mi.ihg.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0f:36:9b:ec:ba:1b:01:7b:6f:d5:31:26:93:1f:01:58 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mi.ihg.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:36:9b:ec:ba:1b:01:7b:6f:d5:31:26:93:1f:01:58Serial Number (int): 20221966496066397984071319462747242840
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: cc:ee:1f:a0:98:b7:ae:ed:51:3c:2a:1c:96:6d:fc:c0:4d:d2:7b:0a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): d1:5d:f3:29:99:d2:1c:1c:d4:b3:bf:0f:1b:3c:ef:31:d8:03:38:8f
Fingerprint (sha256): 05:88:9c:6f:48:1c:eb:75:0b:eb:fc:b3:5f:91:48:04:19:95:4d:13:02:bd:8a:1f:e0:18:23:4f:6d:8e:32:59
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate mi.ihg.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mi.ihg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mi.ihg.com
Other certificates including the domain name ihg.com
(limited to 100 certificates)
innovationrollout.ihg.com
projecthorizon.ihg.com
rca-wb.ihgext.global
int.gamification.ihg.com
sbrp.ihg.com
secure.icare.contact.ihg.com
meetings.ihg.com
*.n.c1.ihg.com
www.ihg.com
miceasia.ihg.com
akamai-san108.exacttarget.com
dcad1-dev-rsp-gw.ihg.com
im.ihg.com
reef.ihg.com
identity-us.ihg.com
aliai.gccloudpms.ihg.com
remote.ihg.com
commerce-np.ihg.com
cmsqa.ihg.com
lcus.ihg.com
ihgapsuite.ihg.com
int.secure.icare.contact.ihg.com
finland.ihg.com
aliaz.gccloudpms.ihg.com
ldgw.ihg.com
m.ihg.com
hoteldevelopment.ihg.com
www.ihgmerlin.com
armyhotelsblog.ihg.com
secure4s.scene7.com
*.p.pi.microservices.ihg.com
misc-prod.ihg.com
qcprod.ihg.com
www.ihg.com
citrixhosting.ihg.com
ihgbusinessh2.lawcreative.co.uk
support.ihg.com
dev-sec-apis.ihg.com
dev.b2b.ihg.com
m.ihg.com
sso-qa.ihg.com
qa.www.ihg.com
securecn.scene7.com
dev02.guestapi.ihg.com
gmailsso-qa.ihg.com
redirect.ihg.com
givingforgood.ihg.com
qa.www.ihg.com
brincentive.ihg.com
mi.ihg.com
securecn.scene7.com
samlfederate.ihg.com
perf.www.ihg.com
www.globalcatalogue.ihg.com
qap.hcm.ihg.com
int.www.ihg.com
qap.www.ihg.com
staging.www.ihg.com
concur.ihg.com
es.development.ihg.com
misc-prod.ihg.com
qap.www.ihg.com
utc.secure.contact.ihg.com
MBWEBSERVICES.IHG.COM
apsuite.ihg.com
dcad1-dev-r08-sl-elb.ihg.com
misc-prod.ihg.com
stg-b2c-wb.ihgint.global
armyhotelsblog.ihg.com
cem.ihg.com
aliai.gccloudpms.ihg.com
m.ihg.com
meetings.ihg.com
cruise.ihg.com
qa.secure.icare.contact.ihg.com
dcad1-prd-f61-wb-merlin.p.ni.c.ihg.com
longviewqa.ihg.com
apigee-x-int.ihg.com
eprize.com
commerce-np.ihg.com
myid-stg1.ihg.com
apigee-x-int.ihg.com
secure.switchfly.com
www.ihg.com
misc-prod.ihg.com
escap.ihg.com
staging.www.ihg.com
secure.switchfly.com
www.ihg.com
akamai-san108.exacttarget.com
mysupport.ihg.com
dev-esbproxy.ihg.com
ssorest.ihg.com
www.ihg.com
securecn.scene7.com
qa.www.ihg.com
int.secure.icare.contact.ihg.com
securecn.scene7.com
flare.ihg.com
qap.www.ihg.com
projecthorizon.ihg.com
rca-wb.ihgext.global
int.gamification.ihg.com
sbrp.ihg.com
secure.icare.contact.ihg.com
meetings.ihg.com
*.n.c1.ihg.com
www.ihg.com
miceasia.ihg.com
akamai-san108.exacttarget.com
dcad1-dev-rsp-gw.ihg.com
im.ihg.com
reef.ihg.com
identity-us.ihg.com
aliai.gccloudpms.ihg.com
remote.ihg.com
commerce-np.ihg.com
cmsqa.ihg.com
lcus.ihg.com
ihgapsuite.ihg.com
int.secure.icare.contact.ihg.com
finland.ihg.com
aliaz.gccloudpms.ihg.com
ldgw.ihg.com
m.ihg.com
hoteldevelopment.ihg.com
www.ihgmerlin.com
armyhotelsblog.ihg.com
secure4s.scene7.com
*.p.pi.microservices.ihg.com
misc-prod.ihg.com
qcprod.ihg.com
www.ihg.com
citrixhosting.ihg.com
ihgbusinessh2.lawcreative.co.uk
support.ihg.com
dev-sec-apis.ihg.com
dev.b2b.ihg.com
m.ihg.com
sso-qa.ihg.com
qa.www.ihg.com
securecn.scene7.com
dev02.guestapi.ihg.com
gmailsso-qa.ihg.com
redirect.ihg.com
givingforgood.ihg.com
qa.www.ihg.com
brincentive.ihg.com
mi.ihg.com
securecn.scene7.com
samlfederate.ihg.com
perf.www.ihg.com
www.globalcatalogue.ihg.com
qap.hcm.ihg.com
int.www.ihg.com
qap.www.ihg.com
staging.www.ihg.com
concur.ihg.com
es.development.ihg.com
misc-prod.ihg.com
qap.www.ihg.com
utc.secure.contact.ihg.com
MBWEBSERVICES.IHG.COM
apsuite.ihg.com
dcad1-dev-r08-sl-elb.ihg.com
misc-prod.ihg.com
stg-b2c-wb.ihgint.global
armyhotelsblog.ihg.com
cem.ihg.com
aliai.gccloudpms.ihg.com
m.ihg.com
meetings.ihg.com
cruise.ihg.com
qa.secure.icare.contact.ihg.com
dcad1-prd-f61-wb-merlin.p.ni.c.ihg.com
longviewqa.ihg.com
apigee-x-int.ihg.com
eprize.com
commerce-np.ihg.com
myid-stg1.ihg.com
apigee-x-int.ihg.com
secure.switchfly.com
www.ihg.com
misc-prod.ihg.com
escap.ihg.com
staging.www.ihg.com
secure.switchfly.com
www.ihg.com
akamai-san108.exacttarget.com
mysupport.ihg.com
dev-esbproxy.ihg.com
ssorest.ihg.com
www.ihg.com
securecn.scene7.com
qa.www.ihg.com
int.secure.icare.contact.ihg.com
securecn.scene7.com
flare.ihg.com
qap.www.ihg.com
Certificate
The complete raw certificate details for mi.ihg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIQDzab7LobAXtv1TEmkx8BWDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDYwNzAwMDAwMFoXDTI0MDcwNTIzNTk1OVowFTET MBEGA1UEAxMKbWkuaWhnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI9qhRK1Zjtz05r0no/Cgg3qBowmsXgFpTTWeQQssT/Nm09+Born4pvvFuik 5XpMqLCfDSTRmyxWeh6ink4R79ozLeZBh9uztUBe2iXXtgU5698u9E3JnxHW8VaM bwZpfNwM2083CIBpo5nUrTFS1JhOlpf+Xc88NXyiSrKve+MRrtidBD8VI5J1ETdL +dOIBCaG7GOf02QPSpJesK0K/X51xPnLUrndCSuG/GaRSgOnMeJXmKQYzYgWnFGb DJo8yBGjA77GE/Q5dtBnmtVSnvkD4huXOowo8Bf4/4jBqWg8CEhXjAxNyfWKL0Tv kvdwedDvpAbfC/REvBzT63tmmVkCAwEAAaOCAuUwggLhMB8GA1UdIwQYMBaAFIG4 DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBTM7h+gmLeu7VE8KhyWbfzATdJ7 CjAVBgNVHREEDjAMggptaS5paGcuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDov L2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAow CAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j c3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0 LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCC AYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcA7s3QZNXbGs7FXLedtM0TojKHRny8 7N7DUUhZRnEftZsAAAGIlogvlQAABAMASDBGAiEA0hyxqukC8jBfZghRxn5QG+nF dba/qIfsvz/Y3acOC8kCIQCHt7XG/i675Fun3p1T0uK39/hhepofsEsVFDoBJmix dQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiJaIL4oAAAQD AEcwRQIhAKpJI2G96DVQy6Md4DEpN8y1qG6WIdraccCz36huAFdnAiBzxwMSgFOc eXvhbtqRYQ1BoPuNo9xIqCn5aJIx+p9b6AB3ANq2v2s/tbYin5vCu1xr6HCRcWy7 UYSFNL2kPTBI1/urAAABiJaIL14AAAQDAEgwRgIhAMvI6vF23xYcd6fP4NTCW8ye 2WeQW3ZbvDmYzowJTOfsAiEAu8k3dJLXGBts5EIMkOS2APSeGk/4Wjkx7tj9UUBX zp8wDQYJKoZIhvcNAQELBQADggEBABjQ2iS/+m8dXnu9IEYmWsgCAchr61nMexYL tQ52ZyPH2ak/EJgMw7LTzF3JFmMZ51SI4Hg7sHQ+BhG4JJtbCQBcShTulW2Jstjw RrqpxDByyukGaF+RpTQshSfCMtWI72HGb+PtJfOBwX4zAnnMd0hESivIrE0ZJUYk Oh7mcK9ZLii6tQ43oqs45Ryrf9ktCPT/ZnKZDe5hBQKXSb2R5ra5eOLzAGN027ND KKBD+dcUINqh/yd/4WdcxhJK3a9ykvtxZKqDgmggOELwt0Bn20skB0SsYqn30UDu QEY1PGU+OMhh+uwNMGAhtRq8Y3rqWwvhfAvX0akDkoI56v954qo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2qFErVmO3PTmvSej8KC DeoGjCaxeAWlNNZ5BCyxP82bT34Giufim+8W6KTlekyosJ8NJNGbLFZ6HqKeThHv 2jMt5kGH27O1QF7aJde2BTnr3y70TcmfEdbxVoxvBml83AzbTzcIgGmjmdStMVLU mE6Wl/5dzzw1fKJKsq974xGu2J0EPxUjknURN0v504gEJobsY5/TZA9Kkl6wrQr9 fnXE+ctSud0JK4b8ZpFKA6cx4leYpBjNiBacUZsMmjzIEaMDvsYT9Dl20Gea1VKe +QPiG5c6jCjwF/j/iMGpaDwISFeMDE3J9YovRO+S93B50O+kBt8L9ES8HNPre2aZ WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20221966496066397984071319462747242840 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi.ihg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18104604489474837717432177321324788123391912865935756605591248820106150983538885205432931775239966932808792797157461689505984211737197929724113909513908307446628454380293655315640772072808349585661917704620788724978404500373982994897316269782618088884263108673292527569500033099236541592271183143700488882467340319323082507297909228378809934556615694660768981797083772167574395022279141492483397349165380737272830745532291066071064014570046945215090839119140945795332136978595698483985049265384184898153453896293630451676072617301569063415457169249410855551938451869707666908459624380246196297302257861026872379742553 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ccee1fa098b7aeed513c2a1c966dfcc04dd27b0a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.ihg.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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