*.nightlyma.dup.dev.forcepoint.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0c:89:54:42:6e:9d:d6:98:f8:4c:67:67:6a:3c:bd:e9 was issued on by Amazon.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.nightlyma.dup.dev.forcepoint.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:89:54:42:6e:9d:d6:98:f8:4c:67:67:6a:3c:bd:e9Serial Number (int): 16663789604737860383967932225056194025
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0a:5f:1b:be:2c:45:a8:9f:c0:63:ba:eb:86:de:59:ff:d2:12:ab:57
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): ac:9d:96:5b:84:f1:d6:06:9a:77:ba:45:de:a8:18:74:56:9a:95:bc
Fingerprint (sha256): 04:1b:b9:b6:ee:e4:e5:9c:17:48:ef:45:a4:f8:40:08:37:cb:de:89:d1:3f:d5:1b:fa:77:b8:e3:6d:01:aa:73
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.nightlyma.dup.dev.forcepoint.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nightlyma.dup.dev.forcepoint.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.nightlyma.dup.dev.forcepoint.com
*.nightlyma.us-east-1.dup.dev.forcepoint.com
*.nightlyma.eu-central-1.dup.dev.forcepoint.com
*.nightlyma.ap-south-1.dup.dev.forcepoint.com
*.dup.dev.forcepoint.com
*.nightlyma.us-east-1.dup.dev.forcepoint.com
*.nightlyma.eu-central-1.dup.dev.forcepoint.com
*.nightlyma.ap-south-1.dup.dev.forcepoint.com
*.dup.dev.forcepoint.com
Other certificates including the domain name forcepoint.com
(limited to 100 certificates)
*.nightly1102.neo.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly1017.dup.dev.forcepoint.com
*.nightlyma.neo.dev.forcepoint.com
*.nightly1220.dup.dev.forcepoint.com
j3.shared.global.fastly.net
hello.forcepoint.com
5635999187075072-fe3.pantheonsite.io
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
ceros1.map.fastly.net
bemol-status.linxcommerce.com.br
analyticsssl.forcepoint.com
*.nightly0824.dup.dev.forcepoint.com
*.nightly1217.neo.dev.forcepoint.com
*.nightly1207.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.devops.neo.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
webmailgov.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
passthrough.forcepoint.com
*.nightly.neo.dev.forcepoint.com
csg.status.forcepoint.com
csg.status.forcepoint.com
*.nightly1028.dup.dev.forcepoint.com
one.cvpn.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly0216.neo.dev.forcepoint.com
*.nightly1214.dup.dev.forcepoint.com
go.forcepoint.com
bemol-status.linxcommerce.com.br
*.dev03.neo.dev.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightly.neo.dev.forcepoint.com
*.nightly0113.neo.dev.forcepoint.com
5686147871145984-fe1.pantheonsite.io
ceros1.map.fastly.net
*.nightly0430.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.forcepoint.com
*.nightly0206.dup.dev.forcepoint.com
webmailgov.forcepoint.com
*.nightly.dup.dev.forcepoint.com
ceros1.map.fastly.net
vhfptwddlb.hec.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightly1205.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.nightly.dup.dev.forcepoint.com
*.prd01.neo.forcepoint.com
analyticsssl.forcepoint.com
bemol-status.linxcommerce.com.br
fptqa.hec.forcepoint.com
*.nightly0412.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.nightlyma.t01.dup.dev.forcepoint.com
*.nightly1219.dup.dev.forcepoint.com
*.nightly1211.neo.dev.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightly0320.neo.dev.forcepoint.com
*.nightly1208.dup.dev.forcepoint.com
j3.shared.global.fastly.net
www.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightlyma.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly1113.dup.dev.forcepoint.com
*.nightly0116.dup.dev.forcepoint.com
*.nightly1209.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.t01.dup.dev.forcepoint.com
*.nightly0314.dup.dev.forcepoint.com
5635999187075072-fe3.pantheonsite.io
analyticsssl.forcepoint.com
*.nightly1115.neo.dev.forcepoint.com
j3.shared.global.fastly.net
skyfencenet.com
go.forcepoint.com
*.nightly1225.neo.dev.forcepoint.com
*.nightly0328.dup.dev.forcepoint.com
*.nightly0907.dup.dev.forcepoint.com
*.nightly1213.neo.dev.forcepoint.com
*.applications.policytest.ngfw.forcepoint.com
*.nightlyma.neo.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly0406.neo.dev.forcepoint.com
*.nightly0102.neo.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
5686147871145984-fe1.pantheonsite.io
secure.forcepoint.com
*.download.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly1017.dup.dev.forcepoint.com
*.nightlyma.neo.dev.forcepoint.com
*.nightly1220.dup.dev.forcepoint.com
j3.shared.global.fastly.net
hello.forcepoint.com
5635999187075072-fe3.pantheonsite.io
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
ceros1.map.fastly.net
bemol-status.linxcommerce.com.br
analyticsssl.forcepoint.com
*.nightly0824.dup.dev.forcepoint.com
*.nightly1217.neo.dev.forcepoint.com
*.nightly1207.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.devops.neo.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
webmailgov.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
passthrough.forcepoint.com
*.nightly.neo.dev.forcepoint.com
csg.status.forcepoint.com
csg.status.forcepoint.com
*.nightly1028.dup.dev.forcepoint.com
one.cvpn.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly0216.neo.dev.forcepoint.com
*.nightly1214.dup.dev.forcepoint.com
go.forcepoint.com
bemol-status.linxcommerce.com.br
*.dev03.neo.dev.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightly.neo.dev.forcepoint.com
*.nightly0113.neo.dev.forcepoint.com
5686147871145984-fe1.pantheonsite.io
ceros1.map.fastly.net
*.nightly0430.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.forcepoint.com
*.nightly0206.dup.dev.forcepoint.com
webmailgov.forcepoint.com
*.nightly.dup.dev.forcepoint.com
ceros1.map.fastly.net
vhfptwddlb.hec.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
*.nightly1205.dup.dev.forcepoint.com
*.nightlyma.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.nightly.dup.dev.forcepoint.com
*.prd01.neo.forcepoint.com
analyticsssl.forcepoint.com
bemol-status.linxcommerce.com.br
fptqa.hec.forcepoint.com
*.nightly0412.dup.dev.forcepoint.com
ceros1.map.fastly.net
*.nightlyma.t01.dup.dev.forcepoint.com
*.nightly1219.dup.dev.forcepoint.com
*.nightly1211.neo.dev.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightly0320.neo.dev.forcepoint.com
*.nightly1208.dup.dev.forcepoint.com
j3.shared.global.fastly.net
www.forcepoint.com
bemol-status.linxcommerce.com.br
*.nightlyma.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightly1113.dup.dev.forcepoint.com
*.nightly0116.dup.dev.forcepoint.com
*.nightly1209.dup.dev.forcepoint.com
*.nightly.dup.dev.forcepoint.com
*.nightlyma.t01.dup.dev.forcepoint.com
*.nightly0314.dup.dev.forcepoint.com
5635999187075072-fe3.pantheonsite.io
analyticsssl.forcepoint.com
*.nightly1115.neo.dev.forcepoint.com
j3.shared.global.fastly.net
skyfencenet.com
go.forcepoint.com
*.nightly1225.neo.dev.forcepoint.com
*.nightly0328.dup.dev.forcepoint.com
*.nightly0907.dup.dev.forcepoint.com
*.nightly1213.neo.dev.forcepoint.com
*.applications.policytest.ngfw.forcepoint.com
*.nightlyma.neo.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
*.nightly0406.neo.dev.forcepoint.com
*.nightly0102.neo.dev.forcepoint.com
*.nightly.neo.dev.forcepoint.com
5686147871145984-fe1.pantheonsite.io
secure.forcepoint.com
*.download.forcepoint.com
*.nightly.dup.dev.forcepoint.com
Certificate
The complete raw certificate details for *.nightlyma.dup.dev.forcepoint.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIQDIlUQm6d1pj4TGdnajy96TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIxMzAwMDAwMFoXDTI0MDExMjIzNTk1OVowLTEr MCkGA1UEAwwiKi5uaWdodGx5bWEuZHVwLmRldi5mb3JjZXBvaW50LmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKkQgHy4RU6Tm0fzl9dYs9jSMAGx hq8ws9iKdZX+zFf7MgBZQ8ZjBHWZjLsv1xfZc4E2EL2YGpipD7zBo96Oe8nyo5gL SHygQgg7S6D1PRhOjmpJkDHQbJ1dFz6+ZB3mhfZQFaCEKt9bcsZP1eLLpi+qfgSH uK3rhhZJdLKcorJD57Cd1X8PXo/iS/eWLXXR90rErKx210BPLPYe4/eSFptevL8L BLpBmsJxNQKcDIjJYVFSDQgIxJGDLJFDXL4vae2CP65NM+i9IxtPF+2WWX6bu1Cp oDp4kpt3UiWu/1hjy2NHzQJ/CT98vr6XN1KxQl2F0Vbmap9lKR6AGxYzQrUCAwEA AaOCAjkwggI1MB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1Ud DgQWBBQKXxu+LEWon8BjuuuG3ln/0hKrVzCB1wYDVR0RBIHPMIHMgiIqLm5pZ2h0 bHltYS5kdXAuZGV2LmZvcmNlcG9pbnQuY29tgiwqLm5pZ2h0bHltYS51cy1lYXN0 LTEuZHVwLmRldi5mb3JjZXBvaW50LmNvbYIvKi5uaWdodGx5bWEuZXUtY2VudHJh bC0xLmR1cC5kZXYuZm9yY2Vwb2ludC5jb22CLSoubmlnaHRseW1hLmFwLXNvdXRo LTEuZHVwLmRldi5mb3JjZXBvaW50LmNvbYIYKi5kdXAuZGV2LmZvcmNlcG9pbnQu Y29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVz dC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEB BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3Qu Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNv bS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAg56tGscEgxlq/k9yLDKCfvGhvsKMG23dO9nvwG8U AU7Oyer+uw72+R3IBAXM8mMroZ8sn3e4g1c9EhNw6qVHxBZJQUmGMKCa9pHc6lzC DMdZ8Blq4DrROrKoC/+a0bBSFTkasPqls3ZhyzKBJrUNh/chc8kljgjvDZYktZHg epDgll8vt/P0iifisDwl8o/9nUYvgLlQ6WMx9XMYv9DNXssh/H/+y3g+2NJD4nyL vPidxEPzQkuu4v713lOnd0wOYMeZEWTppQBxhXgrD5fJ37svab3RDHatVlzPv/Fx ZxDHb6VSfrk31/vS6eyMB6+J0Bx5DoSndBIBuwZfNL9gjg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRCAfLhFTpObR/OX11iz 2NIwAbGGrzCz2Ip1lf7MV/syAFlDxmMEdZmMuy/XF9lzgTYQvZgamKkPvMGj3o57 yfKjmAtIfKBCCDtLoPU9GE6OakmQMdBsnV0XPr5kHeaF9lAVoIQq31tyxk/V4sum L6p+BIe4reuGFkl0spyiskPnsJ3Vfw9ej+JL95YtddH3SsSsrHbXQE8s9h7j95IW m168vwsEukGawnE1ApwMiMlhUVINCAjEkYMskUNcvi9p7YI/rk0z6L0jG08X7ZZZ fpu7UKmgOniSm3dSJa7/WGPLY0fNAn8JP3y+vpc3UrFCXYXRVuZqn2UpHoAbFjNC tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16663789604737860383967932225056194025 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nightlyma.dup.dev.forcepoint.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21342410930954061074138449121291287535358032165225912244127964609655887901359234503317289546987195833284441171961166109005866824671095156081520277135280170590333762206393642184671353596746603897617556834312807075220168834895392621008203644442942107278865580612261878095619333761407715573543029235545716515008922385408897233008036185330010723580041565529214733065196618235085484379163636588999595158167170950690417298198218247943858110909484951823676207477509761473222524262450538723614382435856865214264998455579770715604711643603659811874884697894370010232239373348977104126730745268546238446962631676499234638742197 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0a5f1bbe2c45a89fc063baeb86de59ffd212ab57 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nightlyma.dup.dev.forcepoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nightlyma.us-east-1.dup.dev.forcepoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nightlyma.eu-central-1.dup.dev.forcepoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nightlyma.ap-south-1.dup.dev.forcepoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dup.dev.forcepoint.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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