k8s-prod.eu-central-1.prod.cdsf.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:3f:9b:8a:5d:02:d9:a5:ad:14:29:64:7d:a1:78:6c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=k8s-prod.eu-central-1.prod.cdsf.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:3f:9b:8a:5d:02:d9:a5:ad:14:29:64:7d:a1:78:6c
Serial Number (int): 16281005387267229167572920029637867628
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:d6:34:bf:ee:fb:d6:33:66:9b:a3:16:e9:e6:43:dc:99:ad:52:2f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f8:ca:80:b3:6f:28:2c:58:2e:3a:cb:54:4a:66:dd:51:c9:be:d5:8d
Fingerprint (sha256): ed:87:65:ca:ba:fe:b8:74:fc:09:8a:ef:99:ba:8e:77:1a:b9:62:1d:41:15:1f:28:db:8b:eb:1c:dc:d5:bd:00

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate k8s-prod.eu-central-1.prod.cdsf.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k8s-prod.eu-central-1.prod.cdsf.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k8s-prod.eu-central-1.prod.cdsf.io
*.k8s-prod.eu-central-1.prod.cdsf.io

Other certificates including the domain name cdsf.io

(limited to 100 certificates)
test-simple-tool.tooling.prod.cdsf.io
we-tool.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-vault.test.cdsf.io
test-direct-tool.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-direct-tool.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
dev-simple-tool.tooling.prod.cdsf.io
test-code.tooling.prod.cdsf.io
vault.test-val-secret-mgt.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
vault.test-secret-mgt.prod.cdsf.io
test-vault.test.cdsf.io
vault.vault-k8s-val-eu-central-1-test.prod.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
test-vault.test.cdsf.io
vault.vault-k8s-int-eu-central-1-test.prod.cdsf.io
test-tool.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
vault.vault-k8s-int-eu-central-1-test.prod.cdsf.io
test-vault.test.cdsf.io
registry-test.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-code.tooling.prod.cdsf.io
test-vault.test.cdsf.io
test-tool.tooling.prod.cdsf.io
vault.test-secret-mgt.prod.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
smashing.tooling.prod.cdsf.io
vault-int.int-secret-mgt.prod.cdsf.io
test-repo.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
vault.test-int-secret-mgt.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
vault.test-int-secret-mgt.prod.cdsf.io
repo.tooling.prod.cdsf.io
eks.tooling.prod.cdsf.io
vault.eu-central-1-test-int-secret-mgt.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
test-simple-tool.test.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
vault.vault-k8s-val-eu-central-1.prod.cdsf.io
smashing.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-direct-tool.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-repo.tooling.prod.cdsf.io
code.tooling.prod.cdsf.io
repo.tooling.prod.cdsf.io
test-code.tooling.prod.cdsf.io
test-direct-tool.test.cdsf.io
dev-tool.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-code.tooling.prod.cdsf.io
test-vault.test.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-vault.test.cdsf.io
dev-tool.tooling.prod.cdsf.io
test-code.tooling.prod.cdsf.io
test-vault.test.cdsf.io
test-repo.tooling.prod.cdsf.io
test-repo.tooling.prod.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
test-repo.tooling.prod.cdsf.io
test-vault.test.cdsf.io
test-repo.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
vault.test-secret-mgt.prod.cdsf.io
eks.tooling.prod.cdsf.io
dev-tool.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-repo.tooling.prod.cdsf.io
paste.tool.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-repo.tooling.prod.cdsf.io
test-code.tooling.prod.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
test-tool.tooling.prod.cdsf.io
eks.tooling.prod.cdsf.io
vault.test-int-secret-mgt.prod.cdsf.io
test-direct-tool.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
test-jenkins.tooling.prod.cdsf.io
vault.test-secret-mgt.prod.cdsf.io
test-simple-tool.test.cdsf.io
test-simple-tool.tooling.prod.cdsf.io
jenkins.tooling.prod.cdsf.io
test-endpoint-tool.tooling.prod.cdsf.io
vault-val.test-valsecret-mgt.prod.cdsf.io
test-simple-tool.tooling.prod.cdsf.io

Certificate

The complete raw certificate details for k8s-prod.eu-central-1.prod.cdsf.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIQDD+bil0C2aWtFClkfaF4bDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMDMwMDAwMDBaFw0yNDAxMDEy
MzU5NTlaMC0xKzApBgNVBAMTIms4cy1wcm9kLmV1LWNlbnRyYWwtMS5wcm9kLmNk
c2YuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07yfE1q3BEaQL
WXBtKOSopJvXovx19DplMuenXt7sdwj1cIlQGMfKdTbxUMBGISOlbIP2w5cv7qfo
tK8T9ur6eNxRKPvHAdKTrpDfpBpGP3JblCojvljRAdT/fc8EhhNKD/CDTF2mtXQP
MZo3jrcaSNCt7RlBV3dJ3zMpx+N9TjiMUDXQFjD241081WDdGuWpBgrx9Jao281n
0C+90M24aAn55AGBzfAUPP+//Dzo1bsLiXQHRnZIUOQRLAMEp1kN28NHyxtLqWFy
RT3J6wYq9PIXFOdP8CvojSHL9VeNqnQEy/ES7hAyGvZ7p2GaDGwSIB27nFkfLXMs
bxe/lMSdAgMBAAGjggG2MIIBsjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0
W/k90DAdBgNVHQ4EFgQUqNY0v+771jNmm6MW6eZD3JmtUi8wUwYDVR0RBEwwSoIi
azhzLXByb2QuZXUtY2VudHJhbC0xLnByb2QuY2RzZi5pb4IkKi5rOHMtcHJvZC5l
dS1jZW50cmFsLTEucHJvZC5jZHNmLmlvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDov
L2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAww
CjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v
b2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j
cnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAA
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9N53a0ZRv
ns0Y3IAZCMnatJzNXiGSakL94Kv9LEqqOFMlu6N1Lp6CJxOriyLdw/Ghr3enkTaD
2RDVGtFBZyflbtDfZftwLlbZW0npsrwAn7DUOXeTUEeLW+hXBJWzBF2665qOKLgt
6S9r6rmYsXIm2VJ/VJDfmna7So0aBY4XRzZHh1U5EFVtqP+YTprGjz3ItcngJKfN
ukiuhwqq/EISe+qpkUeUgP5UluTufCL8zYEX9CYvsl6kghn59kifYGxnYBnSARDP
O5kDpjdf0VRyrDZmg4i2+H0nLatcQoKUNslfdSLklAiHNIfOhMcwR5UzfxXzJmn6
nUi4mW1zjhTT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO8nxNatwRGkC1lwbSjk
qKSb16L8dfQ6ZTLnp17e7HcI9XCJUBjHynU28VDARiEjpWyD9sOXL+6n6LSvE/bq
+njcUSj7xwHSk66Q36QaRj9yW5QqI75Y0QHU/33PBIYTSg/wg0xdprV0DzGaN463
GkjQre0ZQVd3Sd8zKcfjfU44jFA10BYw9uNdPNVg3RrlqQYK8fSWqNvNZ9AvvdDN
uGgJ+eQBgc3wFDz/v/w86NW7C4l0B0Z2SFDkESwDBKdZDdvDR8sbS6lhckU9yesG
KvTyFxTnT/Ar6I0hy/VXjap0BMvxEu4QMhr2e6dhmgxsEiAdu5xZHy1zLG8Xv5TE
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16281005387267229167572920029637867628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k8s-prod.eu-central-1.prod.cdsf.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22840826791010650663841335863033324246087737866332176154213548941345030824710771704240689557805871260994097172493276614949652207717124122541438733474474610731132351759093304045525124453750868750144428478881604416999464736503487995779641778618784655126584811161112624909389076572806260637425756723918468220746322349325595291120017229691071391670651667566713819754254288891422090255953520992013569380474588038133519819099262657209901721383774437997300586354461134511624420131309998444559019167124646276747976577622081200607918289606515470143478186036430052709037671988467809835863503887093350438733084767211796882048157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8d634bfeefbd633669ba316e9e643dc99ad522f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k8s-prod.eu-central-1.prod.cdsf.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s-prod.eu-central-1.prod.cdsf.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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