bms2.hk.kerrylogistics.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 09:88:91:74:5b:d5:ef:3f:98:00:96:13:37:9b:c7:50 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=bms2.hk.kerrylogistics.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:88:91:74:5b:d5:ef:3f:98:00:96:13:37:9b:c7:50Serial Number (int): 12672154503106127472496563305953609552
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 09:c0:3e:de:19:68:ef:47:e8:4d:17:e3:8d:92:48:7b:20:15:bd:63
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): e3:15:38:8f:87:2f:a2:68:ad:b6:d3:0e:e0:d4:27:49:e6:bd:5a:50
Fingerprint (sha256): 03:88:27:03:e8:aa:08:9e:fc:b1:43:6e:a9:ad:0c:5f:49:8d:9c:98:55:24:9d:ed:1e:70:ae:83:3c:61:16:98
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate bms2.hk.kerrylogistics.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bms2.hk.kerrylogistics.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bms2.hk.kerrylogistics.com
Other certificates including the domain name kerrylogistics.com
(limited to 100 certificates)
*.gmr.kerrylogistics.com
oms.kerrylogistics.com
survey.abundantpower.com
customer.zohosurvey.com
allinteractive.tv
kvc-api.apac.kerrylogistics.com
allinteractive.tv
servicedesk.kerrylogistics.com
bms2.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
*.th.kerrylogistics.com
customer.zohosurvey.com
ceapp-uat.kerrylogistics.com
*.vpn.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4pub.apac.kerrylogistics.com
sctcms.kerrylogistics.com
project.kerrylogistics.com
kerrierbook-api.kerrylogistics.com
ecom2.kerrylogistics.com
klclub.kerrylogistics.com
kerrierbook-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-uat.apac.kerrylogistics.com
kerrierbookb2bapi.kerrylogistics.com
*.vpn.kerrylogistics.com
mycrm-login.kerrylogistics.com
awstest.hk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
kerrierbook-b2b-uat.kerrylogistics.com
tdc.hk.kerrylogistics.com
customer.zohosurvey.com
kvc-uat.apac.kerrylogistics.com
*.cn.kerrylogistics.com
tdc.kerrylogistics.com
ecom2.kerrylogistics.com
ceapp.kerrylogistics.com
project.kerrylogistics.com
servicedesk.kerrylogistics.com
survey.abundantpower.com
www.kerrylogistics.com
*.hk.kerrylogistics.com
mydesktop.kerrylogistics.com
hfm.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
customer.zohosurvey.com
survey.multiplyinggood.org
customer.zohosurvey.com
servicedesk.kerrylogistics.com
sharepoint.kerrylogistics.com
qv.kerrylogistics.com
customer.zohosurvey.com
servicedesk.kerrylogistics.com
uat.arbitration.kerrylogistics.com
allinteractive.tv
*.kerrylogistics.com
klclub.kerrylogistics.com
webscan-fnb.hk.kerrylogistics.com
ap.kerrylogistics.com
kerrierbookapi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4-uat.apac.kerrylogistics.com
fsus-12.freshservice.com
kbos-uat.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
fsus-12.freshservice.com
c4-uat-api.apac.kerrylogistics.com
klclub.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
survey.abundantpower.com
kv-iff-api-uat.apac.kerrylogistics.com
allinteractive.tv
iffedi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
fsus-12.freshservice.com
www.kerrylogistics.com
kerrierbook-api-uat.kerrylogistics.com
hfm-dev.kerrylogistics.com
survey.abundantpower.com
servicedesk.kerrylogistics.com
survey.seaworldentertainment.com
survey.leakdtech.com
servicedesk.kerrylogistics.com
ksmart-uat.cn.kerrylogistics.com
survey.abundantpower.com
apptest.hk.kerrylogistics.com
kwms3.apac.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
*.vpn.kerrylogistics.com
kbos-uat.hk.kerrylogistics.com
customer.zohosurvey.com
mycrm.kerrylogistics.com
oms.kerrylogistics.com
survey.abundantpower.com
customer.zohosurvey.com
allinteractive.tv
kvc-api.apac.kerrylogistics.com
allinteractive.tv
servicedesk.kerrylogistics.com
bms2.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
*.th.kerrylogistics.com
customer.zohosurvey.com
ceapp-uat.kerrylogistics.com
*.vpn.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4pub.apac.kerrylogistics.com
sctcms.kerrylogistics.com
project.kerrylogistics.com
kerrierbook-api.kerrylogistics.com
ecom2.kerrylogistics.com
klclub.kerrylogistics.com
kerrierbook-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-uat.apac.kerrylogistics.com
kerrierbookb2bapi.kerrylogistics.com
*.vpn.kerrylogistics.com
mycrm-login.kerrylogistics.com
awstest.hk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
kerrierbook-b2b-uat.kerrylogistics.com
tdc.hk.kerrylogistics.com
customer.zohosurvey.com
kvc-uat.apac.kerrylogistics.com
*.cn.kerrylogistics.com
tdc.kerrylogistics.com
ecom2.kerrylogistics.com
ceapp.kerrylogistics.com
project.kerrylogistics.com
servicedesk.kerrylogistics.com
survey.abundantpower.com
www.kerrylogistics.com
*.hk.kerrylogistics.com
mydesktop.kerrylogistics.com
hfm.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
customer.zohosurvey.com
survey.multiplyinggood.org
customer.zohosurvey.com
servicedesk.kerrylogistics.com
sharepoint.kerrylogistics.com
qv.kerrylogistics.com
customer.zohosurvey.com
servicedesk.kerrylogistics.com
uat.arbitration.kerrylogistics.com
allinteractive.tv
*.kerrylogistics.com
klclub.kerrylogistics.com
webscan-fnb.hk.kerrylogistics.com
ap.kerrylogistics.com
kerrierbookapi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4-uat.apac.kerrylogistics.com
fsus-12.freshservice.com
kbos-uat.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
fsus-12.freshservice.com
c4-uat-api.apac.kerrylogistics.com
klclub.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
survey.abundantpower.com
kv-iff-api-uat.apac.kerrylogistics.com
allinteractive.tv
iffedi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
fsus-12.freshservice.com
www.kerrylogistics.com
kerrierbook-api-uat.kerrylogistics.com
hfm-dev.kerrylogistics.com
survey.abundantpower.com
servicedesk.kerrylogistics.com
survey.seaworldentertainment.com
survey.leakdtech.com
servicedesk.kerrylogistics.com
ksmart-uat.cn.kerrylogistics.com
survey.abundantpower.com
apptest.hk.kerrylogistics.com
kwms3.apac.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
*.vpn.kerrylogistics.com
kbos-uat.hk.kerrylogistics.com
customer.zohosurvey.com
mycrm.kerrylogistics.com
Certificate
The complete raw certificate details for bms2.hk.kerrylogistics.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEczCCA1ugAwIBAgIQCYiRdFvV7z+YAJYTN5vHUDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIxMzAwMDAwMFoXDTI1MDExMDIzNTk1OVowJTEj MCEGA1UEAxMaYm1zMi5oay5rZXJyeWxvZ2lzdGljcy5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDLX50jkuzSsIKN/WSzwrIVfqrbkUa3ZXb56h+y 8eoYNUPkALJjJ5EwCNZLX8FDXGT8JwGzkqxZIA/abBn/mmtgAw8d1ae3hgu9J0vh dFhycPn6Ad1r0cfDFo0NgAU7HBy+oBL3voLeROXWcbuBQNE+SXoowvOBT3wIoePY yFW4k7gCgeDM5llww6x03AGj0wsZLwVNqtYSPviOKv18Kv75yu58Vz+FaezrJ48k 50BR4GWZO4ZlY3JgYgJeGdlXWn9oklzHLmpmKMJQW1/gmUncdeSCNnlKiZJmcG5J FjPqzzRlK+mwnq9MGU9nmX7nZ6yLSHmIpekVIreQfGNgEaJBAgMBAAGjggGGMIIB gjAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUCcA+ 3hlo70foTRfjjZJIeyAVvWMwJQYDVR0RBB4wHIIaYm1zMi5oay5rZXJyeWxvZ2lz dGljcy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1 c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHkLaDKqwVPPnTQi8pnJsiIuO9G0omsPMe /w0Q8keMJMTPt0fv4nNejNwJV834RfmHzf1Un2Eatead+p6XBHd9+6fpcyufWBvr PiY//B7RehAf0RVdWBGs13kSBUVy/AJWYHJUlAeuoGG5o59da6nbWngwkuK+Ld7D OT+nwhXP1olFSQcberP89HtoM1Yl+6x+EM2zlxbrG+39sGi6n6ckpJrcBlmTZ/ql 8ZIDUZrftK2la8L+rQchwpBUuw91/3kgiSJF6CayskKP8reNoGPP3x0h2+IbebHU fBy5Qs8ZKwjUFvfAa4ujsKg9Z+CRZmqze2P5fAQozuLrJjsep8h4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1+dI5Ls0rCCjf1ks8Ky FX6q25FGt2V2+eofsvHqGDVD5ACyYyeRMAjWS1/BQ1xk/CcBs5KsWSAP2mwZ/5pr YAMPHdWnt4YLvSdL4XRYcnD5+gHda9HHwxaNDYAFOxwcvqAS976C3kTl1nG7gUDR Pkl6KMLzgU98CKHj2MhVuJO4AoHgzOZZcMOsdNwBo9MLGS8FTarWEj74jir9fCr+ +crufFc/hWns6yePJOdAUeBlmTuGZWNyYGICXhnZV1p/aJJcxy5qZijCUFtf4JlJ 3HXkgjZ5SomSZnBuSRYz6s80ZSvpsJ6vTBlPZ5l+52esi0h5iKXpFSK3kHxjYBGi QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12672154503106127472496563305953609552 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bms2.hk.kerrylogistics.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25673524842021200947118570643101577221332293959636487161590071604475654556102514785433219511970288726341254222824377508153710608931905113716254678171456535490561914943006206839369150074493143665289841788691400337467407094417484415627248940192347591450037842655670119948301153079055156439923737599782530561657951583269815126491924607666327315081719940970985114473088766778902526260347623015477078222058902852445205659228064749946075676361759337847193251322172385049970410790032568847396140233411518390975452626556894749282653290248937969323015078781265854734613140747735235742857857095429902069447591017718815132852801 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 09c03ede1968ef47e84d17e38d92487b2015bd63 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms2.hk.kerrylogistics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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