headsup.twilio.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 05:fa:28:20:83:2e:6e:57:2e:90:ab:a0:35:95:a7:05 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=headsup.twilio.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:fa:28:20:83:2e:6e:57:2e:90:ab:a0:35:95:a7:05Serial Number (int): 7945028065842300737761117712825034501
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: b4:fc:ba:7d:57:09:37:60:49:7c:1e:06:27:49:5c:5c:1e:7d:9f:51
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 12:2d:a9:23:44:53:c4:37:59:3e:73:0b:50:1d:e4:55:04:c1:cf:e0
Fingerprint (sha256): 02:94:9e:28:db:df:fa:7e:5e:23:5a:5b:b1:a9:a6:30:f3:08:03:7d:8e:84:71:64:23:27:3a:b2:cc:69:af:17
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate headsup.twilio.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for headsup.twilio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
headsup.twilio.com
headsup.prod.twilio.com
headsup.prod.twilio.com
Other certificates including the domain name twilio.com
(limited to 100 certificates)
serverless.spire.stage-in1.twilio.com
*.stage-in1.twilio.com
statuspage.io
*.dev-us2.twilio.com
statuspage.io
payments.callback.prod.twilio.com
statuspage.io
rainbow.stage.twilio.com
www.temporal-apig.dev.twilio.com
statuspage.io
eventgw.twilio.com
incapsula.com
gateway1-mv1.corp.twilio.com
flex-v2.stage.twilio.com
security.twilio.com
realtime-wormhole.us1.twilio.com
support.twilio.com
thiscertisfortestingonly.twilio.com
chickentreat.craveable.support
cds.twilio.com
boxconfig.outside.twilio.com
*.br1.twilio.com
*.vss.stage.twilio.com
statuspage.io
dashboard.waas.corp.twilio.com
ct-spam-labs.us1.twilio.com
*.twilio.com
understand.stage-us1.eak.twilio.com
8f876c29f4e5ddcd1ba13f3b40e889bbc3822cd2.console.dev.twilio.com
chickentreat.craveable.support
*.stage-us1.twilio.com
chickentreat.craveable.support
*.turn.dev.twilio.com
*.stage.twilio.com
incapsula.com
internal.status.twilio.com
wireless.us1.eak.twilio.com
mqtt-sync.stage-us1.twilio.com
*.ie1.twilio.com
incapsula.com
rtd-notify-log.dev-us1.eak.twilio.com
wiki.hq.twilio.com
platform-slackapp.corp.twilio.com
*.de1.twilio.com
statuspage.io
build.twilio.com
incapsula.com
headsup.twilio.com
webhooks.twilio.com
chickentreat.craveable.support
tsock.twilio.com
pf-voice.dev-us1.eak.twilio.com
*.vss.twilio.com
*.dev.twilio.com
postflight-sms.us1.eak.twilio.com
*.stage-us2.twilio.com
statuspage.io
statuspage.io
*.turn.dev.twilio.com
*.dev-us2.twilio.com
statuspage.io
statuspage.io
doers.twilio.com
akamaisecure4.qualtrics.com
video.us1.eak.twilio.com
support.twilio.com
aproposalfrom.freeman.com
assets.cdn.prod.twilio.com
statuspage.io
*.code.hq.twilio.com
*.help.dev.twilio.com
chunderm.gll.dev.twilio.com
go.twilio.com
*.br1.twilio.com
5271ba7d4eb049ae104fa6533b878d7de1b133d9.console.dev.twilio.com
*.stage.twilio.com
signal.twilio.com
console.ie1.twilio.com
statuspage.io
networktest.twilio.com
partnerportal.kornferry.com
incapsula.com
sales.twilio.com
jp.twilio.com
aproposalfrom.freeman.com
ab-testing.dev-us1.twilio.com
statuspage.io
*.stage-au1.twilio.com
ecs.stage-us1.twilio.com
statuspage.io
*.vss.twilio.com
chunderw-vpc-gll-stage-us2-ix.stage.twilio.com
statuspage.io
statuspage.io
mqtt-sync.us1.twilio.com
*.stage-us2.twilio.com
*.stage-us1.twilio.com
support.twilio.com
console.ireland.stage-ie1.twilio.com
rtd-kibana-6.us1.eak.twilio.com
*.stage-in1.twilio.com
statuspage.io
*.dev-us2.twilio.com
statuspage.io
payments.callback.prod.twilio.com
statuspage.io
rainbow.stage.twilio.com
www.temporal-apig.dev.twilio.com
statuspage.io
eventgw.twilio.com
incapsula.com
gateway1-mv1.corp.twilio.com
flex-v2.stage.twilio.com
security.twilio.com
realtime-wormhole.us1.twilio.com
support.twilio.com
thiscertisfortestingonly.twilio.com
chickentreat.craveable.support
cds.twilio.com
boxconfig.outside.twilio.com
*.br1.twilio.com
*.vss.stage.twilio.com
statuspage.io
dashboard.waas.corp.twilio.com
ct-spam-labs.us1.twilio.com
*.twilio.com
understand.stage-us1.eak.twilio.com
8f876c29f4e5ddcd1ba13f3b40e889bbc3822cd2.console.dev.twilio.com
chickentreat.craveable.support
*.stage-us1.twilio.com
chickentreat.craveable.support
*.turn.dev.twilio.com
*.stage.twilio.com
incapsula.com
internal.status.twilio.com
wireless.us1.eak.twilio.com
mqtt-sync.stage-us1.twilio.com
*.ie1.twilio.com
incapsula.com
rtd-notify-log.dev-us1.eak.twilio.com
wiki.hq.twilio.com
platform-slackapp.corp.twilio.com
*.de1.twilio.com
statuspage.io
build.twilio.com
incapsula.com
headsup.twilio.com
webhooks.twilio.com
chickentreat.craveable.support
tsock.twilio.com
pf-voice.dev-us1.eak.twilio.com
*.vss.twilio.com
*.dev.twilio.com
postflight-sms.us1.eak.twilio.com
*.stage-us2.twilio.com
statuspage.io
statuspage.io
*.turn.dev.twilio.com
*.dev-us2.twilio.com
statuspage.io
statuspage.io
doers.twilio.com
akamaisecure4.qualtrics.com
video.us1.eak.twilio.com
support.twilio.com
aproposalfrom.freeman.com
assets.cdn.prod.twilio.com
statuspage.io
*.code.hq.twilio.com
*.help.dev.twilio.com
chunderm.gll.dev.twilio.com
go.twilio.com
*.br1.twilio.com
5271ba7d4eb049ae104fa6533b878d7de1b133d9.console.dev.twilio.com
*.stage.twilio.com
signal.twilio.com
console.ie1.twilio.com
statuspage.io
networktest.twilio.com
partnerportal.kornferry.com
incapsula.com
sales.twilio.com
jp.twilio.com
aproposalfrom.freeman.com
ab-testing.dev-us1.twilio.com
statuspage.io
*.stage-au1.twilio.com
ecs.stage-us1.twilio.com
statuspage.io
*.vss.twilio.com
chunderw-vpc-gll-stage-us2-ix.stage.twilio.com
statuspage.io
statuspage.io
mqtt-sync.us1.twilio.com
*.stage-us2.twilio.com
*.stage-us1.twilio.com
support.twilio.com
console.ireland.stage-ie1.twilio.com
rtd-kibana-6.us1.eak.twilio.com
Certificate
The complete raw certificate details for headsup.twilio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfDCCA2SgAwIBAgIQBfooIIMublcukKugNZWnBTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDIxNjAwMDAwMFoXDTI0MDMxNzIzNTk1OVowHTEb MBkGA1UEAxMSaGVhZHN1cC50d2lsaW8uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAvSGa/R3ceXzWCvzCvbofD+gJQVXSkc/Bk+bZboTTEmPrEkSQ Pls37Jz/31LoDj+AGMhnzQXyZv2qHjSykEKuLaSEvEbIYKcdHpXUIPdyogsnMMuP oVumuc8V69eLHooWJ/tQ61HgWRxAaG2817b1Gk/iebWUJb0RBxcngH3Nwi0ZgkBw w2sv/JBBjDkObdmNQVapyPe7Lwdm6Y5udQXvk+PunG5l53toqZHhl9lG1ku7hTfS JgMzNshrgdMvIca54z4VRyURgnuyqHoLyQYqnQOeByAlMgC3OlxLpbQa57sT+7wF 8aUdRhA4pf7L4nFhCZ771aO0JyR9piM76QkuvwIDAQABo4IBlzCCAZMwHwYDVR0j BBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFLT8un1XCTdgSXwe BidJXFwefZ9RMDYGA1UdEQQvMC2CEmhlYWRzdXAudHdpbGlvLmNvbYIXaGVhZHN1 cC5wcm9kLnR3aWxpby5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy bTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwB AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0w Mi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIu YW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLYaUXRgy/cDSeC0c62EVd TLbuCetoglZTAowBHdd0wwyraXPxbRH05Qi9HhFZEbsMC3KQjBMdTQusiN0G6TWZ 5CsfMTM59XyWjVZtyaRp81BsFJtbHkAVomSyjREEEFDm+XsPJHr8d5O9MhCRTwxz uda0KBpviyq64oRdpvD4e2F3E5NPcc+230e0EL/UOxQA2Htmu/74f+Rx41NjB/0d jU8h6Vt/Xv9bPtM/FiiLLiuzyiRQ3rDA1xz7Tv2tet/OERJ+WYfgpEDkYkEyFMoD HAoUxtFLTQfzzl8nur/YsNVmipBufN0VrVVRijM+MaEVhbBptHxNVFIWgSHg25Cj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSGa/R3ceXzWCvzCvbof D+gJQVXSkc/Bk+bZboTTEmPrEkSQPls37Jz/31LoDj+AGMhnzQXyZv2qHjSykEKu LaSEvEbIYKcdHpXUIPdyogsnMMuPoVumuc8V69eLHooWJ/tQ61HgWRxAaG2817b1 Gk/iebWUJb0RBxcngH3Nwi0ZgkBww2sv/JBBjDkObdmNQVapyPe7Lwdm6Y5udQXv k+PunG5l53toqZHhl9lG1ku7hTfSJgMzNshrgdMvIca54z4VRyURgnuyqHoLyQYq nQOeByAlMgC3OlxLpbQa57sT+7wF8aUdRhA4pf7L4nFhCZ771aO0JyR9piM76Qku vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7945028065842300737761117712825034501 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'headsup.twilio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23875611091157526337028162797822771152865938608293264610077104591692013546362345826258322860953268504647845137774817270529788108249805878112591274251418664937517894578455961894937443000623019375276405569422408827884836679731407151450688184275946774821310732881666644435774481605126010073145535097865243758617394023152018986468873872742318273321789257469990045381940190269986973723737631491547683331490935982988384943948543363127591566164959234503724179274265394444762742215774801161892111941533902900568726242158240600930243022152525597632799208047284920114421747382371021255992186066664285880771329769615235230543551 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b4fcba7d57093760497c1e0627495c5c1e7d9f51 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headsup.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headsup.prod.twilio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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