*.zomentum.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:75:52:4b:23:ad:f4:41:ea:c2:d8:40:97:7c:7c:0e was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.zomentum.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:75:52:4b:23:ad:f4:41:ea:c2:d8:40:97:7c:7c:0e
Serial Number (int): 13901447801039694552293136023156456462
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 97:24:a5:75:d4:84:c8:7e:4e:4c:81:a8:78:27:6a:c6:99:92:dd:78
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0f:e9:42:a0:20:ec:23:4b:16:9e:73:36:86:f8:3a:53:3e:ed:55:32
Fingerprint (sha256): a2:e1:9a:d7:db:34:a5:ac:e5:f2:1c:ea:15:a5:aa:04:02:8a:05:e2:62:b0:e1:08:73:86:5b:9c:01:b5:bc:8b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.zomentum.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.zomentum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zomentum.com
ventes.informatiqueamerix.com
*.rivercitytech.ca
quotes.alwaysnetworks.co.uk
documents.cutec.co.uk
sales.shiftlogy.com
*.procano.com
proposals.concept-its.co.uk
sales.westviewit.co.uk
sales.uptimesolutions.tech
quotes.icisupport.com
proposals.shawcsit.com
docs.justrightcomputers.com
*.genuinetechnology.com
quote.bespoke.tech
quotes.ezpcltd.com
agreements.lionfishcybersecurity.com
quotes.paronubi.com
sales.f8tech.com
*.jolera.com
sales.premier-technologies.com

Other certificates including the domain name zomentum.com

(limited to 100 certificates)
*.zomentum.com
*.zomentum.com
distribution-status.rbb-online.de
zomentum.com
*.zomentum.com
distribution-status.rbb-online.de
danskin.brandedonline.com
zomentum.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
danskin.brandedonline.com
*.zomentum.com
*.zomentum.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
zomentum.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
accounts.zomentum.com
zomentum.com
distribution-status.rbb-online.de
www.zomentum.com
*.zomentum.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
*.zomentum.com
distribution-status.rbb-online.de
birddoghrstatus.paradox.ai
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
*.zomentum.com
*.zomentum.com
accounts.zomentum.com
distribution-status.rbb-online.de
*.zomentum.com
zomentum.com
*.zomentum.com
*.zomentum.com
*.zomentum.com
*.zomentum.com
us1certificate-3-202311081233.us1.opz1.com
distribution-status.rbb-online.de
accounts.zomentum.com
zomentum.com
zomentum.com
distribution-status.rbb-online.de
*.zomentum.com
zomentum.com
distribution-status.rbb-online.de
*.zomentum.com
conference.zomentum.com
danskin.brandedonline.com
distribution-status.rbb-online.de
fdus-78.freshdesk.com
zomentum.com
distribution-status.rbb-online.de
fdus-78.freshdesk.com
distribution-status.rbb-online.de
*.zomentum.com
danskin.brandedonline.com
accounts.zomentum.com
distribution-status.rbb-online.de
*.zomentum.com
distribution-status.rbb-online.de
zomentum.com
distribution-status.rbb-online.de
*.zomentum.com
distribution-status.rbb-online.de
zomentum.com
distribution-status.rbb-online.de
zomentum.com
*.zomentum.com
*.zomentum.com
*.zomentum.com
*.zomentum.com
*.zomentum.com
fdus-78.freshdesk.com
distribution-status.rbb-online.de
www.zomentum.com
zomentum.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
distribution-status.rbb-online.de
*.zomentum.com
*.zomentum.com
distribution-status.rbb-online.de
*.zomentum.com
distribution-status.rbb-online.de
zomentum.com
*.zomentum.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
*.zomentum.com
distribution-status.rbb-online.de
fdus-78.freshdesk.com
*.zomentum.com
www.zomentum.com

Certificate

The complete raw certificate details for *.zomentum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIQCnVSSyOt9EHqwthAl3x8DjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTExMTIwMDAwMDBaFw0yMjEyMTEy
MzU5NTlaMBkxFzAVBgNVBAMMDiouem9tZW50dW0uY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA0stuRoAa8BOsa84xXGvSIjmLoOgpOOQxFsUintNU
9BdwwQOv9KU5kn5ipvWSOex9OYfajPzP7aCQrAQCsxjOdX4IAJyBhjuMmsMjdmx7
cMLq7cMNIhTgaVeY4beoNsWX8L8oHSARiA2IAZCt6taRcNoYVcTJ+fK5/zKERFnL
VRUpMi7YSvajAaB2+NltvIfUAQCkvNWgWmaoyRy9UuQ89EbCCuwdNEJpm8+XCXBK
9CwyFGg02iffoA8GEkrFUQEvoUTbumsdr4iYHXIzybgsXLFRoJV4zf7w4COHtfnp
9wcp9qMOdBM1KaFv3iqDmilknSVM1W2oNNJAD1+lgPLkGwIDAQABo4IDZjCCA2Iw
HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFJckpXXU
hMh+TkyBqHgnasaZkt14MIICAQYDVR0RBIIB+DCCAfSCDiouem9tZW50dW0uY29t
gh12ZW50ZXMuaW5mb3JtYXRpcXVlYW1lcml4LmNvbYISKi5yaXZlcmNpdHl0ZWNo
LmNhghtxdW90ZXMuYWx3YXlzbmV0d29ya3MuY28udWuCFWRvY3VtZW50cy5jdXRl
Yy5jby51a4ITc2FsZXMuc2hpZnRsb2d5LmNvbYINKi5wcm9jYW5vLmNvbYIbcHJv
cG9zYWxzLmNvbmNlcHQtaXRzLmNvLnVrghZzYWxlcy53ZXN0dmlld2l0LmNvLnVr
ghpzYWxlcy51cHRpbWVzb2x1dGlvbnMudGVjaIIVcXVvdGVzLmljaXN1cHBvcnQu
Y29tghZwcm9wb3NhbHMuc2hhd2NzaXQuY29tghtkb2NzLmp1c3RyaWdodGNvbXB1
dGVycy5jb22CFyouZ2VudWluZXRlY2hub2xvZ3kuY29tghJxdW90ZS5iZXNwb2tl
LnRlY2iCEnF1b3Rlcy5lenBjbHRkLmNvbYIkYWdyZWVtZW50cy5saW9uZmlzaGN5
YmVyc2VjdXJpdHkuY29tghNxdW90ZXMucGFyb251YmkuY29tghBzYWxlcy5mOHRl
Y2guY29tggwqLmpvbGVyYS5jb22CHnNhbGVzLnByZW1pZXItdGVjaG5vbG9naWVz
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1
c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0
LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAoEpP7senMURyW0uyTrAwfCtjUizyhfOtr/Gj
1J/PtesgWLe3BsD6V80r0H7VNeXxfaxRL4dVmxbF3Z/W+G8iqY/wNZwasrw5Z002
yP00TevPAO961a/SrEAWq4q5vzSUh8AKk/ceJqKfkbc0aXuzisE+yjWfzYXkdLnI
fEt1MVW2pEtXdQinM/amYQs/uXTmINby9vz2l13ERV0IgXVgjcJME+ZuOdqCW+Zd
7yaHBsbxxbjDMsByvRtY5FFwvk/YFKD3UQyxzlO3rslE8kQinVUeRwJAPHv5xdwf
R5nCFENKxE96T6D1etZouXC3y/YOBEhEK3oPp1/nke2Nei+GFA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0stuRoAa8BOsa84xXGvS
IjmLoOgpOOQxFsUintNU9BdwwQOv9KU5kn5ipvWSOex9OYfajPzP7aCQrAQCsxjO
dX4IAJyBhjuMmsMjdmx7cMLq7cMNIhTgaVeY4beoNsWX8L8oHSARiA2IAZCt6taR
cNoYVcTJ+fK5/zKERFnLVRUpMi7YSvajAaB2+NltvIfUAQCkvNWgWmaoyRy9UuQ8
9EbCCuwdNEJpm8+XCXBK9CwyFGg02iffoA8GEkrFUQEvoUTbumsdr4iYHXIzybgs
XLFRoJV4zf7w4COHtfnp9wcp9qMOdBM1KaFv3iqDmilknSVM1W2oNNJAD1+lgPLk
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13901447801039694552293136023156456462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zomentum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26610359491039284476571982657106638956084745599506026499913604462706795884810585970952023737769859358393103593705068990741997627984476252859528834369571457488203613874215015931576532029418599325749937407907135954496715256898848725894735701452727201646604393600022373383462073635394975732240329670377808820470579442080446442197945410294895397171745362948602280397858912970515162277336208254536954328155232727476020752774455387617985234166145746538967518656153243165966841630401559560810353893901500684083039176256293799678017207593018275514033557962046360901215317749210762754905193976669053042526117916014720115205147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9724a575d484c87e4e4c81a878276ac69992dd78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zomentum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventes.informatiqueamerix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivercitytech.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.alwaysnetworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.cutec.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.shiftlogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.procano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proposals.concept-its.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.westviewit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.uptimesolutions.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.icisupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proposals.shawcsit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.justrightcomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genuinetechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.bespoke.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.ezpcltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agreements.lionfishcybersecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.paronubi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.f8tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jolera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.premier-technologies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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