dev1-fe-cct.dev.aws.lifelock.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 06:4b:83:31:55:5c:7a:07:21:be:cb:7a:17:f5:b2:1c was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dev1-fe-cct.dev.aws.lifelock.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:4b:83:31:55:5c:7a:07:21:be:cb:7a:17:f5:b2:1cSerial Number (int): 8367451143355672147829308672382972444
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 91:19:77:09:dc:05:2a:64:21:25:da:ca:2d:e7:3c:1e:04:e6:0b:0d
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 30:7f:94:65:39:34:85:ef:f3:9c:25:45:55:5e:2d:87:b2:c8:ff:2c
Fingerprint (sha256): 07:4e:34:0a:fe:e3:57:ea:fa:98:a9:b0:1f:6d:a8:72:bc:bf:a8:06:3d:ef:e1:6c:57:02:39:f9:f3:39:09:7f
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate dev1-fe-cct.dev.aws.lifelock.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev1-fe-cct.dev.aws.lifelock.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev1-fe-cct.dev.aws.lifelock.com
llcct-dev.norton.com
llcct-dev.norton.com
Other certificates including the domain name lifelock.com
(limited to 100 certificates)
pcissl001.insnw.net
sehf4.mgmt.aws.lifelock.com
prod1-fe-dwm.prod.aws.lifelock.com
txm-finapp-stage.lifelock.com
pcissl001.insnw.net
duo.lifelock.com
www-stage.norton.com
qa-us.np.norton.com
pcissl001.insnw.net
llprivacy-int.norton.com
mtls.dev.aws.lifelock.com
view.email.lifelock.com
int-constell.lifelock.com
www.lifelock.com
ent-jenkins.lifelock.com
*.stage.aws.lifelock.com
dev-techops-jenkins.lifelock.com
myaccess.lifelock.com
www.norton.com
prod1-fe-dsp.prod.aws.lifelock.com
int2-fe-dsp.dev.aws.lifelock.com
dev-techops-jenkins.lifelock.com
4iq.lifelock.com
infolock.lifelock.com
dev-stash.lifelock.com
agentdesktop.lifelock.com
akamai-san18.exacttarget.com
*.lifelock.com
pki-int.mgmt.aws.lifelock.com
teampassv3.dev.aws.lifelock.com
prod1-green-fe-dsp.prod.aws.lifelock.com
pages.email.lifelock.com
nortonlifelock.com
int-tucanada.lifelock.com
txm-finapp.lifelock.com
dev1-fe-cct.dev.aws.lifelock.com
www.norton.com
pcissl001.insnw.net
equifax.lifelock.com
ent-jenkins.lifelock.com
pki-int.stage.aws.lifelock.com
infoburst.prod.aws.lifelock.com
pki-int.corp.aws.lifelock.com
akamai-san18.exacttarget.com
searchsafe.lifelock.com
teampassv3.dev.aws.lifelock.com
akamai-san18.exacttarget.com
*.dev.aws.lifelock.com
pcissl001.insnw.net
int2-fe-dsp.dev.aws.lifelock.com
dev1-fe-cct.dev.aws.lifelock.com
chefci.lifelock.com
www.norton.com
voltage-pp-0000.lifelock.com
dev1-fe-dsp.dev.aws.lifelock.com
dev-techops-jenkins.lifelock.com
int1-fe-pm-fe.lifelock.com
stage-wiki.lifelock.com
jira.lifelock.com
www-stage.norton.com
pcissl001.insnw.net
store.lifelock.com
pki-int.stage.aws.lifelock.com
infolock.lifelock.com
stage-www.lifelock.com
int1-fe-dwm.dev.aws.lifelock.com
dev-duo.lifelock.com
int1-fe-dsp.dev.aws.lifelock.com
media5.adlegend.com
pcissl001.insnw.net
pki-int.corp.aws.lifelock.com
tucanada.lifelock.com
stage4-www.lifelock.com
int1-fe-memex-api-ext.dev.aws.lifelock.com
int1-fe-memex-api-ext.dev.aws.lifelock.com
dev1-green-fe-dwm.dev.aws.lifelock.com
chefci.dev.aws.lifelock.com
dev-partner-docs.norton.com
int2-fe-dsp.dev.aws.lifelock.com
voltage-pp-0000.lifelock.com
prod1-fe-dwm.prod.aws.lifelock.com
prod1-fe-cct.prod.aws.lifelock.com
*.dev.aws.lifelock.com
dev1-fe-memex-api-ext.dev.aws.lifelock.com
stage-asyswcceem-m01.stage.aws.lifelock.com
int1-fe-dsp.dev.aws.lifelock.com
voltage-pp-0000.dev.lifelock.com
tableau.prod.aws.lifelock.com
transfer.lifelock.com
equifax.lifelock.com
pki-int.prod.aws.lifelock.com
int1-fe-dsp-b.dev.aws.lifelock.com
splunk-hf-1.mgmt.aws.lifelock.com
stage-transfer.lifelock.com
pcissl001.insnw.net
int1-fe-dsp-b.dev.aws.lifelock.com
prod1-fe-dwm.prod.aws.lifelock.com
support-devdigital.norton.com
store.lifelock.com
old-stash.lifelock.com
sehf4.mgmt.aws.lifelock.com
prod1-fe-dwm.prod.aws.lifelock.com
txm-finapp-stage.lifelock.com
pcissl001.insnw.net
duo.lifelock.com
www-stage.norton.com
qa-us.np.norton.com
pcissl001.insnw.net
llprivacy-int.norton.com
mtls.dev.aws.lifelock.com
view.email.lifelock.com
int-constell.lifelock.com
www.lifelock.com
ent-jenkins.lifelock.com
*.stage.aws.lifelock.com
dev-techops-jenkins.lifelock.com
myaccess.lifelock.com
www.norton.com
prod1-fe-dsp.prod.aws.lifelock.com
int2-fe-dsp.dev.aws.lifelock.com
dev-techops-jenkins.lifelock.com
4iq.lifelock.com
infolock.lifelock.com
dev-stash.lifelock.com
agentdesktop.lifelock.com
akamai-san18.exacttarget.com
*.lifelock.com
pki-int.mgmt.aws.lifelock.com
teampassv3.dev.aws.lifelock.com
prod1-green-fe-dsp.prod.aws.lifelock.com
pages.email.lifelock.com
nortonlifelock.com
int-tucanada.lifelock.com
txm-finapp.lifelock.com
dev1-fe-cct.dev.aws.lifelock.com
www.norton.com
pcissl001.insnw.net
equifax.lifelock.com
ent-jenkins.lifelock.com
pki-int.stage.aws.lifelock.com
infoburst.prod.aws.lifelock.com
pki-int.corp.aws.lifelock.com
akamai-san18.exacttarget.com
searchsafe.lifelock.com
teampassv3.dev.aws.lifelock.com
akamai-san18.exacttarget.com
*.dev.aws.lifelock.com
pcissl001.insnw.net
int2-fe-dsp.dev.aws.lifelock.com
dev1-fe-cct.dev.aws.lifelock.com
chefci.lifelock.com
www.norton.com
voltage-pp-0000.lifelock.com
dev1-fe-dsp.dev.aws.lifelock.com
dev-techops-jenkins.lifelock.com
int1-fe-pm-fe.lifelock.com
stage-wiki.lifelock.com
jira.lifelock.com
www-stage.norton.com
pcissl001.insnw.net
store.lifelock.com
pki-int.stage.aws.lifelock.com
infolock.lifelock.com
stage-www.lifelock.com
int1-fe-dwm.dev.aws.lifelock.com
dev-duo.lifelock.com
int1-fe-dsp.dev.aws.lifelock.com
media5.adlegend.com
pcissl001.insnw.net
pki-int.corp.aws.lifelock.com
tucanada.lifelock.com
stage4-www.lifelock.com
int1-fe-memex-api-ext.dev.aws.lifelock.com
int1-fe-memex-api-ext.dev.aws.lifelock.com
dev1-green-fe-dwm.dev.aws.lifelock.com
chefci.dev.aws.lifelock.com
dev-partner-docs.norton.com
int2-fe-dsp.dev.aws.lifelock.com
voltage-pp-0000.lifelock.com
prod1-fe-dwm.prod.aws.lifelock.com
prod1-fe-cct.prod.aws.lifelock.com
*.dev.aws.lifelock.com
dev1-fe-memex-api-ext.dev.aws.lifelock.com
stage-asyswcceem-m01.stage.aws.lifelock.com
int1-fe-dsp.dev.aws.lifelock.com
voltage-pp-0000.dev.lifelock.com
tableau.prod.aws.lifelock.com
transfer.lifelock.com
equifax.lifelock.com
pki-int.prod.aws.lifelock.com
int1-fe-dsp-b.dev.aws.lifelock.com
splunk-hf-1.mgmt.aws.lifelock.com
stage-transfer.lifelock.com
pcissl001.insnw.net
int1-fe-dsp-b.dev.aws.lifelock.com
prod1-fe-dwm.prod.aws.lifelock.com
support-devdigital.norton.com
store.lifelock.com
old-stash.lifelock.com
Certificate
The complete raw certificate details for dev1-fe-cct.dev.aws.lifelock.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElTCCA32gAwIBAgIQBkuDMVVcegchvst6F/WyHDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTExNDAwMDAwMFoXDTI0MTIxMjIzNTk1OVowKzEp MCcGA1UEAxMgZGV2MS1mZS1jY3QuZGV2LmF3cy5saWZlbG9jay5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+P7tkE+o4MAazr1LhR2R1mzpe5JG YqARzZCW7Wu9L+u0nY63YadhNTkTqmm7QzA9s7288xwsEPxj6HfF3y760HIjN+Go piYH9MUud0VvscNxJlrZTY5IWPkmQCzY0CiV6vYFqNrwgtDjRRhnQCxkeP/KTEm7 UY31M7hPZ1obE9yaDq3Mwe9BNsykfDg3nzKTwiQbdVFGvHQIIDBjgyiGZ5Lrr/AH +jLUUtd+lkzCtwYhWL8daunJ0jITyXikLolHfwMO6Zd0cCxO+Pz+jlsjPGntBpiQ IqsighyARkXo44ZNOji1xJ0QAUUwZW31UQJ7LWGK4y6TpGzulfmNEBFDAgMBAAGj ggGiMIIBnjAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4E FgQUkRl3CdwFKmQhJdrKLec8HgTmCw0wQQYDVR0RBDowOIIgZGV2MS1mZS1jY3Qu ZGV2LmF3cy5saWZlbG9jay5jb22CFGxsY2N0LWRldi5ub3J0b24uY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w My5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5j ZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEABTUx+gkU2oHM9zsLqv6Awg+ZkxGazfdmEDv9rQ/ZFZ8g2rZK+8Y2 fWMP/kSE5NiS2H5DwiyVP3C/RvlETZCOhjnjlMNcllO8t19zsRk6A4T40K4lWvRn ecZKK8YwC6p7N3ssDYfHAQQVhG1s7hmpTPSJ+t2Wvt78Hcs8uyEFNG2QIMQpwY5X 13CbWqc9mhkEUZ6F0AWJwRUqZZ8scpqm0OwZzXAM+T0henILcCeC6bzd+l3xKqT5 8vGVX/hRWfQB1FjRh4utJggnlIgX2S/EiS9tEYRkDFgiUgTTbgvc7lO2wDJCNeML QLkRglCe+5nspIkq0CSmV2iZJ1v1bU2z1g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/j+7ZBPqODAGs69S4Ud kdZs6XuSRmKgEc2Qlu1rvS/rtJ2Ot2GnYTU5E6ppu0MwPbO9vPMcLBD8Y+h3xd8u +tByIzfhqKYmB/TFLndFb7HDcSZa2U2OSFj5JkAs2NAoler2Baja8ILQ40UYZ0As ZHj/ykxJu1GN9TO4T2daGxPcmg6tzMHvQTbMpHw4N58yk8IkG3VRRrx0CCAwY4Mo hmeS66/wB/oy1FLXfpZMwrcGIVi/HWrpydIyE8l4pC6JR38DDumXdHAsTvj8/o5b Izxp7QaYkCKrIoIcgEZF6OOGTTo4tcSdEAFFMGVt9VECey1hiuMuk6Rs7pX5jRAR QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8367451143355672147829308672382972444 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev1-fe-cct.dev.aws.lifelock.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23729347440002156037308049299638400051616134248836882989507060625998430693865794643637638322450445855669158692021224859749588794091940306458093924727530813115371868838881790911533191552429340199041129253342694706328188123406257703352551977071099697064254264752792894379859769507678681119772703137974136071513872444598957610971650531095960288136624950956530351332403624051410083734348221215799515766377700752502960673270911431152912905039268529498471442525614349422137141971385534380334916753000854121049222091695593556211004733921941242317450079356889076251741896664710968605662976585633740011474215359061340294484291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 91197709dc052a642125daca2de73c1e04e60b0d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1-fe-cct.dev.aws.lifelock.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llcct-dev.norton.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00053531fa0914da81ccf73b0baafe80c20f9993119acdf766103bfdad0fd9159f20dab64afbc6367d630ffe4484e4d892d87e43c22c953f70bf46f9444d908e8639e394c35c9653bcb75f73b1193a0384f8d0ae255af46779c64a2bc6300baa7b377b2c0d87c7010415846d6cee19a94cf489fadd96bedefc1dcb3cbb2105346d9020c429c18e57d7709b5aa73d9a1904519e85d00589c1152a659f2c729aa6d0ec19cd700cf93d217a720b702782e9bcddfa5df12aa4f9f2f1955ff85159f401d458d1878bad260827948817d92fc4892f6d1184640c58225204d36e0bdcee53b6c0324235e30b40b91182509efb99eca4892ad024a6576899275bf56d4db3d6