pr-327-lightning-mosaic.eapdev.comcast.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 09:b9:bb:de:2c:3b:31:15:13:4f:f9:ab:01:39:80:c6 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=pr-327-lightning-mosaic.eapdev.comcast.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:b9:bb:de:2c:3b:31:15:13:4f:f9:ab:01:39:80:c6Serial Number (int): 12927437293830045836691966894626406598
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 3e:27:0d:bd:b5:79:93:8c:d0:a5:a2:32:9a:9b:e8:49:f4:62:50:45
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 07:8f:43:fd:d8:96:fd:dd:92:50:6d:2f:48:a1:bf:9e:8b:29:d7:06
Fingerprint (sha256): 01:2b:14:d2:f3:9d:15:b2:b5:32:65:32:d0:0f:98:7d:a5:44:6a:2c:ee:17:a8:a0:37:d7:70:61:7c:41:e6:64
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate pr-327-lightning-mosaic.eapdev.comcast.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pr-327-lightning-mosaic.eapdev.comcast.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pr-327-lightning-mosaic.eapdev.comcast.com
Other certificates including the domain name comcast.com
(limited to 100 certificates)
cronaas.stage.rules.comcast.com
xfwaaa.partners.sys.comcast.net
remote.comcast.com
ss-payment-ctnt-qa.np.digital.business.comcast.com
apsportal.cable.comcast.com
portal.sandbox.rules.comcast.com
*.jns2.gumby.comcast.com
elasticsearchpoc.xfinitysats.com
p2-elearning.comcast.com
www.salesspace.comcast.com
observability-poc-content-pqa.np.digital.business.comcast.com
ss-help-shared-content-stg-va.np.digital.business.comcast.com
utrccesxvdi01.cable.comcast.com
codcctelocm02.cable.comcast.com
lift.comcast.com
poc-bsd-ui-framework-dev.np.digital.business.comcast.com
tintaiih.comcast.net
ncovrec-ho-1p.cable.comcast.com
key-retail.cable.comcast.com
waf-setup-poc-stg-va.np.digital.business.comcast.com
compass.static.np.digital.business.comcast.com
partner.comcast.com
nds.cable.comcast.com
www.xfinity.comcast.net
ncovlb-as-1p.cable.comcast.com
otto.snp.comcast.com
promotion.stg.ss.np.api-business.comcast.com
penguin.dev.ibis.comcast.com
secure08.lithium.com
ss-cpni-content-prod-va.digital.business.comcast.com
5753952654065664-fe1.pantheonsite.io
vault-po.autobahn.comcast.com
activation4.comcast.com
malownicvair04.cable.comcast.com
sonarqube.comcast.com
audit.staging.vault.comcast.com
ss-help-article-ui-qa.np.digital.business.comcast.com
gavinv11ris02.cable.comcast.com
diversity.comcast.com
vd-limited-mes-b.sdwan.comcast.net
servicestab.dh.comcast.com
midwest.comcast.com
user-management.prod-va.digital.business.comcast.com
ss-order-summary-ui-dev.np.digital.business.comcast.com
*.jns-test.gumby.comcast.com
jobs-stg.comcast.com
penguin.prod.ibis.comcast.com
ncovrec-as-8p.cable.comcast.com
pr-327-lightning-mosaic.eapdev.comcast.com
ss-billing-ui-int.np.digital.business.comcast.com
cbhdb2-ch2-1p.cable.comcast.com
ss-user-directory-cntnt-pqa.np.digital.business.comcast.com
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
cafeapp-wc-a3p.cable.comcast.com
cdxocproc-il-1p.cable.comcast.com
secure09.lithium.com
ncovrec-as-9p.cable.comcast.com
res-api.svc-dev.thor.comcast.com
pawchscmspweb01.cable.comcast.com
*.business.comcast.com
ieapply-stg.internetessentials.com
pawayvapmbpmp02.cable.comcast.com
ss-payment-ctnt-pqa.np.digital.business.comcast.com
ss-voice-security-cntnt-dev.np.digital.business.comcast.com
qa.g.gears.comcast.com
edge.myriad-lite.top.comcast.net
copdcvnx01-cs1.cable.comcast.com
njswl-c031207.cable.comcast.com
password-reset-bff.qa.np.api-business.comcast.com
ieapi.internetessentials.com
ss-help-home-ui-qa.np.digital.business.comcast.com
api-staging.xfinitymfa.com
ss-billing-ui-int.np.digital.business.comcast.com
api-prod.salesx.business.comcast.com
wifilogin-st.xfinity.com
advomswebdev.comcast.com
*.np.salesx.comcast.com
secure08.lithium.com
design.comcast.com
aquaweb-wc-7p.cable.comcast.com
gisstrm-po-c7p.cable.comcast.com
ucm.cable.comcast.com
observability-poc-content-qa.np.digital.business.comcast.com
ss-help-search-micro-ui-qa.np.digital.business.comcast.com
sample-ui-01-test.digital.business.comcast.com
bsd-global-nav-content-int.np.digital.business.comcast.com
umd-cablehelp.comcast.com
ss-help-topic-ui-pqa.np.digital.business.comcast.com
cwa.comcast.com
amagcweb-as-1p.cable.comcast.com
integration-contingent.comcast.com
customer-hub-content-prod-va.digital.business.comcast.com
secure05.stage.lithium.com
rocketfuel-ui-assets-qa.np.digital.business.comcast.com
voice-security-content-prod.digital.business.comcast.com
user-invite-service.internal.int.np.api-business.comcast.com
ncovem-ho-2p.cable.comcast.com
bomui.g.cable.comcast.com
nde-portal.cb-es.comcast.com
xfwaaa.partners.sys.comcast.net
remote.comcast.com
ss-payment-ctnt-qa.np.digital.business.comcast.com
apsportal.cable.comcast.com
portal.sandbox.rules.comcast.com
*.jns2.gumby.comcast.com
elasticsearchpoc.xfinitysats.com
p2-elearning.comcast.com
www.salesspace.comcast.com
observability-poc-content-pqa.np.digital.business.comcast.com
ss-help-shared-content-stg-va.np.digital.business.comcast.com
utrccesxvdi01.cable.comcast.com
codcctelocm02.cable.comcast.com
lift.comcast.com
poc-bsd-ui-framework-dev.np.digital.business.comcast.com
tintaiih.comcast.net
ncovrec-ho-1p.cable.comcast.com
key-retail.cable.comcast.com
waf-setup-poc-stg-va.np.digital.business.comcast.com
compass.static.np.digital.business.comcast.com
partner.comcast.com
nds.cable.comcast.com
www.xfinity.comcast.net
ncovlb-as-1p.cable.comcast.com
otto.snp.comcast.com
promotion.stg.ss.np.api-business.comcast.com
penguin.dev.ibis.comcast.com
secure08.lithium.com
ss-cpni-content-prod-va.digital.business.comcast.com
5753952654065664-fe1.pantheonsite.io
vault-po.autobahn.comcast.com
activation4.comcast.com
malownicvair04.cable.comcast.com
sonarqube.comcast.com
audit.staging.vault.comcast.com
ss-help-article-ui-qa.np.digital.business.comcast.com
gavinv11ris02.cable.comcast.com
diversity.comcast.com
vd-limited-mes-b.sdwan.comcast.net
servicestab.dh.comcast.com
midwest.comcast.com
user-management.prod-va.digital.business.comcast.com
ss-order-summary-ui-dev.np.digital.business.comcast.com
*.jns-test.gumby.comcast.com
jobs-stg.comcast.com
penguin.prod.ibis.comcast.com
ncovrec-as-8p.cable.comcast.com
pr-327-lightning-mosaic.eapdev.comcast.com
ss-billing-ui-int.np.digital.business.comcast.com
cbhdb2-ch2-1p.cable.comcast.com
ss-user-directory-cntnt-pqa.np.digital.business.comcast.com
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
cafeapp-wc-a3p.cable.comcast.com
cdxocproc-il-1p.cable.comcast.com
secure09.lithium.com
ncovrec-as-9p.cable.comcast.com
res-api.svc-dev.thor.comcast.com
pawchscmspweb01.cable.comcast.com
*.business.comcast.com
ieapply-stg.internetessentials.com
pawayvapmbpmp02.cable.comcast.com
ss-payment-ctnt-pqa.np.digital.business.comcast.com
ss-voice-security-cntnt-dev.np.digital.business.comcast.com
qa.g.gears.comcast.com
edge.myriad-lite.top.comcast.net
copdcvnx01-cs1.cable.comcast.com
njswl-c031207.cable.comcast.com
password-reset-bff.qa.np.api-business.comcast.com
ieapi.internetessentials.com
ss-help-home-ui-qa.np.digital.business.comcast.com
api-staging.xfinitymfa.com
ss-billing-ui-int.np.digital.business.comcast.com
api-prod.salesx.business.comcast.com
wifilogin-st.xfinity.com
advomswebdev.comcast.com
*.np.salesx.comcast.com
secure08.lithium.com
design.comcast.com
aquaweb-wc-7p.cable.comcast.com
gisstrm-po-c7p.cable.comcast.com
ucm.cable.comcast.com
observability-poc-content-qa.np.digital.business.comcast.com
ss-help-search-micro-ui-qa.np.digital.business.comcast.com
sample-ui-01-test.digital.business.comcast.com
bsd-global-nav-content-int.np.digital.business.comcast.com
umd-cablehelp.comcast.com
ss-help-topic-ui-pqa.np.digital.business.comcast.com
cwa.comcast.com
amagcweb-as-1p.cable.comcast.com
integration-contingent.comcast.com
customer-hub-content-prod-va.digital.business.comcast.com
secure05.stage.lithium.com
rocketfuel-ui-assets-qa.np.digital.business.comcast.com
voice-security-content-prod.digital.business.comcast.com
user-invite-service.internal.int.np.api-business.comcast.com
ncovem-ho-2p.cable.comcast.com
bomui.g.cable.comcast.com
nde-portal.cb-es.comcast.com
Certificate
The complete raw certificate details for pr-327-lightning-mosaic.eapdev.comcast.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkzCCA3ugAwIBAgIQCbm73iw7MRUTT/mrATmAxjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIyMjAwMDAwMFoXDTI1MDExOTIzNTk1OVowNTEz MDEGA1UEAxMqcHItMzI3LWxpZ2h0bmluZy1tb3NhaWMuZWFwZGV2LmNvbWNhc3Qu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpxqfsdIWPB8fTZa kjnelM8ZRHiIvhZumq4tFkR0NidsNpwe8vxAoecQOyYLkoBH28/PSzq/UpjqKZix cDOU9eWdVIyfVzu/ocw4AYlgU6/D8XKW2DwrmJTYozD0m36f27FrWM3gGoZZzf4X ZIPw/0n247Mlzdg7GaIItfzgj0fFyQC4gNWo20566q1LuYOrVgWXEXCsTH9PMjN5 VPNm5uEKz2tsWCuAxUPDWfm9EJ7Fgc26cjF/rNExqdzgnxeFPC+CHlYwMArf5byk /zOJilIsaAh6nyDGxHY9PMe4EqGP118Zb0Oia+VH1rDVfVSInPY6GEoMQnDZHim/ Eu6L0wIDAQABo4IBljCCAZIwHwYDVR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHX LgIwHQYDVR0OBBYEFD4nDb21eZOM0KWiMpqb6En0YlBFMDUGA1UdEQQuMCyCKnBy LTMyNy1saWdodG5pbmctbW9zYWljLmVhcGRldi5jb21jYXN0LmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMu YW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2Vy MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBALG62CWAWP4vZQfLKPILZF4TgLO5ysEh8hu1Fo67Z8PLMIdITtCgmgzV o06hC4Pz7ySXEQ3alrnOkir4i8iPBEhtl2CcSxmtdRjzxPzuBJsT8/tnU69gDjbf 2RJXjxwfQSbGSbMpK8VYs/CwvvgGhEEgAePQlYTknoDhYL1lV5cBHzXpFCRKvaad nU945e7b1h0viASs2+SPMKjuD8byciiKlMWG7rnfeePb+IFnE5MqWwewZ1CvvlFN Hyh/44LzUM1MG0HMajMKuV07fvXh6QceDk3ZN0OnaogZ/MGJw/tEUp9nNybcXOdr 1Ovh/MXpNtbghV2wojYugiEUxaRn6HQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpxqfsdIWPB8fTZakjne lM8ZRHiIvhZumq4tFkR0NidsNpwe8vxAoecQOyYLkoBH28/PSzq/UpjqKZixcDOU 9eWdVIyfVzu/ocw4AYlgU6/D8XKW2DwrmJTYozD0m36f27FrWM3gGoZZzf4XZIPw /0n247Mlzdg7GaIItfzgj0fFyQC4gNWo20566q1LuYOrVgWXEXCsTH9PMjN5VPNm 5uEKz2tsWCuAxUPDWfm9EJ7Fgc26cjF/rNExqdzgnxeFPC+CHlYwMArf5byk/zOJ ilIsaAh6nyDGxHY9PMe4EqGP118Zb0Oia+VH1rDVfVSInPY6GEoMQnDZHim/Eu6L 0wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12927437293830045836691966894626406598 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pr-327-lightning-mosaic.eapdev.comcast.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18507924127892360131948519286833461961615952793980629152821040978368488310916452249429948458823830632328565125363946400617190664518937874564997474980881895447896348995297782280021851200597562128189491600451024974535691039695805275503098627303103310313147369499510735229231597714285464389238470573856464140855249425007229794309087229240979980376288136137155803512815554064834664104895389154479992295287156370759744054222582882438586107770912617921713999017076157115946955905643330020514289062787392035903213066378924084176153000835354186434933517479524513503305092417542041977278375393195010204403901537500654568639443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e270dbdb579938cd0a5a2329a9be849f4625045 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr-327-lightning-mosaic.eapdev.comcast.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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