staging-sfractus.cleo.media
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0c:61:1f:98:95:d6:e1:ca:f1:1f:5b:1d:2f:1b:9a:87 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging-sfractus.cleo.media
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:61:1f:98:95:d6:e1:ca:f1:1f:5b:1d:2f:1b:9a:87Serial Number (int): 16455029588448326989629199961971989127
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a7:24:b9:48:62:b3:ed:19:f8:d7:ea:0a:8d:96:ae:69:0b:9b:f2:b8
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 0b:52:ef:5c:07:90:ad:90:71:fc:73:49:77:b7:15:58:76:77:c5:eb
Fingerprint (sha256): 03:ef:cd:14:0c:37:3c:45:44:fd:19:c4:f5:29:a0:82:36:84:4e:9b:82:bf:9f:61:22:f3:c2:5f:fb:fa:d0:68
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate staging-sfractus.cleo.media
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging-sfractus.cleo.media
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging-sfractus.cleo.media
Other certificates including the domain name cleo.media
(limited to 100 certificates)
unit-test-sandbox.cleo.media
unit-test.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
testing-bfmtv-admin.cleo.media
staging-sfractus.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testtoto.cleo.media
staging-bfmtv-edito.cleo.media
www.cleo.media
testing-sfractus-images.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
*.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
bfmtv.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
*.cleo.media
redirect.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-images.cleo.media
staging-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-admin.cleo.media
staging-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
unit-test-sandbox.cleo.media
testing-sfractus-admin.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
staging-sfractus.cleo.media
testing-bfmtv-edito.cleo.media
sandbox.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
testing-bfmtv-edito.cleo.media
www.cleo.media
sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-cleo-bfmtv-brightcove.cleo.media
cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
testing-bfmtv-edito.cleo.media
unit-test.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
testing-bfmtv-admin.cleo.media
staging-sfractus.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testtoto.cleo.media
staging-bfmtv-edito.cleo.media
www.cleo.media
testing-sfractus-images.cleo.media
staging-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
*.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
bfmtv.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
*.cleo.media
redirect.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
unit-test-sandbox.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-images.cleo.media
staging-sfractus-images.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-admin.cleo.media
staging-sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
unit-test-sandbox.cleo.media
testing-sfractus-admin.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus-admin.cleo.media
staging-sfractus.cleo.media
testing-bfmtv-edito.cleo.media
sandbox.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
testing-bfmtv-edito.cleo.media
www.cleo.media
sfractus-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-sfractus.cleo.media
staging-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
staging-cleo-bfmtv-brightcove.cleo.media
cleo.media
staging-sfractus-edito.cleo.media
testing-bfmtv-edito.cleo.media
testing-bfmtv-edito.cleo.media
staging-bfmtv-edito.cleo.media
testing-sandbox-images.cleo.media
testing-bfmtv-edito.cleo.media
Certificate
The complete raw certificate details for staging-sfractus.cleo.media in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdTCCA12gAwIBAgIQDGEfmJXW4crxH1sdLxuahzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIyMTIwNTAwMDAwMFoXDTI0MDEwNDIzNTk1OVowJjEk MCIGA1UEAxMbc3RhZ2luZy1zZnJhY3R1cy5jbGVvLm1lZGlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ENN+qx5khwRxXFWK0CstcwcYq7XdVcTPJGk jZVU1kD+JonQGfQnkY5tTG+j+Zz7tzVnrRbb9aDe7p5PHvaulCN6ACs4u8Svg95k ZYezJk5suTA5Ublf7uiRovTTHMciUJA+ZaEQqufQ5gbtlC/9xes0fqYAPR4q4TpA tPRKIELSOzNWnq3bJxkpKzSVdWfAEMc6N55iHhmQSm+gDS88SB0aTKgPAWVEitY4 9V8DI31dws6CHw3wFwvS50SRNk3vHqWKlrIK4zMJfAXDodTZip+LuVFLM50bZe6F PrwCeNDQ9ZzrOBlJ1T8t5nFOTJuLVhSLd0JbVAKzfjarw8r4ywIDAQABo4IBhzCC AYMwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFKck uUhis+0Z+NfqCo2WrmkLm/K4MCYGA1UdEQQfMB2CG3N0YWdpbmctc2ZyYWN0dXMu Y2xlby5tZWRpYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1h em9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1Bggr BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpv bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250 cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB /wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAsuAK5pWTQQSnI/Fn1EH+07obfPE8eX 5olSvewTEZkqjjysij/GWGtnEGJHPhTGAcJPfO9WmzSbbQKh81Lcc+MLrF8LiDTJ +fFq6wM4R3r74SJhCqsBBr2hR3XGahPRqoXJqW7Cy1NEp2Hd0k5DN0PfSe9pR+yk 51QuNPwePj1qoxKiskKBh+vLx3U75SEPpGfqc+xd6S3mWsrar+SDXd4wMC6iwQLa se/TuOiAadaVPzhtQQqMqddc68WH2JT1bqJcyQpNkzC7sOE/SufdFZDHnXRDKfSc qUaPXnWPMsM1HkTtAyxsW0a12P+/62cc/Y5wNJJiXRSNh2hq0Dd48fs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ENN+qx5khwRxXFWK0Cs tcwcYq7XdVcTPJGkjZVU1kD+JonQGfQnkY5tTG+j+Zz7tzVnrRbb9aDe7p5PHvau lCN6ACs4u8Svg95kZYezJk5suTA5Ublf7uiRovTTHMciUJA+ZaEQqufQ5gbtlC/9 xes0fqYAPR4q4TpAtPRKIELSOzNWnq3bJxkpKzSVdWfAEMc6N55iHhmQSm+gDS88 SB0aTKgPAWVEitY49V8DI31dws6CHw3wFwvS50SRNk3vHqWKlrIK4zMJfAXDodTZ ip+LuVFLM50bZe6FPrwCeNDQ9ZzrOBlJ1T8t5nFOTJuLVhSLd0JbVAKzfjarw8r4 ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16455029588448326989629199961971989127 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging-sfractus.cleo.media' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27805616230839836195660372723492104245933373099436538609317638544138488480709321707687567653353961256841195398023006651848603464823426289044425512210419433518491801594071794981094575281929153512878545735552573183827613868433769824188345260450282914743000786470666438779085357010306263292281587237079552655693163780310003839603540897212828953503355852182500936321818405421996452735806139188669718159593548285462791110296651612673290661521560700415679827183414051008896458260475645659962431779836821394944020676944010518150975221923374785099310424414368968049473729667817791427374356292898051647051647914436486528432331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a724b94862b3ed19f8d7ea0a8d96ae690b9bf2b8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-sfractus.cleo.media' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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