ris.us.rhapsode.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 03:5b:4a:5b:c4:06:50:bd:64:d2:df:7b:e1:95:dd:75 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ris.us.rhapsode.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:5b:4a:5b:c4:06:50:bd:64:d2:df:7b:e1:95:dd:75Serial Number (int): 4461691170221572717493485075783081333
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: f7:db:65:b8:dc:9f:20:5f:55:66:24:6a:c6:b2:be:b4:fa:ec:50:22
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 1d:38:2f:c6:0a:4b:86:bc:69:a9:34:2f:4c:d3:2e:c8:5f:9d:d4:1d
Fingerprint (sha256): 07:80:e3:0b:99:91:8a:83:64:06:43:cb:cd:f3:db:df:0a:31:86:ee:16:cf:2b:58:3f:6e:4e:b4:b3:8b:1e:a2
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate ris.us.rhapsode.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ris.us.rhapsode.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ris.us.rhapsode.com
Other certificates including the domain name rhapsode.com
(limited to 100 certificates)
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
ris.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.com
elb.rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
hotfix.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.qa.area9lyceum.com
external-content-qa-eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.dev.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
slow-no-cdn.us.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev.eu.rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
rhapsode.dev.area9lyceum.com
eu.rhapsode.com
us.rhapsode.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
slow-no-cdn.us.rhapsode.com
*.curator.rhapsode.com
rhapsode.dev2.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
br.uat.sg.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
slow-no-cdn.us.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.area9lyceum.com
curator.rhapsode.com
rhapsode.qa.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
hotfix.rhapsode.com
rhapsode.dev.area9lyceum.com
uat.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
eu.rhapsode.com
aitest.rhapsode.com
rhapsode.com
monitoring.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
rhapsode.com
rhapsode.area9lyceum.com
us.rhapsode.com
rhapsode.dev.area9lyceum.com
reports-mks.us.rhapsode.com
eu.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev2.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
ris.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.com
elb.rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
hotfix.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.qa.area9lyceum.com
external-content-qa-eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.dev.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
slow-no-cdn.us.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev.eu.rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
rhapsode.dev.area9lyceum.com
eu.rhapsode.com
us.rhapsode.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
slow-no-cdn.us.rhapsode.com
*.curator.rhapsode.com
rhapsode.dev2.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
br.uat.sg.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
slow-no-cdn.us.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.area9lyceum.com
curator.rhapsode.com
rhapsode.qa.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
hotfix.rhapsode.com
rhapsode.dev.area9lyceum.com
uat.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
eu.rhapsode.com
aitest.rhapsode.com
rhapsode.com
monitoring.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
rhapsode.com
rhapsode.area9lyceum.com
us.rhapsode.com
rhapsode.dev.area9lyceum.com
reports-mks.us.rhapsode.com
eu.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev2.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
Certificate
The complete raw certificate details for ris.us.rhapsode.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgIQA1tKW8QGUL1k0t974ZXddTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDkxMDAwMDAwMFoXDTI0MTAwODIzNTk1OVowHjEc MBoGA1UEAxMTcmlzLnVzLnJoYXBzb2RlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ5K4Wdd0fm7tHOjmhUxXGv6ZjtHaLOmD7O4wVAO8qcwTT3M 3mumRS5WYUVDoKfFNnIG3mJr5GSDITJBTEQ5x0jiFPC7bQYYUkEWUbTWhKisbsm3 k7kfvaCVS+Ox3r9SCOkzp121znqi12WdFuPuBHMrhe6B4vsaJwO67T4/1EQjGVdC jNcmSG2seHEHRmraqMRdQrqyrAJ2wP6tSN7tVjLA6whU6iGslSf1KiiQo6IcimWB 8J0sqtkCM1ozqTh2dUcYJ/HNVVycXNceBw6VKKY+T+JJW67BWuxGUCDTLDkatciJ SgcOg0Z3evD6+dOO5YwpP+cR7VLOUH7vO2ZcpCcCAwEAAaOCAu0wggLpMB8GA1Ud IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBT322W43J8gX1Vm JGrGsr60+uxQIjAeBgNVHREEFzAVghNyaXMudXMucmhhcHNvZGUuY29tMBMGA1Ud IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAgYIKwYBBQUHAwEwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w Mi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j ZXIwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGKfR79WgAABAMARzBFAiAc Amt39YTLzWpOkRatjNoSuTECopCg0lwlASyCQDx+HgIhAIRCaR+2bFhR1yDx+msA 8be82heQCs6eVutMLX+68spTAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/ qznYhHMAAAGKfR79VwAABAMARzBFAiBB8M/j8NaQzH2ShQcG+1m+fXy5dWSoeigi +vS6o2OHowIhAN9tsP/IeJBABgQeI26HCbEx7irmkmjnfAvZKHuMfKHyAHcA2ra/ az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGKfR79iAAABAMASDBGAiEA sGw5AnXV/wdj3rO3aG0O3tWQpIzODADmPaYtPqoqPiACIQC3S6hTpL+W4NFqkurx AEwHSX2jhTMXHAbQdxnR6aZQGzANBgkqhkiG9w0BAQsFAAOCAQEAB3tyuoyaXLUu MD8nKVnelWfmN6vB0yxtiEy/uTgjdfesxAsXd15ww20GGa2MLEN2K8m7zi8KZw5d /S2uC+qM1JUgoTTu3sb2BaxIlFNy8/VTiGWkYDEd3DISZOs19oEIw0kY5+M+xD8P +L0f3F7UQ2S7IJqrv4Q0EsQoMaPUqXDhndwl7KGw5rsXgAtdhK7wk3nXFx0UcLOP qyS0WHsjSGiVhqAvOqvZcjOUs47lardzf53I3FucLGoFyCPk2yew3u7v1i4BDyYv IpTWWAUqLAOwRXaOTDsMQG3j1tgOLQyN3so5A7aaAJQ0mTLuSuUPTqFovY6sKlab eCT3Uwf72g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkrhZ13R+bu0c6OaFTFc a/pmO0dos6YPs7jBUA7ypzBNPczea6ZFLlZhRUOgp8U2cgbeYmvkZIMhMkFMRDnH SOIU8LttBhhSQRZRtNaEqKxuybeTuR+9oJVL47Hev1II6TOnXbXOeqLXZZ0W4+4E cyuF7oHi+xonA7rtPj/URCMZV0KM1yZIbax4cQdGatqoxF1CurKsAnbA/q1I3u1W MsDrCFTqIayVJ/UqKJCjohyKZYHwnSyq2QIzWjOpOHZ1Rxgn8c1VXJxc1x4HDpUo pj5P4klbrsFa7EZQINMsORq1yIlKBw6DRnd68Pr5047ljCk/5xHtUs5Qfu87Zlyk JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4461691170221572717493485075783081333 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ris.us.rhapsode.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19982577127261285603640865519019431903557184750367250317858483945683808884647328896219139106114044974144215372279792298157715205764165177784492551380147799812192885591212106068197742543866920983585357209494693430072112561673687205184744850588115839649800863893031291568421606225766809232358967922523628834685670798901762945716811759071392710537435389038087720388895515573362134758445470835071906293738818864024668216119238431996618710940778270658172030993321301478786898957324585403785657842505330732879257281842080715768250976164781144131354481707122977177002977031943922923395644252171970504054275813243694528373799 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f7db65b8dc9f205f5566246ac6b2beb4faec5022 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ris.us.rhapsode.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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