www.assoc-amazon.fr
- Amazon.com, Inc. -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 0e:61:c9:a0:1d:98:4c:27:35:70:02:7c:ec:3b:a2:b8 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Amazon.com, Inc.
Organization:
Amazon.com, Inc.
State / Province:
Washington
Locality: Seattle
Country: US
Locality: Seattle
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:61:c9:a0:1d:98:4c:27:35:70:02:7c:ec:3b:a2:b8Serial Number (int): 19116934186262218401196713364646765240
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b4:ca:b3:41:ab:a7:f8:bd:b1:e8:61:21:33:c7:db:a5:de:b9:7b:8b
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): d0:13:dc:6e:9e:c0:bc:d6:09:75:8a:d2:28:fa:f7:d9:2d:fe:b6:4c
Fingerprint (sha256): cd:04:71:32:d0:15:12:2f:e1:ed:a0:50:cc:04:78:c3:1b:58:fb:a0:d6:dd:4d:17:13:08:64:29:18:dc:08:a4
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate www.assoc-amazon.fr
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.assoc-amazon.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ir-fr.amazon-adsystem.com
ir-in.amazon-adsystem.com
www.assoc-amazon.fr
ir-in.amazon-adsystem.com
www.assoc-amazon.fr
Other certificates including the domain name assoc-amazon.fr
(limited to 100 certificates)
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
ws.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
wms.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
ws.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
wms.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
www.assoc-amazon.fr
wms-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.fr
Certificate
The complete raw certificate details for www.assoc-amazon.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIQDmHJoB2YTCc1cAJ87DuiuDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTgwNjExMDAwMDAwWhcNMTkwNjMwMTIw MDAwWjBtMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE BxMHU2VhdHRsZTEZMBcGA1UEChMQQW1hem9uLmNvbSwgSW5jLjEcMBoGA1UEAxMT d3d3LmFzc29jLWFtYXpvbi5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJD7l+1mKeQMIdSJ4crOVwNMSdHHknbvb3aVCYiTsJ098DN+BraPk6xMwNCh szn7CSDKAK1Gmp/pdPy399LoJ2/J/6HExryNi3xA5ueFk/3KNh0ac65XWrMBoHAN WxHD8w3UvH/+NP7dvLA7LxpSLltlZ21pdMtT/yU3I7Iy3jIB1cGTuF97u6LSfswZ TKscYRcte6PX3Kqp4boYvJSpCsoYAwFkmTWSk0aS+bOUE1Ee1eZvXa07qj5cOaZ4 G88ZXcIwSS9TfAxpl80IK6ePLZZS2ExPvEHcMo19mJauD6urJs5AFWxGPM7kHoQL SkSwqitLREJhlxd0qdG7xh07RUkCAwEAAaOCAiYwggIiMB8GA1UdIwQYMBaAFCRu Ky3QapJRUSVpAaqaR6aJ50AgMB0GA1UdDgQWBBS0yrNBq6f4vbHoYSEzx9ul3rl7 izBUBgNVHREETTBLghlpci1mci5hbWF6b24tYWRzeXN0ZW0uY29tghlpci1pbi5h bWF6b24tYWRzeXN0ZW0uY29tghN3d3cuYXNzb2MtYW1hem9uLmZyMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdwYDVR0fBHAw bjA1oDOgMYYvaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFs Q0FHMi5jcmwwNaAzoDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy dEdsb2JhbENBRzIuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHQG CCsGAQUFBwEBBGgwZjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu Y29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln aUNlcnRHbG9iYWxDQUcyLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASF2Y68gJBYVg3CAJpETVCWgYDo2aV/7eK 1OmCQjJhjcxVYzv/SwRlZZ7QLrw7MKhQqvmZVAdqFU/MOolU1zOeKAaLgG/z6QFg tBjj7oFWdaX6e73Jb+2Ao0KUtUYnUsv96Oqv9IJrgHC+9sxi4T4HR77N8IUhO6Q1 yT1Px4WBKk5MamdZlmbSru/iG5e3ULqO41mxWM2jVg2M8OA5Yau8w2ZuoK0cgnLb 7lxqgnyXihOwp1BYPomaPi6aMPIvSMdYkJJ19eYRFzGyGJjzGS8h82GjlQv4wAVc MM3uBZutO0HvWuMIjCgEX23O9ud6md6r7SMt2wYMuCRa6jaoZHPL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPuX7WYp5Awh1Inhys5X A0xJ0ceSdu9vdpUJiJOwnT3wM34Gto+TrEzA0KGzOfsJIMoArUaan+l0/Lf30ugn b8n/ocTGvI2LfEDm54WT/co2HRpzrldaswGgcA1bEcPzDdS8f/40/t28sDsvGlIu W2VnbWl0y1P/JTcjsjLeMgHVwZO4X3u7otJ+zBlMqxxhFy17o9fcqqnhuhi8lKkK yhgDAWSZNZKTRpL5s5QTUR7V5m9drTuqPlw5pngbzxldwjBJL1N8DGmXzQgrp48t llLYTE+8QdwyjX2Ylq4Pq6smzkAVbEY8zuQehAtKRLCqK0tEQmGXF3Sp0bvGHTtF SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19116934186262218401196713364646765240 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.assoc-amazon.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18302381277261440078492200084078930200474694723020239464478959466508199523048369444000425854854778047557262780019291380153471760671494397820383669806638819745757830326593052578105776959085708990378938758675313973268661449068701282958416433932954919534616631747006988002352056544675460467051204573810808776899876252164583387482616266139098526220034511220980450618908363736553769103687290007373713078970946422306389413743342799206397862102177920858290962300634970369020899319217991673462903557501518355792592667652628563845207719658001905924443313125381361950361601907315856148179814551778922820558976892583801073124681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b4cab341aba7f8bdb1e8612133c7dba5deb97b8b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-fr.amazon-adsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir-in.amazon-adsystem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assoc-amazon.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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