stg-mm.lower-getty.cloud
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:2a:32:0a:20:f3:11:4a:24:32:13:b5:ec:7b:7d:5f was issued on by Amazon.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stg-mm.lower-getty.cloud
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:2a:32:0a:20:f3:11:4a:24:32:13:b5:ec:7b:7d:5fSerial Number (int): 18828283332006463643562989121156382047
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 7e:cc:f8:bc:63:36:ac:c7:da:78:42:2e:a0:fe:6f:2c:ab:97:45:41
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): ab:67:5e:48:21:9c:03:46:19:31:32:18:87:54:96:b1:0d:26:40:7a
Fingerprint (sha256): df:34:23:87:92:91:ce:a1:3d:fd:7a:f7:ac:5b:68:9f:af:cc:e5:74:c5:c9:5a:90:84:e8:80:83:a3:2e:69:6b
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate stg-mm.lower-getty.cloud
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stg-mm.lower-getty.cloud
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stg-mm.lower-getty.cloud
mm.stage-gettyimages.com
stg-mm.stage-gettyimages.com
origin-staging-mm.gettyimages.com
staging-mm.gettyimages.com
mm.stage-gettyimages.com
stg-mm.stage-gettyimages.com
origin-staging-mm.gettyimages.com
staging-mm.gettyimages.com
Other certificates including the domain name lower-getty.cloud
(limited to 100 certificates)
lower-customcontent.stage-gettyimages.com
use1-unipassthru.lower-getty.cloud
wildcard.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-in.lower-getty.cloud
usw2-unipassthru.lower-getty.cloud
wildcard.lower-getty.cloud
stg-in.lower-getty.cloud
wildcard.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
partnerportal.lower-getty.cloud
partnerportal.lower-getty.cloud
secondary-stg-mm.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
stg-in.lower-getty.cloud
metrics.usw2.lower-getty.cloud
wildcard.lower-getty.cloud
*.lower-getty.cloud
customcontent.lower-getty.cloud
stg-mm.lower-getty.cloud
usw2-stage-unipassthru.lower-getty.cloud
*.lower-getty.cloud
stg-in.lower-getty.cloud
stg-in.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
wildcard.lower-getty.cloud
stg-mm.lower-getty.cloud
usw2-unipassthru.lower-getty.cloud
stg-mms-api.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
stg-in.lower-getty.cloud
secondary-stg-mm.lower-getty.cloud
*.lower-getty.cloud
wildcard.splunk.lower-getty.cloud
customcontent.lower-getty.cloud
stg-in.lower-getty.cloud
wildcard.lower-getty.cloud
appdev-platform.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
lower-customcontent.stage-gettyimages.com
*.asset.lower-getty.cloud
*.asset.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
customcontent.stage-gettyimages.com
lower-customcontent.stage-gettyimages.com
appdev-platform.lower-getty.cloud
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
partnerportal.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
stg-in.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
customcontent.lower-getty.cloud
use1-unipassthru.lower-getty.cloud
*.asset.lower-getty.cloud
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
stg-mm.lower-getty.cloud
*.lower-getty.cloud
wildcard.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
secondary-stg-in.lower-getty.cloud
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
*.asset.lower-getty.cloud
splunk.lower-getty.cloud
wildcard.splunk.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-mms-api.lower-getty.cloud
partnerportal.lower-getty.cloud
stg-mms-ws.lower-getty.cloud
*.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-in.lower-getty.cloud
*.asset.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
use1-unipassthru.lower-getty.cloud
wildcard.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-in.lower-getty.cloud
usw2-unipassthru.lower-getty.cloud
wildcard.lower-getty.cloud
stg-in.lower-getty.cloud
wildcard.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
partnerportal.lower-getty.cloud
partnerportal.lower-getty.cloud
secondary-stg-mm.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
stg-in.lower-getty.cloud
metrics.usw2.lower-getty.cloud
wildcard.lower-getty.cloud
*.lower-getty.cloud
customcontent.lower-getty.cloud
stg-mm.lower-getty.cloud
usw2-stage-unipassthru.lower-getty.cloud
*.lower-getty.cloud
stg-in.lower-getty.cloud
stg-in.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
wildcard.lower-getty.cloud
stg-mm.lower-getty.cloud
usw2-unipassthru.lower-getty.cloud
stg-mms-api.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
stg-in.lower-getty.cloud
secondary-stg-mm.lower-getty.cloud
*.lower-getty.cloud
wildcard.splunk.lower-getty.cloud
customcontent.lower-getty.cloud
stg-in.lower-getty.cloud
wildcard.lower-getty.cloud
appdev-platform.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
lower-customcontent.stage-gettyimages.com
*.asset.lower-getty.cloud
*.asset.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
customcontent.stage-gettyimages.com
lower-customcontent.stage-gettyimages.com
appdev-platform.lower-getty.cloud
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
partnerportal.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
stg-in.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
customcontent.lower-getty.cloud
use1-unipassthru.lower-getty.cloud
*.asset.lower-getty.cloud
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
stg-mm.lower-getty.cloud
*.lower-getty.cloud
wildcard.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
secondary-stg-in.lower-getty.cloud
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
*.asset.lower-getty.cloud
splunk.lower-getty.cloud
wildcard.splunk.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-mms-api.lower-getty.cloud
partnerportal.lower-getty.cloud
stg-mms-ws.lower-getty.cloud
*.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-in.lower-getty.cloud
*.asset.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
Certificate
The complete raw certificate details for stg-mm.lower-getty.cloud in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIQDioyCiDzEUokMhO17Ht9XzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA1MDkwMDAwMDBaFw0yMDA2MDkx MjAwMDBaMCMxITAfBgNVBAMTGHN0Zy1tbS5sb3dlci1nZXR0eS5jbG91ZDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPGUeV4Pc4SgILBWsIPdfABUxp0H g8jcqn24DtHyahrT9YYOQHEGGn0te5Geil+UYsoZCxwGNzV1mbohTZvyYVUcydvC Mk+zJwvBLwb/UEVaw3nb5i2iOE+1ikOb45NxUMZ9zeB+axEozKGCMr/HgZ2bmM0M Vqt9miS9RGnW9MjnL/cgcfdO+T/NjFvVPJqeuSRltvcDlh9GRFeHz8xOXacD6/PM 3BvF+5lvaaVimcmoJC8VTsZbvmiECANLuwG5QQcOwEfARs0B27NmLpz2FKsSxYp6 k2bNRBRD2/RdUEdoNEgTTsb0zDfe+InKKnhhkrJZh1I/Egmqg2sFvsZcDNECAwEA AaOCAv8wggL7MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud DgQWBBR+zPi8Yzasx9p4Qi6g/m8sq5dFQTCBnAYDVR0RBIGUMIGRghhzdGctbW0u bG93ZXItZ2V0dHkuY2xvdWSCGG1tLnN0YWdlLWdldHR5aW1hZ2VzLmNvbYIcc3Rn LW1tLnN0YWdlLWdldHR5aW1hZ2VzLmNvbYIhb3JpZ2luLXN0YWdpbmctbW0uZ2V0 dHlpbWFnZXMuY29tghpzdGFnaW5nLW1tLmdldHR5aW1hZ2VzLmNvbTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi LmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUH AQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVz dC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3Qu Y29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB 8wDxAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFqmfWjiQAA BAMARzBFAiA446bh8wt0oyHbPhJmVCSliaRBh0hblsDOjVgrjCIxjAIhAOy/tIR7 K380PW5ZeqknrP00/8HhVJC+ITNo17Df3SjIAHcAh3W/51l8+IxDmV+9827/Vo1H Vjb/SrVgwbTq/16ggw8AAAFqmfWgSwAABAMASDBGAiEAnxHFeFgoIhsJKkpfULY3 pp/j2Epc3aPKXxIKDwVcYyYCIQCvf8jAs7foHz6J0Qbr8McfOCL9C1tJFMuyFBzr tDdxHjANBgkqhkiG9w0BAQsFAAOCAQEASbtXm7OWEMKGpAiPKNdKAenqyrEdKOoI tV+4pyavf5Mi+BLqmkK9OlifyGxyDJJe2IrmH0v4JfXskxTk6hRnnCsiN/En1fF8 bnrOgr3/tR6DEZytcx6jrsIGlna9ccNF3zkqCZl9gQV7laOgyNzSl8PH91shy89I cnNNfaxw5pBN9X90Ans+k5Tjz7nTwL1LOuNOarAyyKGk3U5CozQo/Qfhahfpvorp 2+GFIegf+ME+hDeIC8HMy0OqeC25OeRvOmtOEY+NvUszVPXsUi9Kgb9M6v3MN2YO VgLFShbaFfnDaD2QhOWDsEG8dZ9onk+h6zQfKyCzGlCmKXRKLlxZrQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZR5Xg9zhKAgsFawg918 AFTGnQeDyNyqfbgO0fJqGtP1hg5AcQYafS17kZ6KX5RiyhkLHAY3NXWZuiFNm/Jh VRzJ28IyT7MnC8EvBv9QRVrDedvmLaI4T7WKQ5vjk3FQxn3N4H5rESjMoYIyv8eB nZuYzQxWq32aJL1Eadb0yOcv9yBx9075P82MW9U8mp65JGW29wOWH0ZEV4fPzE5d pwPr88zcG8X7mW9ppWKZyagkLxVOxlu+aIQIA0u7AblBBw7AR8BGzQHbs2YunPYU qxLFinqTZs1EFEPb9F1QR2g0SBNOxvTMN974icoqeGGSslmHUj8SCaqDawW+xlwM 0QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18828283332006463643562989121156382047 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg-mm.lower-getty.cloud' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30496646800109089527129295829081490078802999260210119195511339469530985803610749138761939169168627786214166282772552997239445943731565058899857973399658880466592892147200622074138678847966550022110461173880985660721897850769798638873745124723265571623166404353504660828607152561007691946613633374453383150518354005878983648957316772979752151548075737191359735889378247120659527666300848997913232872330884989753715253480677072912116613610374610433600844166934162753216229712642069255389149998731047440292199153937586817513498639972474580362734990201128456533577258189641393664448090624017665890522140928362887555845329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7eccf8bc6336acc7da78422ea0fe6f2cab974541 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (148 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-mm.lower-getty.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.stage-gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-mm.stage-gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-staging-mm.gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-mm.gettyimages.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a99f5a3890000040300473045022038e3a6e1f30b74a321db3e12665424a589a44187485b96c0ce8d582b8c22318c022100ecbfb4847b2b7f343d6e597aa927acfd34ffc1e15490be213368d7b0dfdd28c80077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a99f5a04b00000403004830460221009f11c5785828221b092a4a5f50b637a69fe3d84a5cdda3ca5f120a0f055c6326022100af7fc8c0b3b7e81f3e89d106ebf0c71f3822fd0b5b4914cbb2141cebb437711e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0049bb579bb39610c286a4088f28d74a01e9eacab11d28ea08b55fb8a726af7f9322f812ea9a42bd3a589fc86c720c925ed88ae61f4bf825f5ec9314e4ea14679c2b2237f127d5f17c6e7ace82bdffb51e83119cad731ea3aec2069676bd71c345df392a09997d81057b95a3a0c8dcd297c3c7f75b21cbcf4872734d7dac70e6904df57f74027b3e9394e3cfb9d3c0bd4b3ae34e6ab032c8a1a4dd4e42a33428fd07e16a17e9be8ae9dbe18521e81ff8c13e8437880bc1cccb43aa782db939e46f3a6b4e118f8dbd4b3354f5ec522f4a81bf4ceafdcc37660e5602c54a16da15f9c3683d9084e583b041bc759f689e4fa1eb341f2b20b31a50a629744a2e5c59ad