iotcore.sb1-jp.dmc-dxi.com
Issued by Amazon
About this certificate
This digital certificate with serial number 08:41:40:e4:9f:77:21:ab:b6:fd:9a:f6:0d:22:64:c6 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=iotcore.sb1-jp.dmc-dxi.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:41:40:e4:9f:77:21:ab:b6:fd:9a:f6:0d:22:64:c6Serial Number (int): 10972639449671915478062086462984316102
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 42:ce:d4:48:8b:cd:7f:84:44:7a:8c:6f:b9:8c:67:5e:78:b0:5c:6a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 4c:a2:41:63:9c:27:29:9d:9e:cb:32:b8:51:bf:26:c5:a6:9e:e8:ba
Fingerprint (sha256): e9:ba:11:b7:54:6c:ed:74:0a:21:e8:c1:29:13:aa:50:3f:15:9a:05:32:85:c6:6c:06:87:4a:68:d6:07:78:5c
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate iotcore.sb1-jp.dmc-dxi.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iotcore.sb1-jp.dmc-dxi.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iotcore.sb1-jp.dmc-dxi.com
Other certificates including the domain name dmc-dxi.com
(limited to 100 certificates)
assetlib.cvda.stg-poc-my.dmc-dxi.com
mobilefront.dspa.dev-my.dmc-dxi.com
mobilefront.dspa.dev-jp.dmc-dxi.com
www.laconurbana.com
www.uwgwolvescamps.com
notification.cvda.stg-poc-my.dmc-dxi.com
mumdus.com
dashboard.dev-my.dmc-dxi.com
facade.cvda.test-dev-my.dmc-dxi.com
remoteaccess.dev-my.dmc-dxi.com
koalakrash.com
facade.dspa.test-dev-my.dmc-dxi.com
sase.stg.appsvc.paloaltonetworks.com
beyondwoods.in
www.mentorconnect.co.in
muse-fm.net
lessee-dev.at-port.com
facade.cvda.test-dev-my.dmc-dxi.com
grandmasjid.com
www.inmobiliaria.express
auth.dspa.qa-poc-my.dmc-dxi.com
mobilefront.dspa.qa-poc-my.dmc-dxi.com
facade.dspa.dev-jp.dmc-dxi.com
facade.cvda.test-dev-my.dmc-dxi.com
frontend.dashboard.stg-poc-my.dmc-dxi.com
facade.dspa.stg-poc-my.dmc-dxi.com
mobilefront.dspa.qa-jp.dmc-dxi.com
scorefeed.app
crm.drooyh.in
assetlib.dspa.stg-poc-my.dmc-dxi.com
www.museumstag.at
iotcore.cvda.stg-poc-my.dmc-dxi.com
muse-fm.net
facade.cvda.stg-poc-my.dmc-dxi.com
assetlib.cvda.dev-jp.dmc-dxi.com
assetlib.dspa.dev-jp.dmc-dxi.com
frontend.dashboard.qa-poc-my.dmc-dxi.com
rvodevelopment.com
www.dgsys.com.br
runnerty.dev
merl-mwa.com
fpotapi.in
facade.cvda.test-dev-my.dmc-dxi.com
minneapolis.profit.orderprinting.com
minneapolis.profit.orderprinting.com
facade.cvda.qa-my.dmc-dxi.com
remoteaccess.stg-poc-my.dmc-dxi.com
artistconnect.de
rvodevelopment.com
api-uat.freetrade.io
facade.cvda.test-dev-my.dmc-dxi.com
onetworld.games235.com
qti.staging.chromex.io
lpc.collectionboy.com
www.themathgap.com
dashboard.dev-my.dmc-dxi.com
auth.dspa.dev-my.dmc-dxi.com
frontend.dashboard.dev-jp.dmc-dxi.com
app.apptimate.net
frontend.dashboard.dev-jp.dmc-dxi.com
cellularjs.com
facade.dspa.qa-my.dmc-dxi.com
dashboard.dev-my.dmc-dxi.com
200e83rdstreet.com
facade.cvda.dev-jp.dmc-dxi.com
www.adoncdn.top
facade.cvda.test-dev-my.dmc-dxi.com
assetlib.dspa.qa-my.dmc-dxi.com
iotcore.sb1-jp.dmc-dxi.com
mathmatchup.brendanharan.com
track.traxsmart.in
lms.actcway.co.uk
frontend.dashboard.dev-my.dmc-dxi.com
assetlib.cvda.qa-my.dmc-dxi.com
www.renovatekharkiv.com
mobilefront.dspa.dev-my.dmc-dxi.com
mobilefront.dspa.dev-jp.dmc-dxi.com
www.laconurbana.com
www.uwgwolvescamps.com
notification.cvda.stg-poc-my.dmc-dxi.com
mumdus.com
dashboard.dev-my.dmc-dxi.com
facade.cvda.test-dev-my.dmc-dxi.com
remoteaccess.dev-my.dmc-dxi.com
koalakrash.com
facade.dspa.test-dev-my.dmc-dxi.com
sase.stg.appsvc.paloaltonetworks.com
beyondwoods.in
www.mentorconnect.co.in
muse-fm.net
lessee-dev.at-port.com
facade.cvda.test-dev-my.dmc-dxi.com
grandmasjid.com
www.inmobiliaria.express
auth.dspa.qa-poc-my.dmc-dxi.com
mobilefront.dspa.qa-poc-my.dmc-dxi.com
facade.dspa.dev-jp.dmc-dxi.com
facade.cvda.test-dev-my.dmc-dxi.com
frontend.dashboard.stg-poc-my.dmc-dxi.com
facade.dspa.stg-poc-my.dmc-dxi.com
mobilefront.dspa.qa-jp.dmc-dxi.com
scorefeed.app
crm.drooyh.in
assetlib.dspa.stg-poc-my.dmc-dxi.com
www.museumstag.at
iotcore.cvda.stg-poc-my.dmc-dxi.com
muse-fm.net
facade.cvda.stg-poc-my.dmc-dxi.com
assetlib.cvda.dev-jp.dmc-dxi.com
assetlib.dspa.dev-jp.dmc-dxi.com
frontend.dashboard.qa-poc-my.dmc-dxi.com
rvodevelopment.com
www.dgsys.com.br
runnerty.dev
merl-mwa.com
fpotapi.in
facade.cvda.test-dev-my.dmc-dxi.com
minneapolis.profit.orderprinting.com
minneapolis.profit.orderprinting.com
facade.cvda.qa-my.dmc-dxi.com
remoteaccess.stg-poc-my.dmc-dxi.com
artistconnect.de
rvodevelopment.com
api-uat.freetrade.io
facade.cvda.test-dev-my.dmc-dxi.com
onetworld.games235.com
qti.staging.chromex.io
lpc.collectionboy.com
www.themathgap.com
dashboard.dev-my.dmc-dxi.com
auth.dspa.dev-my.dmc-dxi.com
frontend.dashboard.dev-jp.dmc-dxi.com
app.apptimate.net
frontend.dashboard.dev-jp.dmc-dxi.com
cellularjs.com
facade.dspa.qa-my.dmc-dxi.com
dashboard.dev-my.dmc-dxi.com
200e83rdstreet.com
facade.cvda.dev-jp.dmc-dxi.com
www.adoncdn.top
facade.cvda.test-dev-my.dmc-dxi.com
assetlib.dspa.qa-my.dmc-dxi.com
iotcore.sb1-jp.dmc-dxi.com
mathmatchup.brendanharan.com
track.traxsmart.in
lms.actcway.co.uk
frontend.dashboard.dev-my.dmc-dxi.com
assetlib.cvda.qa-my.dmc-dxi.com
www.renovatekharkiv.com
Certificate
The complete raw certificate details for iotcore.sb1-jp.dmc-dxi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfzCCA2egAwIBAgIQCEFA5J93Iau2/Zr2DSJkxjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMjAwMDAwMDBaFw0yNDAxMTky MzU5NTlaMCUxIzAhBgNVBAMTGmlvdGNvcmUuc2IxLWpwLmRtYy1keGkuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseDccVN66e4M33DGmWbKDxD9 l4Dal7WgM81Hz/2ksH9h2WFHiGLM2sc81+k3M2NF4xREnlhhxcJHSubXcNGCw4pr 8fDa2ak1iV36ZNvguB8K9NICHJKkCKwg1WzUqsp7NM+rzYZ9sWjsL7PKMgwHCOl3 2x3JOz+3sV5Q6nYlDbY9BUmwqpslRrz91SIcF+mBeinLQ85TBvegpuof3cfrbZD9 aBWTYb2OXIjaQEc77a2k9BgYqbF+tOSdqcmvUF6VXeDdXxUXC4ocdoh/9zk+vPfQ AdWZQk1rdjA6EoEhXgFTZju1thHW8t1iD5bNHOegFTdpHX3iWZFGax+TCIDL5wID AQABo4IBiDCCAYQwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYD VR0OBBYEFELO1EiLzX+ERHqMb7mMZ154sFxqMCUGA1UdEQQeMByCGmlvdGNvcmUu c2IxLWpwLmRtYy1keGkuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAwwCjAIBgZn gQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5z Y2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2Nh MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA74OvnZ7G7sDmUmwub lxUqjBKyKsPXhIyYAuC10T32Ze98NzytfpPp3cKsNi9N2Mb61te2C6rMXclBQa81 0VTXj6CwPV+1XZU/QoOE7jg5Gs7NqaZOczkrOf2grr9CG22jYkYo4MNGiE2y26VY kvs8eymX0hOQkwrS8oUCrZ7kyIDlLNuutwvEjS0ERDJ3thVrj7uYKSGSSL7szUwV 6YH3mQiJSdqolET5EfRH/Q2FkZu9jdr2vNyKasjDakd8LmzY9fQKQ7DZ7zKoD55u 927VWNiNnkInwrKMYfIB+65nmOPJVa6W5PNUKdcfXtg/Duqgu+SUr5r/Jo5gdwgd 1dAV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseDccVN66e4M33DGmWbK DxD9l4Dal7WgM81Hz/2ksH9h2WFHiGLM2sc81+k3M2NF4xREnlhhxcJHSubXcNGC w4pr8fDa2ak1iV36ZNvguB8K9NICHJKkCKwg1WzUqsp7NM+rzYZ9sWjsL7PKMgwH COl32x3JOz+3sV5Q6nYlDbY9BUmwqpslRrz91SIcF+mBeinLQ85TBvegpuof3cfr bZD9aBWTYb2OXIjaQEc77a2k9BgYqbF+tOSdqcmvUF6VXeDdXxUXC4ocdoh/9zk+ vPfQAdWZQk1rdjA6EoEhXgFTZju1thHW8t1iD5bNHOegFTdpHX3iWZFGax+TCIDL 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10972639449671915478062086462984316102 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iotcore.sb1-jp.dmc-dxi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22455063122154089940390627233685316572382781713755034849109121423136115683002211019795239687531395175542936681652357438051849712251955569585304079818106587523086176856544146108865308303119719335708110889970835698279680876437676234619141217677620134411028338095982399259414077073912823507409793951279978852997361284870359206689622082075188146467271652708527999272071820642219534115781094023393892179162958755819220306451886138053083090444393219768295456901441890101321599530235716771794439619167153063520516584540544502375559956560010226168952807251586138005213644541930450250059451272026095603714556679595036371897319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42ced4488bcd7f84447a8c6fb98c675e78b05c6a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iotcore.sb1-jp.dmc-dxi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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