*.int.api.discomax.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0e:e4:82:29:22:64:6b:34:1f:2f:e3:a2:42:0b:b4:a0 was issued on by Amazon.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.int.api.discomax.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:e4:82:29:22:64:6b:34:1f:2f:e3:a2:42:0b:b4:a0Serial Number (int): 19795675596981789892530025649117312160
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 30:ed:0f:92:c5:9f:d7:c6:4e:47:c9:2f:58:4d:96:65:e3:e1:0b:7a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): e3:9e:1f:80:a9:95:2f:22:19:02:79:44:5e:ab:f9:fb:d5:a6:ad:a6
Fingerprint (sha256): 08:42:e0:af:bf:37:1e:cc:e5:9b:e9:8b:8a:84:06:d7:9c:66:d9:65:af:04:7f:4c:f0:f6:50:2d:79:bc:4e:c1
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.int.api.discomax.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.int.api.discomax.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.int.api.discomax.com
*.o11y.int.disco-api.com
*.int.discomax.discoveryplus.com
*.int.o11y.discomax.com
*.use1.int.api.discomax.com
*.o11y.int.disco-api.com
*.int.discomax.discoveryplus.com
*.int.o11y.discomax.com
*.use1.int.api.discomax.com
Other certificates including the domain name discomax.com
(limited to 100 certificates)
x1-experimental.ctv.prd.beam.discomax.com
*.beam-amer.euw1.stg.api.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
*.int.api.discomax.com
*.prd.api.discomax.com
int.api.discomax.com
webos.ctv.play-hbo.stg.beam.discomax.com
*.stg.api.discomax.com
*.br-amer.usw2.stg.api.discomax.com
*.prd.api.discomax.com
stg.api.discomax.com
*.stg.api.discomax.com
*.int.api.discomax.com
*.dev.api.discomax.com
*.prd.api.discomax.com
*.br-latam.stg.api.discomax.com
*.any-latam.prd.api.discomax.com
auth.stg.beam.discomax.com
*.prd.api.discomax.com
play-rc.stg.beam.discomax.com
*.stg.api.discomax.com
images.cdn.prd.api.discomax.com
*.private.euw1.stg.api.discomax.com
webos.ctv.play-hbo.dev.beam.discomax.com
*.stg.api.discomax.com
*.dev.api.discomax.com
*.stg.api.discomax.com
stg.api.discomax.com
xbox.ctv.dev.beam.discomax.com
*.any-amer.dev.api.discomax.com
*.any-amer.int.api.discomax.com
*.prod.api.discomax.com
*.any-amer.apne1.prd.api.discomax.com
stg.api.discomax.com
telenor.ctv.stg.beam.discomax.com
telia.ctv.prd.beam.discomax.com
stg.api.discomax.com
default.private-vpce.eun1.prd.api.discomax.com
*.prd.api.discomax.com
*.int.api.discomax.com
*.prd.api.discomax.com
prd.api.discomax.com
ps5.ctv.dev.beam.discomax.com
int.api.discomax.com
*.beam-apac.euw1.stg.api.discomax.com
*.any-amer.aps1.stg.api.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
*.any-amer.int.api.discomax.com
*.dev.api.discomax.com
*.prd.api.discomax.com
int.api.discomax.com
*.prd.api.discomax.com
*.prod.api.discomax.com
*.vodafonestb.sagemcom.ctv.dev.beam.discomax.com
ps4.ctv.prd.beam.discomax.com
*.beam-apac.euw1.stg.api.discomax.com
*.any-amer.dev.api.discomax.com
wbd-beam-typescript.dev.beam.discomax.com
prd.api.discomax.com
webos.ctv.play-hbo.int.beam.discomax.com
*.prod.api.discomax.com
*.prd.api.discomax.com
*.stg.api.discomax.com
*.private.eu.stg.api.discomax.com
webos.ctv.prd.beam.discomax.com
stg.api.discomax.com
cast.ctv.int.beam.discomax.com
*.dev.api.discomax.com
prd.api.discomax.com
int.discomax.discoveryplus.com
ziggo.ctv.prd.beam.discomax.com
memento.int.infra.api.discomax.com
*.stg.api.discomax.com
x1.ctv.stg.beam.discomax.com
*.ci-reports.dev.beam.discomax.com
*.int.api.discomax.com
vizio.ctv.dev.beam.discomax.com
int.api.discomax.com
*.any-amer.euc1.stg.api.discomax.com
*.int.api.discomax.com
webos.ctv.dev.beam.discomax.com
*.int.api.discomax.com
*.stg.api.discomax.com
tizen.ctv.dev.beam.discomax.com
int.api.discomax.com
*.any-amer.euc1.prd.api.discomax.com
*.use.dev.api.discomax.com
*.int.api.discomax.com
x1.ctv.prd.beam.discomax.com
dev.api.discomax.com
tizen.ctv.int.beam.discomax.com
*.dev.api.discomax.com
*.any-latam.prd.api.discomax.com
dev.api.discomax.com
*.prd.api.discomax.com
telenor-rc.ctv.stg.beam.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
*.beam-amer.euw1.stg.api.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
*.int.api.discomax.com
*.prd.api.discomax.com
int.api.discomax.com
webos.ctv.play-hbo.stg.beam.discomax.com
*.stg.api.discomax.com
*.br-amer.usw2.stg.api.discomax.com
*.prd.api.discomax.com
stg.api.discomax.com
*.stg.api.discomax.com
*.int.api.discomax.com
*.dev.api.discomax.com
*.prd.api.discomax.com
*.br-latam.stg.api.discomax.com
*.any-latam.prd.api.discomax.com
auth.stg.beam.discomax.com
*.prd.api.discomax.com
play-rc.stg.beam.discomax.com
*.stg.api.discomax.com
images.cdn.prd.api.discomax.com
*.private.euw1.stg.api.discomax.com
webos.ctv.play-hbo.dev.beam.discomax.com
*.stg.api.discomax.com
*.dev.api.discomax.com
*.stg.api.discomax.com
stg.api.discomax.com
xbox.ctv.dev.beam.discomax.com
*.any-amer.dev.api.discomax.com
*.any-amer.int.api.discomax.com
*.prod.api.discomax.com
*.any-amer.apne1.prd.api.discomax.com
stg.api.discomax.com
telenor.ctv.stg.beam.discomax.com
telia.ctv.prd.beam.discomax.com
stg.api.discomax.com
default.private-vpce.eun1.prd.api.discomax.com
*.prd.api.discomax.com
*.int.api.discomax.com
*.prd.api.discomax.com
prd.api.discomax.com
ps5.ctv.dev.beam.discomax.com
int.api.discomax.com
*.beam-apac.euw1.stg.api.discomax.com
*.any-amer.aps1.stg.api.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
*.any-amer.int.api.discomax.com
*.dev.api.discomax.com
*.prd.api.discomax.com
int.api.discomax.com
*.prd.api.discomax.com
*.prod.api.discomax.com
*.vodafonestb.sagemcom.ctv.dev.beam.discomax.com
ps4.ctv.prd.beam.discomax.com
*.beam-apac.euw1.stg.api.discomax.com
*.any-amer.dev.api.discomax.com
wbd-beam-typescript.dev.beam.discomax.com
prd.api.discomax.com
webos.ctv.play-hbo.int.beam.discomax.com
*.prod.api.discomax.com
*.prd.api.discomax.com
*.stg.api.discomax.com
*.private.eu.stg.api.discomax.com
webos.ctv.prd.beam.discomax.com
stg.api.discomax.com
cast.ctv.int.beam.discomax.com
*.dev.api.discomax.com
prd.api.discomax.com
int.discomax.discoveryplus.com
ziggo.ctv.prd.beam.discomax.com
memento.int.infra.api.discomax.com
*.stg.api.discomax.com
x1.ctv.stg.beam.discomax.com
*.ci-reports.dev.beam.discomax.com
*.int.api.discomax.com
vizio.ctv.dev.beam.discomax.com
int.api.discomax.com
*.any-amer.euc1.stg.api.discomax.com
*.int.api.discomax.com
webos.ctv.dev.beam.discomax.com
*.int.api.discomax.com
*.stg.api.discomax.com
tizen.ctv.dev.beam.discomax.com
int.api.discomax.com
*.any-amer.euc1.prd.api.discomax.com
*.use.dev.api.discomax.com
*.int.api.discomax.com
x1.ctv.prd.beam.discomax.com
dev.api.discomax.com
tizen.ctv.int.beam.discomax.com
*.dev.api.discomax.com
*.any-latam.prd.api.discomax.com
dev.api.discomax.com
*.prd.api.discomax.com
telenor-rc.ctv.stg.beam.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
Certificate
The complete raw certificate details for *.int.api.discomax.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIQDuSCKSJkazQfL+OiQgu0oDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUwMzAwMDAwMFoXDTI0MDUzMTIzNTk1OVowITEf MB0GA1UEAwwWKi5pbnQuYXBpLmRpc2NvbWF4LmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKmHbFcavGFwtnLNiMR7jIs9qgRvOZdzDuNaKfuvqz2w LX2QHkruxMjCqh7pbvXOU1CGmN/ptvi8kXqF08L26fB+xUGccA2VzhI1wmq5omzn yHSzxftYSoDtOk+M06r57ZJKrfc7a08/G5t0tTydonhUx3wPcEQV/mB0cjcuJaMT WVtlM3ZXw7mUyVuYDlb+jyVl4zk12iVmLPYRyLmWvTbt1brgsXQwNGn50HVqBZE2 6sdyxGA9IVW/oFPxkcPxj4OteRkS4nuyOZE+EDmMm/aM3XZdK3akxRMm3ru7AiDm sjbnQhy0Qi68AKtPcu1OQ+BneuEaP7kVeefKQbMgedECAwEAAaOCAfcwggHzMB8G A1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBQw7Q+SxZ/X xk5HyS9YTZZl4+ELejCBlQYDVR0RBIGNMIGKghYqLmludC5hcGkuZGlzY29tYXgu Y29tghgqLm8xMXkuaW50LmRpc2NvLWFwaS5jb22CICouaW50LmRpc2NvbWF4LmRp c2NvdmVyeXBsdXMuY29tghcqLmludC5vMTF5LmRpc2NvbWF4LmNvbYIbKi51c2Ux LmludC5hcGkuZGlzY29tYXguY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny bC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au cjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIy bTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0qJmvb8JaQLkkfk gZdOBF5VyqyfPp4M6o7sMfkugEqTfaLvHDjbifrSBwF4LA3cIPwlfFCvuQGx0k1O xpnbXQdrx6h4Z1Z3aweylZ7dsFD7KokCjyeIXvXx8HJ5qFIgL4Zo15wTUY81avmy vltggL5MEtjwV4oubVA/RbUtgR0SU//yAVMwCCKPL7QLgPlR/9B0RuaQoV33taAO JfIPExbY7/3B0CY5l37CkGjITCtKVZdiouxNsY0gPtVYQnObla+iE74joIcyXQbq 1Cta8dMIo5YeA1EYQ2/r49NOGexxI2nxis4qHoiw2r8W9Z6z0CWQBx8MT24e9oEI umKUXg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYdsVxq8YXC2cs2IxHuM iz2qBG85l3MO41op+6+rPbAtfZAeSu7EyMKqHulu9c5TUIaY3+m2+LyReoXTwvbp 8H7FQZxwDZXOEjXCarmibOfIdLPF+1hKgO06T4zTqvntkkqt9ztrTz8bm3S1PJ2i eFTHfA9wRBX+YHRyNy4loxNZW2UzdlfDuZTJW5gOVv6PJWXjOTXaJWYs9hHIuZa9 Nu3VuuCxdDA0afnQdWoFkTbqx3LEYD0hVb+gU/GRw/GPg615GRLie7I5kT4QOYyb 9ozddl0rdqTFEybeu7sCIOayNudCHLRCLrwAq09y7U5D4Gd64Ro/uRV558pBsyB5 0QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19795675596981789892530025649117312160 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.int.api.discomax.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21401053210122092864992720775091271799783394478404129835925752025913061295218624713091721105374998885430873099952575145018814192166383263174700093392425291000443776909265128388958222098071979043290504531701066193508641393487608595055952944363554644780358765162217260870196288204695954038274110025282451886012986687098160906505788526732452182147917981476645187835866191408794184497937971821585187988179311379112055773133327716996353017356019248156218502089924629293375366763823099268869549082689913624020714495298249674468649735322796381869698661633748801682239093624582770017387255094927743264287931008016428633717201 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 30ed0f92c59fd7c64e47c92f584d9665e3e10b7a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.api.discomax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o11y.int.disco-api.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.discomax.discoveryplus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.o11y.discomax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.use1.int.api.discomax.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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