ult-host-mr-mr-333.ult-sandbox.controlant.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0f:65:d3:b4:29:30:18:9b:a9:8b:a9:23:06:27:30:76 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ult-host-mr-mr-333.ult-sandbox.controlant.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:65:d3:b4:29:30:18:9b:a9:8b:a9:23:06:27:30:76Serial Number (int): 20467135781728408804353520438021140598
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c5:22:c8:8f:10:b9:1a:ac:50:1f:01:39:f1:c9:48:9d:93:88:5f:a7
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): bd:dd:b3:ac:6f:65:37:59:61:14:13:c5:37:40:d5:1b:34:f8:54:d4
Fingerprint (sha256): 06:6c:f0:74:29:8e:ee:ce:0a:fa:df:9b:ac:55:b9:17:ec:f3:55:d8:45:c3:d8:db:03:9f:c3:02:9c:41:dd:67
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate ult-host-mr-mr-333.ult-sandbox.controlant.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ult-host-mr-mr-333.ult-sandbox.controlant.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ult-host-mr-mr-333.ult-sandbox.controlant.com
Other certificates including the domain name controlant.com
(limited to 100 certificates)
ult-mfe-stub-mr-mr-451.ult-sandbox.controlant.com
ult-host-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
ui-api-mr-mr-307.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-332.ult-sandbox.controlant.com
ult-host-mr-mr-302.ult-sandbox.controlant.com
ult-host-mr-mr-307.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-tz.ult-sandbox.controlant.com
ult-mfe-mr-mr-306.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-host-mr-dg.ult-sandbox.controlant.com
controlant.com
ult-host-mr-mr-319.ult-sandbox.controlant.com
www.feriaganaderachile.cl
ui-api-mr-mr-317.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-host-mr-mr-284.ult-sandbox.controlant.com
sharing.controlant.com
ui-api-mr-mr-322.ult-sandbox.controlant.com
ui-api-mr-mr-338.ult-sandbox.controlant.com
private.zacharyhill.dev
status-pre.cardiff.ac.uk
private.zacharyhill.dev
ult-host-mr-mr-333.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
ult-mfe-stub-mr-mr-507.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-333.ult-sandbox.controlant.com
api-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-mr-387.ult-sandbox.controlant.com
bob.controlant.com
sharing.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
www.controlant.com
in.controlant.com
freebirdfindings.com
ui-api-mr-mr-503.ult-sandbox.controlant.com
api-mr-mr-301.ult-sandbox.controlant.com
api-mr-mr-304.ult-sandbox.controlant.com
audit-trail-mfe.live.controlant.com
merck.bi.controlant.com
ult-host-mr-hv.ult-sandbox.controlant.com
private.zacharyhill.dev
bi.test.controlant.com
ult-mfe-stub-mr-mr-328.ult-sandbox.controlant.com
modalforms.controlant.com
ult-mfe-mr-mr-318.ult-sandbox.controlant.com
private.zacharyhill.dev
api-mr-mr-315.ult-sandbox.controlant.com
bi.live.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
status-pre.cardiff.ac.uk
*.bi.dev.controlant.com
ult-mfe-mr-mr-316.ult-sandbox.controlant.com
ult-mfe-mr-mr-315.ult-sandbox.controlant.com
api-mr-mr-499.ult-sandbox.controlant.com
am-users.sandbox.controlant.com
api-mr-tz.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-mr-339.ult-sandbox.controlant.com
testrail.controlant.com
*.component-library.tools.controlant.com
ult-host-mr-mr-335.ult-sandbox.controlant.com
ult-host-mr-mr-503.ult-sandbox.controlant.com
private.zacharyhill.dev
testrail.controlant.com
api-mr-mr-296.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-stub-mr-mr-326.ult-sandbox.controlant.com
ult-mfe-mr-hv.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-dg.ult-sandbox.controlant.com
ult-host-mr-mr-326.ult-sandbox.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
api-mr-mr-506.ult-sandbox.controlant.com
*.component-library.tools.controlant.com
ult-host-mr-mr-304.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-mr-311.ult-sandbox.controlant.com
ult-mfe-stub-mr-hv.ult-sandbox.controlant.com
ui-api-mr-mr-310.ult-sandbox.controlant.com
uat.controlant.com
confluence.controlant.com
ult-mfe-stub-mr-mr-311.ult-sandbox.controlant.com
ult-host-mr-mr-340.ult-sandbox.controlant.com
registry-staging.tools.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
dev.controlant.com
private.zacharyhill.dev
sso-test-ui-test-296858.sandbox.controlant.com
www.controlant.com
sso-test-ui-test-mr-50.sandbox.controlant.com
ult-mfe-stub-mr-tz.ult-sandbox.controlant.com
in.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
ult-mfe-stub-mr-mr-301.ult-sandbox.controlant.com
ult-host-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
ui-api-mr-mr-307.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-332.ult-sandbox.controlant.com
ult-host-mr-mr-302.ult-sandbox.controlant.com
ult-host-mr-mr-307.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-tz.ult-sandbox.controlant.com
ult-mfe-mr-mr-306.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-host-mr-dg.ult-sandbox.controlant.com
controlant.com
ult-host-mr-mr-319.ult-sandbox.controlant.com
www.feriaganaderachile.cl
ui-api-mr-mr-317.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-host-mr-mr-284.ult-sandbox.controlant.com
sharing.controlant.com
ui-api-mr-mr-322.ult-sandbox.controlant.com
ui-api-mr-mr-338.ult-sandbox.controlant.com
private.zacharyhill.dev
status-pre.cardiff.ac.uk
private.zacharyhill.dev
ult-host-mr-mr-333.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
ult-mfe-stub-mr-mr-507.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-333.ult-sandbox.controlant.com
api-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-mr-387.ult-sandbox.controlant.com
bob.controlant.com
sharing.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
www.controlant.com
in.controlant.com
freebirdfindings.com
ui-api-mr-mr-503.ult-sandbox.controlant.com
api-mr-mr-301.ult-sandbox.controlant.com
api-mr-mr-304.ult-sandbox.controlant.com
audit-trail-mfe.live.controlant.com
merck.bi.controlant.com
ult-host-mr-hv.ult-sandbox.controlant.com
private.zacharyhill.dev
bi.test.controlant.com
ult-mfe-stub-mr-mr-328.ult-sandbox.controlant.com
modalforms.controlant.com
ult-mfe-mr-mr-318.ult-sandbox.controlant.com
private.zacharyhill.dev
api-mr-mr-315.ult-sandbox.controlant.com
bi.live.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
status-pre.cardiff.ac.uk
*.bi.dev.controlant.com
ult-mfe-mr-mr-316.ult-sandbox.controlant.com
ult-mfe-mr-mr-315.ult-sandbox.controlant.com
api-mr-mr-499.ult-sandbox.controlant.com
am-users.sandbox.controlant.com
api-mr-tz.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-mr-339.ult-sandbox.controlant.com
testrail.controlant.com
*.component-library.tools.controlant.com
ult-host-mr-mr-335.ult-sandbox.controlant.com
ult-host-mr-mr-503.ult-sandbox.controlant.com
private.zacharyhill.dev
testrail.controlant.com
api-mr-mr-296.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-stub-mr-mr-326.ult-sandbox.controlant.com
ult-mfe-mr-hv.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-dg.ult-sandbox.controlant.com
ult-host-mr-mr-326.ult-sandbox.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
api-mr-mr-506.ult-sandbox.controlant.com
*.component-library.tools.controlant.com
ult-host-mr-mr-304.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-mr-311.ult-sandbox.controlant.com
ult-mfe-stub-mr-hv.ult-sandbox.controlant.com
ui-api-mr-mr-310.ult-sandbox.controlant.com
uat.controlant.com
confluence.controlant.com
ult-mfe-stub-mr-mr-311.ult-sandbox.controlant.com
ult-host-mr-mr-340.ult-sandbox.controlant.com
registry-staging.tools.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
dev.controlant.com
private.zacharyhill.dev
sso-test-ui-test-296858.sandbox.controlant.com
www.controlant.com
sso-test-ui-test-mr-50.sandbox.controlant.com
ult-mfe-stub-mr-tz.ult-sandbox.controlant.com
in.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
ult-mfe-stub-mr-mr-301.ult-sandbox.controlant.com
Certificate
The complete raw certificate details for ult-host-mr-mr-333.ult-sandbox.controlant.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmTCCA4GgAwIBAgIQD2XTtCkwGJupi6kjBicwdjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIyMjAwMDAwMFoXDTI1MDEyMDIzNTk1OVowODE2 MDQGA1UEAxMtdWx0LWhvc3QtbXItbXItMzMzLnVsdC1zYW5kYm94LmNvbnRyb2xh bnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwacjOoLsyBxC qWSDRa0o0in0Pr1KYNfDpFDzNqmZ4YB6NcC3XPBEBZyn7f2PPz6Sfo1EnRIo27Wp E9zDOfhTMywBjBiOFgM5FABLGJq13y0gx1rIvPf+kvWHWYTyzlhTCUSVWot0WSwl pOFfVoeVnL9dI+VzzRT+NbtWr/sA4zu1CPhTWH7AmFOqp88w1sA9hZRE1iWaxjka pf/la2lS+4U0VO2im84dCzIYDInkMERBvU85+9zKwDln1c3J9dHQWxzz+krCNCDI XWuO6yDSQbjCtCWXants2sVePhmEOfg9dC8htl0E1YIIJgb7zC2o9x71uqcGULyL ePmacyaQKQIDAQABo4IBmTCCAZUwHwYDVR0jBBgwFoAUVdkYX9IczAHhWLS+q9lV QgHXLgIwHQYDVR0OBBYEFMUiyI8QuRqsUB8BOfHJSJ2TiF+nMDgGA1UdEQQxMC+C LXVsdC1ob3N0LW1yLW1yLTMzMy51bHQtc2FuZGJveC5jb250cm9sYW50LmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu cjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJt MDMuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAI9DDKJTKR0/ch/jBq8HkXXZmCX0Jxg1KPZNdd3E+sG3autH YmQ5+MEMrdUPLVW5G7cDtqyfwCdDbexVlDeIf2TGnFc8pp079IZhTYbflTDfPoHy WY5yrd+/BMq6ARH2B8GMiePE6XZTit8jE0KptSzt4vXCiEWR0MLj9w2TX4cBv7fZ 6zz8+qPaLP+8QGAWhIeue+SPuv6nK4NaTUcgjHoN7MPfoSgP1tA/YwaoIouHVSPN vth7HGMyQHfTSLUfYXZmJGo2YjPcYduuXnuB8jB8thtx3CJbwgZMRXMf64q51vKd iti4bcF4N3hoY/NoCbjRAzMsBNoQbVjyVDFRlJU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwacjOoLsyBxCqWSDRa0o 0in0Pr1KYNfDpFDzNqmZ4YB6NcC3XPBEBZyn7f2PPz6Sfo1EnRIo27WpE9zDOfhT MywBjBiOFgM5FABLGJq13y0gx1rIvPf+kvWHWYTyzlhTCUSVWot0WSwlpOFfVoeV nL9dI+VzzRT+NbtWr/sA4zu1CPhTWH7AmFOqp88w1sA9hZRE1iWaxjkapf/la2lS +4U0VO2im84dCzIYDInkMERBvU85+9zKwDln1c3J9dHQWxzz+krCNCDIXWuO6yDS QbjCtCWXants2sVePhmEOfg9dC8htl0E1YIIJgb7zC2o9x71uqcGULyLePmacyaQ KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20467135781728408804353520438021140598 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ult-host-mr-mr-333.ult-sandbox.controlant.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24446411486495609773754805506836355337565153419676402278489956410670168933537174919409735536409369991252428360936769563306619876036251435057784603054118098508190552640885082338245593049495155725180012809482283004623653185057062217810364634063883150444067351075264156410701155619155195815476426847199419278042332491353777639506775753898035934668068353863012067973753127032778821953782657470355007724774148224143518250668518698113383585416081217318464255864088247411552365030608091684003516725542894915995101277409995167544652685035390667508233996369548103013201468286958030134693725981750418615539407706033410917437481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c522c88f10b91aac501f0139f1c9489d93885fa7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ult-host-mr-mr-333.ult-sandbox.controlant.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008f430ca253291d3f721fe306af079175d99825f427183528f64d75ddc4fac1b76aeb47626439f8c10cadd50f2d55b91bb703b6ac9fc027436dec559437887f64c69c573ca69d3bf486614d86df9530df3e81f2598e72addfbf04caba0111f607c18c89e3c4e976538adf231342a9b52cede2f5c2884591d0c2e3f70d935f8701bfb7d9eb3cfcfaa3da2cffbc4060168487ae7be48fbafea72b835a4d47208c7a0decc3dfa1280fd6d03f6306a8228b875523cdbed87b1c63324077d348b51f617666246a366233dc61dbae5e7b81f2307cb61b71dc225bc2064c45731feb8ab9d6f29d8ad8b86dc17837786863f36809b8d103332c04da106d58f25431519495