gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:5e:9c:5b:c2:5f:6c:22:92:59:7b:27:1f:0a:0a:01 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:5e:9c:5b:c2:5f:6c:22:92:59:7b:27:1f:0a:0a:01
Serial Number (int): 16441983179937673242087785104442788353
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:64:e8:f4:6e:ed:49:fc:30:c8:78:08:68:50:1e:b5:69:28:6e:5f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): de:30:b7:e8:4d:97:ec:26:1d:68:e1:ad:40:ac:f0:52:35:9e:48:13
Fingerprint (sha256): d6:ef:74:6d:01:1e:84:e9:25:38:29:0e:08:0a:f5:37:5d:ad:12:a7:a2:11:c9:cc:2f:a2:c4:4e:23:81:e4:60

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud
gpowmwpstftest.lb.anuvu.cloud

Other certificates including the domain name anuvu.cloud

(limited to 100 certificates)
serversiderendering.lb.anuvu.cloud
agiulutvunittest.hatchery-s3.lb.anuvu.cloud
97ohk0ezec2-tftest-01.tftt.us1.lb.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.sg.anuvu.cloud
xui1re5pcicd-artifact.lb.anuvu.cloud
cfr-mprtuam-01.cops.us1.pr.anuvu.cloud
788lmp1tunittest.hatchery-s3.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
45j9ndxfec2-flock-01.tftt.us1.lb.anuvu.cloud
48ir18ctout.hatchery-s3.lb.anuvu.cloud
aqvbcfr-afgo-01.afgo.us1.lb.anuvu.cloud
agiulutvtechdoc.lb.anuvu.cloud
qqvjg0cvtechdoc.lb.anuvu.cloud
uzr10u7dout.hatchery-s3.lb.anuvu.cloud
i67xgwv6tototest.lb.anuvu.cloud
agiulutvec2-flock-01.tftt.us1.lb.anuvu.cloud
i1mpbtzmtechdoc.lb.anuvu.cloud
l9uasxyjout.hatchery-s3.lb.anuvu.cloud
l9uasxyjunittest.hatchery-s3.lb.anuvu.cloud
vd2swzt5ec2-flock-01.tftt.us1.lb.anuvu.cloud
olpxtovmec2-tftest-01.tftt.us1.lb.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
zueshc6vunittest.hatchery-s3.lb.anuvu.cloud
788lmp1ttechdoc.lb.anuvu.cloud
o8yzztyzcicd-artifact.lb.anuvu.cloud
q9rri7c6out.hatchery-s3.lb.anuvu.cloud
0nxkq04wec2-tftest-01.tftt.us1.lb.anuvu.cloud
48ir18ctunittest.hatchery-s3.lb.anuvu.cloud
q9rri7c6techdoc.lb.anuvu.cloud
zueshc6vout.hatchery-s3.lb.anuvu.cloud
uzr10u7dunittest.hatchery-s3.lb.anuvu.cloud
vd2swzt5techdoc.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.pr.anuvu.cloud
gnbt01ectechdoc.lb.anuvu.cloud
rysru196tototest.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.pr.anuvu.cloud
test-pip-registry.lb.anuvu.cloud
5e0eyzrnec2-tftest-01.tftt.us1.lb.anuvu.cloud
l9uasxyjtechdoc.lb.anuvu.cloud
uazxqkdpec2-tftest-01.tftt.us1.lb.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
i1mpbtzmout.hatchery-s3.lb.anuvu.cloud
iixsexpeec2-tftest-01.tftt.us1.lb.anuvu.cloud
vd2swzt5out.hatchery-s3.lb.anuvu.cloud
test-pip-registry.lb.anuvu.cloud
vd2swzt5unittest.hatchery-s3.lb.anuvu.cloud
l9uasxyjec2-flock-01.tftt.us1.lb.anuvu.cloud
cfr-mprtuam-01.cops.us1.pr.anuvu.cloud
gnbt01ecunittest.hatchery-s3.lb.anuvu.cloud
q9rri7c6ec2-flock-01.tftt.us1.lb.anuvu.cloud
q9rri7c6unittest.hatchery-s3.lb.anuvu.cloud
48ir18ctec2-flock-01.tftt.us1.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.pr.anuvu.cloud
788lmp1tec2-flock-01.tftt.us1.lb.anuvu.cloud
48ir18cttechdoc.lb.anuvu.cloud
45j9ndxfunittest.hatchery-s3.lb.anuvu.cloud
i1mpbtzmec2-flock-01.tftt.us1.lb.anuvu.cloud
45j9ndxftechdoc.lb.anuvu.cloud
agiulutvout.hatchery-s3.lb.anuvu.cloud
h1ey9drjec2-tftest-01.tftt.us1.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.pr.anuvu.cloud
y98h1ndwtototest.lb.anuvu.cloud
zueshc6vec2-flock-01.tftt.us1.lb.anuvu.cloud
t4pdovrlcicd-artifact.lb.anuvu.cloud
sr0mltrjec2-tftest-01.tftt.us1.lb.anuvu.cloud
dwix1v91cicd-artifact.lb.anuvu.cloud
zueshc6vtechdoc.lb.anuvu.cloud
xabv7pceec2-tftest-01.tftt.us1.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.sg.anuvu.cloud
isxu-tftest-alternate-s3-static.lb.anuvu.cloud
i1mpbtzmunittest.hatchery-s3.lb.anuvu.cloud
uzr10u7dec2-flock-01.tftt.us1.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
vngsqvu5tototest.lb.anuvu.cloud
cfr-mprtuam-01.cops.us1.pr.anuvu.cloud
cfr-mprtfji-01.cops.us1.sg.anuvu.cloud
gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud
aqvbcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
x5fk5edgcicd-artifact.lb.anuvu.cloud
788lmp1tout.hatchery-s3.lb.anuvu.cloud
test-pip-registry.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.pr.anuvu.cloud
45j9ndxfout.hatchery-s3.lb.anuvu.cloud
cfr-mprtuam-01.cops.us1.pr.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.sg.anuvu.cloud
5sg9q3uttototest.lb.anuvu.cloud
aqvbalb-afrapimk-01.afgo.us1.lb.anuvu.cloud
ild4cfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
test-pip-registry.lb.anuvu.cloud
gnbt01ecout.hatchery-s3.lb.anuvu.cloud
aqvbcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
uzr10u7dtechdoc.lb.anuvu.cloud

Certificate

The complete raw certificate details for gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIQDF6cW8JfbCKSWXsnHwoKATANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMDMwMDAwMDBaFw0yMzAxMDEy
MzU5NTlaMDkxNzA1BgNVBAMTLmdwb3dtd3BzZWMyLXRmdGVzdC0wMS50ZnRzdC51
czEubGIuYW51dnUuY2xvdWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDhYxqalm6wZhmF2YA1tUPMHDSXN/EL11fK0+fHQnMT1jBOf9cJ2vrhaBziFDAT
17UKm3Zfiocc5hXIKev0KTspk9l9KUgVNUhUziW/yAwZDUDb8jWzKV87n/YyxQ4Z
QBEfG3+TNabrbeKXfCEM08B/7Njcui0Bzk+q1ssHb+aAgmjs42fADyZWqmx/sfcD
CoROL6g7hs+xXMDfHkMGGmZF4vHVdhu8vurFRsEC1b34ayJHh1poIc9B8eiD8Uft
MztbfpYC878Cs0C3u7qO591KV3ikuSwX33c0PUpR11PK2mXnkPqBhoCWa1kvHRQr
cFv385A4n52XZj5wRqrhW/gRAgMBAAGjggG7MIIBtzAfBgNVHSMEGDAWgBRZpGYG
UqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUFGTo9G7tSfwwyHgIaFAetWkobl8w
WAYDVR0RBFEwT4IuZ3Bvd213cHNlYzItdGZ0ZXN0LTAxLnRmdHN0LnVzMS5sYi5h
bnV2dS5jbG91ZIIdZ3Bvd213cHN0ZnRlc3QubGIuYW51dnUuY2xvdWQwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8E
NjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex
Yi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYI
KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2Bggr
BgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu
Y3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN
AQELBQADggEBAKoUNem5xZ+RogWToeR/5bhwlscu9hrFzzzGE/rWRdpIg2I52njH
iuzMW/POT/kGXs68rWABKOFg8DljbMoR6BxrBaIlJeHziHjIs9emizyQ+3wL9e5Q
HXmuRkB4WZSbCOoUnKPX6o47iZ6/rZrvpeC5RWMPSOD4Z20oYLnhUfwqeaMyxEa7
lRYM0r/9v6MjZzCMTLjUmkyr1C5Mw4KfJQUfDwhLBCn+x4roHSrz+1Aet2Nj7ONx
cZ76wVu6mXmfaZx+vMmXwfV6s58YhUbQRry+qjRvFXRstNEkHVIsoWW/tgkqwrb+
9NdE3Twg9vMmvUs4/1Za3jAb92GIXJCq5ZM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WMampZusGYZhdmANbVD
zBw0lzfxC9dXytPnx0JzE9YwTn/XCdr64Wgc4hQwE9e1Cpt2X4qHHOYVyCnr9Ck7
KZPZfSlIFTVIVM4lv8gMGQ1A2/I1sylfO5/2MsUOGUARHxt/kzWm623il3whDNPA
f+zY3LotAc5PqtbLB2/mgIJo7ONnwA8mVqpsf7H3AwqETi+oO4bPsVzA3x5DBhpm
ReLx1XYbvL7qxUbBAtW9+GsiR4daaCHPQfHog/FH7TM7W36WAvO/ArNAt7u6jufd
Sld4pLksF993ND1KUddTytpl55D6gYaAlmtZLx0UK3Bb9/OQOJ+dl2Y+cEaq4Vv4
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16441983179937673242087785104442788353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28452488582374613594683878672647142213784294154757738814393764036847265590587818353628861810277183988632095042973147993345570885813024231420165182000054565017801676760380301906228335485000006946299393504226849913833357830638386210748963311548640798012499993157398146287166394891794141047978527417940726529143102138317105943493326875299032829915375818590871676624147420559953452040417635155628775933876693615082073802377663737875133417332421957554345051612813048253550697149564941505362670552930801768575697467838757039767434935113465282039450282455417225105471585092405973641438966829994229311439736596032472643008529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1464e8f46eed49fc30c8780868501eb569286e5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpowmwpsec2-tftest-01.tftst.us1.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpowmwpstftest.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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