content-tagging-service-prod.us-east-1.lb.cvent.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 07:be:7e:db:db:6d:be:a1:32:e2:da:48:7f:64:41:6a was issued on by Amazon.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=content-tagging-service-prod.us-east-1.lb.cvent.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:be:7e:db:db:6d:be:a1:32:e2:da:48:7f:64:41:6aSerial Number (int): 10293705376103569382547632846442611050
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 9b:2e:26:3d:c0:f6:ea:9e:5c:fc:17:c9:7f:2b:cf:02:05:bb:0c:8e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 17:d3:c1:45:08:e3:8f:c0:7a:d7:d7:16:6e:66:8b:23:00:49:39:b7
Fingerprint (sha256): 08:dc:8d:a2:ba:6e:90:5c:be:84:12:08:ce:d2:4e:62:c1:5f:6c:5f:b8:b1:dd:cd:8a:3a:40:2c:fa:4b:b7:4d
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate content-tagging-service-prod.us-east-1.lb.cvent.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for content-tagging-service-prod.us-east-1.lb.cvent.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
content-tagging-service-prod.us-east-1.lb.cvent.com
content-tagging-service.us-east-1.cvent-production.cvent.cloud
content-tagging-service-production.us-east-1.lb.cvent.com
content-tagging-service.cvent-production.cvent.cloud
content-tagging-service-prod.us-east-1.lb.core.cvent.org
content-tagging-service-production.us-east-1.lb.core.cvent.org
content-tagging-service.us-east-1.private.cvent-production.cvent.cloud
content-tagging-service.us-east-1.cvent-production.cvent.cloud
content-tagging-service-production.us-east-1.lb.cvent.com
content-tagging-service.cvent-production.cvent.cloud
content-tagging-service-prod.us-east-1.lb.core.cvent.org
content-tagging-service-production.us-east-1.lb.core.cvent.org
content-tagging-service.us-east-1.private.cvent-production.cvent.cloud
Other certificates including the domain name cvent.com
(limited to 100 certificates)
www.cvent.com
cds4.cvent.com
video-editor.sandbox-app.cvent.com
test.cvent.com
cdktesting-us-east-1-stack-2.lb.cvent.com
heroquiz.cvent.com
www.t2.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
cds4.cvent.com
ebs-ir-test.cvent.com
badges.app.t2.cvent.com
*.cvent.com
cds3.cvent.com
cds1.cvent.com
eventinabox.cvent.com
hq-expresswaye-002.remotephone.cvent.com
cdktesting-us-east-1.lb.cvent.com
eventinabox.cvent.com
*.us-west-2.lb.cvent.com
queue.disneymovieclub.go.com
cds1.cvent.com
cvent.com
smart.cvent.com
cds1.cvent.com
cds3.cvent.com
badges.load-app.s2.cvent.com
test.cvent.com
cds3.cvent.com
cds2.cvent.com
*.us-west-2.lb.cvent.com
mattt-testing3.cvent.com
*.cvent.com
cds2.cvent.com
community.cvent.com
sso-development.cvent.com
cds1.cvent.com
heroquiz.cvent.com
mattt-test1.cvent.com
cdktesting-us-west-2.cvent.com
smart.cvent.com
cds3.cvent.com
community.cvent.com
cds1.cvent.com
smart.cvent.com
cds3.cvent.com
sbcvm.cvent.com
custom-eur.cvent.com
ssc.cvent.com
*.us-east-1.lb.cvent.com
cds4.cvent.com
cds4.cvent.com
content-tagging-service-prod.us-east-1.lb.cvent.com
ux.cvent.com
cds2.cvent.com
test.cvent.com
isignatures.cvent.com
api.cvent.com
cds1.cvent.com
*.app.cvent.com
*.us-east-1.lb.cvent.com
test.cvent.com
cds4.cvent.com
eventinabox.cvent.com
status-testing.cvent.com
cds4.cvent.com
cdktesting-us-east-1.lb.cvent.com
cds2.cvent.com
cds4.cvent.com
cds4.cvent.com
cds3.cvent.com
cds3.cvent.com
test.cvent.com
cds2.cvent.com
cdktesting-us-east-1.cvent.com
*.cvent.com
falcon-service-int.us-east-1.lb.cvent.com
cds4.cvent.com
cds1.cvent.com
attendee-hub-eur.cvent.com
cds4.cvent.com
cds4.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
queue.disneymovieclub.go.com
cds3.cvent.com
cds2.cvent.com
pages.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
csn-gdpr-service.core-app-prod.cvent.cloud
cds3.cvent.com
www.cvent.com
isignatures.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
advocates.cvent.com
community.cvent.com
cds4.cvent.com
video-editor.sandbox-app.cvent.com
test.cvent.com
cdktesting-us-east-1-stack-2.lb.cvent.com
heroquiz.cvent.com
www.t2.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
cds4.cvent.com
ebs-ir-test.cvent.com
badges.app.t2.cvent.com
*.cvent.com
cds3.cvent.com
cds1.cvent.com
eventinabox.cvent.com
hq-expresswaye-002.remotephone.cvent.com
cdktesting-us-east-1.lb.cvent.com
eventinabox.cvent.com
*.us-west-2.lb.cvent.com
queue.disneymovieclub.go.com
cds1.cvent.com
cvent.com
smart.cvent.com
cds1.cvent.com
cds3.cvent.com
badges.load-app.s2.cvent.com
test.cvent.com
cds3.cvent.com
cds2.cvent.com
*.us-west-2.lb.cvent.com
mattt-testing3.cvent.com
*.cvent.com
cds2.cvent.com
community.cvent.com
sso-development.cvent.com
cds1.cvent.com
heroquiz.cvent.com
mattt-test1.cvent.com
cdktesting-us-west-2.cvent.com
smart.cvent.com
cds3.cvent.com
community.cvent.com
cds1.cvent.com
smart.cvent.com
cds3.cvent.com
sbcvm.cvent.com
custom-eur.cvent.com
ssc.cvent.com
*.us-east-1.lb.cvent.com
cds4.cvent.com
cds4.cvent.com
content-tagging-service-prod.us-east-1.lb.cvent.com
ux.cvent.com
cds2.cvent.com
test.cvent.com
isignatures.cvent.com
api.cvent.com
cds1.cvent.com
*.app.cvent.com
*.us-east-1.lb.cvent.com
test.cvent.com
cds4.cvent.com
eventinabox.cvent.com
status-testing.cvent.com
cds4.cvent.com
cdktesting-us-east-1.lb.cvent.com
cds2.cvent.com
cds4.cvent.com
cds4.cvent.com
cds3.cvent.com
cds3.cvent.com
test.cvent.com
cds2.cvent.com
cdktesting-us-east-1.cvent.com
*.cvent.com
falcon-service-int.us-east-1.lb.cvent.com
cds4.cvent.com
cds1.cvent.com
attendee-hub-eur.cvent.com
cds4.cvent.com
cds4.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
queue.disneymovieclub.go.com
cds3.cvent.com
cds2.cvent.com
pages.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
csn-gdpr-service.core-app-prod.cvent.cloud
cds3.cvent.com
www.cvent.com
isignatures.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
advocates.cvent.com
community.cvent.com
Certificate
The complete raw certificate details for content-tagging-service-prod.us-east-1.lb.cvent.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHijCCBnKgAwIBAgIQB75+29ttvqEy4tpIf2RBajANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDgxMDAwMDAwMFoXDTI0MDkwNzIzNTk1OVowPjE8 MDoGA1UEAxMzY29udGVudC10YWdnaW5nLXNlcnZpY2UtcHJvZC51cy1lYXN0LTEu bGIuY3ZlbnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzJ4 Nc/iRmzIQFMXhlIR1gViiKyGd1yhUJ5X2FiIuhJ4spmFcaKMQTNw8FrVbpPR9rUn wKLgBxGAZDAsgaAs/Ac1Z1g/M65krHeoKmapfprSzhhgcMWELNwBgKmTLDLEaAL8 rFWEUy8kx8j+gydoAmnWLMwz5QTY/9UECCBad21wy0NJMiezmZOoC2dYklepV2DH l0Pe3kXWtZtzhE1GCHDw69podE1u8VmKSGuys+WpMd0blmtRolBboaGEmkMj+rxn JO5kknwlLCRKYlYdWfPmXRxaoOS1rX+p8VnHrCUTfdE2CXiqG09SFhvIKahaHRVj mwGP3gEo4I4MtDNkIQIDAQABo4IEhDCCBIAwHwYDVR0jBBgwFoAUgbgOY4qJEhjl +js7UJWf5uWQE4UwHQYDVR0OBBYEFJsuJj3A9uqeXPwXyX8rzwIFuwyOMIIBtQYD VR0RBIIBrDCCAaiCM2NvbnRlbnQtdGFnZ2luZy1zZXJ2aWNlLXByb2QudXMtZWFz dC0xLmxiLmN2ZW50LmNvbYI+Y29udGVudC10YWdnaW5nLXNlcnZpY2UudXMtZWFz dC0xLmN2ZW50LXByb2R1Y3Rpb24uY3ZlbnQuY2xvdWSCOWNvbnRlbnQtdGFnZ2lu Zy1zZXJ2aWNlLXByb2R1Y3Rpb24udXMtZWFzdC0xLmxiLmN2ZW50LmNvbYI0Y29u dGVudC10YWdnaW5nLXNlcnZpY2UuY3ZlbnQtcHJvZHVjdGlvbi5jdmVudC5jbG91 ZII4Y29udGVudC10YWdnaW5nLXNlcnZpY2UtcHJvZC51cy1lYXN0LTEubGIuY29y ZS5jdmVudC5vcmeCPmNvbnRlbnQtdGFnZ2luZy1zZXJ2aWNlLXByb2R1Y3Rpb24u dXMtZWFzdC0xLmxiLmNvcmUuY3ZlbnQub3JngkZjb250ZW50LXRhZ2dpbmctc2Vy dmljZS51cy1lYXN0LTEucHJpdmF0ZS5jdmVudC1wcm9kdWN0aW9uLmN2ZW50LmNs b3VkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVz dC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEB BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3Qu Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNv bS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIB aQFnAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJ4WErzgAA BAMARjBEAiBTjSzzaMwFBgtZrT60vW1ydJRnSdmWTcbnimfhvnzSpAIgdQbCWN1D eVSccaxKBDcs8eycIQgVerBUuUSJhZRx6NAAdgBIsONr2qZHNA/lagL6nTDrHFIB y1bdLIHZu7+rOdiEcwAAAYnhYSvfAAAEAwBHMEUCIHJXGGClnGagkSPmZSPi3vne 071KxPZXh2JQZK8K7qRHAiEAyhFfod1GD8KjP25xmmYB7B4aa8z+tQO5oRC7E/gy wZkAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYnhYSuoAAAE AwBHMEUCIQCBaVY/nCZCZ/QBK5K5PSnl6tmCdUIuv94nhsU0Qogg9QIgR+yREhn8 1C4K85rgVfHX7NHKRJ0O8SXlIJxtP2kPPJ4wDQYJKoZIhvcNAQELBQADggEBAFFB LNU46tizEClXgN3LF6iBFuhNoawZhw2Dj1PfFiWXKvlPlqip+M0Lfd6hNRqlm0V+ ae63AxazQJscj0o7jPTwM1av62ApYAsdV7GILipt0hV4CpgRxldiuOSQeuixIq9J b+L1645Cm3VPcuF7k7rQHjveRZuqArkV3E99pgHXAAa1f4RjYvJEM2j+pxbJjDaF PxS/0uH8XPjdlSEDDHwj+YeW1WWfoadfM8+DksOTzyfmc2mIus72aJ6xCMPbgyo6 53d89AZbS+tPmkd0R7nNI7wzWuRjmk2i3OC8e2qBX7sUfiF11gG6IqLVa2d0giqB oxZ923/kizK8QdJuZeM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzJ4Nc/iRmzIQFMXhlIR 1gViiKyGd1yhUJ5X2FiIuhJ4spmFcaKMQTNw8FrVbpPR9rUnwKLgBxGAZDAsgaAs /Ac1Z1g/M65krHeoKmapfprSzhhgcMWELNwBgKmTLDLEaAL8rFWEUy8kx8j+gydo AmnWLMwz5QTY/9UECCBad21wy0NJMiezmZOoC2dYklepV2DHl0Pe3kXWtZtzhE1G CHDw69podE1u8VmKSGuys+WpMd0blmtRolBboaGEmkMj+rxnJO5kknwlLCRKYlYd WfPmXRxaoOS1rX+p8VnHrCUTfdE2CXiqG09SFhvIKahaHRVjmwGP3gEo4I4MtDNk IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10293705376103569382547632846442611050 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content-tagging-service-prod.us-east-1.lb.cvent.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26156216601055656010394443173384492589445207636346303069879564528362723446442868816444502387331118900652289464380288122852034713548017812172805885664299407874106308938206920575547887006379145582004688780339912149460466483337435830911875362262691708375356757449520060029783697904384648366685349240241071769224035807497197509318125597786944351357585438536899696355419355073343513797830769351175966726999468518811989362378334759461503036006421707856311549561353884291341252591556909966908428444668122051749296717005960350114211796436725283682268181199090752161214226394208004891761156914035007492566991073203040313107489 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9b2e263dc0f6ea9e5cfc17c97f2bcf0205bb0c8e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (428 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-prod.us-east-1.lb.cvent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service.us-east-1.cvent-production.cvent.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-production.us-east-1.lb.cvent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service.cvent-production.cvent.cloud' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-prod.us-east-1.lb.core.cvent.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-production.us-east-1.lb.core.cvent.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service.us-east-1.private.cvent-production.cvent.cloud' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0051412cd538ead8b310295780ddcb17a88116e84da1ac19870d838f53df1625972af94f96a8a9f8cd0b7ddea1351aa59b457e69eeb70316b3409b1c8f4a3b8cf4f03356afeb6029600b1d57b1882e2a6dd215780a9811c65762b8e4907ae8b122af496fe2f5eb8e429b754f72e17b93bad01e3bde459baa02b915dc4f7da601d70006b57f846362f2443368fea716c98c36853f14bfd2e1fc5cf8dd9521030c7c23f98796d5659fa1a75f33cf8392c393cf27e6736988bacef6689eb108c3db832a3ae7777cf4065b4beb4f9a477447b9cd23bc335ae4639a4da2dce0bc7b6a815fbb147e2175d601ba22a2d56b6774822a81a3167ddb7fe48b32bc41d26e65e3