greatbritishlife.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 08:ed:56:11:76:47:b6:e8:ae:a6:34:f9:9c:56:4b:2a was issued on by Amazon.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=greatbritishlife.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:ed:56:11:76:47:b6:e8:ae:a6:34:f9:9c:56:4b:2a
Serial Number (int): 11866143992462686572383051278506674986
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 15:06:f4:7a:00:1d:a7:1b:3c:bb:96:f4:c1:4a:d4:82:8b:d3:16:34
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 19:b3:1b:f0:2e:1b:75:84:cd:e1:7e:2b:3c:c1:e2:2b:c3:4d:45:7f
Fingerprint (sha256): fa:83:e8:64:c6:3b:05:02:80:df:5e:b6:92:c8:bb:a2:85:ac:37:54:4a:99:4a:ab:07:e6:39:7a:cb:e2:c8:d5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate greatbritishlife.co.uk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for greatbritishlife.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greatbritishlife.co.uk
*.hampshire-life.co.uk
*.livingedge.co.uk
*.essexlifemag.co.uk
kent-life.co.uk
*.yorkshirelife.co.uk
somerset-life.co.uk
cotswoldlife.co.uk
*.surreylife.co.uk
lancashirelife.co.uk
hertfordshirelife.co.uk
sussexlife.co.uk
westessexlife.co.uk
*.cheshirelife.co.uk
*.sussexlife.co.uk
cheshirelife.co.uk
*.hertfordshirelife.co.uk
*.lancashirelife.co.uk
dorsetmagazine.co.uk
suffolkmag.co.uk
cornwalllife.co.uk
*.derbyshirelife.co.uk
surreylife.co.uk
*.kent-life.co.uk
*.norfolkmag.co.uk
*.greatbritishlife.co.uk
*.westessexlife.co.uk
hampshire-life.co.uk
essexlifemag.co.uk
*.devonlife.co.uk
*.cotswoldlife.co.uk
livingedge.co.uk
*.suffolkmag.co.uk
*.dorsetmagazine.co.uk
*.somerset-life.co.uk
yorkshirelife.co.uk
derbyshirelife.co.uk
devonlife.co.uk
norfolkmag.co.uk
*.cornwalllife.co.uk

Other certificates including the domain name greatbritishlife.co.uk

(limited to 100 certificates)
mercadoone.com
mercadoone.com
consent.mediakit.greatbritishlife.co.uk
*.schoolreportonline.com
mercadoone.com
mercadoone.com
local.wahpetondailynews.com
*.advertiser24.co.uk
local.daily-chronicle.com
nor-west-news.origami.neighbourly.co.nz
*.schoolreportonline.com
a02342.alloaadvertiser.com
mercadoone.com
local.clintonnc.com
portperry.durhamregion.com
*.theresident.co.uk
admin.adforge.com
mediakit.greatbritishlife.co.uk
local.kent-life.co.uk
theresident.co.uk
greatbritishlife.co.uk
parrysoundnorth.parrysound.com
greatbritishlife.co.uk
local.thetfordandbrandontimes.co.uk
consent.mediakit.greatbritishlife.co.uk
*.greatbritishlife.co.uk
admin.adforge.com
*.theresident.co.uk
local.thetfordandbrandontimes.co.uk
greatbritishlife.co.uk
consent.mediakit.greatbritishlife.co.uk
*.greatbritishlife.co.uk
greatbritishlife.co.uk
a02342.alloaadvertiser.com
consent.enjoysudburymore.co.uk
*.advertiser24.co.uk
local.thesiuslawnews.com
*.advertiser24.co.uk
mercadoone.com
local.stcatharinesstandard.ca
local.cotswoldlife.co.uk
local.devonlife.co.uk
*.advertiser24.co.uk
greatbritishlife.co.uk
*.greatbritishlife.co.uk
local.lincolncourier.com
greatbritishlife.co.uk
fk.local.kentonline.co.uk
local.halifaxcourier.co.uk
consent.mediakit.greatbritishlife.co.uk
local.daily-chronicle.com
greatbritishlife.co.uk
a02342.alloaadvertiser.com
local.beloitdailynews.com
shop.afflecks.com
local.newsdemocratleader.com
theresident.co.uk
*.advertiser24.co.uk
matamata-chronicle.origami.neighbourly.co.nz
local.eastlondonadvertiser.co.uk
theresident.co.uk
mercadoone.com
local.wnypapers.com
shopping.nj.com
local.fenlandcitizen.co.uk
*.schoolreportonline.com
local.brainerddispatch.com
consent.mediakit.greatbritishlife.co.uk
greatbritishlife.co.uk
consent.mediakit.greatbritishlife.co.uk
*.schoolreportonline.com
local.carrickfergustimes.co.uk
consent.mediakit.greatbritishlife.co.uk
greatbritishlife.co.uk
parrysoundnorth.parrysound.com
flintshopping.mlive.com
flintshopping.mlive.com
a02342.alloaadvertiser.com
a02342.alloaadvertiser.com

Certificate

The complete raw certificate details for greatbritishlife.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8W2ZXO46sY1/yqYBmSu
PVmDYBlSRphFJcTVWzcT4h55i7vjDrDWKcFoMy/mys2SDBAkwN0V7NQHX/H94Zan
PwPVWAX0fV6ku+YaGJBNiRyXXzJsFbPr8wlNQwlYQzyJGZxWUvM4tW327xENlMXg
+DyejRP0fyTP3vyW/36YB/1qsOeFqOCq80aSiokPTBzzCnJnrEuwd73018wz91DZ
1sISXbTQCKchlgV26cmXzKQP/Ie00HU24pGoHgKfJWOc2sSX7Fa+OEzXBZ5I0/YS
ex0lFHM9Dpt4MdPhnEkzg6WaGmDQ+8zk4D8p2HUwTXhPT/Xu6qe7qYO8UN6BJgqy
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11866143992462686572383051278506674986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greatbritishlife.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20674339369798026577176080459211166579892027440889821776954603239356439360284446051124474059264895450067796839157671927542398996883126637047780841208042935251232922521539000407545349002373462242910393911065058244649145399521440594208583235352360646163455165242064756131692180843654297582655618534156454110639863882252052283493849171245238195956000091810064710578989502155404784021621681875792834845048952788082473135050111831357180809167390825186097754598072273024193792975618416585534419077726623387784685594357067621461188060471663390495815090293844830116928561291716660295427280002060675644753307637828550035944189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1506f47a001da71b3cbb96f4c14ad4828bd31634
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (852 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatbritishlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kent-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somerset-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sussexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorsetmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suffolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwalllife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kent-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbritishlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suffolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dorsetmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somerset-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cornwalllife.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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