app-use1.rmr.gendeptm.test.ic1.statefarm
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 01:be:96:24:54:a1:84:7b:10:06:56:ee:3e:98:cc:e4 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=app-use1.rmr.gendeptm.test.ic1.statefarm
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:be:96:24:54:a1:84:7b:10:06:56:ee:3e:98:cc:e4Serial Number (int): 2318809638752934890835253683279154404
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: a4:30:a1:a9:9c:64:b4:74:3b:cd:1f:a7:18:15:11:61:cd:2a:e2:44
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 44:97:48:e6:57:94:e6:63:70:b2:9d:d7:97:44:f2:77:3b:6d:da:17
Fingerprint (sha256): 01:32:54:4e:f9:94:52:b7:51:d3:04:ee:1f:18:79:1a:65:b5:db:1b:d7:fa:18:1a:9d:a4:51:a7:e6:79:b6:3e
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate app-use1.rmr.gendeptm.test.ic1.statefarm
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for app-use1.rmr.gendeptm.test.ic1.statefarm
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
app-use1.rmr.gendeptm.test.ic1.statefarm
app.rmr.gendeptm.test.ic1.statefarm
app.rmr.gendeptm.test.ic1.statefarm
Other certificates including the domain name ic1.statefarm
(limited to 100 certificates)
rentaleligibility-1748234.claimsvc.test.ic1.statefarm
mmw.usw2.puasisbx.test.ic1.statefarm
rental-exp-rest.claimsvc.sandbox.test.ic1.statefarm
sf-amccint-asap-moonracers-associate.amccint.test.ic1.statefarm
cnam.test.ic1.statefarm
*.mgmt.ic1.statefarm
doccatalog-api.pcmcc.test.ic1.statefarm
sf-isc-flc6-spa.iscsbox.test.ic1.statefarm
payloadcapture-env1.amccdev.test.ic1.statefarm
docs.pcsndbx.test.ic1.statefarm
doccatalog-vafab9-api.pcmcc.test.ic1.statefarm
uics-api-dev1.pcmcc.test.ic1.statefarm
sampleapp.pcfrate.test.ic1.statefarm
doccatalog-gj8t.pcmcc.test.ic1.statefarm
stuckapp-bdd.bassets.test.ic1.statefarm
sf-pcmcc-hotapi-env6-us-east-1.pcmcc.test.ic1.statefarm
sf-pushnote-api.pushnote.ic1.statefarm
sf-thunder-bei-env1-api.pcmngdh1.test.ic1.statefarm
doccatalog-api.pcmcc.test.ic1.statefarm
rentaleligibility-1746348.claimsvc.test.ic1.statefarm
jgdb.pcattest.test.ic1.statefarm
max-monthly-benefit-api.ethealth.test.ic1.statefarm
doccatalog-nk5f.pcmcc.test.ic1.statefarm
directemail-xm2r.claims.test.ic1.statefarm
*.hub.test.ic1.statefarm
doccatalog-dqgn.pcmcc.test.ic1.statefarm
updated-mi-jwt-authenticator.redcap.test.ic1.statefarm
stuckapp-bdd.bassets.test.ic1.statefarm
app-use1.rmr.gendeptm.test.ic1.statefarm
datasolutions-plii-api-sndbx.pcingest.test.ic1.statefarm
customer-data-api.iihenbld.test.ic1.statefarm
bcd-services.puasisbx.test.ic1.statefarm
pcmcc.test.ic1.statefarm
sf-aventicon-efs-v.pcsndbx2.test.ic1.statefarm
wc.poladmin.test.ic1.statefarm
data-registry-ops.pcas.isbx.ic1.statefarm
pnr-env1.bassets.test.ic1.statefarm
claimaggregator-sbx.pcurim.test.ic1.statefarm
clmfilclms-sts-api.poc.test.ic1.statefarm
tdm-env3.bassets.test.ic1.statefarm
lablooter-lp-ddk6.seccode.test.ic1.statefarm
pcmcc.ic1.statefarm
prisma-test-vaar8w.test.ic1.statefarm
api.pcmr.pcingest.test.ic1.statefarm
claimaggregator-env7.pcu.test.ic1.statefarm
doccatalog-nk5f.pcmcc.test.ic1.statefarm
analytics-test3-seg4.claimsvc.test.ic1.statefarm
efttoproviderl9kt.claimsvc.sandbox.test.ic1.statefarm
doccatalog-vaflld-api.pcmcc.test.ic1.statefarm
repaireligibility-1490984.claimsvc.test.ic1.statefarm
mmapi.scrummy.bill.test.ic1.statefarm
api.compas.poc.test.ic1.statefarm
*.beginningofday.pcsndbx2.test.ic1.statefarm
plpc-aws-rac.pcmngd02.test.ic1.statefarm
devops.test.ic1.statefarm
iseit-poc.udaas.test.ic1.statefarm
dlt-prodbea-api.pcmcc.ic1.statefarm
nkapi.reg.eclipse.dev.test.ic1.statefarm
pnr-bdd.bassets.test.ic1.statefarm
cdmgt-c2d2syncv2.custmgmt.test.ic1.statefarm
autotools.pcmngd01.test.ic1.statefarm
dlta-dev9.pcmcc.test.ic1.statefarm
claimsvc.clmsbx.test.ic1.statefarm
terratest-lilypad-s3-api.redcap.test.ic1.statefarm
pcmcc.test.ic1.statefarm
lgcyacquisition-ing-api-breakfix.pcingest.test.ic1.statefarm
*.ops-k8s.warm.pcas.isbx.ic1.statefarm
pcesm-apigw-env2.pcmngd01.test.ic1.statefarm
bti.renewal.pymnt.test.ic1.statefarm
resistance-cbk-test.pcafcld.test.ic1.statefarm
doccatalog-vabaus.pcmcc.test.ic1.statefarm
bicmpretend.bparch.test.ic1.statefarm
enhanced-migcal-dr.poladmin.test.ic1.statefarm
api-use1.treasuryfncl.gendeptm.ic1.statefarm
doccatalog-vafph9.pcmcc.test.ic1.statefarm
sfp-ep20.sfconnect.digxp.test.ic1.statefarm
dltage.pcmcc.test.ic1.statefarm
cssdb-document-info-ebet.pcmngdh1.test.ic1.statefarm
event-ingestion-hub-test.entint.test.ic1.statefarm
tfe.infra.ic1.statefarm
w1q4-jwt-authenticator.redcap.test.ic1.statefarm
dlt-dev6gea-api.pcmcc.test.ic1.statefarm
rqstsvcs-test.pcsndbx2.test.ic1.statefarm
aprvlapp.ds.test.ic1.statefarm
im-main-vaaei8.sfconnect.digxp.test.ic1.statefarm
et-metadata-systemtest-axon.datalake.test.ic1.statefarm
wss-emg6.sfconnect.digxp.test.ic1.statefarm
repaireligibility-1724763.claimsvc.test.ic1.statefarm
repaireligibility-1498767.claimsvc.test.ic1.statefarm
ecrmofficeswitchcheck.koko.amccdev.test.ic1.statefarm
dlt-testgwa-api.pcmcc.test.ic1.statefarm
doccatalog-dqgn-api.pcmcc.test.ic1.statefarm
uicscoi-userinitiated-dev1.pcmcc.test.ic1.statefarm
tdm-env3.bassets.test.ic1.statefarm
clmfilclmsdata-api-env3.poc.test.ic1.statefarm
doccatalog-dqgn-api.pcmcc.test.ic1.statefarm
lmtapi.asts.test.ic1.statefarm
bti.renewal.pymnt.test.ic1.statefarm
mmapi.scrummy.bill.test.ic1.statefarm
ingest-ftsj.sfconnect.digxp.test.ic1.statefarm
mmw.usw2.puasisbx.test.ic1.statefarm
rental-exp-rest.claimsvc.sandbox.test.ic1.statefarm
sf-amccint-asap-moonracers-associate.amccint.test.ic1.statefarm
cnam.test.ic1.statefarm
*.mgmt.ic1.statefarm
doccatalog-api.pcmcc.test.ic1.statefarm
sf-isc-flc6-spa.iscsbox.test.ic1.statefarm
payloadcapture-env1.amccdev.test.ic1.statefarm
docs.pcsndbx.test.ic1.statefarm
doccatalog-vafab9-api.pcmcc.test.ic1.statefarm
uics-api-dev1.pcmcc.test.ic1.statefarm
sampleapp.pcfrate.test.ic1.statefarm
doccatalog-gj8t.pcmcc.test.ic1.statefarm
stuckapp-bdd.bassets.test.ic1.statefarm
sf-pcmcc-hotapi-env6-us-east-1.pcmcc.test.ic1.statefarm
sf-pushnote-api.pushnote.ic1.statefarm
sf-thunder-bei-env1-api.pcmngdh1.test.ic1.statefarm
doccatalog-api.pcmcc.test.ic1.statefarm
rentaleligibility-1746348.claimsvc.test.ic1.statefarm
jgdb.pcattest.test.ic1.statefarm
max-monthly-benefit-api.ethealth.test.ic1.statefarm
doccatalog-nk5f.pcmcc.test.ic1.statefarm
directemail-xm2r.claims.test.ic1.statefarm
*.hub.test.ic1.statefarm
doccatalog-dqgn.pcmcc.test.ic1.statefarm
updated-mi-jwt-authenticator.redcap.test.ic1.statefarm
stuckapp-bdd.bassets.test.ic1.statefarm
app-use1.rmr.gendeptm.test.ic1.statefarm
datasolutions-plii-api-sndbx.pcingest.test.ic1.statefarm
customer-data-api.iihenbld.test.ic1.statefarm
bcd-services.puasisbx.test.ic1.statefarm
pcmcc.test.ic1.statefarm
sf-aventicon-efs-v.pcsndbx2.test.ic1.statefarm
wc.poladmin.test.ic1.statefarm
data-registry-ops.pcas.isbx.ic1.statefarm
pnr-env1.bassets.test.ic1.statefarm
claimaggregator-sbx.pcurim.test.ic1.statefarm
clmfilclms-sts-api.poc.test.ic1.statefarm
tdm-env3.bassets.test.ic1.statefarm
lablooter-lp-ddk6.seccode.test.ic1.statefarm
pcmcc.ic1.statefarm
prisma-test-vaar8w.test.ic1.statefarm
api.pcmr.pcingest.test.ic1.statefarm
claimaggregator-env7.pcu.test.ic1.statefarm
doccatalog-nk5f.pcmcc.test.ic1.statefarm
analytics-test3-seg4.claimsvc.test.ic1.statefarm
efttoproviderl9kt.claimsvc.sandbox.test.ic1.statefarm
doccatalog-vaflld-api.pcmcc.test.ic1.statefarm
repaireligibility-1490984.claimsvc.test.ic1.statefarm
mmapi.scrummy.bill.test.ic1.statefarm
api.compas.poc.test.ic1.statefarm
*.beginningofday.pcsndbx2.test.ic1.statefarm
plpc-aws-rac.pcmngd02.test.ic1.statefarm
devops.test.ic1.statefarm
iseit-poc.udaas.test.ic1.statefarm
dlt-prodbea-api.pcmcc.ic1.statefarm
nkapi.reg.eclipse.dev.test.ic1.statefarm
pnr-bdd.bassets.test.ic1.statefarm
cdmgt-c2d2syncv2.custmgmt.test.ic1.statefarm
autotools.pcmngd01.test.ic1.statefarm
dlta-dev9.pcmcc.test.ic1.statefarm
claimsvc.clmsbx.test.ic1.statefarm
terratest-lilypad-s3-api.redcap.test.ic1.statefarm
pcmcc.test.ic1.statefarm
lgcyacquisition-ing-api-breakfix.pcingest.test.ic1.statefarm
*.ops-k8s.warm.pcas.isbx.ic1.statefarm
pcesm-apigw-env2.pcmngd01.test.ic1.statefarm
bti.renewal.pymnt.test.ic1.statefarm
resistance-cbk-test.pcafcld.test.ic1.statefarm
doccatalog-vabaus.pcmcc.test.ic1.statefarm
bicmpretend.bparch.test.ic1.statefarm
enhanced-migcal-dr.poladmin.test.ic1.statefarm
api-use1.treasuryfncl.gendeptm.ic1.statefarm
doccatalog-vafph9.pcmcc.test.ic1.statefarm
sfp-ep20.sfconnect.digxp.test.ic1.statefarm
dltage.pcmcc.test.ic1.statefarm
cssdb-document-info-ebet.pcmngdh1.test.ic1.statefarm
event-ingestion-hub-test.entint.test.ic1.statefarm
tfe.infra.ic1.statefarm
w1q4-jwt-authenticator.redcap.test.ic1.statefarm
dlt-dev6gea-api.pcmcc.test.ic1.statefarm
rqstsvcs-test.pcsndbx2.test.ic1.statefarm
aprvlapp.ds.test.ic1.statefarm
im-main-vaaei8.sfconnect.digxp.test.ic1.statefarm
et-metadata-systemtest-axon.datalake.test.ic1.statefarm
wss-emg6.sfconnect.digxp.test.ic1.statefarm
repaireligibility-1724763.claimsvc.test.ic1.statefarm
repaireligibility-1498767.claimsvc.test.ic1.statefarm
ecrmofficeswitchcheck.koko.amccdev.test.ic1.statefarm
dlt-testgwa-api.pcmcc.test.ic1.statefarm
doccatalog-dqgn-api.pcmcc.test.ic1.statefarm
uicscoi-userinitiated-dev1.pcmcc.test.ic1.statefarm
tdm-env3.bassets.test.ic1.statefarm
clmfilclmsdata-api-env3.poc.test.ic1.statefarm
doccatalog-dqgn-api.pcmcc.test.ic1.statefarm
lmtapi.asts.test.ic1.statefarm
bti.renewal.pymnt.test.ic1.statefarm
mmapi.scrummy.bill.test.ic1.statefarm
ingest-ftsj.sfconnect.digxp.test.ic1.statefarm
Certificate
The complete raw certificate details for app-use1.rmr.gendeptm.test.ic1.statefarm in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtDCCA5ygAwIBAgIQAb6WJFShhHsQBlbuPpjM5DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxNDAwMDAwMFoXDTI1MDExMTIzNTk1OVowMzEx MC8GA1UEAxMoYXBwLXVzZTEucm1yLmdlbmRlcHRtLnRlc3QuaWMxLnN0YXRlZmFy bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPRZfmU1/+ysV9bMcQl5 iqI0/HbLse8p3pkofpNFTMhlr+Q/a1MwV0dwNSBPTvnUBx5d7mkzHw23TNF2ZPjM /ku01DtBol9zPQb9QPDWxkb7BGiU9rJ7vlGCsHsEi2IchrMrj+I6rw/v0S5t+CsG d8YkLRtJeyXaLxlHZugAvZtXHssbL6WJXI9GUmrKKPVhCrnFsPLm8TdqS6ixpcDY rE51ctnP+mCuuGzaH/5RWPzKfL5GmkfMOupSC41I7TPGn2MfIa9/P710P1HSQZA7 +X3VTq4wXQMzgkg1oiiYs+uZGpXVFdG0Lr6feXtXOhj2ikWINzqIlDBYX+fis8EV guECAwEAAaOCAbkwggG1MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4C MB0GA1UdDgQWBBSkMKGpnGS0dDvNH6cYFRFhzSriRDBYBgNVHREEUTBPgihhcHAt dXNlMS5ybXIuZ2VuZGVwdG0udGVzdC5pYzEuc3RhdGVmYXJtgiNhcHAucm1yLmdl bmRlcHRtLnRlc3QuaWMxLnN0YXRlZmFybTATBgNVHSAEDDAKMAgGBmeBDAECATAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29t L3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAw EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAet5Ph+6wR4 Tvzv/Z25JHoyt70wm0WD9Ty8+axIkPdGgN3iME7TwdpF52xJdFR+NatK1FiH3MOn z9X4M9A1z/CdzviUhMObf+Cw739BOz+ia1e6qeRP9o1Xvp9LhnE+yAR32za7X8BW 8GmO7HjAbhPY4Q7h8th9GCs8GJl+FfO1eJOWFCrUxiIxPKqo7S5dRoUleCsxTIWA VYSIhb0VGxaHI9EFy7Wu80PjFc7pZRvqJhgY8FMpncyHwyZhomY6kCKCEjK17pdu UmAosH40fm2uqNFfm8XMX0JKByUFTTmaDaH7OTwYS/gRUq92wCAwYnHH4vnKKDi3 rRSvShHwZrw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Fl+ZTX/7KxX1sxxCXmK ojT8dsux7ynemSh+k0VMyGWv5D9rUzBXR3A1IE9O+dQHHl3uaTMfDbdM0XZk+Mz+ S7TUO0GiX3M9Bv1A8NbGRvsEaJT2snu+UYKwewSLYhyGsyuP4jqvD+/RLm34KwZ3 xiQtG0l7JdovGUdm6AC9m1ceyxsvpYlcj0ZSasoo9WEKucWw8ubxN2pLqLGlwNis TnVy2c/6YK64bNof/lFY/Mp8vkaaR8w66lILjUjtM8afYx8hr38/vXQ/UdJBkDv5 fdVOrjBdAzOCSDWiKJiz65kaldUV0bQuvp95e1c6GPaKRYg3OoiUMFhf5+KzwRWC 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2318809638752934890835253683279154404 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app-use1.rmr.gendeptm.test.ic1.statefarm' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30846277415681701800159246593211838540468914385320271671792260636116283970822147725373951414561818183160861588137749437842321928057666300245448258259496273908998425794469529122271386663501878059996249427955117837803357831589170680831789063282878730451593044435321387666184062207898863777539883251322523449687169258276159926973368386867460268762346700584534905682846921123012747208468607167523090693874159751157913884149974780971050436825768579409810470603169983176914313228923178899776009256301834626358687392200007693355620602467342075160387210873684785092934602720326880677260225933765718373091834687163451770766049 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a430a1a99c64b4743bcd1fa718151161cd2ae244 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-use1.rmr.gendeptm.test.ic1.statefarm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.rmr.gendeptm.test.ic1.statefarm' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0007ade4f87eeb04784efceffd9db9247a32b7bd309b4583f53cbcf9ac4890f74680dde2304ed3c1da45e76c4974547e35ab4ad45887dcc3a7cfd5f833d035cff09dcef89484c39b7fe0b0ef7f413b3fa26b57baa9e44ff68d57be9f4b86713ec80477db36bb5fc056f0698eec78c06e13d8e10ee1f2d87d182b3c18997e15f3b5789396142ad4c622313caaa8ed2e5d468525782b314c858055848885bd151b168723d105cbb5aef343e315cee9651bea261818f053299dcc87c32661a2663a9022821232b5ee976e526028b07e347e6daea8d15f9bc5cc5f424a0725054d399a0da1fb393c184bf81152af76c020306271c7e2f9ca2838b7ad14af4a11f066bc