we-usw1-infra.k8s.foursquare.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0a:af:68:bf:0b:d4:34:5e:32:b9:26:fe:a1:a0:cd:8a was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=we-usw1-infra.k8s.foursquare.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:af:68:bf:0b:d4:34:5e:32:b9:26:fe:a1:a0:cd:8aSerial Number (int): 14203056414931448244742623080367574410
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 92:d3:c4:fb:41:70:25:85:b5:54:7e:ca:fa:05:54:fe:20:d4:3a:2b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 56:c6:52:54:51:98:85:45:17:ab:4a:b5:62:ae:02:9c:89:47:da:85
Fingerprint (sha256): 02:3b:cd:d5:6f:35:75:cc:06:f5:3c:db:3e:6b:f9:1b:b2:b4:ef:95:33:82:4f:6b:61:4a:47:9d:a4:81:b4:79
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate we-usw1-infra.k8s.foursquare.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for we-usw1-infra.k8s.foursquare.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
we-usw1-infra.k8s.foursquare.com
*.we-usw1-infra.k8s.foursquare.com
*.we-usw1-infra.k8s.foursquare.com
Other certificates including the domain name foursquare.com
(limited to 100 certificates)
f6.shared.global.fastly.net
n2.shared.global.fastly.net
www2.foursquare.com
k2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
design.foursquare.com
f6.shared.global.fastly.net
*.sdk.foursquare.com
k2.shared.global.fastly.net
we-usw1-infra.k8s.foursquare.com
k2.shared.global.fastly.net
dns-vetting1h.map.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
dns-vetting1e.map.fastly.net
f6.shared.global.fastly.net
dns-vetting1e.map.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
connect.foursquare.com
business.foursquare.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
cg-status.isr.co.jp
k2.shared.global.fastly.net
*.a.ssl.fastly.net
n2.shared.global.fastly.net
*.foursquare.com
cg-status.isr.co.jp
k2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
n2.shared.global.fastly.net
ap-apse1-apeksprod.k8s.foursquare.com
fastly-log-ingestion.foursquare.com
n2.shared.global.fastly.net
k2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
n2.shared.global.fastly.net
cg-status.isr.co.jp
ja3.foursquare.com
*.a.ssl.fastly.net
f6.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
cg-status.isr.co.jp
f6.shared.global.fastly.net
k2.shared.global.fastly.net
f6.shared.global.fastly.net
k2.shared.global.fastly.net
statuspage.io
*.a.ssl.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
f6.shared.global.fastly.net
casb.status.symantec.com
foursquare.com
fr.foursquare.com
earlyadopter.foursquare.com
n2.shared.global.fastly.net
k2.shared.global.fastly.net
f6.shared.global.fastly.net
foursquare.com
k2.shared.global.fastly.net
statuspage.io
k2.shared.global.fastly.net
k2.shared.global.fastly.net
cupcake.design
foursquare.com
k2.shared.global.fastly.net
casb.status.symantec.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
us-use1-testing.k8s.foursquare.com
auth.studio.foursquare.com
f6.shared.global.fastly.net
k2.shared.global.fastly.net
ybivdalkbyzpnsjsjwv.foursquare.com
dns-vetting1e.map.fastly.net
f6.shared.global.fastly.net
foursquare.com
n2.shared.global.fastly.net
resources.foursquare.com
n2.shared.global.fastly.net
k2.shared.global.fastly.net
foursquare.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
support.foursquare.com
f6.shared.global.fastly.net
docs.foursquare.com
earlyadopter.foursquare.com
statuspage.io
n2.shared.global.fastly.net
www2.foursquare.com
k2.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
design.foursquare.com
f6.shared.global.fastly.net
*.sdk.foursquare.com
k2.shared.global.fastly.net
we-usw1-infra.k8s.foursquare.com
k2.shared.global.fastly.net
dns-vetting1h.map.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
dns-vetting1e.map.fastly.net
f6.shared.global.fastly.net
dns-vetting1e.map.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
connect.foursquare.com
business.foursquare.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
cg-status.isr.co.jp
k2.shared.global.fastly.net
*.a.ssl.fastly.net
n2.shared.global.fastly.net
*.foursquare.com
cg-status.isr.co.jp
k2.shared.global.fastly.net
dns-vetting1i.map.fastly.net
n2.shared.global.fastly.net
ap-apse1-apeksprod.k8s.foursquare.com
fastly-log-ingestion.foursquare.com
n2.shared.global.fastly.net
k2.shared.global.fastly.net
dns-vetting1d.map.fastly.net
n2.shared.global.fastly.net
cg-status.isr.co.jp
ja3.foursquare.com
*.a.ssl.fastly.net
f6.shared.global.fastly.net
n2.shared.global.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
n2.shared.global.fastly.net
cg-status.isr.co.jp
f6.shared.global.fastly.net
k2.shared.global.fastly.net
f6.shared.global.fastly.net
k2.shared.global.fastly.net
statuspage.io
*.a.ssl.fastly.net
n2.shared.global.fastly.net
k2.shared.global.fastly.net
f6.shared.global.fastly.net
casb.status.symantec.com
foursquare.com
fr.foursquare.com
earlyadopter.foursquare.com
n2.shared.global.fastly.net
k2.shared.global.fastly.net
f6.shared.global.fastly.net
foursquare.com
k2.shared.global.fastly.net
statuspage.io
k2.shared.global.fastly.net
k2.shared.global.fastly.net
cupcake.design
foursquare.com
k2.shared.global.fastly.net
casb.status.symantec.com
n2.shared.global.fastly.net
n2.shared.global.fastly.net
us-use1-testing.k8s.foursquare.com
auth.studio.foursquare.com
f6.shared.global.fastly.net
k2.shared.global.fastly.net
ybivdalkbyzpnsjsjwv.foursquare.com
dns-vetting1e.map.fastly.net
f6.shared.global.fastly.net
foursquare.com
n2.shared.global.fastly.net
resources.foursquare.com
n2.shared.global.fastly.net
k2.shared.global.fastly.net
foursquare.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
support.foursquare.com
f6.shared.global.fastly.net
docs.foursquare.com
earlyadopter.foursquare.com
statuspage.io
Certificate
The complete raw certificate details for we-usw1-infra.k8s.foursquare.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEozCCA4ugAwIBAgIQCq9ovwvUNF4yuSb+oaDNijANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIxMDAwMDAwMFoXDTI0MDIxNjIzNTk1OVowKzEp MCcGA1UEAxMgd2UtdXN3MS1pbmZyYS5rOHMuZm91cnNxdWFyZS5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxwxwa+U2JE+uDcyhN6EzO6EFaEpHf m1kzdw6i6rWYDQEL8b2bHg8Ssy1av5njCIrfGfTHvanekeN8kqhl5inS7UqoimKD qMzztzM6firdDIuLr4vhA1dci47T1I7W7lFSKf42mDjjBDZPYJZbWKhc2SpyGjF3 /+1rWxUlNx2Qvhg/IQQ5m9z0BtomVk73zN4BPtnwgn6PzziYGX5e2RIBqlyXOsvD YD3aFxsTXubUsSSWgYXVSmVC7pu4FbfE5lipC0pNRHToyokl9pEC2gqh/bximKo6 dKN9m3OF3DTAkVh+RISSDLa+4O8BU69BQN8u77lmJn43eqvFec99ZQzLAgMBAAGj ggGwMIIBrDAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4E FgQUktPE+0FwJYW1VH7K+gVU/iDUOiswTwYDVR0RBEgwRoIgd2UtdXN3MS1pbmZy YS5rOHMuZm91cnNxdWFyZS5jb22CIioud2UtdXN3MS1pbmZyYS5rOHMuZm91cnNx dWFyZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpv bnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1 c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAY7j6UKO7oef1lc7MQNncToox0j0HwGwk4 nZl4Bgw9Ki7Sc6QoMeUK6FBKQYKmAEjxzJoVg8HIowKy07ihbkIfBxz5eOPKwEoR bSIHl17NDSa1LX4At99XTM/UBBJBwCFb98mxu/2d8POtAZeaNaG059QnUpS9vUb3 em674LCh1sol0jv9egwJx/XnyW8zbEI2P5Vey+sdeT0bdky+LJORRRxmVfhW3JkE pNZVRPc/T1+cyN6jphF2I1aDbx9jcFAeKC8egTn25mzZVurcJb1ZSnNrtbWzLZ6s OCu+IMojp8j0OYII+BtAIR/bQC9PcdYqlhiu5VqWS+PAmS1T3wC7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cMcGvlNiRPrg3MoTehM zuhBWhKR35tZM3cOouq1mA0BC/G9mx4PErMtWr+Z4wiK3xn0x72p3pHjfJKoZeYp 0u1KqIpig6jM87czOn4q3QyLi6+L4QNXXIuO09SO1u5RUin+Npg44wQ2T2CWW1io XNkqchoxd//ta1sVJTcdkL4YPyEEOZvc9AbaJlZO98zeAT7Z8IJ+j884mBl+XtkS AapclzrLw2A92hcbE17m1LEkloGF1UplQu6buBW3xOZYqQtKTUR06MqJJfaRAtoK of28YpiqOnSjfZtzhdw0wJFYfkSEkgy2vuDvAVOvQUDfLu+5ZiZ+N3qrxXnPfWUM ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14203056414931448244742623080367574410 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'we-usw1-infra.k8s.foursquare.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30519643718465340129065078860351118103946256466837698498246733573822420468836262836514706968372468044629118258429468424647985204500044550225629508218351402192124814577021994590315130399503867328591327353689402775689190533197081904761860285959043135001027738122735232621687109939944356006068842500498306444317029862753706854187883489731402846079601621279279739862427862143602131040297602193414534472694585483230543310688919118880318906052576915981295275353363582219178920459421743140150552566766366210840512779029286425201625943016028267148868551045330795797175519855414588081205718287600606544440572344479808450006219 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 92d3c4fb41702585b5547ecafa0554fe20d43a2b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we-usw1-infra.k8s.foursquare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.we-usw1-infra.k8s.foursquare.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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