canopy.rent
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0e:01:69:17:89:09:59:d4:59:86:4e:96:22:1c:98:74 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=canopy.rent
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:01:69:17:89:09:59:d4:59:86:4e:96:22:1c:98:74Serial Number (int): 18616515755514229187434563478845429876
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dd:4f:01:81:81:82:b5:5f:e3:63:8b:bc:13:77:57:fb:30:46:18:fc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): ca:d6:cf:11:dc:8a:c9:04:ba:14:6e:2f:05:2f:cd:f6:72:83:09:f0
Fingerprint (sha256): 01:5f:23:c5:9e:5b:c3:4b:a1:9a:25:12:95:d5:53:8f:81:52:ce:38:4b:01:54:fc:2b:13:6c:68:eb:7e:22:c8
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate canopy.rent
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for canopy.rent
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canopy.rent
www.canopy.rent
www.canopy.rent
Other certificates including the domain name canopy.rent
(limited to 100 certificates)
comercializadoracentral.com
energy.canopy.rent
www.audiocay.com
canopy.rent
help.canopy.rent
mezzolladev.com
retool.canopy.rent
app-uat.canopy.rent
botdeploy.io
www.everestgreenayur.com
api.plutuslabs.ca
ssl380325.cloudflaressl.com
hatechs.com
www.djeliba.com
eemaxtours.com
dreamteam.staging.canopy.rent
*.canopy.rent
beta.funfastfit.co
casaferrao.com.br
ar-upopoy.jp
hq-uat.canopy.rent
backend-prod.canopy.rent
contacthub-dialer.alertacall.com
www.canopy.rent
hq-uat.canopy.rent
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
www.deli.land
go.selva.boron.canopy.rent
ssl380325.cloudflaressl.com
*.canopy.rent
hydcal.me
www.alexmanzana.com
ssl380323.cloudflaressl.com
dev-links.resident.love
marcialdiaz.com
ssl380324.cloudflaressl.com
thinkers.developwithmaw.com
hq.staging.canopy.rent
www.la-bouilloire-verte.fr
etu.auron.fi
phoenix.auren.com.pe
ssl380325.cloudflaressl.com
api-uat.canopy.rent
communications.chief.systems
www.canopy.rent
www.odiledegraeve.be
ssl380324.cloudflaressl.com
www.canopy.rent
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
ditalipizzaria.lupi.delivery
willyou.watch
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
beta.hq.canopy.rent
ssl380324.cloudflaressl.com
app-uat.canopy.rent
www.canopy.rent
ssl380325.cloudflaressl.com
etu.auron.fi
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
kibana.canopy.rent
www.canopy.rent
www.la-bouilloire-verte.fr
backend-staging.canopy.rent
to-do-map.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
www.pridemap.eu
app-uat.canopy.rent
www.pridemap.eu
ssl380324.cloudflaressl.com
www.mehmetkose.com.tr
rabbiyisraeli.com
www.canopy.rent
oudon.xyz
ssl380325.cloudflaressl.com
www.canopy.rent
hq-prod.canopy.rent
link.otospector.co.id
canopy.rent
ssl380325.cloudflaressl.com
servir.shanemaglangit.com
energy.canopy.rent
ssl380324.cloudflaressl.com
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
canopy.rent
ssl380323.cloudflaressl.com
comercializadoracentral.com
www.canopy.rent
development.admin.canopy.rent
crm.kokos.co.nz
vpn-staging.canopy.rent
app.canopy.rent
marmitanaestrada.com
energy.canopy.rent
www.audiocay.com
canopy.rent
help.canopy.rent
mezzolladev.com
retool.canopy.rent
app-uat.canopy.rent
botdeploy.io
www.everestgreenayur.com
api.plutuslabs.ca
ssl380325.cloudflaressl.com
hatechs.com
www.djeliba.com
eemaxtours.com
dreamteam.staging.canopy.rent
*.canopy.rent
beta.funfastfit.co
casaferrao.com.br
ar-upopoy.jp
hq-uat.canopy.rent
backend-prod.canopy.rent
contacthub-dialer.alertacall.com
www.canopy.rent
hq-uat.canopy.rent
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
www.deli.land
go.selva.boron.canopy.rent
ssl380325.cloudflaressl.com
*.canopy.rent
hydcal.me
www.alexmanzana.com
ssl380323.cloudflaressl.com
dev-links.resident.love
marcialdiaz.com
ssl380324.cloudflaressl.com
thinkers.developwithmaw.com
hq.staging.canopy.rent
www.la-bouilloire-verte.fr
etu.auron.fi
phoenix.auren.com.pe
ssl380325.cloudflaressl.com
api-uat.canopy.rent
communications.chief.systems
www.canopy.rent
www.odiledegraeve.be
ssl380324.cloudflaressl.com
www.canopy.rent
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
ditalipizzaria.lupi.delivery
willyou.watch
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
beta.hq.canopy.rent
ssl380324.cloudflaressl.com
app-uat.canopy.rent
www.canopy.rent
ssl380325.cloudflaressl.com
etu.auron.fi
ssl380324.cloudflaressl.com
ssl380323.cloudflaressl.com
kibana.canopy.rent
www.canopy.rent
www.la-bouilloire-verte.fr
backend-staging.canopy.rent
to-do-map.com
ssl380325.cloudflaressl.com
ssl380323.cloudflaressl.com
www.pridemap.eu
app-uat.canopy.rent
www.pridemap.eu
ssl380324.cloudflaressl.com
www.mehmetkose.com.tr
rabbiyisraeli.com
www.canopy.rent
oudon.xyz
ssl380325.cloudflaressl.com
www.canopy.rent
hq-prod.canopy.rent
link.otospector.co.id
canopy.rent
ssl380325.cloudflaressl.com
servir.shanemaglangit.com
energy.canopy.rent
ssl380324.cloudflaressl.com
ssl380324.cloudflaressl.com
ssl380325.cloudflaressl.com
canopy.rent
ssl380323.cloudflaressl.com
comercializadoracentral.com
www.canopy.rent
development.admin.canopy.rent
crm.kokos.co.nz
vpn-staging.canopy.rent
app.canopy.rent
marmitanaestrada.com
Certificate
The complete raw certificate details for canopy.rent in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIQDgFpF4kJWdRZhk6WIhyYdDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDIwOTAwMDAwMFoXDTI1MDMwOTIzNTk1OVowFjEU MBIGA1UEAxMLY2Fub3B5LnJlbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCvDuR7KnAf46kfV2XS8MWyWbMO+oJ/KevNlN/z9Bb9YW5QRGsuCM5NnvKd JAqyNefYgimJipXV1WK4obkV8Hxr7WuDWrb3B4//faN8ExXwbOnHHIAXAHBc/TJ6 Sy+Z3EQrFgxu7rMI3DfhJujfnhn9fsfE+ea1cSIAzFFLmen9I3Ikyp43/wkOCE1z t9eT8mWCzc/M8ca3Uuw4daIAaTHOK1nMaoh6K2TlgzLGQE2DEvb3c/2/g2Mx85RS metMxs+o5mHmBOTzEOmV+qBANhz/bfpPfhhokEqRS3bsa9nOwtLNcaRB8PP1w3KH cKprDgUz8aIQkWmf+bwvJNWiuhv9AgMBAAGjggL0MIIC8DAfBgNVHSMEGDAWgBTA MVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU3U8BgYGCtV/jY4u8E3dX+zBG GPwwJwYDVR0RBCAwHoILY2Fub3B5LnJlbnSCD3d3dy5jYW5vcHkucmVudDATBgNV HSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJt MDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYI KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2Bggr BgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIu Y2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AE51 oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjYvZo3cAAAQDAEYwRAIg Asq/YBZYEP4nrOVgq+GqspblSdHxQ0vQoOBd/W1Koo0CIE8xeqvl4CqiQ3BKwXq9 wk9YNzOxxmLfr9p1Bzb92hxcAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/Z DowuebgAAAGNi9mjggAABAMARzBFAiBpVJXOU2/ZNBnAfFZrU3h855gpJp7qFYVL fc2i9ycrtwIhAI3VOuLtHabiRUUw7RJiE+Den9fvhxOkaCCUt34knk/rAHYA5tIx Y0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNi9mjrwAABAMARzBFAiEA wlEgzgJdzNmdhAAoFM0B8M6cknAN29uvgh+lYX4VoSoCID5nlYMEbDuLvQTbwYPW Mhi2ozD3QEV6+RQu6/UgWQQTMA0GCSqGSIb3DQEBCwUAA4IBAQCHkLROOY9lkRTZ 5dncQK+mcOsIN0YlLJPXYAZYYnewxjMeM4ZFmeNlg4bvmJEY0mjXKj85iIdYhNTh 6rOKMo6gwFlNIHwGMqBnFaiC21J2t53exrUkX/FE1t8C1WnOzg03p5McS3gJ8wTj wSx5bEaZzN2+YFD9mipxDh+ObYdlpU/J/iJbJzcgEGpgLIQ+WmpOHZo5hoRKfqEf hQiLrO1TCY5ZrvMw8aB2LpiNarfwBLJQrf4u++sah0GuZPXUM1fXMFuGHahhklHd IFFyp4oRfr4Wefje2pDaM4b49cDQ7maSAzNQwRUHCrf2NIGHbpW+lvkoMW2PKE1Y xRqsRY/P -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw7keypwH+OpH1dl0vDF slmzDvqCfynrzZTf8/QW/WFuUERrLgjOTZ7ynSQKsjXn2IIpiYqV1dViuKG5FfB8 a+1rg1q29weP/32jfBMV8GzpxxyAFwBwXP0yeksvmdxEKxYMbu6zCNw34Sbo354Z /X7HxPnmtXEiAMxRS5np/SNyJMqeN/8JDghNc7fXk/Jlgs3PzPHGt1LsOHWiAGkx zitZzGqIeitk5YMyxkBNgxL293P9v4NjMfOUUpnrTMbPqOZh5gTk8xDplfqgQDYc /236T34YaJBKkUt27GvZzsLSzXGkQfDz9cNyh3Cqaw4FM/GiEJFpn/m8LyTVorob /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18616515755514229187434563478845429876 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canopy.rent' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22099047136666415933501168257884442607612797726508443901866377922205029710531040957080472828864974195123177490427404545096542345519750261791251522931830209299725624662691909599409900184541782129188373516399871249979702253171466923240122438268643327211559487329023046451350245709258386504188199157138794313326589290335244676187231776509581865748799669834470648660074580023416598229395297766400427246106610544078013769579495422162778110788444741940660275325141517923921081028773626605659915125719059248288780340197017192384557617563501184167904192169082430086194461595879120007293026376579463430873628775748815583583229 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dd4f01818182b55fe3638bbc137757fb304618fc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopy.rent' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canopy.rent' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 01670075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d8bd9a3770000040300463044022002cabf60165810fe27ace560abe1aab296e549d1f1434bd0a0e05dfd6d4aa28d02204f317aabe5e02aa243704ac17abdc24f583733b1c662dfafda750736fdda1c5c0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d8bd9a38200000403004730450220695495ce536fd93419c07c566b53787ce79829269eea15854b7dcda2f7272bb70221008dd53ae2ed1da6e2454530ed126213e0de9fd7ef8713a4682094b77e249e4feb007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d8bd9a3af0000040300473045022100c25120ce025dccd99d84002814cd01f0ce9c92700ddbdbaf821fa5617e15a12a02203e679583046c3b8bbd04dbc183d63218b6a330f740457af9142eebf520590413 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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