keyassets.timeincuk.net
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0c:45:73:66:72:e8:2b:09:cd:08:52:3b:5d:0e:8e:06 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=keyassets.timeincuk.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:45:73:66:72:e8:2b:09:cd:08:52:3b:5d:0e:8e:06Serial Number (int): 16311345026596855130613018299254869510
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 10:a8:d0:64:bc:f7:38:b4:79:05:1c:39:1c:02:0b:ce:bf:a8:ac:6e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 86:03:05:26:99:33:53:03:91:2b:cf:af:42:47:96:94:87:a6:27:b6
Fingerprint (sha256): 06:51:f8:55:99:3e:a4:cc:41:21:a6:2a:d0:07:88:a6:81:29:49:56:3c:02:15:33:27:df:be:b0:1f:09:63:76
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate keyassets.timeincuk.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for keyassets.timeincuk.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
keyassets.timeincuk.net
Other certificates including the domain name timeincuk.net
(limited to 100 certificates)
timeincuk.net
keystone.wp.timeincuk.net
ksassets.timeincuk.net
keyassets.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
*.ti-media.net
*.amateurgardening.com
wadeassets.timeincuk.net
keystone.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
timeincuk.net
wadeassets.timeincuk.net
timeincuk.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
keystone.ti-media.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
cms2.ipcmediasecure.com
timeincuk.net
ksassets.timeincuk.net
keyassets-p2.timeincuk.net
keyassets.timeincuk.net
ksassets-preprod.timeincuk.net
ksassets.timeincuk.net
keystone.ti-media.net
*.amateurgardening.com
keystone.wp.timeincuk.net
timeincuk.net
campaign.ipcdigital.co.uk
keystone.ti-media.net
ksassets-preprod.timeincuk.net
cms2.ipcmediasecure.com
ti-media.map.fastly.net
*.ti-media.net
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
wade.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
timeincuk.net
keystone.wp.timeincuk.net
secure.tablet.timeincuk.net
campaign.ipcdigital.co.uk
blogs.internal.timeincuk.net
assets.timeincuk.net
*.ti-media.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
keystone.wp.timeincuk.net
timeincuk.net
ti-media.map.fastly.net
marieclaire.ipcmediasecure.com
keystone.wp.timeincuk.net
assets.timeincuk.net
keystone.wp.timeincuk.net
wade.timeincuk.net
ksassets.timeincuk.net
campaign.ipcdigital.co.uk
ksassets.timeincuk.net
keystone.wp.timeincuk.net
keystone.ti-media.net
keystone.ti-media.net
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
*.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p1.timeincuk.net
assets.timeincuk.net
internal.timeincuk.net
marieclaire.ipcmediasecure.com
wpe.timeincuk.net
*.ti-media.net
*.amateurgardening.com
ti-media.map.fastly.net
timeincuk.net
*.amateurgardening.com
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
internal.timeincuk.net
marieclaire.ipcmediasecure.com
internal.timeincuk.net
keyassets.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
keyassets.timeincuk.net
timeincuk.net
timeincuk.net
keystone.wp.timeincuk.net
ksassets.timeincuk.net
keyassets.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
*.ti-media.net
*.amateurgardening.com
wadeassets.timeincuk.net
keystone.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
timeincuk.net
wadeassets.timeincuk.net
timeincuk.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
keystone.ti-media.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
cms2.ipcmediasecure.com
timeincuk.net
ksassets.timeincuk.net
keyassets-p2.timeincuk.net
keyassets.timeincuk.net
ksassets-preprod.timeincuk.net
ksassets.timeincuk.net
keystone.ti-media.net
*.amateurgardening.com
keystone.wp.timeincuk.net
timeincuk.net
campaign.ipcdigital.co.uk
keystone.ti-media.net
ksassets-preprod.timeincuk.net
cms2.ipcmediasecure.com
ti-media.map.fastly.net
*.ti-media.net
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
wade.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
timeincuk.net
keystone.wp.timeincuk.net
secure.tablet.timeincuk.net
campaign.ipcdigital.co.uk
blogs.internal.timeincuk.net
assets.timeincuk.net
*.ti-media.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
keystone.wp.timeincuk.net
timeincuk.net
ti-media.map.fastly.net
marieclaire.ipcmediasecure.com
keystone.wp.timeincuk.net
assets.timeincuk.net
keystone.wp.timeincuk.net
wade.timeincuk.net
ksassets.timeincuk.net
campaign.ipcdigital.co.uk
ksassets.timeincuk.net
keystone.wp.timeincuk.net
keystone.ti-media.net
keystone.ti-media.net
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
*.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p1.timeincuk.net
assets.timeincuk.net
internal.timeincuk.net
marieclaire.ipcmediasecure.com
wpe.timeincuk.net
*.ti-media.net
*.amateurgardening.com
ti-media.map.fastly.net
timeincuk.net
*.amateurgardening.com
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
internal.timeincuk.net
marieclaire.ipcmediasecure.com
internal.timeincuk.net
keyassets.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
keyassets.timeincuk.net
timeincuk.net
timeincuk.net
Certificate
The complete raw certificate details for keyassets.timeincuk.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIQDEVzZnLoKwnNCFI7XQ6OBjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTAzMTAwMDAwMFoXDTI0MTEyNjIzNTk1OVowIjEg MB4GA1UEAxMXa2V5YXNzZXRzLnRpbWVpbmN1ay5uZXQwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC1SPnodW9+SVP1Rj10Z+iBu1TR6mLaS8SW1cfwuhIt jseetqT8YN6VQs2YKpPAPp3VqktXdxTyF+j6bNMdEZA2feiuAvQgl2rcECxKdcST McgNtSn4GNrBhq41wT1AVM74aaOpiv3rYe2ypAKP0cPYZ9qIWlU9GA4CRjgbD8hj 6yOR95TaJM8gbWsf5oSHjXk6GoUfshn8e6o0MaFGuHSXCfwYfHcMtqMoyx9smEQM 6UH2qf7yHG2H7j1WKypxIzNEVWneXwUG6PebTZSZEgHGujdBCroXQrKQy20PtaFv ESF20mgkkuSZuV1bm5GZFdcnFSmNOJ1o3kEBq8MQ94LxAgMBAAGjggLvMIIC6zAf BgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUEKjQZLz3 OLR5BRw5HAILzr+orG4wIgYDVR0RBBswGYIXa2V5YXNzZXRzLnRpbWVpbmN1ay5u ZXQwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v Y3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29t L3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFp AWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYuEqOogAAAE AwBGMEQCIE8v8KB35Gz97mPyTAInNHGzL2nnmoUQoHLPTgUwrMUJAiAsqirTrWXF kRqgkMtpaFkI2U4jYJq2g9I0B927TCvYfgB2AEiw42vapkc0D+VqAvqdMOscUgHL Vt0sgdm7v6s52IRzAAABi4So6hgAAAQDAEcwRQIhAN6JLH+chFMcxo2r2R4yU93l LV1StaB5deuWtUgOtgBGAiBlzAjC/1Xy14c4ZeIhdJusFg8yhYu00i33bxCYToBx nwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi4So6k4AAAQD AEcwRQIgDvnKUhf9Gttt9ZPXcxv/hHzzMLwcExJHE5vye1IWTtkCIQDRR56dyMRm xdITsXhRDfRJ64+wtbWNHxXPg+JQ60jtWTANBgkqhkiG9w0BAQsFAAOCAQEATfNv kmksEQsJyxwacrKCpBO3XVj+dTIbm36xsadzpHuufcZgT+sSI7SAddN/3+luYIjm 58Xv/57crUVLEzdTbNoP419cie20FdTI6ebcpJfLa1ByGjEehoKbsY+DzIvX0xAj WFoktzJ2u4SAFXd91kh/3gudDtHw8Ltj0WDFvc62OzA+lt4xC+Wal0yLYNcGOTm0 lKKJWURHhZrZseAxfKrPyO5tl7F7haCoc3Dk5endPhF89vJefjWZjFgxq8UfCGis mD2PcgANwVvliFhvNcssAl4lXkuRBNko3tIQCQ7zBpPTib9CgSfz/WNLBAHdpETm cp5ohp0ztkR9pBj4HQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUj56HVvfklT9UY9dGfo gbtU0epi2kvEltXH8LoSLY7Hnrak/GDelULNmCqTwD6d1apLV3cU8hfo+mzTHRGQ Nn3orgL0IJdq3BAsSnXEkzHIDbUp+BjawYauNcE9QFTO+GmjqYr962HtsqQCj9HD 2GfaiFpVPRgOAkY4Gw/IY+sjkfeU2iTPIG1rH+aEh415OhqFH7IZ/HuqNDGhRrh0 lwn8GHx3DLajKMsfbJhEDOlB9qn+8hxth+49VisqcSMzRFVp3l8FBuj3m02UmRIB xro3QQq6F0KykMttD7WhbxEhdtJoJJLkmbldW5uRmRXXJxUpjTidaN5BAavDEPeC 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16311345026596855130613018299254869510 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keyassets.timeincuk.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22885119105911423934821373095245936749157219875298014858121828298624707989500476862473736279247069924067292359093603858697198235464282897979036303046242206809286911560944889396820659473125408037043561403879299778502261455423655658358178020288694705933729428763134299995302419257662751839788325164063599349311912007641605609486075123344162411289578921044755708774131603469724232350069409947804621980293640179212208993047351305899471562290638634303208412482676706864554552094250725542253539043562831851219148159403858111980245831791717596696038289090621171486858819438753278814508971071088338532638653727799900890432241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 10a8d064bcf738b479051c391c020bcebfa8ac6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyassets.timeincuk.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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