*.op42.bastille.cloud
Issued by Amazon
About this certificate
This digital certificate with serial number 0f:ca:ea:a7:ab:d7:eb:b5:6a:02:ff:e5:39:59:a7:25 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.op42.bastille.cloud
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:ca:ea:a7:ab:d7:eb:b5:6a:02:ff:e5:39:59:a7:25Serial Number (int): 20992023270331136480834100951850264357
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a8:83:37:d6:fb:bf:36:18:25:31:35:8e:48:05:08:5a:1f:93:dd:d5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): b3:34:27:c7:3f:88:1f:ab:1d:3f:0b:0f:32:59:02:98:de:22:7b:99
Fingerprint (sha256): b1:22:7a:7f:9a:9a:c1:1f:00:7a:a8:44:a2:07:0a:43:c9:04:c6:6c:99:ed:2a:54:17:02:41:85:40:13:9b:b4
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate *.op42.bastille.cloud
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.op42.bastille.cloud
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.op42.bastille.cloud
Other certificates including the domain name bastille.cloud
(limited to 100 certificates)
www.oxidanes.com
*.op1031.bastille.cloud
harimart.in
painel.appsuabreja.com
*.op1030.bastille.cloud
drinksome.beer
fantasyfightnow.com
*.op1033.bastille.cloud
*.op1001.bastille.cloud
op1032.bastille.cloud
copyhaste.com
*.op1030.bastille.cloud
*.op1030.bastille.cloud
*.op1026.bastille.cloud
*.op1032.bastille.cloud
albertodenatale.com
arisahirata.com
howbusy.live
anilrv.com
api.m2io.net
autonum.app
*.op1030.bastille.cloud
*.op100.bastille.cloud
*.op1026.bastille.cloud
links.bucleinfinito.com.ar
autonum.app
impact.academyservices.com.au
op1001.bastille.cloud
rapnext.app
admin.op1026.bastille.cloud
*.op1026.bastille.cloud
app.haroldwaste.com
dentologicom.smartcom.mx
op1030.bastille.cloud
*.op1001.bastille.cloud
asset.renzha.net
op1032.bastille.cloud
6ixpods.ca
eu-geo.acasus.com
www.finesse.ltd
op1033.bastille.cloud
*.op1030.bastille.cloud
gibsonia.cc
*.op1032.bastille.cloud
op1001.bastille.cloud
42sanantonio.com
*.op1032.bastille.cloud
www.methodist.tk
diagnostics.op1001.bastille.cloud
*.op1033.bastille.cloud
op1026.bastille.cloud
breezebox.asia
*.op1030.bastille.cloud
*.op42.bastille.cloud
go2kart.com.br
www.rschipstech.com
www.canwork.io
*.op1026.bastille.cloud
*.op1032.bastille.cloud
www.duecentodigregorio.it
uk-vh-mob-megapush.okcupid.pp.ua
*.op100.bastille.cloud
servicemall.in
*.op1001.bastille.cloud
diagnostics.op1026.bastille.cloud
www.emcantomeu.com.br
jobban.info
op1030.bastille.cloud
admin.op42.bastille.cloud
*.op42.bastille.cloud
*.op1026.bastille.cloud
kuyllur.com
stories.thecompasschurch.net
partner.plumboard.io
diagnostics.op1026.bastille.cloud
www.ugurvurgun.com
*.op42.bastille.cloud
asset.renzha.net
*.op1001.bastille.cloud
tonybrands.com
nicolaas.dev
studioscreation.com
42sanantonio.com
www.vishalsingh.xyz
*.op1031.bastille.cloud
op42.bastille.cloud
*.op1026.bastille.cloud
*.op1032.bastille.cloud
www.casperhalloweenparty.com
mattchessman.com
op1031.bastille.cloud
www.morphylabs.com
fb-gm.club
approvals.shineweddinginvitations.com
op42.bastille.cloud
kateandalex.weddingcheckin.com
alexshaw.tv
miitapp.co
www.malexcob.com
*.op42.bastille.cloud
*.op1031.bastille.cloud
harimart.in
painel.appsuabreja.com
*.op1030.bastille.cloud
drinksome.beer
fantasyfightnow.com
*.op1033.bastille.cloud
*.op1001.bastille.cloud
op1032.bastille.cloud
copyhaste.com
*.op1030.bastille.cloud
*.op1030.bastille.cloud
*.op1026.bastille.cloud
*.op1032.bastille.cloud
albertodenatale.com
arisahirata.com
howbusy.live
anilrv.com
api.m2io.net
autonum.app
*.op1030.bastille.cloud
*.op100.bastille.cloud
*.op1026.bastille.cloud
links.bucleinfinito.com.ar
autonum.app
impact.academyservices.com.au
op1001.bastille.cloud
rapnext.app
admin.op1026.bastille.cloud
*.op1026.bastille.cloud
app.haroldwaste.com
dentologicom.smartcom.mx
op1030.bastille.cloud
*.op1001.bastille.cloud
asset.renzha.net
op1032.bastille.cloud
6ixpods.ca
eu-geo.acasus.com
www.finesse.ltd
op1033.bastille.cloud
*.op1030.bastille.cloud
gibsonia.cc
*.op1032.bastille.cloud
op1001.bastille.cloud
42sanantonio.com
*.op1032.bastille.cloud
www.methodist.tk
diagnostics.op1001.bastille.cloud
*.op1033.bastille.cloud
op1026.bastille.cloud
breezebox.asia
*.op1030.bastille.cloud
*.op42.bastille.cloud
go2kart.com.br
www.rschipstech.com
www.canwork.io
*.op1026.bastille.cloud
*.op1032.bastille.cloud
www.duecentodigregorio.it
uk-vh-mob-megapush.okcupid.pp.ua
*.op100.bastille.cloud
servicemall.in
*.op1001.bastille.cloud
diagnostics.op1026.bastille.cloud
www.emcantomeu.com.br
jobban.info
op1030.bastille.cloud
admin.op42.bastille.cloud
*.op42.bastille.cloud
*.op1026.bastille.cloud
kuyllur.com
stories.thecompasschurch.net
partner.plumboard.io
diagnostics.op1026.bastille.cloud
www.ugurvurgun.com
*.op42.bastille.cloud
asset.renzha.net
*.op1001.bastille.cloud
tonybrands.com
nicolaas.dev
studioscreation.com
42sanantonio.com
www.vishalsingh.xyz
*.op1031.bastille.cloud
op42.bastille.cloud
*.op1026.bastille.cloud
*.op1032.bastille.cloud
www.casperhalloweenparty.com
mattchessman.com
op1031.bastille.cloud
www.morphylabs.com
fb-gm.club
approvals.shineweddinginvitations.com
op42.bastille.cloud
kateandalex.weddingcheckin.com
alexshaw.tv
miitapp.co
www.malexcob.com
*.op42.bastille.cloud
Certificate
The complete raw certificate details for *.op42.bastille.cloud in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgDCCA2igAwIBAgIQD8rqp6vX67VqAv/lOVmnJTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA4MDEwMDAwMDBaFw0yMDA5MDEx MjAwMDBaMCAxHjAcBgNVBAMMFSoub3A0Mi5iYXN0aWxsZS5jbG91ZDCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALJIBOyi7nYsIfvjXKDv9TmRfb3jKsoY kLgex0SRCEOXgtVJUWuqh0G996mbX/Ju7TLdcy6umRChB0Iv+OtS/kpOC46erajc lFZ90kiTqGWLYONDq2DhbfHzoZrYOw9uWfby1AlyBlufcArXEjer1z2HLiRbgsRd NL/AI54NZNBsdsWhKd79Bo9WuTjsAb0oHKJ8iPPw/v/9PiWtsaKDHyO3HmSOftaZ 9e1Aa0O9yik/k+XsoiKC9ZkitEY26weTuW1/btXvFSjc9T1is5ZBLAgWHgNmXCee xc4YQLdSwdIcXKWo/3XAzCyxHub3dGEjXe4CE5MCHgtlZTcKGms7w8kCAwEAAaOC AY4wggGKMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW BBSogzfW+782GCUxNY5IBQhaH5Pd1TAgBgNVHREEGTAXghUqLm9wNDIuYmFzdGls bGUuY2xvdWQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpv bnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPLtoqwUo47KKStq V+KSdeVhmk3/777YScPvU5DeTlg8MZWxi23eXqjthIkPPhy+78zPKl6OE//ecJAs ES2yfjBHJ0Vh6wPQ4uzkrJnb8j/YJSopMwhuT2a0N6rCtc8njlXhLkTcgBCSaVVa Ejx10reVomGlyjzDEKsKK8XcViCCHE4kU9C78FxEixipn3zK8eO+YiHuA4VLKMtn oGbUCxpz0kUml61OlOGCPr9JuHMeG+Dart6BLOWk9ONZ7qZkqtNPslLVYu2u4Y3p 4QFQxkFSFPn3qsjiBnuDbv6aAm9UOTsiQ5UwWO+VSXVZgfd0qtiwRRLOFf+ULUxO qIYjSQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskgE7KLudiwh++NcoO/1 OZF9veMqyhiQuB7HRJEIQ5eC1UlRa6qHQb33qZtf8m7tMt1zLq6ZEKEHQi/461L+ Sk4Ljp6tqNyUVn3SSJOoZYtg40OrYOFt8fOhmtg7D25Z9vLUCXIGW59wCtcSN6vX PYcuJFuCxF00v8Ajng1k0Gx2xaEp3v0Gj1a5OOwBvSgconyI8/D+//0+Ja2xooMf I7ceZI5+1pn17UBrQ73KKT+T5eyiIoL1mSK0RjbrB5O5bX9u1e8VKNz1PWKzlkEs CBYeA2ZcJ57FzhhAt1LB0hxcpaj/dcDMLLEe5vd0YSNd7gITkwIeC2VlNwoaazvD yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20992023270331136480834100951850264357 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.op42.bastille.cloud' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22505932292749593812432598486385548457379822164458324214947843296834964521096496275423715458206233941682050782842888096480673452114006998678353867987940928510781175720522809055402488933395683698647678636016503751536967536631493790474487607520993005218169792739551971075542599962303770187448765127294036045046811155895968881781811863373559726360328397071344758384926503540688151559089182864478821104788753473485185390223241490152960244795755592212173728277270644584950591677129806493648827891619530988377872994607275983234965345866211383641801937631380757199832805443138878348904448464002693223736075629066630817629129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a88337d6fbbf36182531358e4805085a1f93ddd5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.op42.bastille.cloud' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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