mfl.slp.csx.sony.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 07:6f:f7:fc:e5:33:e0:81:4d:ec:60:7a:d6:29:9b:9e was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mfl.slp.csx.sony.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:6f:f7:fc:e5:33:e0:81:4d:ec:60:7a:d6:29:9b:9eSerial Number (int): 9885970713395615195526807109713370014
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 29:fb:13:8d:19:6d:7d:4c:7d:31:97:0f:7c:e4:e8:5f:d7:74:94:8d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 24:27:f1:39:27:e9:47:15:9e:39:a5:fc:a9:ef:43:cd:95:48:31:de
Fingerprint (sha256): 01:e2:93:81:dd:49:ab:cd:b6:d6:b4:e4:cb:a0:06:72:00:63:4e:4a:90:a3:a2:06:3b:c0:11:86:a1:f1:80:78
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate mfl.slp.csx.sony.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mfl.slp.csx.sony.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mfl.slp.csx.sony.com
*.mfl.slp.csx.sony.com
*.mfl.slp.csx.sony.com
Other certificates including the domain name sony.com
(limited to 100 certificates)
incapsula.com
code-jira-staging.am.sony.com
intedcpam.spe.sony.com
git.gis.sony.com
pod.am.sony.com
preview-production-pdp.sony.co.uk
content.esupport.sony.com
beta.sony.com
usphxadc11v.spe.sony.com
sgsinxapp01.spe.sony.com
tview.spe.sony.com
tbos.spe.sony.com
crpap05.am.sony.com
*.unity.eu.sie.sony.com
git.gis.sony.com
wpfqc-qa.spe.sony.com
pix-vm-lmgmgr.am.sony.com
usdl432.spe.sony.com
adfs.sony.com
s4hanaqa.sie.sony.com
www.sony.at
www.servicesplus.sel.sony.com
cnhkaeshxd01.am.sony.com
gateway-ext.api.spe.sony.com
prodev.sony.com
uklonext-pag01.spe.sony.com
www.dealersalescentral.sony.com
cidealerlocator.electronics.sony.com
mobile.spe.sony.com
prwweb.am.sony.com
preview-production-pdp.sony.co.uk
work.playstation.sony.com
csbd.sdp.sel.sony.com
uspwh0536.spe.sony.com
docs.sony.com
alfresco08-dev.spe.sony.com
www.sony.at
secure.sony.net
nocinfosys.sony.com
Hybrid.sonyusa.com
snap.sel.sony.com
extedc.spe.sony.com
dbiz.sel.sony.com
qtest.sie.sony.com
nexus.mc.spe.sony.com
pam.spe.sony.com
beta.sony.com
locator.sony
rebate.api.sony.com
USQWH0050.spe.sony.com
mfl.slp.csx.sony.com
itoc.sie.sony.com
recycling.sel.sony.com
tst-ext.am.sony.com
api.nsu.vcs.electronics.sony.com
dmgmobile.spe.sony.com
distribute.me.sel.sony.com
incapsula.com
sscookie.www.sony.com
*.retail.me.sony.com
uspxh104da.spe.sony.com
uspwh0038.spe.sony.com
preview.sony.com
usculvordsm02.am.sony.com
uspxh103d2.spe.sony.com
uspxh010p2.spe.sony.com
incapsula.com
extjbsan.spe.sony.com
extaz-qa.spe.sony.com
secure04.lithium.com
cxvdi-sf-dev.spe.sony.com
mcm-ext.mc.spe.sony.com
www.sonyrewards.com
acm.account.sony.com
dev.developer.sony.com
apps.sie.sony.com
centerstage.sie.sony.com
extjbsan.spe.sony.com
mail.me.sony.com
taascognos-qa.spe.sony.com
b2b.sony.com
pages.email.sel.sony.com
www.stage6films.com
square.sony.com
ebm01.cheetahmail.com
connect.sonypictures.com
intjbsan.spe.sony.com
sptaws-alb-dev.spe.sony.com
ucsjcacuc01-ms.ps.am.sony.com
qa-bomgar.spe.sony.com
www.unity.scee.net
fdus-6.freshdesk.com
uspxh104p1.spe.sony.com
s4globalhapp.sie.sony.com
extjbsan2.spe.sony.com
ussdisokta02.am.sony.com
preview-production-pdp.sony.co.uk
relativity-dev.spe.sony.com
www.sony.com.sg
incapsula.com
code-jira-staging.am.sony.com
intedcpam.spe.sony.com
git.gis.sony.com
pod.am.sony.com
preview-production-pdp.sony.co.uk
content.esupport.sony.com
beta.sony.com
usphxadc11v.spe.sony.com
sgsinxapp01.spe.sony.com
tview.spe.sony.com
tbos.spe.sony.com
crpap05.am.sony.com
*.unity.eu.sie.sony.com
git.gis.sony.com
wpfqc-qa.spe.sony.com
pix-vm-lmgmgr.am.sony.com
usdl432.spe.sony.com
adfs.sony.com
s4hanaqa.sie.sony.com
www.sony.at
www.servicesplus.sel.sony.com
cnhkaeshxd01.am.sony.com
gateway-ext.api.spe.sony.com
prodev.sony.com
uklonext-pag01.spe.sony.com
www.dealersalescentral.sony.com
cidealerlocator.electronics.sony.com
mobile.spe.sony.com
prwweb.am.sony.com
preview-production-pdp.sony.co.uk
work.playstation.sony.com
csbd.sdp.sel.sony.com
uspwh0536.spe.sony.com
docs.sony.com
alfresco08-dev.spe.sony.com
www.sony.at
secure.sony.net
nocinfosys.sony.com
Hybrid.sonyusa.com
snap.sel.sony.com
extedc.spe.sony.com
dbiz.sel.sony.com
qtest.sie.sony.com
nexus.mc.spe.sony.com
pam.spe.sony.com
beta.sony.com
locator.sony
rebate.api.sony.com
USQWH0050.spe.sony.com
mfl.slp.csx.sony.com
itoc.sie.sony.com
recycling.sel.sony.com
tst-ext.am.sony.com
api.nsu.vcs.electronics.sony.com
dmgmobile.spe.sony.com
distribute.me.sel.sony.com
incapsula.com
sscookie.www.sony.com
*.retail.me.sony.com
uspxh104da.spe.sony.com
uspwh0038.spe.sony.com
preview.sony.com
usculvordsm02.am.sony.com
uspxh103d2.spe.sony.com
uspxh010p2.spe.sony.com
incapsula.com
extjbsan.spe.sony.com
extaz-qa.spe.sony.com
secure04.lithium.com
cxvdi-sf-dev.spe.sony.com
mcm-ext.mc.spe.sony.com
www.sonyrewards.com
acm.account.sony.com
dev.developer.sony.com
apps.sie.sony.com
centerstage.sie.sony.com
extjbsan.spe.sony.com
mail.me.sony.com
taascognos-qa.spe.sony.com
b2b.sony.com
pages.email.sel.sony.com
www.stage6films.com
square.sony.com
ebm01.cheetahmail.com
connect.sonypictures.com
intjbsan.spe.sony.com
sptaws-alb-dev.spe.sony.com
ucsjcacuc01-ms.ps.am.sony.com
qa-bomgar.spe.sony.com
www.unity.scee.net
fdus-6.freshdesk.com
uspxh104p1.spe.sony.com
s4globalhapp.sie.sony.com
extjbsan2.spe.sony.com
ussdisokta02.am.sony.com
preview-production-pdp.sony.co.uk
relativity-dev.spe.sony.com
www.sony.com.sg
incapsula.com
Certificate
The complete raw certificate details for mfl.slp.csx.sony.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfzCCA2egAwIBAgIQB2/3/OUz4IFN7GB61imbnjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwODAwMDAwMFoXDTI1MDEwNTIzNTk1OVowHzEd MBsGA1UEAxMUbWZsLnNscC5jc3guc29ueS5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfdad3JOv2RngsSqFix5C+eNbdCzGTcFUNN5XmDN6LLtqd mFOEnLJFAMm4VqGPuyDf33DiN4WKQ7wg5Y07AUoyNKKPTmxLmxtN4K9CUW57rpqN yXAbRgsoJAOPIpHxfZQ4SF33rx6yU8ssHcjNqucUyBZfHsf66Dsa9gTOwoCa2H8n 4FcB0EP0fq/ZKocstTr+FXXfnskElWi/6HlcPaG/yHw7VC4jzOO4ifyoA8i5LtAl Bs9UYQd17B5fHiTotzbq7lq2iW8elFBTS+ND+UW1lrSKNJ41U1KMdl2giXzL2TeW EQQkNuJbtoC3RHjgY7qOK0Tn1XefrFmxoTHSAea/AgMBAAGjggGYMIIBlDAfBgNV HSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUKfsTjRltfUx9 MZcPfOToX9d0lI0wNwYDVR0RBDAwLoIUbWZsLnNscC5jc3guc29ueS5jb22CFiou bWZsLnNscC5jc3guc29ueS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0w Mi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5y Mm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJt MDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZcU5ATPY5KhGva/V2 ZoFk9HF3NIJSNlfDYwCMBNPBQoQPuTWFQOVmrWNsgzsNrgRFRQiJddWFiVxVumXi qMHxDSITr/mHbR9yx9eGdRcvzPoxwyrH6TSpcTHUtu1CDZp6S5106wvJ8jeYnHeg G3ikzdTv/bk2+JnsvOe9c1OGPVR/FZFZ6GN7ILHjLbj+LxJQRuJ7irrQu9Lfe4zq SvWgaK5ZA1w3ChmRCU7R3vwmYwq/f01q3zVqj8DKkazGVAEzKL85ZEyhDOuzqFwF daqtPbbtlLRsxqT/t29bB9EUl4Fi6WhLgsubeZQENUE6hvyk7IwDb7MveRsqA9Mt NyHh -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3WndyTr9kZ4LEqhYseQ vnjW3Qsxk3BVDTeV5gzeiy7anZhThJyyRQDJuFahj7sg399w4jeFikO8IOWNOwFK MjSij05sS5sbTeCvQlFue66ajclwG0YLKCQDjyKR8X2UOEhd968eslPLLB3Izarn FMgWXx7H+ug7GvYEzsKAmth/J+BXAdBD9H6v2SqHLLU6/hV1357JBJVov+h5XD2h v8h8O1QuI8zjuIn8qAPIuS7QJQbPVGEHdeweXx4k6Lc26u5atolvHpRQU0vjQ/lF tZa0ijSeNVNSjHZdoIl8y9k3lhEEJDbiW7aAt0R44GO6jitE59V3n6xZsaEx0gHm vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9885970713395615195526807109713370014 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mfl.slp.csx.sony.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20129907919099781447505296297020855030965628622372345936626070202324679194068896939171592332784586814817954859058901447792892400837717136718242206317116696113525285752387543210933825928226999212262510009983162506716438172276602552804701439843357945868467278990403351585000371202163243439931673562125441294015185694141866345389893480718788266549415632209474438341903769990868241178028836401172135262019154744116274806032662289902422245723943467738252858839322860500260655594737976350510176006694421886512610251740799989686172113679103512025773990115376347811525379026559359597885520859487957914196714263935965190022847 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 29fb138d196d7d4c7d31970f7ce4e85fd774948d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfl.slp.csx.sony.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfl.slp.csx.sony.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0019714e404cf6392a11af6bf576668164f471773482523657c363008c04d3c142840fb9358540e566ad636c833b0dae044545088975d585895c55ba65e2a8c1f10d2213aff9876d1f72c7d78675172fccfa31c32ac7e934a97131d4b6ed420d9a7a4b9d74eb0bc9f237989c77a01b78a4cdd4effdb936f899ecbce7bd7353863d547f159159e8637b20b1e32db8fe2f125046e27b8abad0bbd2df7b8cea4af5a068ae59035c370a1991094ed1defc26630abf7f4d6adf356a8fc0ca91acc654013328bf39644ca10cebb3a85c0575aaad3db6ed94b46cc6a4ffb76f5b07d114978162e9684b82cb9b79940435413a86fca4ec8c036fb32f791b2a03d32d3721e1