*.nukcdn.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 04:53:cd:b8:32:71:00:ef:12:05:1d:d2:e8:35:5a:df was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.nukcdn.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:53:cd:b8:32:71:00:ef:12:05:1d:d2:e8:35:5a:dfSerial Number (int): 5752045109959568920612302843853232863
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: cd:a7:eb:35:c8:6e:53:93:d7:89:46:48:3d:1e:2a:02:4d:11:e4:f1
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 1e:6e:61:f9:7c:36:3d:b1:ff:e9:dd:99:cb:9e:02:ba:cc:fa:da:0a
Fingerprint (sha256): 02:ef:b3:06:c7:5e:0f:2e:84:92:93:43:82:a9:e8:6d:2d:6a:92:f4:dd:23:7c:b4:da:fa:b1:7a:9d:d7:97:53
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.nukcdn.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nukcdn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nukcdn.com
login.thescottishsun.co.uk
login.thescottishsun.co.uk
Other certificates including the domain name nukcdn.com
(limited to 100 certificates)
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
ref.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
login.uat-talksport.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
feeds-dev.uat-thesun.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.stag.nukcdn.com
mogel.dev.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
feeds-dev.uat-thesun.co.uk
*.nukcdn.com
*.stag.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
login.dev.virginradio.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
savers.staging-thesun.co.uk
ref.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
ref.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.stag.nukcdn.com
login.uat-talksport.com
*.nukcdn.com
*.dev.nukcdn.com
*.stag.nukcdn.com
mogel.newsint.co.uk
*.dev.nukcdn.com
login.staging-talksport.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
ref.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
login.uat-talksport.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
feeds-dev.uat-thesun.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.stag.nukcdn.com
mogel.dev.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
feeds-dev.uat-thesun.co.uk
*.nukcdn.com
*.stag.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
login.dev.virginradio.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
savers.staging-thesun.co.uk
ref.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
ref.newsint.co.uk
*.dev.nukcdn.com
*.dev.nukcdn.com
*.dev.nukcdn.com
*.stag.nukcdn.com
login.uat-talksport.com
*.nukcdn.com
*.dev.nukcdn.com
*.stag.nukcdn.com
mogel.newsint.co.uk
*.dev.nukcdn.com
login.staging-talksport.com
*.dev.nukcdn.com
*.dev.nukcdn.com
Certificate
The complete raw certificate details for *.nukcdn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIQBFPNuDJxAO8SBR3S6DVa3zANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIxODAwMDAwMFoXDTI0MDMxODIzNTk1OVowFzEV MBMGA1UEAwwMKi5udWtjZG4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsNbzkJBw2DcVdGs2pTb8Gp4PijWtBzyQ9Pxo58912L/cmU5flqzLBivA ryaAd9lzaL3b9GY+KNPwgHeeO0Xrv4np1/FaOuv+Fghc329WYUv8mAa+E9Tpk46H sqNq/CWCE4aHqtokKEBO9FsFk4Ts96g5JT4BJP+zatQvKKn3g49OyKHWt9mrE5Rm hnu9pn06HUmJtHFx2ag8XAYyTlnGHmHuPCLzCtN9HklxmKw2Q4TPQtm16PDK3ddN CkzQdV6ihWy/xWQn4DLIncDoGHDU5mRzdOyNBIMU0UBC9UsPIKT3pOogvUkn3X0d TnFo7I990vfQDGK+xeXBh91noUylMQIDAQABo4IDATCCAv0wHwYDVR0jBBgwFoAU gbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFM2n6zXIblOT14lGSD0eKgJN EeTxMDMGA1UdEQQsMCqCDCoubnVrY2RuLmNvbYIabG9naW4udGhlc2NvdHRpc2hz dW4uY28udWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpv bnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1 c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSC AW4EggFqAWgAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYZi XrV3AAAEAwBIMEYCIQCj/TL8KMozKTxW9/oxyIj0FQcuEk6iQlOFOTEj9h8P5AIh AO6YpHay+Us+o4eJWblAR73Cv39nHzEuwH1J34fVl7s6AHUAc9meiRtMlnigIH1H neayxhzQUV5xGSqMa4AQesF3crUAAAGGYl61zAAABAMARjBEAiBDFxQzVaDudVmE bpSb0TvAcucuDlY5VENox0YL3tpATAIgdX+l1e873Q5SpHicPk+1A/SkHksUkoLv KdZ/Ejd9Go0AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYZi XrWcAAAEAwBHMEUCIQDtKJZnDmry29H5lvf5QD850n/j5Saa2WHpBj11XXrbywIg crTT+iqg+03prv/5QyCzW9XjzqlM38fNWvQuOBCy+bYwDQYJKoZIhvcNAQELBQAD ggEBADzrKeYe8Ez22zv1HbSIbbC8igya/P1K9r+sohvmZTR5hn5nyGGfI1pCSn2W SNW8xUAdqjARF3Ercz26QzYw17tzXP/vRgI19YOhTcn0vjq/nWePKmPX7E3Wx/// uWHn+t0Bpxw+McQG8nI/hx3yj6fabOSFOBnBYsdb2Ksm2qiGqO8GReTwlYMd8G9W vXCyLC70aL3A21HCmA9T8jZ22BzWvskr13LJF8SsfrtqmEq3hG2da731wn790mXp EyLYmWkpBTTGMDcy5mB5Txgqh7fLnTTZJaqC50rUN9RdDIxpmTsQ9LwxBl8M1xxU 7ujGzvnYpp7YFTtX4GgSFhw62+w= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNbzkJBw2DcVdGs2pTb8 Gp4PijWtBzyQ9Pxo58912L/cmU5flqzLBivAryaAd9lzaL3b9GY+KNPwgHeeO0Xr v4np1/FaOuv+Fghc329WYUv8mAa+E9Tpk46HsqNq/CWCE4aHqtokKEBO9FsFk4Ts 96g5JT4BJP+zatQvKKn3g49OyKHWt9mrE5Rmhnu9pn06HUmJtHFx2ag8XAYyTlnG HmHuPCLzCtN9HklxmKw2Q4TPQtm16PDK3ddNCkzQdV6ihWy/xWQn4DLIncDoGHDU 5mRzdOyNBIMU0UBC9UsPIKT3pOogvUkn3X0dTnFo7I990vfQDGK+xeXBh91noUyl MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5752045109959568920612302843853232863 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nukcdn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22323938172052471479017933296036984393478292413876867741480647402769781256933107492349666571017238489333881967296504979067887981916218685446752690281072410486489815542913932037355331050720061391053163418180133782175959724154675562171254790620571110353409465674200692849802902306582623991014396849495026254278843688704565497675598495368509031740904208807190268715025281972885056898876940015357071146997140193764611020097925786082031030679976940200047990043516938070857969712661369399981118850366441532872452876805162476185273500075253363387166414147311603468379333304447299588158683748878376481182622138689076274701617 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cda7eb35c86e5393d78946483d1e2a024d11e4f1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nukcdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thescottishsun.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003ceb29e61ef04cf6db3bf51db4886db0bc8a0c9afcfd4af6bfaca21be6653479867e67c8619f235a424a7d9648d5bcc5401daa301117712b733dba433630d7bb735cffef460235f583a14dc9f4be3abf9d678f2a63d7ec4dd6c7ffffb961e7fadd01a71c3e31c406f2723f871df28fa7da6ce4853819c162c75bd8ab26daa886a8ef0645e4f095831df06f56bd70b22c2ef468bdc0db51c2980f53f23676d81cd6bec92bd772c917c4ac7ebb6a984ab7846d9d6bbdf5c27efdd265e91322d89969290534c6303732e660794f182a87b7cb9d34d925aa82e74ad437d45d0c8c69993b10f4bc31065f0cd71c54eee8c6cef9d8a69ed8153b57e06812161c3adbec