qa2.sfunder-dev.com
Issued by Amazon
About this certificate
This digital certificate with serial number 09:a3:ef:00:e2:f4:23:e9:6b:fb:9c:c9:6e:c4:fe:9a was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=qa2.sfunder-dev.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:a3:ef:00:e2:f4:23:e9:6b:fb:9c:c9:6e:c4:fe:9aSerial Number (int): 12814243916139452217125267669753593498
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ff:e2:b0:58:e6:ea:60:ce:64:45:5c:60:e7:87:59:0c:a6:f7:f5:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 3e:4c:8f:3b:d4:f6:97:02:3d:34:87:bb:65:31:db:c8:26:66:ae:a7
Fingerprint (sha256): 9e:3b:cf:dd:b2:76:db:b9:b1:31:39:ea:06:2f:2c:66:21:27:c4:13:c6:ae:2a:c0:f3:6f:ba:1d:4c:2f:e5:12
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate qa2.sfunder-dev.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for qa2.sfunder-dev.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
qa2.sfunder-dev.com
Other certificates including the domain name sfunder-dev.com
(limited to 100 certificates)
*.sfunder-dev.com
ucsf.brad.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.adowds.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
test-redir2.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
nyu.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
*.bsun.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
sfunder-test.com
nyu.brad.sfunder-dev.com
*.vance.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
*.uat.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
ucsf.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
sfunder-dev.com
*.ohiodev.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
dev1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
sfunder-dev.com
ucsf.brett.sfunder-dev.com
qa2.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
ucsf.brad.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.adowds.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
test-redir2.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
nyu.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
*.bsun.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
cornell.brad.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
sfunder-test.com
nyu.brad.sfunder-dev.com
*.vance.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
*.uat.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.brett.sfunder-dev.com
ucsf.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
hogwarts.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.brad.sfunder-dev.com
ucsf.brad.sfunder-dev.com
cornell.qa1.sfunder-dev.com
cornell.qa1.sfunder-dev.com
sfunder-dev.com
*.ohiodev.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
dev1.sfunder-dev.com
ucsf.brett.sfunder-dev.com
ucsf.brad.sfunder-dev.com
sfunder-dev.com
ucsf.brett.sfunder-dev.com
qa2.sfunder-dev.com
ucsf.brad.sfunder-dev.com
*.qa2.sfunder-dev.com
hogwarts.qa1.sfunder-dev.com
*.ohiodev.sfunder-dev.com
Certificate
The complete raw certificate details for qa2.sfunder-dev.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIQCaPvAOL0I+lr+5zJbsT+mjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA2MTAwMDAwMDBaFw0yMDA3MTAx MjAwMDBaMB4xHDAaBgNVBAMTE3FhMi5zZnVuZGVyLWRldi5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfVi8TPF5ba3z42TH4Gc8leQqGCIzNzdOg 1J4FyEUjLWaQL9ZTKQBUupZKCjuEagKoXyfS4e4l4BtFa7Dvv0fr+dY8vImUrCOh f+oY5z0y6GuQjT4TL/IinnF/pkbHi417ujpJrU6SFHZJck0pwlgz2dGQAAG17K1M pQ5iEjLBlreEspAQZVgkbjRfyWRTG4sVuLBP+KnVws+KY+tSyKetw/wMAiAs17mb 0sLnE2+FCZJVIk9X9rNIVYHNPsszA9OW4FqIzT4OaDXHt91HDVcuRIuvHlDbqL6a O4RgKzoNUQG8hrb1JG3ySbb3QAGj+nCPn9HEpFZlU5/kiecCARhbAgMBAAGjggJ+ MIICejAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU /+KwWObqYM5kRVxg54dZDKb39QgwHgYDVR0RBBcwFYITcWEyLnNmdW5kZXItZGV2 LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2Ex Yi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIu YW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo /csAAAFrQ3sImgAABAMARzBFAiEAo7g/eqBDyEkdAb3vOXczha6wOm5PcdPwtrC8 ZsgtwCkCIA1X6AZxeA3rr3IWbZz2qwB0gimJgGsx/6JJ/LzrGowbAHUAh3W/51l8 +IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFrQ3sJYQAABAMARjBEAiA9qXxU iPbrLLmNk+tTtDKSTEusK1Ao7aDuqoLX3ewlbAIgUfqvguCujziv8tU7+hrLIeyh e5P6/LGw1iQJfXLu0BUwDQYJKoZIhvcNAQELBQADggEBAKNbMGT2fdRF1uykFrTj H8m7h6CgRqSquyb/XsNxTSGTYNS+yL1mv2Q5k2aoeikxYwZkCWKJUIUdzar9wgiL 42UWChK6ejXEg210ujeFA9LDQlj50Q1IPLEuCpJXeTDLZSf2Y93Y4puFp5emXGfM kAsN2apqRTp+v9IKwnNnvKobYclR0V4koovsg3Gb3Ol4+uGV6hKzQN4EIAnzpTgI l+t3oOx4L9/iW7wzsB2De2hrHpJQLfxVln43C0XTUkYU4eetJW4ihCOaAMly8fMM Vkix69x3bno/DPXmd2EPFY19i7jP7HKU8AZV1moEkaExmbVw0cxXr/xp1kfEBoYd oL4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31YvEzxeW2t8+Nkx+BnP JXkKhgiMzc3ToNSeBchFIy1mkC/WUykAVLqWSgo7hGoCqF8n0uHuJeAbRWuw779H 6/nWPLyJlKwjoX/qGOc9MuhrkI0+Ey/yIp5xf6ZGx4uNe7o6Sa1OkhR2SXJNKcJY M9nRkAABteytTKUOYhIywZa3hLKQEGVYJG40X8lkUxuLFbiwT/ip1cLPimPrUsin rcP8DAIgLNe5m9LC5xNvhQmSVSJPV/azSFWBzT7LMwPTluBaiM0+Dmg1x7fdRw1X LkSLrx5Q26i+mjuEYCs6DVEBvIa29SRt8km290ABo/pwj5/RxKRWZVOf5InnAgEY WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12814243916139452217125267669753593498 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa2.sfunder-dev.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28193640866195720405790447404513110680610340778744698941884996677630890390334560055376149846003007969382129980811584386072967132427200565883549332787544710991884634553416664629028131146460888156664329003764238670402210281920609669065785334152181128654388580175053707993759022025559534936323463056061451038626256233204103418863664501601403918950521097803582721254880574238239041775920154891044638944470438447181426720761474533780048155282958916976343449869682946867182861462217608482167697186715771654117078203516103855020338303197503400942691559734046565157899684156631409735006877837293656728963310778590109175453787 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ffe2b058e6ea60ce64455c60e787590ca6f7f508 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.sfunder-dev.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b437b089a0000040300473045022100a3b83f7aa043c8491d01bdef39773385aeb03a6e4f71d3f0b6b0bc66c82dc02902200d57e80671780debaf72166d9cf6ab0074822989806b31ffa249fcbceb1a8c1b0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b437b0961000004030046304402203da97c5488f6eb2cb98d93eb53b432924c4bac2b5028eda0eeaa82d7ddec256c022051faaf82e0ae8f38aff2d53bfa1acb21eca17b93fafcb1b0d624097d72eed015 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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