flex-v2.stage.twilio.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 02:75:53:29:93:3f:1c:42:08:7f:47:11:f4:32:5f:9b was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=flex-v2.stage.twilio.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:75:53:29:93:3f:1c:42:08:7f:47:11:f4:32:5f:9bSerial Number (int): 3267641457940764966561073320466472859
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 36:d3:95:e5:6f:c8:95:ae:81:80:d4:78:34:35:68:dd:01:89:b3:69
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 25:f0:66:fd:24:5b:0c:8e:93:f7:02:cb:46:b5:da:09:4f:8a:67:5a
Fingerprint (sha256): 00:9f:16:4f:3d:de:ec:2b:80:68:99:c0:49:66:0a:fb:3f:94:f2:d6:9d:6d:4b:ef:c9:40:f5:2d:be:11:ee:29
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate flex-v2.stage.twilio.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flex-v2.stage.twilio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
flex-v2.stage.twilio.com
assets.flex-v2.stage.twilio.com
*.flex-v2.stage.twilio.com
assets.flex-v2.stage.twilio.com
*.flex-v2.stage.twilio.com
Other certificates including the domain name twilio.com
(limited to 100 certificates)
serverless.spire.stage-in1.twilio.com
*.stage-in1.twilio.com
statuspage.io
*.dev-us2.twilio.com
statuspage.io
payments.callback.prod.twilio.com
statuspage.io
rainbow.stage.twilio.com
www.temporal-apig.dev.twilio.com
statuspage.io
eventgw.twilio.com
incapsula.com
gateway1-mv1.corp.twilio.com
flex-v2.stage.twilio.com
security.twilio.com
realtime-wormhole.us1.twilio.com
support.twilio.com
thiscertisfortestingonly.twilio.com
chickentreat.craveable.support
cds.twilio.com
boxconfig.outside.twilio.com
*.br1.twilio.com
*.vss.stage.twilio.com
statuspage.io
dashboard.waas.corp.twilio.com
ct-spam-labs.us1.twilio.com
*.twilio.com
understand.stage-us1.eak.twilio.com
8f876c29f4e5ddcd1ba13f3b40e889bbc3822cd2.console.dev.twilio.com
chickentreat.craveable.support
*.stage-us1.twilio.com
chickentreat.craveable.support
*.turn.dev.twilio.com
*.stage.twilio.com
incapsula.com
internal.status.twilio.com
wireless.us1.eak.twilio.com
mqtt-sync.stage-us1.twilio.com
*.ie1.twilio.com
incapsula.com
rtd-notify-log.dev-us1.eak.twilio.com
wiki.hq.twilio.com
platform-slackapp.corp.twilio.com
*.de1.twilio.com
statuspage.io
build.twilio.com
incapsula.com
headsup.twilio.com
webhooks.twilio.com
chickentreat.craveable.support
tsock.twilio.com
pf-voice.dev-us1.eak.twilio.com
*.vss.twilio.com
*.dev.twilio.com
postflight-sms.us1.eak.twilio.com
*.stage-us2.twilio.com
statuspage.io
statuspage.io
*.turn.dev.twilio.com
*.dev-us2.twilio.com
statuspage.io
statuspage.io
doers.twilio.com
akamaisecure4.qualtrics.com
video.us1.eak.twilio.com
support.twilio.com
aproposalfrom.freeman.com
assets.cdn.prod.twilio.com
statuspage.io
*.code.hq.twilio.com
*.help.dev.twilio.com
chunderm.gll.dev.twilio.com
go.twilio.com
*.br1.twilio.com
5271ba7d4eb049ae104fa6533b878d7de1b133d9.console.dev.twilio.com
*.stage.twilio.com
signal.twilio.com
console.ie1.twilio.com
statuspage.io
networktest.twilio.com
partnerportal.kornferry.com
incapsula.com
sales.twilio.com
jp.twilio.com
aproposalfrom.freeman.com
ab-testing.dev-us1.twilio.com
statuspage.io
*.stage-au1.twilio.com
ecs.stage-us1.twilio.com
statuspage.io
*.vss.twilio.com
chunderw-vpc-gll-stage-us2-ix.stage.twilio.com
statuspage.io
statuspage.io
mqtt-sync.us1.twilio.com
*.stage-us2.twilio.com
*.stage-us1.twilio.com
support.twilio.com
console.ireland.stage-ie1.twilio.com
rtd-kibana-6.us1.eak.twilio.com
*.stage-in1.twilio.com
statuspage.io
*.dev-us2.twilio.com
statuspage.io
payments.callback.prod.twilio.com
statuspage.io
rainbow.stage.twilio.com
www.temporal-apig.dev.twilio.com
statuspage.io
eventgw.twilio.com
incapsula.com
gateway1-mv1.corp.twilio.com
flex-v2.stage.twilio.com
security.twilio.com
realtime-wormhole.us1.twilio.com
support.twilio.com
thiscertisfortestingonly.twilio.com
chickentreat.craveable.support
cds.twilio.com
boxconfig.outside.twilio.com
*.br1.twilio.com
*.vss.stage.twilio.com
statuspage.io
dashboard.waas.corp.twilio.com
ct-spam-labs.us1.twilio.com
*.twilio.com
understand.stage-us1.eak.twilio.com
8f876c29f4e5ddcd1ba13f3b40e889bbc3822cd2.console.dev.twilio.com
chickentreat.craveable.support
*.stage-us1.twilio.com
chickentreat.craveable.support
*.turn.dev.twilio.com
*.stage.twilio.com
incapsula.com
internal.status.twilio.com
wireless.us1.eak.twilio.com
mqtt-sync.stage-us1.twilio.com
*.ie1.twilio.com
incapsula.com
rtd-notify-log.dev-us1.eak.twilio.com
wiki.hq.twilio.com
platform-slackapp.corp.twilio.com
*.de1.twilio.com
statuspage.io
build.twilio.com
incapsula.com
headsup.twilio.com
webhooks.twilio.com
chickentreat.craveable.support
tsock.twilio.com
pf-voice.dev-us1.eak.twilio.com
*.vss.twilio.com
*.dev.twilio.com
postflight-sms.us1.eak.twilio.com
*.stage-us2.twilio.com
statuspage.io
statuspage.io
*.turn.dev.twilio.com
*.dev-us2.twilio.com
statuspage.io
statuspage.io
doers.twilio.com
akamaisecure4.qualtrics.com
video.us1.eak.twilio.com
support.twilio.com
aproposalfrom.freeman.com
assets.cdn.prod.twilio.com
statuspage.io
*.code.hq.twilio.com
*.help.dev.twilio.com
chunderm.gll.dev.twilio.com
go.twilio.com
*.br1.twilio.com
5271ba7d4eb049ae104fa6533b878d7de1b133d9.console.dev.twilio.com
*.stage.twilio.com
signal.twilio.com
console.ie1.twilio.com
statuspage.io
networktest.twilio.com
partnerportal.kornferry.com
incapsula.com
sales.twilio.com
jp.twilio.com
aproposalfrom.freeman.com
ab-testing.dev-us1.twilio.com
statuspage.io
*.stage-au1.twilio.com
ecs.stage-us1.twilio.com
statuspage.io
*.vss.twilio.com
chunderw-vpc-gll-stage-us2-ix.stage.twilio.com
statuspage.io
statuspage.io
mqtt-sync.us1.twilio.com
*.stage-us2.twilio.com
*.stage-us1.twilio.com
support.twilio.com
console.ireland.stage-ie1.twilio.com
rtd-kibana-6.us1.eak.twilio.com
Certificate
The complete raw certificate details for flex-v2.stage.twilio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgIQAnVTKZM/HEIIf0cR9DJfmzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDExNTAwMDAwMFoXDTI1MDIxMjIzNTk1OVowIzEh MB8GA1UEAxMYZmxleC12Mi5zdGFnZS50d2lsaW8uY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA5GZLGVagcvyXIZC8P8NnzpVsHbSY+ctVbcEXcXHP qJOsc7V955IJpt63hV9n2KgRc+lN53rr3M06DcpBXFevY0HCf6mGYXK8uVGiFcKX SZ2LFmNHO39rV8YAmPt0gagcBh6Zef9XBRLlsenLVnT21rNpuItmlrrVjLrr7F/2 EHkReakVX9TCmH9K/XSY3a9b/na5gr+MK1iElglbybL11tUXSn6H4gKUU/ypTFax WCcXZdka9JNjU6n6V6oRqxYneXzSFErUk9Hr5XF6Qh0hQOgJdH38wOJD6Wi5awUG p4pYk7gnMBF2Js6fu0vJeHRJTFLTQ0U0GJziBOyWq1DXQwIDAQABo4IDLDCCAygw HwYDVR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFDbTleVv yJWugYDUeDQ1aN0BibNpMGAGA1UdEQRZMFeCGGZsZXgtdjIuc3RhZ2UudHdpbGlv LmNvbYIfYXNzZXRzLmZsZXgtdjIuc3RhZ2UudHdpbGlvLmNvbYIaKi5mbGV4LXYy LnN0YWdlLnR3aWxpby5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5j cmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0w My5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMu YW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfAYKKwYB BAHWeQIEAgSCAWwEggFoAWYAdQBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSx Ypo53wAAAY0MruLLAAAEAwBGMEQCID3dbFYw+Tn+20RnPLwtLTlS7MlTmrAS+PSY j953LsEaAiABQUUXRVh90NNVCdhWb2gGjutaqJ69QgW7+O8jMk6MzAB1AH1ZHhLh eCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjQyu4vAAAAQDAEYwRAIgWc32 9D2hFvdD6zBcc91xk6G4/2Yuhg1+KZywUQbI6HwCICxz2YWVFOJdl2Q7gXHFl1Gs rWgR3cRWdrxA1SKFnnlKAHYA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43 jlAAAAGNDK7jGwAABAMARzBFAiBQmWUugTLg6Jr20WILTxHb+N/06Z+HKxifbWJw 8+Ba+gIhAM7y5tQct5KQUaO8VYCdGoK/PSHHa5EVeoLKeQMQzms0MA0GCSqGSIb3 DQEBCwUAA4IBAQBq27/phr5HzeGffXb0JnM2/PnD1dS2z5w1wHuSBAN+qs9btnGc 1tx4iMnXrPufbeykB3y/k022YDmwjPjDrEmC2SoAAs+ujIEu8eOUKpdqEYlNKfhR 5R/1anLgGoRQPNcyQauELl3AG4CxBYzVNsKakt1J5ZA1f8amKNFvAL9Ux9xQYHM7 AYg1Q2vf21bZ9xGvw7xhBiY3myC+p4d3U0+lnBYYAGka2qNZaDCL2iA+MWdwndlJ Poq8OBgJur5EChjTwRN2CxHCrjl9+KI/5l6Tz/oblhB6YHb0bWKDIqjgQMCBVOah kU0uW6RUST5HiCnxjD+2DhlUrrisEGMcR+ir -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GZLGVagcvyXIZC8P8Nn zpVsHbSY+ctVbcEXcXHPqJOsc7V955IJpt63hV9n2KgRc+lN53rr3M06DcpBXFev Y0HCf6mGYXK8uVGiFcKXSZ2LFmNHO39rV8YAmPt0gagcBh6Zef9XBRLlsenLVnT2 1rNpuItmlrrVjLrr7F/2EHkReakVX9TCmH9K/XSY3a9b/na5gr+MK1iElglbybL1 1tUXSn6H4gKUU/ypTFaxWCcXZdka9JNjU6n6V6oRqxYneXzSFErUk9Hr5XF6Qh0h QOgJdH38wOJD6Wi5awUGp4pYk7gnMBF2Js6fu0vJeHRJTFLTQ0U0GJziBOyWq1DX QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3267641457940764966561073320466472859 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flex-v2.stage.twilio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28832776265827190520898940593179844546024419975595550273155194587977995892806955147893251505746597072033431102395211976027435101258872712466540770118429629173911461812256601545229857245840947671093592976738701241208335977289572147614768951912618341332359167615025227565173315587975653595583112149842204554764567432761773461224133098012138532660848984231536016067836925043369033915394081455892772111905296350342876135160935006966747364386633263311939646402613912657228548277860766141103775850959485417394628248330565191886626441615734393347280596404584600710630215203117893310033477814240185645515740328750427541657411 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 36d395e56fc895ae8180d478343568dd0189b369 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flex-v2.stage.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.flex-v2.stage.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flex-v2.stage.twilio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006adbbfe986be47cde19f7d76f4267336fcf9c3d5d4b6cf9c35c07b9204037eaacf5bb6719cd6dc7888c9d7acfb9f6deca4077cbf934db66039b08cf8c3ac4982d92a0002cfae8c812ef1e3942a976a11894d29f851e51ff56a72e01a84503cd73241ab842e5dc01b80b1058cd536c29a92dd49e590357fc6a628d16f00bf54c7dc5060733b018835436bdfdb56d9f711afc3bc610626379b20bea78777534fa59c161800691adaa35968308bda203e3167709dd9493e8abc381809babe440a18d3c113760b11c2ae397df8a23fe65e93cffa1b96107a6076f46d628322a8e040c08154e6a1914d2e5ba454493e478829f18c3fb60e1954aeb8ac10631c47e8ab