-web.com
auth-accp.kronos-web.com
*.kronos-crm.com
*.kronos-crm.com
fr.wiki-crm.kronos-web.com
static.kronos-web.com
*.kronos-web.com
*.kronos-web.com
*.accp.kronos-web.com
*.kronos-crm.com
*.kronos-crm.com
fr.wiki-crm.kronos-web.com
*.dsf.kronos-web.com
static.kronos-web.com
fr.wiki-crm.kronos-web.com
*.kronos-crm.com
secure.dfs.kronos-web.com
*.accp.dsf.kronos-web.com
*.kronos-web.com
kronos-web.com
depot.kronos-web.com
secure.dsf.kronos-web.com
kronos-web.com
*.kronos-web.com
secure.accp.dfs.kronos-web.com
depot.kronos-web.com
fr.wiki-crm.kronos-web.com
kronos-web.com
*.accp.kronos-web.com
cache.kronos-web.com
*.kronos-web.com
*.dsf.kronos-web.com
*.kronos-crm.com
dsf.kronos-web.com
fr.wiki-crm.kronos-web.com
*.kronos-crm.com
secure.accp.kronos-web.com
*.kronos-web.com
*.kronos-web.com
*.accp.kronos-web.com
dsf.kronos-web.com
static.kronos-web.com
*.dsf.kronos-web.com
cache.kronos-web.com
*.kronos-crm.com
Certificate
The complete raw certificate details for *.kronos-web.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgIQDwEO8pH508q8gWYjefuqdzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xNjExMTUwMDAwMDBaFw0xNzEyMTUx MjAwMDBaMBsxGTAXBgNVBAMMECoua3Jvbm9zLXdlYi5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDIQAW0UX6mQbUX6/lY8SuTYgI3DKkZIAbddvQq HBmN1Bl0DGkwFgji9Fke4Prqz2oitu4IH9MA+EaZ0iXyutVUaywn2fqMfj3UUpmD iJyAfsjTAb+mVNj++OlArTVPcvr5P+0YVgeY5JTqdAVGAlzZy3Sd6+vNhUvFPZUV yXMmLw7euFZCOBiuRvLHvA9EZEIbRM8hGXCoKKARB5bLrqnFFZjILC1FlvQ2x2r8 ebGqGqp6ffTtBAAqGrTobyYk0HkXEN9bG0bbLJlexXyiZoSXAqN2QtliV/LUrFRp F+GkQasKtkUzo2DKjGRpedlaTZw75gEs8gNNyqzJalnLfo/PAgMBAAGjggIyMIIC LjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUw+9Q Cqg8PV6S+lWsI3HRRgRFVEgwgeUGA1UdEQSB3TCB2oIQKi5rcm9ub3Mtd2ViLmNv bYIOa3Jvbm9zLXdlYi5jb22CGCoua3Jvbm9zdGVjaG5vbG9naWVzLmNvbYIWa3Jv bm9zdGVjaG5vbG9naWVzLmNvbYITKi5rcm9ub3MtZmluYW5jZS5jYYIRa3Jvbm9z LWZpbmFuY2UuY2GCDyoua3Jvbm9zLWZuYS5jYYINa3Jvbm9zLWZuYS5jYYIPKi5r cm9ub3MtYWJmLmNhgg1rcm9ub3MtYWJmLmNhgg4qLnNjYW5zcXVhZC5jYYIMc2Nh bnNxdWFkLmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6 b250cnVzdC5jb20vc2NhMWIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsG AQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9u dHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRy dXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOC AQEAbCBq0RUmoarQBqaQqVdmT01i3lZCmuKFEzNCpt3rmSQ1ZSqVXQ2Gjyrj0vri NO952PZ3Ld0VniYF2qA/4XukfgTpTmkZStNc621X8an2F7tcXnNT0n2u3ymK3w1R LlCJtrqrEXJ/aaHUHUlLm5qHPuUqXwjYTX+QAnnvrRT9bcsokBWfCUlvPnBvas4b DJo+38BV5+sg7ob7nkUYsJlizFkwRvs4Pia/YW+NkZ+ciMyEAH2q1OJN1cW1iPvx XVnWSNr2cQM4ztRlqbH1Ujcfarl8iFzgg0F6nPxrK/GfCeFvwPPao9kAEAWZhl6k 1zOCE7CTTj69vuqem5ZHD1FGbw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEAFtFF+pkG1F+v5WPEr k2ICNwypGSAG3Xb0KhwZjdQZdAxpMBYI4vRZHuD66s9qIrbuCB/TAPhGmdIl8rrV VGssJ9n6jH491FKZg4icgH7I0wG/plTY/vjpQK01T3L6+T/tGFYHmOSU6nQFRgJc 2ct0nevrzYVLxT2VFclzJi8O3rhWQjgYrkbyx7wPRGRCG0TPIRlwqCigEQeWy66p xRWYyCwtRZb0Nsdq/Hmxqhqqen307QQAKhq06G8mJNB5FxDfWxtG2yyZXsV8omaE lwKjdkLZYlfy1KxUaRfhpEGrCrZFM6NgyoxkaXnZWk2cO+YBLPIDTcqsyWpZy36P zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19943915405759401608873785567435532919 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kronos-web.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25279231557456957772002360370601728059244193002373979071109624165628410987378697903385068785830689125382795022439084522686949414673358696151827164385625201994575319443416519612694133778739351566431399664594153609168050316433658023448563058000775117084704812550628947673976406364925046753997995374787852846781103518250387906094381484728724907659282137968095466512414133269106737599916859267890133065275044932387826844168281279239428629259122556130917160827650923653592050268145252753867079247696137141971721237130584920045097422648891795017085373750077595439407580198972062392776667237206953519264861506274680268296143 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c3ef500aa83c3d5e92fa55ac2371d14604455448 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (221 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronos-web.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos-web.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronostechnologies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronostechnologies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronos-finance.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos-finance.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronos-fna.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos-fna.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kronos-abf.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronos-abf.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scansquad.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scansquad.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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