mp.op-kassa.fi
Issued by Amazon
About this certificate
This digital certificate with serial number 03:00:fc:bb:d9:4e:59:4e:1b:14:fc:72:fe:04:04:c2 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mp.op-kassa.fi
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:00:fc:bb:d9:4e:59:4e:1b:14:fc:72:fe:04:04:c2Serial Number (int): 3992810037494223083665682126933853378
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: fa:39:49:f8:78:85:24:4a:ab:02:fd:53:dc:d6:2b:53:b4:9d:07:0a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 99:fe:ee:a1:67:ba:36:d6:68:ff:1f:fc:ae:8f:73:56:18:dd:fb:ab
Fingerprint (sha256): e3:e6:9a:4a:35:45:8b:87:0c:f4:24:75:a5:d4:d6:bd:d0:17:e0:63:f2:be:3c:e6:ff:dc:b2:f1:d5:50:75:58
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate mp.op-kassa.fi
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mp.op-kassa.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mp.op-kassa.fi
api-mp.op-kassa.fi
opkassa-prod-mp-cloudfront.opkassa.aws.tuot.op-palvelut.fi
api-mp.op-kassa.fi
opkassa-prod-mp-cloudfront.opkassa.aws.tuot.op-palvelut.fi
Other certificates including the domain name op-kassa.fi
(limited to 100 certificates)
prod.op-kassa.fi
tuki.op-kassa.fi
tuki.op-kassa.fi
api-nc.op-kassa.fi
www.op-kassa.fi
qa-shopify.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
tuki.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
op-kassa.fi
op-kassa.fi
hallinta.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
tuki.op-kassa.fi
qa-qrpay.op-kassa.fi
qa.op-kassa.fi
prod.op-kassa.fi
qa.op-kassa.fi
*.qav2.op-kassa.fi
status.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
shopify.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
shopify.op-kassa.fi
*.op-kassa.fi
hallinta.op-kassa.fi
www.op-kassa.fi
rd.op-kassa.fi
mpos-qa.op-kassa.fi
rd.op-kassa.fi
qa.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
opkassa.aws.tuot.op-palvelut.fi
api.op-kassa.fi
hallinta.op-kassa.fi
qa.op-kassa.fi
op-kassa.fi
shopify.op-kassa.fi
www.op-kassa.fi
qa-qrpay.op-kassa.fi
pivokassa.fi
hallinta.op-kassa.fi
qrpay.op-kassa.fi
www.op-kassa.fi
www.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
api-nc-hallinta.op-kassa.fi
mpos-qa.op-kassa.fi
www.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
rd.op-kassa.fi
mp.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
api-nc-shopify.op-kassa.fi
mp.op-kassa.fi
qa.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
qa-shopify.op-kassa.fi
mpos-qa.op-kassa.fi
qrpay.op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
tuki.op-kassa.fi
www.op-kassa.fi
api.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
dev.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
mp.op-kassa.fi
www.op-kassa.fi
tuki.op-kassa.fi
tuki.op-kassa.fi
api-nc.op-kassa.fi
www.op-kassa.fi
qa-shopify.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
tuki.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
www.op-kassa.fi
qa.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
op-kassa.fi
op-kassa.fi
hallinta.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
tuki.op-kassa.fi
qa-qrpay.op-kassa.fi
qa.op-kassa.fi
prod.op-kassa.fi
qa.op-kassa.fi
*.qav2.op-kassa.fi
status.op-kassa.fi
op-kassa.fi
www.op-kassa.fi
shopify.op-kassa.fi
rd.op-kassa.fi
op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
shopify.op-kassa.fi
*.op-kassa.fi
hallinta.op-kassa.fi
www.op-kassa.fi
rd.op-kassa.fi
mpos-qa.op-kassa.fi
rd.op-kassa.fi
qa.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
opkassa.aws.tuot.op-palvelut.fi
api.op-kassa.fi
hallinta.op-kassa.fi
qa.op-kassa.fi
op-kassa.fi
shopify.op-kassa.fi
www.op-kassa.fi
qa-qrpay.op-kassa.fi
pivokassa.fi
hallinta.op-kassa.fi
qrpay.op-kassa.fi
www.op-kassa.fi
www.op-kassa.fi
mp.op-kassa.fi
rd.op-kassa.fi
api-nc-hallinta.op-kassa.fi
mpos-qa.op-kassa.fi
www.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
rd.op-kassa.fi
mp.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
api-nc-shopify.op-kassa.fi
mp.op-kassa.fi
qa.op-kassa.fi
qa.op-kassa.fi
rd.op-kassa.fi
qa-shopify.op-kassa.fi
mpos-qa.op-kassa.fi
qrpay.op-kassa.fi
qa.op-kassa.fi
api.op-kassa.fi
tuki.op-kassa.fi
www.op-kassa.fi
api.op-kassa.fi
opkassa.aws.tuot.op-palvelut.fi
dev.op-kassa.fi
*.opkassa.aws.kehi.op-palvelut.net
mp.op-kassa.fi
www.op-kassa.fi
Certificate
The complete raw certificate details for mp.op-kassa.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIQAwD8u9lOWU4bFPxy/gQEwjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA4MjAwMDAwMDBaFw0xOTA5MjAx MjAwMDBaMBkxFzAVBgNVBAMTDm1wLm9wLWthc3NhLmZpMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAsRFwWGMwiccyoRBwVRNjs2hcSYyCUH/61Df/kdLD XsjJl0iPtQQVtL/4++d7Bly38y+g3UsKkY/pQcCV+PztqeRaJli18SLQpPHPjyl1 JVzX4QPAbZgru86gP280tDhvaNGcKbra5zFEhTJb50ReibtIu1Qc0OlMg7oMFzeq +j3XMdq7O8V3Day+IFsTvgr7YYk0JPaTuKPbFZO/CGQECwME23GMvQHweZP0zGF7 cgWOuAixN1Y04K3BIcEflwqoHe5zpyOz6OE5VfnthDXr19v74hxC5QANcdscS/tW Y4qmlNIBZPmrNBsYI5kyAzh4HnrGZA2dcyFrHnSG9972kQIDAQABo4ICyTCCAsUw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFPo5Sfh4 hSRKqwL9U9zWK1O0nQcKMGkGA1UdEQRiMGCCDm1wLm9wLWthc3NhLmZpghJhcGkt bXAub3Ata2Fzc2EuZmmCOm9wa2Fzc2EtcHJvZC1tcC1jbG91ZGZyb250Lm9wa2Fz c2EuYXdzLnR1b3Qub3AtcGFsdmVsdXQuZmkwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw Oi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkw FzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEF BQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUF BzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQw DAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AKS5CZC0GFgU h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZVdW6QEAAAQDAEcwRQIhAI6t/4Xd XiSCwmpISaYAmAkpGzjcVvetsQJTV6BOzWOZAiAkpz6WAwI0Sad12VYyMhZ6VbhF Mad4ycDWwXHpXAGpigB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMP AAABZVdW6ccAAAQDAEYwRAIgL48gygs1kz4NNCodmDpCI7qaa5QSb9qqNEGyPnYd rq8CIBKGyZdZqhGkWNtEBS6gSkkrEaXQ6txYZdY2q9HBJC6cMA0GCSqGSIb3DQEB CwUAA4IBAQBijAcnUVHpeDMeP+a9twTfs6FFdpUunvxT/wfUvw8YGnngSBB3ABeR Xhmgk7qtZkKg6PVWBRPWrPzHtMwffwF7jrbEY+6GmSE5TCFgCucSDknR6mlkfHrN jQci4ONSS64hnGspz40ISgzzk7FX1V90jTH6IO4dO+URWHZehl9i7nZMPM+Pmz7m rtZISY63q3tNigxm/JfFYKHKqeUQF5g31rHjctd9waU/IwiS9d5zVqJ+Cgr7XQI1 fiYjhNZcbKE7t43zrw6nQVduFzPfiBB/Or7F6bu43kfnDqu9jotHII/Mkg7rnalx 3Tv5myDTZSq4auJzgUBGZeZoxcAb6xQh -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRFwWGMwiccyoRBwVRNj s2hcSYyCUH/61Df/kdLDXsjJl0iPtQQVtL/4++d7Bly38y+g3UsKkY/pQcCV+Pzt qeRaJli18SLQpPHPjyl1JVzX4QPAbZgru86gP280tDhvaNGcKbra5zFEhTJb50Re ibtIu1Qc0OlMg7oMFzeq+j3XMdq7O8V3Day+IFsTvgr7YYk0JPaTuKPbFZO/CGQE CwME23GMvQHweZP0zGF7cgWOuAixN1Y04K3BIcEflwqoHe5zpyOz6OE5VfnthDXr 19v74hxC5QANcdscS/tWY4qmlNIBZPmrNBsYI5kyAzh4HnrGZA2dcyFrHnSG9972 kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3992810037494223083665682126933853378 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mp.op-kassa.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22352779395783897764677264714947228732335415880753359566711001417311009862615537034931201575607857631719523319532917666346501196029610862211061434925401636631459339085516698877285076340124672109188614891780488332739319705917300333575681707020381744156593648113982276362608812293342736399926531069381961637184642131098437527771449516355776329520016720412536925790964302818592632469657402066794257404345137761710382546362807398785694411150001226986751124465551811373948485474784656525527775830140460945284454034693833992643983996644166987870281868764957757763993478848739690771857069224507619412901154113957623842666129 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fa3949f87885244aab02fd53dcd62b53b49d070a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mp.op-kassa.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-mp.op-kassa.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opkassa-prod-mp-cloudfront.opkassa.aws.tuot.op-palvelut.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001655756e90100000403004730450221008eadff85dd5e2482c26a4849a6009809291b38dc56f7adb1025357a04ecd6399022024a73e9603023449a775d9563232167a55b84531a778c9c0d6c171e95c01a98a0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001655756e9c7000004030046304402202f8f20ca0b35933e0d342a1d983a4223ba9a6b94126fdaaa3441b23e761daeaf02201286c99759aa11a458db44052ea04a492b11a5d0eadc5865d636abd1c1242e9c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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