*.test.aws.dotdash.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 08:6f:72:f4:37:04:61:22:52:59:57:bf:a7:8d:cc:2f was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.test.aws.dotdash.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:6f:72:f4:37:04:61:22:52:59:57:bf:a7:8d:cc:2fSerial Number (int): 11212500460970132567048489009127738415
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 26:1a:24:b1:18:e0:8b:f3:24:1c:3f:6d:aa:e3:c6:47:22:d0:6e:ef
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 9b:95:6a:40:62:02:2a:90:7e:ef:e5:33:31:65:a9:8b:cb:c7:2c:38
Fingerprint (sha256): 01:c4:c4:f0:b2:83:74:a3:8d:93:fa:97:fe:8d:ff:c8:30:4b:80:31:ea:83:ad:5b:0a:e7:92:37:27:fe:e9:6f
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.test.aws.dotdash.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.test.aws.dotdash.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.test.aws.dotdash.com
Other certificates including the domain name dotdash.com
(limited to 100 certificates)
continual.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
dotdash.map.fastly.net
*.dotdash.com
*.test.aws.dotdash.com
continual.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.map.fastly.net
dotdash.map.fastly.net
*.dotdash.com
about.com
dotdash.map.fastly.net
pe-adhoc-2.app.qa.aws.dotdash.com
local.dotdash.com
pe-batch.app.qa.aws.dotdash.com
link.dotdash.com
continual.app.prod.aws.dotdash.com
*.greenhouse.dotdash.com
local.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.qa.aws.dotdash.com
a-ue1.dotdash.com
local.dotdash.com
hackerone-quarantine.app.qa.aws.dotdash.com
a-uw2.dotdash.com
*.about.com
*.dotdash.com
*.about.com
techblog.dotdash.com
*.about.com
local.dotdash.com
techblog.dotdash.com
*.about.com
*.ext1.use1.dotdash.com
*.dotdash.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.dotdash.com
groceryserver-qa.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.com
continual.app.qa.aws.dotdash.com
*.about.com
local.dotdash.com
link.dotdash.com
continual.app.qa.aws.dotdash.com
control.app.prod.aws.dotdash.com
continual.app.prod.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
*.about.com
dotdash.map.fastly.net
persistent.app.qa.aws.dotdash.com
link.dotdash.com
persistent.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
*.ext1.usw2.dotdash.com
continual.app.prod.aws.dotdash.com
a-uw2.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
pe.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
pe-adhoc-4.app.qa.aws.dotdash.com
local.dotdash.com
pe.app.qa.aws.dotdash.com
pe-batch.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
qa.aws.dotdash.com
local.dotdash.com
dotdash.com
*.ops.k8s.use1.dotdash.com
*.about.com
a-ue1.dotdash.com
persistent.app.qa.aws.dotdash.com
*.qa.aws.about.com
dotdash.map.fastly.net
continual.app.prod.aws.dotdash.com
dotdash.map.fastly.net
control.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
link.dotdash.com
*.qa.aws.about.com
persistent.app.qa.aws.dotdash.com
*.about.com
dotdash.map.fastly.net
disposable.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
dotdash.map.fastly.net
*.dotdash.com
*.test.aws.dotdash.com
continual.app.qa.aws.dotdash.com
pe.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.map.fastly.net
dotdash.map.fastly.net
*.dotdash.com
about.com
dotdash.map.fastly.net
pe-adhoc-2.app.qa.aws.dotdash.com
local.dotdash.com
pe-batch.app.qa.aws.dotdash.com
link.dotdash.com
continual.app.prod.aws.dotdash.com
*.greenhouse.dotdash.com
local.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.qa.aws.dotdash.com
a-ue1.dotdash.com
local.dotdash.com
hackerone-quarantine.app.qa.aws.dotdash.com
a-uw2.dotdash.com
*.about.com
*.dotdash.com
*.about.com
techblog.dotdash.com
*.about.com
local.dotdash.com
techblog.dotdash.com
*.about.com
*.ext1.use1.dotdash.com
*.dotdash.com
dotdash.map.fastly.net
pe-batch.app.qa.aws.dotdash.com
groceryserver-qa.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
disposable.app.qa.aws.dotdash.com
dotdash.com
continual.app.qa.aws.dotdash.com
*.about.com
local.dotdash.com
link.dotdash.com
continual.app.qa.aws.dotdash.com
control.app.prod.aws.dotdash.com
continual.app.prod.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
*.about.com
dotdash.map.fastly.net
persistent.app.qa.aws.dotdash.com
link.dotdash.com
persistent.app.qa.aws.dotdash.com
disposable.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
*.ext1.usw2.dotdash.com
continual.app.prod.aws.dotdash.com
a-uw2.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
a-ue1.dotdash.com
continual.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
central-control.app.prod.aws.dotdash.com
pe.app.qa.aws.dotdash.com
persistent.app.qa.aws.dotdash.com
pe-adhoc-4.app.qa.aws.dotdash.com
local.dotdash.com
pe.app.qa.aws.dotdash.com
pe-batch.app.qa.aws.dotdash.com
local.dotdash.com
dotdash.map.fastly.net
qa.aws.dotdash.com
local.dotdash.com
dotdash.com
*.ops.k8s.use1.dotdash.com
*.about.com
a-ue1.dotdash.com
persistent.app.qa.aws.dotdash.com
*.qa.aws.about.com
dotdash.map.fastly.net
continual.app.prod.aws.dotdash.com
dotdash.map.fastly.net
control.app.qa.aws.dotdash.com
continual.app.prod.aws.dotdash.com
link.dotdash.com
*.qa.aws.about.com
persistent.app.qa.aws.dotdash.com
*.about.com
dotdash.map.fastly.net
disposable.app.qa.aws.dotdash.com
Certificate
The complete raw certificate details for *.test.aws.dotdash.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEazCCA1OgAwIBAgIQCG9y9DcEYSJSWVe/p43MLzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwODAwMDAwMFoXDTI1MDEwNTIzNTk1OVowITEf MB0GA1UEAwwWKi50ZXN0LmF3cy5kb3RkYXNoLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALLwJjD7xVIv7/OOY44ACP+LcXSLqaPJY1VmrrMpr4JG qeVtmRrLKpZG6XKIU0V1YFgbRt3s7KQ8xQVgE4pmHCx9NL1esL5zwhjHfpcu4TBT 5HcGHeMucBLgUWuxd9bi2d8RtuO4mC0E/mK+EZPKq7ZMnM1ljQnvD0Qx13wGCKJ2 faySpvzPd9xlct4xNcI4HwOWVPXBbleTkXN9CGLjepFZ7TpOuFrymObwXxrhhL2d 5Nr7/b0NtWhKHQB9xLEyvE0maMq3xKNLk/TNcNC2hhl73xRP6NF6G5Kfp9ooPIqI 7ZbV6JTO2su+gKWK45QEXgcLn4aNXu86hpCakeeZv0ECAwEAAaOCAYIwggF+MB8G A1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQmGiSxGOCL 8yQcP22q48ZHItBu7zAhBgNVHREEGjAYghYqLnRlc3QuYXdzLmRvdGRhc2guY29t MBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny bC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkw ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29t MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9y Mm0wMy5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEAIvbrGUb+KYtPbJAS/nCDXOmw9Y9WsaquR83NPW2SVxHc ABzrxMnkdgqfUJhDUTuqWSKiEIfPZXig5LkYxPjOYqPUD2R0tXLvCdWXP4THY0sw eiIn2Tjtg31HnCAgG8OtO2yO9/4Ns3wu7tGQGRvglI0KjOhUoGs3AAV5bHrETDG1 hzX3p8kj+owX3Kjjn0EuYgWZTVr+1N59baSn/MQlPJEChdt5lI27mLiWh/jGxQGI m2mL9aAsszOI38+7ysbvhKSVbvJ6x0Ysr69JTRLBBBC5M8/sc1erYVCVNPAa8KnF +gZA2j1A+mFjCKNBcPxeD2a6QS7AZlP9HnEvqT5CVA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvAmMPvFUi/v845jjgAI /4txdIupo8ljVWausymvgkap5W2ZGssqlkbpcohTRXVgWBtG3ezspDzFBWATimYc LH00vV6wvnPCGMd+ly7hMFPkdwYd4y5wEuBRa7F31uLZ3xG247iYLQT+Yr4Rk8qr tkyczWWNCe8PRDHXfAYIonZ9rJKm/M933GVy3jE1wjgfA5ZU9cFuV5ORc30IYuN6 kVntOk64WvKY5vBfGuGEvZ3k2vv9vQ21aEodAH3EsTK8TSZoyrfEo0uT9M1w0LaG GXvfFE/o0Xobkp+n2ig8iojtltXolM7ay76ApYrjlAReBwufho1e7zqGkJqR55m/ QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11212500460970132567048489009127738415 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.aws.dotdash.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22588840260694235146938319835109646403706036515349400461300731365986384095669052377920734600200339037817777191232388510374294459542188886949482360401724670516061578852054874977516426548734737428799035565661881333098546016811088047485409248762674705687338482940206146454116173846967875648868010418907518792568153892926257546121280441127284352370470043599855115956291878091340011047661102606644166812448209326443747735106065186715875481529070571743969806075166886003316785279915784348035679268651481350379005133399540309155018351408314257107898831029940662757182615914477989228069449682970074873506485259688549579079489 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 261a24b118e08bf3241c3f6daae3c64722d06eef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.aws.dotdash.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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