arrowhead-test2.exactsciences.net
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 01:e2:2e:ce:41:ab:80:9f:e0:7c:a0:78:ff:85:e3:7b was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=arrowhead-test2.exactsciences.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:e2:2e:ce:41:ab:80:9f:e0:7c:a0:78:ff:85:e3:7bSerial Number (int): 2503636417980892197904371567840060283
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 61:9e:9c:b9:32:fa:dc:e4:a2:3d:a7:87:04:69:a4:c4:dd:c5:1d:04
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): a3:b4:91:1e:2d:52:7b:b2:2a:89:08:41:a8:f5:53:b4:9e:e0:36:51
Fingerprint (sha256): 00:e6:67:2b:d9:b2:b7:fa:f7:f5:64:b8:63:a6:c8:3e:5d:8c:16:55:c6:ae:28:9f:d3:a7:a9:bf:81:20:3c:ac
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate arrowhead-test2.exactsciences.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for arrowhead-test2.exactsciences.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arrowhead-test2.exactsciences.net
Other certificates including the domain name exactsciences.net
(limited to 100 certificates)
xfactor-omap-dev.exactsciences.net
arrowhead-test2.exactsciences.net
groundcontrol.exactsciences.net
viewpsr-dev.exactsciences.net
custom-subdomain-dev.exactsciences.net
xfactor-campaigns-test4.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
specimen-estimations-dev.exactsciences.net
xfactor-campaigns-test5.exactsciences.net
feyereisentest9.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
prx01-datadog-prod.exactsciences.net
dev2-lis.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
sni.cloudflaressl.com
demo-app-sre5-hello-alb.exactsciences.net
result-report-dev.exactsciences.net
demo-app-sre5-hello-nlb.exactsciences.net
vault-ent.exactsciences.net
addressbook-purple-ft.exactsciences.net
dev3-discovery.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
feyereisentest8.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
lab-odxoutcome-stage.exactsciences.net
www.montraitement-cancerdusein.fr
xfactor-campaigns-test2.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
ansible-dev.exactsciences.net
shuttle-api-dev-shuttle-nlb.exactsciences.net
addressbook-stage.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
dsci-kit-return-model-dev.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
custom-subdomain-dev.exactsciences.net
status.exactsciences.net
application-corepoint-test.exactsciences.net
vault-ent.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
xfactor-campaigns-test3.exactsciences.net
650-covid-19-qa.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
*.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
testing-oregon-network.exactsciences.net
*.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
cio-api-test-cio-api-nlb.exactsciences.net
addressbook-pp.exactsciences.net
status.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
*.exactsciences.net
a-test-domain.exactsciences.net
dev-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-calypso-dev.exactsciences.net
stage2-cms.exactsciences.net
exas-helix-ds.exactsciences.net
test-inbound-endpoint.exactsciences.net
result-report-test.exactsciences.net
pcdx-manifest-dev.exactsciences.net
status.exactsciences.net
consul-test.exactsciences.net
lis-dev.exactsciences.net
xfactor-lis-test1.aws.exactsciences.net
www.oncoguardliver.com
demo-app-sre5-hello-alb.exactsciences.net
xfactor-text-dev.exactsciences.net
xfactor-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-fax-test1.exactsciences.net
arrowhead-test2.exactsciences.net
nomad.exactsciences.net
xfactor-epic-consumer-api-service-dev.exactsciences.net
testing-oregon-network.exactsciences.net
a-test-domain.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
discovery-lis.exactsciences.net
stage.deploy-slot.exactsciences.net
uat-cms.exactsciences.net
status.exactsciences.net
xfactor-fax-test2.exactsciences.net
hello-dev-hello-nlb.exactsciences.net
api.xfactor-integration-test.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
test-ib-endpt.exactsciences.net
audit-log-stage-audit-log-nlb.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
addressbook-stage.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
xfactor-campaigns-test1.exactsciences.net
sre3-my-subdomain.exactsciences.net
dsci-incoming-texts-classifier-dev.exactsciences.net
enterprise-dev3-launchpad-nlb.exactsciences.net
arrowhead-test2.exactsciences.net
groundcontrol.exactsciences.net
viewpsr-dev.exactsciences.net
custom-subdomain-dev.exactsciences.net
xfactor-campaigns-test4.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
specimen-estimations-dev.exactsciences.net
xfactor-campaigns-test5.exactsciences.net
feyereisentest9.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
prx01-datadog-prod.exactsciences.net
dev2-lis.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
sni.cloudflaressl.com
demo-app-sre5-hello-alb.exactsciences.net
result-report-dev.exactsciences.net
demo-app-sre5-hello-nlb.exactsciences.net
vault-ent.exactsciences.net
addressbook-purple-ft.exactsciences.net
dev3-discovery.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
feyereisentest8.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
lab-odxoutcome-stage.exactsciences.net
www.montraitement-cancerdusein.fr
xfactor-campaigns-test2.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
ansible-dev.exactsciences.net
shuttle-api-dev-shuttle-nlb.exactsciences.net
addressbook-stage.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
dsci-kit-return-model-dev.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
custom-subdomain-dev.exactsciences.net
status.exactsciences.net
application-corepoint-test.exactsciences.net
vault-ent.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
xfactor-campaigns-test3.exactsciences.net
650-covid-19-qa.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
*.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
testing-oregon-network.exactsciences.net
*.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
cio-api-test-cio-api-nlb.exactsciences.net
addressbook-pp.exactsciences.net
status.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
*.exactsciences.net
a-test-domain.exactsciences.net
dev-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-calypso-dev.exactsciences.net
stage2-cms.exactsciences.net
exas-helix-ds.exactsciences.net
test-inbound-endpoint.exactsciences.net
result-report-test.exactsciences.net
pcdx-manifest-dev.exactsciences.net
status.exactsciences.net
consul-test.exactsciences.net
lis-dev.exactsciences.net
xfactor-lis-test1.aws.exactsciences.net
www.oncoguardliver.com
demo-app-sre5-hello-alb.exactsciences.net
xfactor-text-dev.exactsciences.net
xfactor-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-fax-test1.exactsciences.net
arrowhead-test2.exactsciences.net
nomad.exactsciences.net
xfactor-epic-consumer-api-service-dev.exactsciences.net
testing-oregon-network.exactsciences.net
a-test-domain.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
discovery-lis.exactsciences.net
stage.deploy-slot.exactsciences.net
uat-cms.exactsciences.net
status.exactsciences.net
xfactor-fax-test2.exactsciences.net
hello-dev-hello-nlb.exactsciences.net
api.xfactor-integration-test.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
test-ib-endpt.exactsciences.net
audit-log-stage-audit-log-nlb.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
addressbook-stage.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
xfactor-campaigns-test1.exactsciences.net
sre3-my-subdomain.exactsciences.net
dsci-incoming-texts-classifier-dev.exactsciences.net
enterprise-dev3-launchpad-nlb.exactsciences.net
Certificate
The complete raw certificate details for arrowhead-test2.exactsciences.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgTCCA2mgAwIBAgIQAeIuzkGrgJ/gfKB4/4XjezANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNjAwMDAwMFoXDTI1MDEwMzIzNTk1OVowLDEq MCgGA1UEAxMhYXJyb3doZWFkLXRlc3QyLmV4YWN0c2NpZW5jZXMubmV0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptnQaRdNdU4a09UDYJWWznq5PD1w /9FB6C1WKpjjb9YqxBZtLsySNi27ri1r1qf4PXLD+fZIDf2ztURAoJiwoEz7wT2M vCLzUGosPN5QiD3V79znUg1eJa31PyvTbn/Sk28AFfSIxLseoJ/XzONmUPIfIjzU NShPwvj6mv/EsL7QXSdhCbH9jX3X4YE0JGrll6EYCaOpjO02Ef/tTm45dlCaieny GhEUEg1ivBz2YUX6+24SiFYdtq5PttI8s5EJ6QTK+iUL7Hzfs2gBaf2AFQIk+U8J wJcipgw5BTTXu4gPihM5ZgG1w8+xfttxfbl3lkk+HDgBN4NmCqPjDTL/8wIDAQAB o4IBjTCCAYkwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0O BBYEFGGenLky+tzkoj2nhwRppMTdxR0EMCwGA1UdEQQlMCOCIWFycm93aGVhZC10 ZXN0Mi5leGFjdHNjaWVuY2VzLm5ldDATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1Ud HwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy bTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw LnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5y Mm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYK KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAJMMkzbVEAyteHLr uEQtVBfdc8ZxtOlr7LItUQ+FYohIJuAlG41It9DTxg598rk6FNEbj91VOIVgNGMj hCm00lnSfpSsfDUP1Q4Xh9PRYJlgLWdRRqlyX4SDm6RzFe55cSJWTKjkQsBkAUdn /hPopkFxae+Xc+E2q/83hAzmy6FeLZVwOZJUx4aMOsstBwECnhl+70I8Y1fDgMCr QcwS1eUpTAEpEQyhDbtdLHx4/oC8PYCiFn1grM6Mj+epnUALVhuhTlcm6HR/qn9K 1nSXkCqfitqWh8JcSgoig3TvC52CWAjqcbiH+84tL3SLbLoJmxQWJ6RQotvH00/Z 6MhzbEw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptnQaRdNdU4a09UDYJWW znq5PD1w/9FB6C1WKpjjb9YqxBZtLsySNi27ri1r1qf4PXLD+fZIDf2ztURAoJiw oEz7wT2MvCLzUGosPN5QiD3V79znUg1eJa31PyvTbn/Sk28AFfSIxLseoJ/XzONm UPIfIjzUNShPwvj6mv/EsL7QXSdhCbH9jX3X4YE0JGrll6EYCaOpjO02Ef/tTm45 dlCaienyGhEUEg1ivBz2YUX6+24SiFYdtq5PttI8s5EJ6QTK+iUL7Hzfs2gBaf2A FQIk+U8JwJcipgw5BTTXu4gPihM5ZgG1w8+xfttxfbl3lkk+HDgBN4NmCqPjDTL/ 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2503636417980892197904371567840060283 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arrowhead-test2.exactsciences.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21062966761988162177021709736371698323553524673144842859565426730104608498174644444180068682816303955852651252480300616650221802730862546169505014503040869897828139285672850290375412237836901685295867239863176202954606560091167745731647976341122253726812967094762515307050098710116149538354557387740408126258442833285702344281393890997719102531988484009156133028485851329910927948954062595996797595418791807890996582121878499296918823344442745961285696329900190804097069828000620789213065408803839959618619644484281900835987582856370482485941370621269971709024413196198964508759476850552150511079334112594236902932467 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 619e9cb932fadce4a23da7870469a4c4ddc51d04 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowhead-test2.exactsciences.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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