dcr.infomosaic.nrsdevops.spglobal.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 05:ba:38:81:1d:78:76:e1:57:2f:5a:e6:5a:16:c2:17 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dcr.infomosaic.nrsdevops.spglobal.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 05:ba:38:81:1d:78:76:e1:57:2f:5a:e6:5a:16:c2:17Serial Number (int): 7613053239103523916286495879251542551
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: a5:96:51:b4:e3:72:fd:d0:94:c7:08:f9:c4:57:d9:18:ce:ac:87:39
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 9c:28:0c:19:2d:63:e6:f6:f9:e7:ff:85:51:87:52:0d:ad:a9:95:1f
Fingerprint (sha256): 04:59:fe:9a:a4:16:9a:13:e6:cb:19:bd:32:80:74:c4:d4:59:66:a2:b3:cb:1a:9d:c3:63:74:c9:b3:fc:fe:69
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate dcr.infomosaic.nrsdevops.spglobal.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dcr.infomosaic.nrsdevops.spglobal.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dcr.infomosaic.nrsdevops.spglobal.com
Other certificates including the domain name spglobal.com
(limited to 100 certificates)
Lync2013EMEADRExt1.spglobal.com
accredible.tutor.com
*.jiveon.com
VA06MSG6003.spglobal.com
qa.np.ebb.spglobal.com
aonhrlearningcenter.credentials.aon.com
fdus-74.freshdesk.com
info.spglobal.com
academy-achievements.gong.io
sloft.spglobal.com
spglobal.com
nj09msg071.spglobal.com
*.module1-dev.micld.spglobal.com
stage2.www.spglobal.com
webmail.spglobal.com
leapfrog-ssl-1.gcs-web.com
api.qa.pmi.spglobal.com
academy-achievements.gong.io
*.module-dev.micld.spglobal.com
myreward.spglobal.com
*.jiveon.com
lync2013namdraccess.spglobal.com
*.spgi.spglobal.com
edx.standardandpoors.com
ew-aces.spglobal.com
cdn.spgi.spglobal.com
vgsathostedapps.taxsolutions.spglobal.com
webinspect.spglobal.com
rapcustomerportal.pde.spratingsvpc.com
public-davos.dev.capitalmarkets.spglobal.com
ratings.spglobal.com
sftp-qa.spglobal.com
aonhrlearningcenter.credentials.aon.com
*.xplore.spglobal.com
dcr.infomosaic.nrsdevops.spglobal.com
learning.spglobal.com
support.kot4x.com
api.prod.pmi.spglobal.com
*.aws-east-1.container.spglobal.com
sftp-qa.spglobal.com
nj12msg043.spglobal.com
*.spindices.com
webconf.spglobal.com
academy-achievements.gong.io
spglobal.com
learning.spglobal.com
*.marketintelligence.spglobal.com
uat.eventsplanner.spglobal.com
trial.marketintelligence.spglobal.com
sloft.spglobal.com
edxuat.standardandpoors.com
internal.qa.pmi.spglobal.com
aonhrlearningcenter.credentials.aon.com
razor.spglobal.com
spratingsvpc.com
interactive.spglobal.com
accredible.tutor.com
spindices.com
*.api.corp.spglobal.com
sso.spglobal.com
connect.spglobal.com
*.marketplacestage.spglobal.com
platform-b-prod-eu1.solprod.spglobal.com
*.mistagecld.spglobal.com
share.spglobal.com
academy-achievements.gong.io
stage.www.spglobal.com
*.internalstg.spglobal.com
myreward.spglobal.com
thehub.spglobal.com
*.platform.micld.spglobal.com
accredible.tutor.com
uconnect.spglobal.com
redirect.researchmanager.spglobal.com
www.marketintelligence.spglobal.com
*.pmc.spglobal.com
www.capitaliq.com
sloft.spglobal.com
share.spglobal.com
uk.ldap.spglobal.com
spkhett.spglobal.com
*.jet.spglobal.com
accredible.tutor.com
VA06MSG6006.spglobal.com
www.marketintelligence.spglobal.com
sso.spglobal.com
*.dev.spglobal.com
sf.spglobal.com
app.ratings.spglobal.com
stage.www.spglobal.com
*.api.marketintelligence.spglobal.com
*.marketintelligence.spglobal.com
fdus-74.freshdesk.com
recognition-cdn.spglobal.com
myreward.spglobal.com
*.marketplacestage.spglobal.com
*.stage-ash-w.container.spglobal.com
VA06MSG6004.spglobal.com
plattsreporting.spglobal.com
dw8apiint.taxsolutions.spglobal.com
accredible.tutor.com
*.jiveon.com
VA06MSG6003.spglobal.com
qa.np.ebb.spglobal.com
aonhrlearningcenter.credentials.aon.com
fdus-74.freshdesk.com
info.spglobal.com
academy-achievements.gong.io
sloft.spglobal.com
spglobal.com
nj09msg071.spglobal.com
*.module1-dev.micld.spglobal.com
stage2.www.spglobal.com
webmail.spglobal.com
leapfrog-ssl-1.gcs-web.com
api.qa.pmi.spglobal.com
academy-achievements.gong.io
*.module-dev.micld.spglobal.com
myreward.spglobal.com
*.jiveon.com
lync2013namdraccess.spglobal.com
*.spgi.spglobal.com
edx.standardandpoors.com
ew-aces.spglobal.com
cdn.spgi.spglobal.com
vgsathostedapps.taxsolutions.spglobal.com
webinspect.spglobal.com
rapcustomerportal.pde.spratingsvpc.com
public-davos.dev.capitalmarkets.spglobal.com
ratings.spglobal.com
sftp-qa.spglobal.com
aonhrlearningcenter.credentials.aon.com
*.xplore.spglobal.com
dcr.infomosaic.nrsdevops.spglobal.com
learning.spglobal.com
support.kot4x.com
api.prod.pmi.spglobal.com
*.aws-east-1.container.spglobal.com
sftp-qa.spglobal.com
nj12msg043.spglobal.com
*.spindices.com
webconf.spglobal.com
academy-achievements.gong.io
spglobal.com
learning.spglobal.com
*.marketintelligence.spglobal.com
uat.eventsplanner.spglobal.com
trial.marketintelligence.spglobal.com
sloft.spglobal.com
edxuat.standardandpoors.com
internal.qa.pmi.spglobal.com
aonhrlearningcenter.credentials.aon.com
razor.spglobal.com
spratingsvpc.com
interactive.spglobal.com
accredible.tutor.com
spindices.com
*.api.corp.spglobal.com
sso.spglobal.com
connect.spglobal.com
*.marketplacestage.spglobal.com
platform-b-prod-eu1.solprod.spglobal.com
*.mistagecld.spglobal.com
share.spglobal.com
academy-achievements.gong.io
stage.www.spglobal.com
*.internalstg.spglobal.com
myreward.spglobal.com
thehub.spglobal.com
*.platform.micld.spglobal.com
accredible.tutor.com
uconnect.spglobal.com
redirect.researchmanager.spglobal.com
www.marketintelligence.spglobal.com
*.pmc.spglobal.com
www.capitaliq.com
sloft.spglobal.com
share.spglobal.com
uk.ldap.spglobal.com
spkhett.spglobal.com
*.jet.spglobal.com
accredible.tutor.com
VA06MSG6006.spglobal.com
www.marketintelligence.spglobal.com
sso.spglobal.com
*.dev.spglobal.com
sf.spglobal.com
app.ratings.spglobal.com
stage.www.spglobal.com
*.api.marketintelligence.spglobal.com
*.marketintelligence.spglobal.com
fdus-74.freshdesk.com
recognition-cdn.spglobal.com
myreward.spglobal.com
*.marketplacestage.spglobal.com
*.stage-ash-w.container.spglobal.com
VA06MSG6004.spglobal.com
plattsreporting.spglobal.com
dw8apiint.taxsolutions.spglobal.com
Certificate
The complete raw certificate details for dcr.infomosaic.nrsdevops.spglobal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEiTCCA3GgAwIBAgIQBbo4gR14duFXL1rmWhbCFzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNjAwMDAwMFoXDTI1MDEwMzIzNTk1OVowMDEu MCwGA1UEAxMlZGNyLmluZm9tb3NhaWMubnJzZGV2b3BzLnNwZ2xvYmFsLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKowOYC66cjGF6gJze/bIgwG X0yPz4juaTXmG5fdnafvCctKr7Jh7TdOLBC5UvDAuKq3NqnqnuzI2aPETMLShfzI C9JgTBg4G9zimzHSZzfSwE9uGgIfPaBmHbS63vE61J1DUkDeVj2JVX5h9SHTdjFi j/lrOkb9j1eX7y5AStqNmDtMuAB6p2svivzlTu5GFmPPgrC0GhvuU5opA24ZNXkp GvIF1Aom3zI6ho6qjK9fc3HeVFuCU40+7tzxPMuL3q30qo0/sJvNuT9I0u+2ICx3 8eIvPkM0NHHXoXI7/5vTPPz/RTcHoIT9iTfTBWufjc4yjJ+VOrPMbJSe28Fxp9UC AwEAAaOCAZEwggGNMB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0G A1UdDgQWBBSlllG043L90JTHCPnEV9kYzqyHOTAwBgNVHREEKTAngiVkY3IuaW5m b21vc2FpYy5ucnNkZXZvcHMuc3BnbG9iYWwuY29tMBMGA1UdIAQMMAowCAYGZ4EM AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVz dC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/ BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPEa rmuidF490ZMaZUS8TCxGjBjEtmgz8iMfXEUpsG4XVmfntdbpVuxlMh/Z59Ye7qbJ v/asrVGbEdObOQHToitRZIw9Li8OW/sjktve2F9mT3Pacvnr4wIuelVY1euT6v1J L7LS3iKhYczvXYxwYbxTNEujK7XjS9BL0743GQDl/DnQpbxROicw+uwfpy4NWwDG AHjbBkqoqsOHhUgnhGE4uMlqdnAjLWgAU/s6gjrkxinJuFxBO8sCyajDdnUWFNNo HWz+x2G9TynEWFi05UKXbzEL1OhxrnjYfxD8IZlhU3qRvbTafqyg7MA9yH+6QoXM 3XBerekPEzVLAfiN+A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjA5gLrpyMYXqAnN79si DAZfTI/PiO5pNeYbl92dp+8Jy0qvsmHtN04sELlS8MC4qrc2qeqe7MjZo8RMwtKF /MgL0mBMGDgb3OKbMdJnN9LAT24aAh89oGYdtLre8TrUnUNSQN5WPYlVfmH1IdN2 MWKP+Ws6Rv2PV5fvLkBK2o2YO0y4AHqnay+K/OVO7kYWY8+CsLQaG+5TmikDbhk1 eSka8gXUCibfMjqGjqqMr19zcd5UW4JTjT7u3PE8y4verfSqjT+wm825P0jS77Yg LHfx4i8+QzQ0cdehcjv/m9M8/P9FNweghP2JN9MFa5+NzjKMn5U6s8xslJ7bwXGn 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7613053239103523916286495879251542551 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dcr.infomosaic.nrsdevops.spglobal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21484292290915739752371909144490264629263982609738491879714659887700327728692274647562883704340936313599087996180089329255329806208320126494305041857872650104072634855112283710099251568569367521680692505917936248740508617357802413138831746017466364341057595525544370524242302728729839111316835487468215771336477963846737344041825299144783962813341997888462947493517475723679050548122634709782128426825644011684653008589658992145721618715859839572872725451694314532542510724768561790852093422464482889815122591493636095588856883412611167451166702834626393862152125110569117063976876711680509275622658842336095850571733 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a59651b4e372fdd094c708f9c457d918ceac8739 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcr.infomosaic.nrsdevops.spglobal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0060f11aae6ba2745e3dd1931a6544bc4c2c468c18c4b66833f2231f5c4529b06e175667e7b5d6e956ec65321fd9e7d61eeea6c9bff6acad519b11d39b3901d3a22b51648c3d2e2f0e5bfb2392dbded85f664f73da72f9ebe3022e7a5558d5eb93eafd492fb2d2de22a161ccef5d8c7061bc53344ba32bb5e34bd04bd3be371900e5fc39d0a5bc513a2730faec1fa72e0d5b00c60078db064aa8aac387854827846138b8c96a7670232d680053fb3a823ae4c629c9b85c413bcb02c9a8c376751614d3681d6cfec761bd4f29c45858b4e542976f310bd4e871ae78d87f10fc219961537a91bdb4da7eaca0ecc03dc87fba4285ccdd705eade90f13354b01f88df8