timesspecials.timesgroup.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0a:d3:cf:b8:a9:6d:8f:bb:f2:07:d9:d8:e3:21:7c:f2 was issued on by Amazon.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=timesspecials.timesgroup.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:d3:cf:b8:a9:6d:8f:bb:f2:07:d9:d8:e3:21:7c:f2Serial Number (int): 14392067684205284218607530566416956658
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 77:52:d9:79:33:70:2a:62:54:e7:97:af:27:c0:0e:cd:38:4f:b5:01
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 50:82:8f:19:a3:74:7f:48:99:cb:96:98:6e:92:cb:8f:98:37:77:29
Fingerprint (sha256): 00:c0:a5:c9:83:5a:6b:03:68:95:97:bb:f3:8a:f3:af:57:06:d4:34:26:6e:a7:60:17:f5:be:d7:1d:57:11:d7
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate timesspecials.timesgroup.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for timesspecials.timesgroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
timesspecials.timesgroup.com
timesspecials.in
www.timesspecials.com
toispecials.in
toispecials.com
www.timesspecials.timesgroup.com
timesspecial.com
www.toispecials.in
www.timesspecial.com
www.toispecials.com
www.toispecials.timesgroup.com
timesspecials.com
timesspecials.in
www.timesspecials.com
toispecials.in
toispecials.com
www.timesspecials.timesgroup.com
timesspecial.com
www.toispecials.in
www.timesspecial.com
www.toispecials.com
www.toispecials.timesgroup.com
timesspecials.com
Other certificates including the domain name timesgroup.com
(limited to 100 certificates)
timesspecials.timesgroup.com
*.Timesgroup.com
servicedesk.gainsight.com
itsm.clinnex.com
*.Timesgroup.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
*.timesgroup.com
ig.infogain.com
epapers.timesgroup.com
epaper.timesgroup.com
www.torqus.com
endpoint.manageengine.live
servicedesk.vsoftconsulting.com
*.timesgroup.com
careers.timesgroup.com
servicedesk.decisionfoundry.com
care.spacematrix.com
ig.infogain.com
humanresource.thepawscuers.life
rms.timesgroup.com
itservicedesk.timesgroup.com
onedesk.tataplay.com
access.timesgroup.com
rms.timesgroup.com
timesofabetterindia.com
servicedesk.celestialsys.com
timesspecial.com
*.Timesgroup.com
onedesk.tataplay.com
epaper.timesgroup.com
servicedesk.celestialsys.com
servicedesk.gainsight.com
taops.fractal.ai
www.torqus.com
timesofabetterindia.com
*.Timesgroup.com
epapers.timesgroup.com
customer-sdpondemand.manageengine.in
mcadmin.timesgroup.com
servicedesk.celestialsys.com
itdesksupport.amphenol-omni.com
www.torqus.com
itservicedesk.timesgroup.com
care.spacematrix.com
timesofabetterindia.com
servicedesk.vsoftconsulting.com
*.olivesoftware.com
care.spacematrix.com
itdesksupport.amphenol-omni.com
access.timesgroup.com
onedesk.tataplay.com
eisamaygold.timesgroup.com
servicedesk.celestialsys.com
subscribe.timesgroup.com
*.timesgroup.com
cmsexternalapi.timesgroup.com
matagold.timesgroup.com
bestoftheworld.in
customer-sdpondemand.manageengine.in
itservicedesk.exeevo.com
itcare.theleela.com
customer-sdpondemand.manageengine.in
ithelpdesk.vadilalgroup.com
www.torqus.com
itsm.clinnex.com
itservicedesk.exeevo.com
mail.timesgroup.com
itservicedesk.timesgroup.com
mail.timesgroup.com
gtac.plintron.in
itdesksupport.amphenol-omni.com
helpdesk.allinoneservices.in.net
access.timesgroup.com
customer-sdpondemand.manageengine.in
care.spacematrix.com
hr.aletheiagroup.co.in
*.olivesoftware.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
timesnet.timesgroup.com
www.giftet.timesgroup.com
app.iambengaluru.epaper.timesgroup.com
*.Timesgroup.com
*.dam.timesgroup.com
itcare.hdfcfund.com
servicedesk.celestialsys.com
epaper.timesgroup.com
care.spacematrix.com
itservicedesk.timesgroup.com
itcare.theleela.com
iambengaluru.epaper.timesgroup.com
servicedesk.kbl.co.in
itsm.clinnex.com
timesofabetterindia.com
itcare.hdfcfund.com
mcadmin.timesgroup.com
itcare.hdfcfund.com
customer-sdpondemand.manageengine.in
servicedesk.gainsight.com
*.Timesgroup.com
servicedesk.gainsight.com
itsm.clinnex.com
*.Timesgroup.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
*.timesgroup.com
ig.infogain.com
epapers.timesgroup.com
epaper.timesgroup.com
www.torqus.com
endpoint.manageengine.live
servicedesk.vsoftconsulting.com
*.timesgroup.com
careers.timesgroup.com
servicedesk.decisionfoundry.com
care.spacematrix.com
ig.infogain.com
humanresource.thepawscuers.life
rms.timesgroup.com
itservicedesk.timesgroup.com
onedesk.tataplay.com
access.timesgroup.com
rms.timesgroup.com
timesofabetterindia.com
servicedesk.celestialsys.com
timesspecial.com
*.Timesgroup.com
onedesk.tataplay.com
epaper.timesgroup.com
servicedesk.celestialsys.com
servicedesk.gainsight.com
taops.fractal.ai
www.torqus.com
timesofabetterindia.com
*.Timesgroup.com
epapers.timesgroup.com
customer-sdpondemand.manageengine.in
mcadmin.timesgroup.com
servicedesk.celestialsys.com
itdesksupport.amphenol-omni.com
www.torqus.com
itservicedesk.timesgroup.com
care.spacematrix.com
timesofabetterindia.com
servicedesk.vsoftconsulting.com
*.olivesoftware.com
care.spacematrix.com
itdesksupport.amphenol-omni.com
access.timesgroup.com
onedesk.tataplay.com
eisamaygold.timesgroup.com
servicedesk.celestialsys.com
subscribe.timesgroup.com
*.timesgroup.com
cmsexternalapi.timesgroup.com
matagold.timesgroup.com
bestoftheworld.in
customer-sdpondemand.manageengine.in
itservicedesk.exeevo.com
itcare.theleela.com
customer-sdpondemand.manageengine.in
ithelpdesk.vadilalgroup.com
www.torqus.com
itsm.clinnex.com
itservicedesk.exeevo.com
mail.timesgroup.com
itservicedesk.timesgroup.com
mail.timesgroup.com
gtac.plintron.in
itdesksupport.amphenol-omni.com
helpdesk.allinoneservices.in.net
access.timesgroup.com
customer-sdpondemand.manageengine.in
care.spacematrix.com
hr.aletheiagroup.co.in
*.olivesoftware.com
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
timesnet.timesgroup.com
www.giftet.timesgroup.com
app.iambengaluru.epaper.timesgroup.com
*.Timesgroup.com
*.dam.timesgroup.com
itcare.hdfcfund.com
servicedesk.celestialsys.com
epaper.timesgroup.com
care.spacematrix.com
itservicedesk.timesgroup.com
itcare.theleela.com
iambengaluru.epaper.timesgroup.com
servicedesk.kbl.co.in
itsm.clinnex.com
timesofabetterindia.com
itcare.hdfcfund.com
mcadmin.timesgroup.com
itcare.hdfcfund.com
customer-sdpondemand.manageengine.in
servicedesk.gainsight.com
Certificate
The complete raw certificate details for timesspecials.timesgroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG2zCCBcOgAwIBAgIQCtPPuKltj7vyB9nY4yF88jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTAwNDAwMDAwMFoXDTI0MTEwMjIzNTk1OVowJzEl MCMGA1UEAxMcdGltZXNzcGVjaWFscy50aW1lc2dyb3VwLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAJL2DVsNqXWzQrPRVaYNuITV/CEX+YFeGDYo su5bEFYExmMjZnYxL/l5WGxgJ7y0MXBf+D0GwlPjEPAWoukOixoxsV16o0X9QHoA QU1GGkV3TQEsC5gaF4oZfe6FxY/aCDgysII/cJ6OjQuweHXnrmQuCMrcu/6B4KGo 9w6+UdLdUzpUmp87PqbBdnR9YpKmp5VevLJDCt+2j8zPoRQDv4J0Wj27qhvgRKeK feo5DsH6fCrQWHGd3++pZw6Hihg7PbMdMbLmeo5Vron0BfjxDj9pSXfatsDrCxb1 ZrUohzEuxR4ujmkA8+snkux9L1i8TvkrF5YvvhnAANxkmjN1yVsCAwEAAaOCA+ww ggPoMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBR3 Utl5M3AqYlTnl68nwA7NOE+1ATCCARsGA1UdEQSCARIwggEOghx0aW1lc3NwZWNp YWxzLnRpbWVzZ3JvdXAuY29tghB0aW1lc3NwZWNpYWxzLmlughV3d3cudGltZXNz cGVjaWFscy5jb22CDnRvaXNwZWNpYWxzLmlugg90b2lzcGVjaWFscy5jb22CIHd3 dy50aW1lc3NwZWNpYWxzLnRpbWVzZ3JvdXAuY29tghB0aW1lc3NwZWNpYWwuY29t ghJ3d3cudG9pc3BlY2lhbHMuaW6CFHd3dy50aW1lc3NwZWNpYWwuY29tghN3d3cu dG9pc3BlY2lhbHMuY29tgh53d3cudG9pc3BlY2lhbHMudGltZXNncm91cC5jb22C EXRpbWVzc3BlY2lhbHMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQw MjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMu Y3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJt MDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAz LmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisG AQQB1nkCBAIEggFvBIIBawFpAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ RnEftZsAAAGK+AwHGQAABAMARzBFAiEAn70o6uwnS7gOjdlwiEp8RcTf1xlAcIay Q8kgaIhb1OsCIACthY9w7nqp6SEw5pdPiRrYK0Yi+jyLIYa2ByiTG0LdAHYASLDj a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGK+AwG6QAABAMARzBFAiEA 4r8sWyMe26znXVHKk06vTSScFB8XNOdgt4KBiHhL1zECIDp3GeIShInNftEydjqf Dq4QtRlOCKHRFLyQV5BEREbXAHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9 MEjX+6sAAAGK+AwGowAABAMASDBGAiEAvc6ibLTrMMWbdwwQ+TMdRGlC7f3ZA7fQ TQTlArqakVcCIQDVpureLURYADXQaMlTxT6uSUO0z0Siv0qirBVQb0T3hTANBgkq hkiG9w0BAQsFAAOCAQEALsEwagFGIPj1WHXUvskCM2EWIZB+0N4em3wtjnqNYPvL W2cVhOg3pwzc/zzhNL3v3i4a/foPDnckQl3OkA0srD849WPEvknoFQv8JJF+8OJu 8UBlGP21/ljC3V0Ow0Ept4DnbNHr4QHi/DP6HZMm/GmIxecr+HtjeLz/FnYf5861 0s3/iCvs7yw4SnAX4Ox1yPqiIC+0gGB6qu1SPMmfBDvsi/Jbdij4n8aCeThree/d JRURRGjVMWidT1qoQzKloumNipARF96TpNI9EKiTSXvtcaKLLyt4lrRdaTgz6g7p CCY3GCdn/ZL2m+wDzTe/51iCSI8n6IuPrntMWl6uHA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvYNWw2pdbNCs9FVpg24 hNX8IRf5gV4YNiiy7lsQVgTGYyNmdjEv+XlYbGAnvLQxcF/4PQbCU+MQ8Bai6Q6L GjGxXXqjRf1AegBBTUYaRXdNASwLmBoXihl97oXFj9oIODKwgj9wno6NC7B4deeu ZC4Iyty7/oHgoaj3Dr5R0t1TOlSanzs+psF2dH1ikqanlV68skMK37aPzM+hFAO/ gnRaPbuqG+BEp4p96jkOwfp8KtBYcZ3f76lnDoeKGDs9sx0xsuZ6jlWuifQF+PEO P2lJd9q2wOsLFvVmtSiHMS7FHi6OaQDz6yeS7H0vWLxO+SsXli++GcAA3GSaM3XJ WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14392067684205284218607530566416956658 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'timesspecials.timesgroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18552125372511535534114040477056618439434090002988238701047299691296703777684090133984337225543684270376223730674046585298855728081798907497900512143600293250311616248926516482042483645812334111434820780112612850404583347621564777865669329142140201536878112201516670444783316862799854119977810375563958070428125441647378934986792630544538399087183590274469428492457569724203712223451384479751544113503438066601355108058254853575084445696384975430832170336287407070051093312218402930673480480415844313930956373195774890180554576274883143946408845989230236565103135091504733240310049018132806607634120186222747692943707 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7752d97933702a6254e797af27c00ecd384fb501 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (274 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.timesgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecials.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toispecials.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toispecials.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecials.timesgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.timesgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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