fibr.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:fd:b1:39:09:3e:c3:41:3c:fb:bf:85:2d:50:b8:11 was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fibr.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:fd:b1:39:09:3e:c3:41:3c:fb:bf:85:2d:50:b8:11
Serial Number (int): 3975701602145493348663164626770376721
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cc:a1:51:4c:9b:f4:1d:6d:03:94:39:21:02:87:c4:58:00:23:ab:36
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3e:6b:06:ae:d5:14:27:75:60:a4:3c:35:21:a7:03:fb:a7:1a:3d:a7
Fingerprint (sha256): c7:b0:26:6b:55:a5:19:da:bd:0b:7a:38:80:be:9f:9f:d1:00:6e:d2:e5:9f:61:ae:c9:93:7b:d4:0c:81:a0:6a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate fibr.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fibr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fibr.com
www.atbank.at
www.fibrbank.com
atbank.nl
atbank.co.uk
fibrbank.com
atbank.at
www.fibr.com
fibr.co.uk
www.atbank.de
www.fibr.co.uk
www.amsterdamtradebank.com
amsterdamtradebank.com
www.atbank.nl
www.atbank.co.uk
atbank.de

Other certificates including the domain name fibr.com

(limited to 100 certificates)
image.audi-hirlevel.hu
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
sni.cloudflaressl.com
image.audi-hirlevel.hu
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-10-s50.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
fibr.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
san-10-s50.tlsprovisioning.exacttarget.com
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
image.audi-hirlevel.hu
assets.prd.fibr.com
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-10-s50.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
san-10-s50.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
savings.prd.fibr.com

Certificate

The complete raw certificate details for fibr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgIQAv2xOQk+w0E8+7+FLVC4ETANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA2MDkwMDAwMDBaFw0yMzA3MDgy
MzU5NTlaMBMxETAPBgNVBAMTCGZpYnIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxtKop60KAtsUl10gb0uAjoLOmkKgtNqOTPDQV1Rg/lNqla9W
EeSIXTOszTAg50n+6LusZOqWepT/h4lCHZzn/bqUKkvxpgog9rihjGAI4n+Rgi3H
fSHnJF0iO/JJvwf9foAcp9iqKYD9noNQ+tM2KEigx6wTku55OfwMbHX07guIY32Z
1ZB+lz1aKSkFNlDvnovpkIRKRGXj/L9Ufd5b8qP51xTIvPWAMmXhpRlu46SH1dyX
4a/Kh3knUJUTUvI0HOoWvhJe1Uudk1gcmk1TaEuSl/AkH3mTgISY81SfZUeJYOWp
EEm4QQigPAPk0+8fYCmT3pn7m25ktzB7kBGKaQIDAQABo4ID0zCCA88wHwYDVR0j
BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFMyhUUyb9B1tA5Q5
IQKHxFgAI6s2MIIBAQYDVR0RBIH5MIH2gghmaWJyLmNvbYINd3d3LmF0YmFuay5h
dIIQd3d3LmZpYnJiYW5rLmNvbYIJYXRiYW5rLm5sggxhdGJhbmsuY28udWuCDGZp
YnJiYW5rLmNvbYIJYXRiYW5rLmF0ggx3d3cuZmlici5jb22CCmZpYnIuY28udWuC
DXd3dy5hdGJhbmsuZGWCDnd3dy5maWJyLmNvLnVrghp3d3cuYW1zdGVyZGFtdHJh
ZGViYW5rLmNvbYIWYW1zdGVyZGFtdHJhZGViYW5rLmNvbYINd3d3LmF0YmFuay5u
bIIQd3d3LmF0YmFuay5jby51a4IJYXRiYW5rLmRlMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYs
aHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYD
VR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0
dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMB
Af8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCt9776fP8QyIudPZwe
PhhqtGcpXc+xDCTKhYY069yCigAAAYFKG3/lAAAEAwBHMEUCIDifjWXZEIMTA9Og
ZMSb75eJvhED/v2ORebcJ5h/YwGgAiEA6W6/QaUaJLFvIqvaq57icw2RzbeCoC3V
MAKPgnOEmtwAdgA1zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYFK
G3+yAAAEAwBHMEUCIQCH24lw2XtHp/OA6gXbR+ImNLeYe3n8vsXIrUh88D8BswIg
DBjJCGDtnttWLOmhcjN0FR2BXDHXOg3C6aR80eMModoAdgCzc3cH4YRQ+GOG1gWp
3BEJSnktsWcMC4fc8AMOeTalmgAAAYFKG3/uAAAEAwBHMEUCICKlzHLVMsfanPfD
hiIKpR1/onbAE9WWqwfvKcRVknv/AiEAx5alosdXAXPKWH/Y3wwu5LBMjSWG/zql
ewgDxavlI78wDQYJKoZIhvcNAQELBQADggEBALU7uRq79o7nyZ7Le2P9EP58ipML
tyxL3HQTIRtTKlyMmQY/rydMbvCMU8O+h/C/tBxn6K7PRNGzZUC8Fu5OfenKO97G
OUiMykA1RVjKN8+TN161R3jY3g4xgq4p3gI7t3ZpGKShHcXMEmNBwMjMGcns6Uhq
li4P4wfSGqsgwH1qmtGuI/jFuYqDtoKNpo6OLmxRfKjI9Qiq0KyF6UUlLHav0/lx
S8UXlS+jDcqM51AmafBxsiTuvt6CPos0I6kS22AwOswOwOD33zBrV7GWlI6nnqfv
2STnX/gVqFE+S2gw/gSjhO6sR9OJIWrVLPX/3m4YBi8N4d6AQ6nGIsAYj3Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtKop60KAtsUl10gb0uA
joLOmkKgtNqOTPDQV1Rg/lNqla9WEeSIXTOszTAg50n+6LusZOqWepT/h4lCHZzn
/bqUKkvxpgog9rihjGAI4n+Rgi3HfSHnJF0iO/JJvwf9foAcp9iqKYD9noNQ+tM2
KEigx6wTku55OfwMbHX07guIY32Z1ZB+lz1aKSkFNlDvnovpkIRKRGXj/L9Ufd5b
8qP51xTIvPWAMmXhpRlu46SH1dyX4a/Kh3knUJUTUvI0HOoWvhJe1Uudk1gcmk1T
aEuSl/AkH3mTgISY81SfZUeJYOWpEEm4QQigPAPk0+8fYCmT3pn7m25ktzB7kBGK
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3975701602145493348663164626770376721
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fibr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25099064113417155225816457103798880055815040410240512569092335541711389798184790160061293417987514887559784236198549937542419745839415315427761764695508951970282260078749521000296087148715127710614305602190357699038287424550807630263426916122905934055693785946722580088677912396579064789149006569080777830484305675781259935663285071514615992602728201869424576431338578366240057761436508770737735852825935893251246175644311909875227778382562672710479026599325655922012654094354003637377260915665775310514723805594047992028566716014756008534938030353946601270566056458027061555199023703183580482374967059611717358160489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cca1514c9bf41d6d039439210287c4580023ab36
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibrbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsterdamtradebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamtradebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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