luna.amazon.eu
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0c:92:b1:53:91:15:8c:a4:fe:e9:4d:ec:48:45:32:bb was issued on by Amazon.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=luna.amazon.eu
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:92:b1:53:91:15:8c:a4:fe:e9:4d:ec:48:45:32:bbSerial Number (int): 16712407898103788379465066363941630651
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: cb:8f:0e:30:a9:ea:c8:97:57:4b:c8:fb:c1:cd:db:5a:64:ad:dc:af
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 93:6d:33:57:09:cf:4b:85:47:57:b9:c8:ff:e6:dc:89:ca:1e:b0:9f
Fingerprint (sha256): 01:c4:50:13:b9:df:17:36:75:ea:e2:8e:94:af:22:02:90:dc:ac:49:b0:f0:a7:51:86:2b:d7:7f:8b:ff:e7:c8
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate luna.amazon.eu
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for luna.amazon.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
luna.amazon.eu
luna.amazon.co.uk
luna.amazon.de
luna.amazon.it
luna.amazon.fr
luna.amazon.es
luna.amazon.co.uk
luna.amazon.de
luna.amazon.it
luna.amazon.fr
luna.amazon.es
Other certificates including the domain name amazon.eu
(limited to 100 certificates)
sdu.amazon.eu
pay-api.amazon.eu
sdu.amazon.eu
prime.amazon.eu
luna.amazon.eu
webservices.amazon.eu
chat.amazon.eu
freight.amazon.co.uk
vendorexpress.amazon.eu
sdu.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
gaming.amazon.eu
music-xray-service.amazon.eu
twitch.amazon.eu
vendorcentral.amazon.eu
vendorexpress.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
www.amazon.eu
sdu.amazon.eu
twitch.amazon.eu
dolphin-preprod.amazon.eu
music-xray-service.amazon.eu
prime.amazon.eu
ab.amazon.eu
pay-api.amazon.eu
digprjsurvey.amazon.eu
digital-music-delivery.amazon.eu
vendorcentral-prod.amazon.com
vat-assist.amazon.eu
sdu.amazon.eu
relay.amazon.eu
vendorcentral-prod.amazon.com
prime.amazon.eu
mlis.amazon.eu
www.amazon.eu
music-xray-service.amazon.eu
webservices.amazon.eu
freight.amazon.eu
pay.amazon.eu
pay.amazon.eu
twitch.amazon.eu
sellercentral.amazon.eu
twitch.amazon.eu
xb-node-report.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
chat.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
vat-assist-beta.amazon.eu
vendorcentral-prod.amazon.com
sdu.amazon.eu
dcp.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
pay.amazon.eu
webservices.amazon.eu
credential-locker-service.amazon.eu
gaming.amazon.eu
www.amazon.eu
vendorcentral-prod.amazon.com
digital-music-delivery.amazon.eu
freight.amazon.co.uk
pay.amazon.eu
carriercentral.amazon.eu
vendorcentral.amazon.eu
gaming.amazon.eu
dolphin-preprod.amazon.eu
poweredby.amazon.de
push.amazon.eu
twitch.amazon.eu
twitch.amazon.eu
photos.amazon.eu
webservices.amazon.eu
storepickup.amazon.eu
prime.amazon.eu
chat.amazon.eu
www.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
vendorcentral.amazon.com
dcp.amazon.eu
rtn.amazon.eu
klite-services.amazon.eu
www.amazon.eu
webservices.amazon.eu
www.amazon.eu
luna.amazon.eu
api.relay.amazon.eu
sellercentral.amazon.eu
dcp.amazon.eu
webservices.amazon.eu
www.amazon.eu
amcentral.amazon.eu
photos.amazon.eu
luna.amazon.eu
pay-api.amazon.eu
sdu.amazon.eu
prime.amazon.eu
luna.amazon.eu
webservices.amazon.eu
chat.amazon.eu
freight.amazon.co.uk
vendorexpress.amazon.eu
sdu.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
gaming.amazon.eu
music-xray-service.amazon.eu
twitch.amazon.eu
vendorcentral.amazon.eu
vendorexpress.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
www.amazon.eu
sdu.amazon.eu
twitch.amazon.eu
dolphin-preprod.amazon.eu
music-xray-service.amazon.eu
prime.amazon.eu
ab.amazon.eu
pay-api.amazon.eu
digprjsurvey.amazon.eu
digital-music-delivery.amazon.eu
vendorcentral-prod.amazon.com
vat-assist.amazon.eu
sdu.amazon.eu
relay.amazon.eu
vendorcentral-prod.amazon.com
prime.amazon.eu
mlis.amazon.eu
www.amazon.eu
music-xray-service.amazon.eu
webservices.amazon.eu
freight.amazon.eu
pay.amazon.eu
pay.amazon.eu
twitch.amazon.eu
sellercentral.amazon.eu
twitch.amazon.eu
xb-node-report.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
chat.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
vat-assist-beta.amazon.eu
vendorcentral-prod.amazon.com
sdu.amazon.eu
dcp.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
pay.amazon.eu
webservices.amazon.eu
credential-locker-service.amazon.eu
gaming.amazon.eu
www.amazon.eu
vendorcentral-prod.amazon.com
digital-music-delivery.amazon.eu
freight.amazon.co.uk
pay.amazon.eu
carriercentral.amazon.eu
vendorcentral.amazon.eu
gaming.amazon.eu
dolphin-preprod.amazon.eu
poweredby.amazon.de
push.amazon.eu
twitch.amazon.eu
twitch.amazon.eu
photos.amazon.eu
webservices.amazon.eu
storepickup.amazon.eu
prime.amazon.eu
chat.amazon.eu
www.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
vendorcentral.amazon.com
dcp.amazon.eu
rtn.amazon.eu
klite-services.amazon.eu
www.amazon.eu
webservices.amazon.eu
www.amazon.eu
luna.amazon.eu
api.relay.amazon.eu
sellercentral.amazon.eu
dcp.amazon.eu
webservices.amazon.eu
www.amazon.eu
amcentral.amazon.eu
photos.amazon.eu
luna.amazon.eu
Certificate
The complete raw certificate details for luna.amazon.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIErjCCA5agAwIBAgIQDJKxU5EVjKT+6U3sSEUyuzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMTIyMTAwMDAwMFoXDTI0MTIxMDIzNTk1OVowGTEX MBUGA1UEAxMObHVuYS5hbWF6b24uZXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDhXyCadM9ToE+irO4HopgdEPMZZOFJfzNiFn9M9nTrvkHOi9RXB53m 9OjokizIVT3vUj0HKDJkwrvgT3v2XopEuR0SuQcQLb0ZaUh1QEapnE9uaUNm6DA1 QCAw1Bh0ffHDjVFFjggjWXQ0g615kwt3nSDUoqX2GyT8GjhnC2MMZ52aW6eUJjfC tHbg+gEikZ3a1qesNTsT+DpctoohPo+IojiGRx++IoB0tS5HgjFQhQPYqy32CucR nG4UiooVo+1rWNBMfX+sjyz63z+/EgOYS1NKqs0ffVGeDEK/RzksJ7cfNwGeQOtZ fonsvdpL5gIwmSm3dE6vgBAZnKTIqZAtAgMBAAGjggHNMIIByTAfBgNVHSMEGDAW gBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUy48OMKnqyJdXS8j7wc3b WmSt3K8wbAYDVR0RBGUwY4IObHVuYS5hbWF6b24uZXWCEWx1bmEuYW1hem9uLmNv LnVrgg5sdW5hLmFtYXpvbi5kZYIObHVuYS5hbWF6b24uaXSCDmx1bmEuYW1hem9u LmZygg5sdW5hLmFtYXpvbi5lczATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAx LmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIy bTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0w MS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKkb1nmoxaCtzrz2rNaH a6S07MAbqoDRVjTocpfvmHSgdCCzER7Y7/rW9gzxWwwu7VU2XzX1IgaTpPgDxgN4 BIjA9JRjBlWVY1VdhC++CbwslUdBqFdPgC4CH3ALyq8PQiJcceqyXw/OAPZ3suqI EeTIPEFEBz7TieZtWOCOUDIOpp/BATsV6hlcISs9hkG432fhUivrEZIcapUtT2kW 6IYuQ3yxtO4GZlkwq3AXzDLXvirqdVEY1NM22C4m7krXOOVWh6tijfyPdy8z+z9Q 99mFFEkuCyNJimugxqsa7d8ivBwa6IjzxvTLTo25hSQLKhV0ZlT6+R593dP2h8OX 6TY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V8gmnTPU6BPoqzuB6KY HRDzGWThSX8zYhZ/TPZ0675BzovUVwed5vTo6JIsyFU971I9BygyZMK74E979l6K RLkdErkHEC29GWlIdUBGqZxPbmlDZugwNUAgMNQYdH3xw41RRY4II1l0NIOteZML d50g1KKl9hsk/Bo4ZwtjDGedmlunlCY3wrR24PoBIpGd2tanrDU7E/g6XLaKIT6P iKI4hkcfviKAdLUuR4IxUIUD2Kst9grnEZxuFIqKFaPta1jQTH1/rI8s+t8/vxID mEtTSqrNH31RngxCv0c5LCe3HzcBnkDrWX6J7L3aS+YCMJkpt3ROr4AQGZykyKmQ LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16712407898103788379465066363941630651 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luna.amazon.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28450527665333283739642406246389721449534263662063656756258954660526432623329077926127029914215549594281905143661884220312719139870962313280958146350458391860515187860258854677748479660400279870320694661293325493586715052013694900975013686086196996769923360931449144067130211082309334988778554876849100442700387538515097251172559276116193131663759089660318998938896506684321273220250390502007738807650572007988939044593070053426097584013462290959336149974488481494156058700572684986752789069955904842802920848887087572154816105512216449505126717682515717434828850713816864108416541434273395063346087716750881871990829 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cb8f0e30a9eac897574bc8fbc1cddb5a64addcaf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna.amazon.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna.amazon.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna.amazon.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna.amazon.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna.amazon.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luna.amazon.es' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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