studio-rundown-ci.app.t2.cvent.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0a:62:7b:2d:64:fd:21:8b:b3:7d:21:3b:0d:84:0d:a3 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=studio-rundown-ci.app.t2.cvent.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:62:7b:2d:64:fd:21:8b:b3:7d:21:3b:0d:84:0d:a3Serial Number (int): 13803623382888651763613295704442932643
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 15:75:57:f8:f6:74:ca:ee:cf:19:81:6c:e9:be:ea:91:8e:4f:9e:7e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 89:26:3a:94:31:bd:5b:9d:66:f7:c9:a4:7f:cf:4d:d0:9d:f3:42:c7
Fingerprint (sha256): 05:c1:86:4f:65:db:d0:03:96:f4:c2:46:86:46:22:89:ab:83:77:80:e4:69:34:94:ab:16:eb:b2:2e:16:a1:c7
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate studio-rundown-ci.app.t2.cvent.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for studio-rundown-ci.app.t2.cvent.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
studio-rundown-ci.app.t2.cvent.com
Other certificates including the domain name cvent.com
(limited to 100 certificates)
www.cvent.com
cds4.cvent.com
video-editor.sandbox-app.cvent.com
test.cvent.com
cdktesting-us-east-1-stack-2.lb.cvent.com
heroquiz.cvent.com
www.t2.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
cds4.cvent.com
ebs-ir-test.cvent.com
badges.app.t2.cvent.com
*.cvent.com
cds3.cvent.com
app.t2.cvent.com
studio-director-lite.app-eur.cvent.com
cds1.cvent.com
eventinabox.cvent.com
hq-expresswaye-002.remotephone.cvent.com
cdktesting-us-east-1.lb.cvent.com
eventinabox.cvent.com
*.us-west-2.lb.cvent.com
queue.disneymovieclub.go.com
blog-ci-2-5-4-pr-352.t2.cvent.com
cds1.cvent.com
cvent.com
smart.cvent.com
cds1.cvent.com
cds3.cvent.com
badges.load-app.s2.cvent.com
test.cvent.com
cds3.cvent.com
cds2.cvent.com
*.us-west-2.lb.cvent.com
mattt-testing3.cvent.com
*.cvent.com
studio-rundown-ci.app.t2.cvent.com
cds2.cvent.com
app.t2.cvent.com
community.cvent.com
sso-development.cvent.com
cds1.cvent.com
heroquiz.cvent.com
mattt-test1.cvent.com
cdktesting-us-west-2.cvent.com
smart.cvent.com
app.t2.cvent.com
cds3.cvent.com
community.cvent.com
cds1.cvent.com
smart.cvent.com
cds3.cvent.com
sbcvm.cvent.com
custom-eur.cvent.com
ssc.cvent.com
*.us-east-1.lb.cvent.com
cds4.cvent.com
cds4.cvent.com
content-tagging-service-prod.us-east-1.lb.cvent.com
ux.cvent.com
cds2.cvent.com
test.cvent.com
isignatures.cvent.com
api.cvent.com
cds1.cvent.com
*.app.cvent.com
*.us-east-1.lb.cvent.com
test.cvent.com
cds4.cvent.com
eventinabox.cvent.com
status-testing.cvent.com
cds4.cvent.com
cdktesting-us-east-1.lb.cvent.com
cds2.cvent.com
cds4.cvent.com
cds4.cvent.com
cds3.cvent.com
cds3.cvent.com
planner-budget-ui-test.app-eur.cvent.com
test.cvent.com
studio-rundown-ci.app.t2.cvent.com
cds2.cvent.com
cdktesting-us-east-1.cvent.com
*.cvent.com
falcon-service-int.us-east-1.lb.cvent.com
cds4.cvent.com
cds1.cvent.com
attendee-hub-eur.cvent.com
cds4.cvent.com
cds4.cvent.com
cdktesting-us-east-1.cvent.com
studio-rundown-ci.app.t2.cvent.com
cds3.cvent.com
queue.disneymovieclub.go.com
cds3.cvent.com
cds2.cvent.com
pages.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
video-editor.sandbox-app.cvent.com
test.cvent.com
cdktesting-us-east-1-stack-2.lb.cvent.com
heroquiz.cvent.com
www.t2.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
cds4.cvent.com
ebs-ir-test.cvent.com
badges.app.t2.cvent.com
*.cvent.com
cds3.cvent.com
app.t2.cvent.com
studio-director-lite.app-eur.cvent.com
cds1.cvent.com
eventinabox.cvent.com
hq-expresswaye-002.remotephone.cvent.com
cdktesting-us-east-1.lb.cvent.com
eventinabox.cvent.com
*.us-west-2.lb.cvent.com
queue.disneymovieclub.go.com
blog-ci-2-5-4-pr-352.t2.cvent.com
cds1.cvent.com
cvent.com
smart.cvent.com
cds1.cvent.com
cds3.cvent.com
badges.load-app.s2.cvent.com
test.cvent.com
cds3.cvent.com
cds2.cvent.com
*.us-west-2.lb.cvent.com
mattt-testing3.cvent.com
*.cvent.com
studio-rundown-ci.app.t2.cvent.com
cds2.cvent.com
app.t2.cvent.com
community.cvent.com
sso-development.cvent.com
cds1.cvent.com
heroquiz.cvent.com
mattt-test1.cvent.com
cdktesting-us-west-2.cvent.com
smart.cvent.com
app.t2.cvent.com
cds3.cvent.com
community.cvent.com
cds1.cvent.com
smart.cvent.com
cds3.cvent.com
sbcvm.cvent.com
custom-eur.cvent.com
ssc.cvent.com
*.us-east-1.lb.cvent.com
cds4.cvent.com
cds4.cvent.com
content-tagging-service-prod.us-east-1.lb.cvent.com
ux.cvent.com
cds2.cvent.com
test.cvent.com
isignatures.cvent.com
api.cvent.com
cds1.cvent.com
*.app.cvent.com
*.us-east-1.lb.cvent.com
test.cvent.com
cds4.cvent.com
eventinabox.cvent.com
status-testing.cvent.com
cds4.cvent.com
cdktesting-us-east-1.lb.cvent.com
cds2.cvent.com
cds4.cvent.com
cds4.cvent.com
cds3.cvent.com
cds3.cvent.com
planner-budget-ui-test.app-eur.cvent.com
test.cvent.com
studio-rundown-ci.app.t2.cvent.com
cds2.cvent.com
cdktesting-us-east-1.cvent.com
*.cvent.com
falcon-service-int.us-east-1.lb.cvent.com
cds4.cvent.com
cds1.cvent.com
attendee-hub-eur.cvent.com
cds4.cvent.com
cds4.cvent.com
cdktesting-us-east-1.cvent.com
studio-rundown-ci.app.t2.cvent.com
cds3.cvent.com
queue.disneymovieclub.go.com
cds3.cvent.com
cds2.cvent.com
pages.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
Certificate
The complete raw certificate details for studio-rundown-ci.app.t2.cvent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgzCCA2ugAwIBAgIQCmJ7LWT9IYuzfSE7DYQNozANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDYwNTAwMDAwMFoXDTI1MDcwNDIzNTk1OVowLTEr MCkGA1UEAxMic3R1ZGlvLXJ1bmRvd24tY2kuYXBwLnQyLmN2ZW50LmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANS2klaPAwBb7khNFYCj4xYIli/R At7yfmEYloJfGFupmQBAmkwBpRZDOa5czk2WsAvNPuqtCDFbP9t/+5UrrYTg+K+z /dYhFcxmtVn2FwxEAA1Xvjk5FtELbUG2prM1dKuyoJpwC6GI7SeSiv4aNrIIMjhr C04erp4wFA58MJhEacJkGgyFc5edTxPUc8Q9dt5jt6UNU8AIPagZkMLNcnFa0K0B ohISfPlKhNb8y6t7RECrYVG1TbMm3wEm33n3OpEt7bs8mAe5SmELMbmwfOHLCIpL wDYhK/H+P5xHO2Z0x6A1AhFT3cXNoQgXg/azTNQ7csLeNag6fFD8ntGEcFcCAwEA AaOCAY4wggGKMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1Ud DgQWBBQVdVf49nTK7s8ZgWzpvuqRjk+efjAtBgNVHREEJjAkgiJzdHVkaW8tcnVu ZG93bi1jaS5hcHAudDIuY3ZlbnQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYD VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVzdC5jb20v cjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j c3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0 LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiPC7PnaV5Wv dGGI0Zy5QqIYB5wcoP+rNHqYkH0Km/j2Fo3VzQtNKo/YpcpihMzdk/WxVa5QOAhu 2nwzgwD/j+nYAdoSWavomDTXF+sBOjXhv41uBQKUtkIb2I6uc/tG0+t3EhpDRjdB UDB38ZpgZQIcYgYGH++HvhkZuvpo7afq72iFEk8LW1YWWSY8E6WWTNbTg7sogyH9 pHk0liek76r/VfU29HkMbq1AMzLOJsOg8vJlzsCTFBK1T9SIAhSzgook7wBV+j2M PnutiTRLmp0bwd4jlgI6WnStWDem1bH8WvXD0AgCu38y3YWp7qaVB6uj4fKMS+Ew 4C6aPyOjWA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LaSVo8DAFvuSE0VgKPj FgiWL9EC3vJ+YRiWgl8YW6mZAECaTAGlFkM5rlzOTZawC80+6q0IMVs/23/7lSut hOD4r7P91iEVzGa1WfYXDEQADVe+OTkW0QttQbamszV0q7KgmnALoYjtJ5KK/ho2 sggyOGsLTh6unjAUDnwwmERpwmQaDIVzl51PE9RzxD123mO3pQ1TwAg9qBmQws1y cVrQrQGiEhJ8+UqE1vzLq3tEQKthUbVNsybfASbfefc6kS3tuzyYB7lKYQsxubB8 4csIikvANiEr8f4/nEc7ZnTHoDUCEVPdxc2hCBeD9rNM1Dtywt41qDp8UPye0YRw VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13803623382888651763613295704442932643 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studio-rundown-ci.app.t2.cvent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26852550080617532940112765284993471636936162440234897232688178363711640376126004642313185299685072466191689552003595040996644374482253886546737049203504935872485336312852106987307556576105595393962090415866253919569662673352800747603722051026957223833391414477787876942104108093625332357562711794452074260298645851298342092062809695381089842010552727220272911666288374636862598239303094140790055958771873022383240165660312506423959940708642277076621578428348292317380257598100162404739104525949925233009667474042384414308717683301595627485359253833508665442810135512567570310133742070459385579554212250371973018054743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 157557f8f674caeecf19816ce9beea918e4f9e7e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio-rundown-ci.app.t2.cvent.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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