service12.octopus3.sony.eu
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0a:4a:07:45:0d:44:38:c8:1d:ec:09:5b:bb:e7:bd:25 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=service12.octopus3.sony.eu
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:4a:07:45:0d:44:38:c8:1d:ec:09:5b:bb:e7:bd:25Serial Number (int): 13676657373096955246920833647004597541
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8c:63:7e:43:21:08:14:a8:d2:d7:ee:69:29:12:99:f3:48:51:0c:d6
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 4e:64:5c:f4:0e:6c:cc:94:56:5d:fa:94:93:09:fc:3a:d4:df:19:0e
Fingerprint (sha256): 00:40:17:e3:10:b6:a1:ad:b6:09:37:a2:29:da:08:37:73:d8:a6:84:b5:a9:a3:92:8a:36:49:9e:6c:cd:cb:e0
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate service12.octopus3.sony.eu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for service12.octopus3.sony.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
service12.octopus3.sony.eu
Other certificates including the domain name sony.eu
(limited to 100 certificates)
service6.octopus3.sony.eu
dev.service2.octopus3.sony.eu
preview-production-pdp.sony.co.uk
service12.octopus3.sony.eu
beta.sony.com
producttestersnl.sony.eu
service9.octopus3.sony.eu
tqa.service6.octopus3.sony.eu
www.sony.at
preview-production-pdp.sony.co.uk
dev.service9.octopus3.sony.eu
stg2.crmservice.sony.eu
sra-eu.sony.eu
www.sony.at
beta.sony.com
presscentre.sony.eu
service4.octopus3.sony.eu
preview.sony.com
tqa.service6.octopus3.sony.eu
training.sony.eu
www.sony.pt
preview-production-pdp.sony.co.uk
www.sony.com.sg
esp-marketingtool.sony.eu
producttestersfr.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
dev.crmservice.sony.eu
assets.pro.sony.eu
dev.crmservice.sony.eu
dev.service5.octopus3.sony.eu
preview-production-pdp.sony.co.uk
training.sony.eu
test.sony.com
assist.sony.eu
students.sony.eu
presscentre.sony.eu
crmservice.sony.eu
events.sony.eu
service5.octopus3.sony.eu
dev.service8.octopus3.sony.eu
preview-production-pdp.sony.co.uk
admin.octopus3.sony.eu
www.sony.at
premium-services.staging.sony.eu
dev.service12.octopus3.sony.eu
www.sony.at
dev.service5.octopus3.sony.eu
tqa.service4.octopus3.sony.eu
production-pdp.sony.co.uk
tqa.crmservice.sony.eu
end-user.promotions.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
webservices2.sony.eu
uat-pdp.sony.co.uk
www.pro.sony.eu
tqa.admin.octopus3.sony.eu
beta.sony.com
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
preview-test.sony.com
serviceportal.staging.sony.eu
sonar.staging.sony.eu
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
www.sony.at
test.sony.com
stgeagle.sony.eu
preview.sony.com
preview-test.sony.com
www.sony.at
service9.octopus3.sony.eu
tqa.service10.octopus3.sony.eu
products.pro.sony.eu
preview-test.sony.com
premium-services.staging.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
www.relay.sony.eu
tqa.service1.octopus3.sony.eu
www.sony.at
tqa.service7.octopus3.sony.eu
preview-production-pdp.sony.co.uk
premium-services.staging.sony.eu
intranet.ibiss.sony.eu
preview.sony.com
preview.sony.com
preview.sony.com
www.pro.sony.eu
preview.sony.com
beta.sony.com
production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
production-pdp.sony.co.uk
beta.sony.com
service2.octopus3.sony.eu
dev.service2.octopus3.sony.eu
preview-production-pdp.sony.co.uk
service12.octopus3.sony.eu
beta.sony.com
producttestersnl.sony.eu
service9.octopus3.sony.eu
tqa.service6.octopus3.sony.eu
www.sony.at
preview-production-pdp.sony.co.uk
dev.service9.octopus3.sony.eu
stg2.crmservice.sony.eu
sra-eu.sony.eu
www.sony.at
beta.sony.com
presscentre.sony.eu
service4.octopus3.sony.eu
preview.sony.com
tqa.service6.octopus3.sony.eu
training.sony.eu
www.sony.pt
preview-production-pdp.sony.co.uk
www.sony.com.sg
esp-marketingtool.sony.eu
producttestersfr.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
test.sony.com
dev.crmservice.sony.eu
assets.pro.sony.eu
dev.crmservice.sony.eu
dev.service5.octopus3.sony.eu
preview-production-pdp.sony.co.uk
training.sony.eu
test.sony.com
assist.sony.eu
students.sony.eu
presscentre.sony.eu
crmservice.sony.eu
events.sony.eu
service5.octopus3.sony.eu
dev.service8.octopus3.sony.eu
preview-production-pdp.sony.co.uk
admin.octopus3.sony.eu
www.sony.at
premium-services.staging.sony.eu
dev.service12.octopus3.sony.eu
www.sony.at
dev.service5.octopus3.sony.eu
tqa.service4.octopus3.sony.eu
production-pdp.sony.co.uk
tqa.crmservice.sony.eu
end-user.promotions.sony.eu
preview-production-pdp.sony.co.uk
preview-production-pdp.sony.co.uk
webservices2.sony.eu
uat-pdp.sony.co.uk
www.pro.sony.eu
tqa.admin.octopus3.sony.eu
beta.sony.com
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
preview-test.sony.com
serviceportal.staging.sony.eu
sonar.staging.sony.eu
preview-production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
www.sony.at
test.sony.com
stgeagle.sony.eu
preview.sony.com
preview-test.sony.com
www.sony.at
service9.octopus3.sony.eu
tqa.service10.octopus3.sony.eu
products.pro.sony.eu
preview-test.sony.com
premium-services.staging.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
production-pdp.sony.co.uk
www.pro.sony.eu
www.relay.sony.eu
tqa.service1.octopus3.sony.eu
www.sony.at
tqa.service7.octopus3.sony.eu
preview-production-pdp.sony.co.uk
premium-services.staging.sony.eu
intranet.ibiss.sony.eu
preview.sony.com
preview.sony.com
preview.sony.com
www.pro.sony.eu
preview.sony.com
beta.sony.com
production-pdp.sony.co.uk
tqa.service9.octopus3.sony.eu
production-pdp.sony.co.uk
beta.sony.com
service2.octopus3.sony.eu
Certificate
The complete raw certificate details for service12.octopus3.sony.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEczCCA1ugAwIBAgIQCkoHRQ1EOMgd7Albu+e9JTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwNDAwMDAwMFoXDTI1MDEwMjIzNTk1OVowJTEj MCEGA1UEAxMac2VydmljZTEyLm9jdG9wdXMzLnNvbnkuZXUwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDg1nF8J7VoTztGXz3Rb2D1Br3ptBSH551X/fln ERag65jBw5T2SQ9PkYFPD7LDFoePSEdIwbtd6E33S3rOw4LkjgbQ1VseaUA7FBMq ksb9RppBRIu0mIDE92tRO9Qf2EgXW1bFPearoU461ig/V5V3Wyh7upt5N/lW5SPj NZORRHZ/jSg2FhmTS/8Xt27tVqS0/8k8pMMvBlGq2iCWXP/YWebu617Yh+MVO4IT cZeGGkbMwfJgkCqnHUaUDFj4mcRPXv2FqcYPDhXgBoMbZxJtlNSlzojuS8OBB7bi jvnTtSjn3LHAzoJTMxRH3afo1+yM1/fBrY/pFw9TVfx/AnrDAgMBAAGjggGGMIIB gjAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUjGN+ QyEIFKjS1+5pKRKZ80hRDNYwJQYDVR0RBB4wHIIac2VydmljZTEyLm9jdG9wdXMz LnNvbnkuZXUwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1 c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAH+E+zoU3gY8MkSt0obsaj1KUClW5hv2dX RxHfhNuAf7gfcE4QSUi3AmpWjdYKjqZ+uGD7P6lQoK2C9QfENdhIO+JpEqVdiFAH lzsNEkMQ4bCmlxe11PTsT6irR5/wj9JU+FYEuflGPPk0JkRlsYER8WXsj4tySWXb VXH8BecDWPpaWdqalGVJ8PW+hjCJ7acKxoiFOTkXUN4J2nb7uUnarH/7sjLTtNwe D9TK6LmQI3mUFZbfUmCaOWmthdWlbl+rgSb1N5X0drfaGD9wdLyml9q1QuP89EpD KYg2qsKDHAe1A7YG4ngdfe6VPE5TzdzUZmnN1/KZQuvzWYVPFn5u -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NZxfCe1aE87Rl890W9g 9Qa96bQUh+edV/35ZxEWoOuYwcOU9kkPT5GBTw+ywxaHj0hHSMG7XehN90t6zsOC 5I4G0NVbHmlAOxQTKpLG/UaaQUSLtJiAxPdrUTvUH9hIF1tWxT3mq6FOOtYoP1eV d1soe7qbeTf5VuUj4zWTkUR2f40oNhYZk0v/F7du7VaktP/JPKTDLwZRqtogllz/ 2Fnm7ute2IfjFTuCE3GXhhpGzMHyYJAqpx1GlAxY+JnET179hanGDw4V4AaDG2cS bZTUpc6I7kvDgQe24o7507Uo59yxwM6CUzMUR92n6NfsjNf3wa2P6RcPU1X8fwJ6 wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13676657373096955246920833647004597541 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'service12.octopus3.sony.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28383126245180474458885685023415439417130983966559528397553160373281140072614778938661707092246119728548660239837308936556029027167372031452716811931860846010657962124570655145020493305083024156929218243756492929081163299392924017947000963358976673796087000063946871670278405342997316438725440453984662892256983042068595733674930873106835902409733268223842452079264237398439505034255845806218766217483154680804394353845191366346148047810641714179826291399475610398021619077455430784857646692975860332416483310104061273248567583162913719625610979221982778471662323460843617604682042281928943522659512672413666387327683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c637e43210814a8d2d7ee69291299f348510cd6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service12.octopus3.sony.eu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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