bf-ctf-development.aws.bfops.io
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0f:04:d0:e3:a2:83:49:bc:3c:ab:ce:7f:3e:b0:50:35 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=bf-ctf-development.aws.bfops.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:04:d0:e3:a2:83:49:bc:3c:ab:ce:7f:3e:b0:50:35Serial Number (int): 19963425900493616768064410458264719413
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d7:71:63:79:b2:2a:4e:40:1d:88:aa:70:de:cd:a7:63:5f:1c:c2:37
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): d4:32:23:61:8f:38:66:21:e5:8d:78:f8:ee:fe:94:e1:ae:6c:fe:0d
Fingerprint (sha256): 09:66:21:f7:39:f6:2f:07:31:81:de:99:bb:14:09:5c:17:89:cd:77:c3:52:30:58:99:f5:b5:34:b4:7e:65:af
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate bf-ctf-development.aws.bfops.io
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bf-ctf-development.aws.bfops.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bf-ctf-development.aws.bfops.io
*.bf-ctf-development.aws.bfops.io
*.development-vibe.burda-forward.de
development-vibe.burda-forward.de
*.bf-ctf-development.aws.bfops.io
*.development-vibe.burda-forward.de
development-vibe.burda-forward.de
Other certificates including the domain name bfops.io
(limited to 100 certificates)
cwc.bf-chipwidgets-development.aws.bfops.io
regional.bf-regioccms-development.aws.bfops.io
*.bf-nativedashboard-development.aws.bfops.io
*.bf-admanager-dr.aws.bfops.io
bfops.io
app.bf-chipdownloadsinitiator-development.aws.bfops.io
*.bf-cpx-staging.aws.bfops.io
*.bf-onelogin-dr.aws.bfops.io
bf-tools.net
*.bf-folcore-development.aws.bfops.io
*.bf-xpertcircle-staging.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bfops.io
*.bf-xpertcircle-tools.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentlounge-tools.aws.bfops.io
bfops.io
*.bf-onelogin-staging.aws.bfops.io
*.bf-trackalo-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
*.bf-operations-sandbox.aws.bfops.io
*.bf-netdoctor-development.aws.bfops.io
bfops.io
*.bf-tvspielfilm-staging.aws.bfops.io
*.bf-datalake-staging.aws.bfops.io
bitbucket.bf-services.aws.bfops.io
*.bf-folcore-dr.aws.bfops.io
bfops.io
*.bf-chipproduct-production.aws.bfops.io
bf-ctf-development.aws.bfops.io
bf-tools.net
*.bf-poc-development.aws.bfops.io
bf-tools.net
*.bf-onelogin-development.aws.bfops.io
bf-tools.net
*.bf-chipproduct-production.aws.bfops.io
*.bf-newswirefrontend-staging.aws.bfops.io
*.bf-newswirefrontend-dr.aws.bfops.io
chipstyleguide.bf-chipstyleguide-staging.aws.bfops.io
*.bf-cpx-sandbox.aws.bfops.io
*.bf-interred-production.aws.bfops.io
bf-tools.net
*.bf-poc-production.aws.bfops.io
*.bf-cpx-development.aws.bfops.io
*.bf-datalake-sandbox.aws.bfops.io
bfops.io
*.bf-nlcontentfeeder-development.aws.bfops.io
*.bf-contentplatform-dr.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
bf-ctf-staging.aws.bfops.io
cat-user-management-api.bf-personalize-development.aws.bfops.io
finanzen100-cbcfinance-etf.bf-cardscout-development.aws.bfops.io
*.bf-chipwidgets-dr.aws.bfops.io
*.bf-folapp-production.aws.bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-datalake-production.aws.bfops.io
*.bf-poc-tools.aws.bfops.io
bfops.io
bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-onelogin-tools.aws.bfops.io
*.bf-bcfinancetools-sandbox.aws.bfops.io
*.bf-contentlounge-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
bfops.io
cognito.bf-kaufberatungsseotool-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bfops.io
bf-tools.net
*.bf-admanager-sandbox.aws.bfops.io
bfops.io
*.bf-chipwidgets-tools.aws.bfops.io
bf-tools.net
*.bf-admanager-development.aws.bfops.io
bfops.io
bf-ctf-production.aws.bfops.io
*.bf-folcore-development.aws.bfops.io
bfops.io
gitlab.bfops.io
bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentassembler-dr.aws.bfops.io
*.bf-datalake-dr.aws.bfops.io
*.bf-datalake-development.aws.bfops.io
*.bf-bcfinancetools-production.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bf-tools.net
cat-fetcher-api.bf-personalize-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bf-tools.net
*.bf-operations-development.aws.bfops.io
bfops.io
bfops.io
*.bf-bcfinancetools-staging.aws.bfops.io
*.bf-powerdns-tools.aws.bfops.io
regional.bf-regioccms-development.aws.bfops.io
*.bf-nativedashboard-development.aws.bfops.io
*.bf-admanager-dr.aws.bfops.io
bfops.io
app.bf-chipdownloadsinitiator-development.aws.bfops.io
*.bf-cpx-staging.aws.bfops.io
*.bf-onelogin-dr.aws.bfops.io
bf-tools.net
*.bf-folcore-development.aws.bfops.io
*.bf-xpertcircle-staging.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bfops.io
*.bf-xpertcircle-tools.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentlounge-tools.aws.bfops.io
bfops.io
*.bf-onelogin-staging.aws.bfops.io
*.bf-trackalo-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
*.bf-operations-sandbox.aws.bfops.io
*.bf-netdoctor-development.aws.bfops.io
bfops.io
*.bf-tvspielfilm-staging.aws.bfops.io
*.bf-datalake-staging.aws.bfops.io
bitbucket.bf-services.aws.bfops.io
*.bf-folcore-dr.aws.bfops.io
bfops.io
*.bf-chipproduct-production.aws.bfops.io
bf-ctf-development.aws.bfops.io
bf-tools.net
*.bf-poc-development.aws.bfops.io
bf-tools.net
*.bf-onelogin-development.aws.bfops.io
bf-tools.net
*.bf-chipproduct-production.aws.bfops.io
*.bf-newswirefrontend-staging.aws.bfops.io
*.bf-newswirefrontend-dr.aws.bfops.io
chipstyleguide.bf-chipstyleguide-staging.aws.bfops.io
*.bf-cpx-sandbox.aws.bfops.io
*.bf-interred-production.aws.bfops.io
bf-tools.net
*.bf-poc-production.aws.bfops.io
*.bf-cpx-development.aws.bfops.io
*.bf-datalake-sandbox.aws.bfops.io
bfops.io
*.bf-nlcontentfeeder-development.aws.bfops.io
*.bf-contentplatform-dr.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
bf-ctf-staging.aws.bfops.io
cat-user-management-api.bf-personalize-development.aws.bfops.io
finanzen100-cbcfinance-etf.bf-cardscout-development.aws.bfops.io
*.bf-chipwidgets-dr.aws.bfops.io
*.bf-folapp-production.aws.bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-datalake-production.aws.bfops.io
*.bf-poc-tools.aws.bfops.io
bfops.io
bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-onelogin-tools.aws.bfops.io
*.bf-bcfinancetools-sandbox.aws.bfops.io
*.bf-contentlounge-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
bfops.io
cognito.bf-kaufberatungsseotool-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bfops.io
bf-tools.net
*.bf-admanager-sandbox.aws.bfops.io
bfops.io
*.bf-chipwidgets-tools.aws.bfops.io
bf-tools.net
*.bf-admanager-development.aws.bfops.io
bfops.io
bf-ctf-production.aws.bfops.io
*.bf-folcore-development.aws.bfops.io
bfops.io
gitlab.bfops.io
bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentassembler-dr.aws.bfops.io
*.bf-datalake-dr.aws.bfops.io
*.bf-datalake-development.aws.bfops.io
*.bf-bcfinancetools-production.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bf-tools.net
cat-fetcher-api.bf-personalize-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bf-tools.net
*.bf-operations-development.aws.bfops.io
bfops.io
bfops.io
*.bf-bcfinancetools-staging.aws.bfops.io
*.bf-powerdns-tools.aws.bfops.io
Certificate
The complete raw certificate details for bf-ctf-development.aws.bfops.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIQDwTQ46KDSbw8q85/PrBQNTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDUyMjAwMDAwMFoXDTI1MDYyMTIzNTk1OVowKjEo MCYGA1UEAxMfYmYtY3RmLWRldmVsb3BtZW50LmF3cy5iZm9wcy5pbzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMZ8DGnnLJcrmr88I8nNa1MLWgEdrnIB SNlWYHwOmYxX5lGxM5U6r8LheZBmi0Tw1Yzp5D+i8/LKLuF3pzd86Y5YTBaI6CIS qEqoyb98oNZD2AI6g8Xows3DptR7ooXI2flVGZ8VTVbaZulqLYeNZOJruluTbGyN VVQmQsUO8GztGdsgpKHm6vIZ8kaBcrPJ9GPN1LPI8ngpNdKt05b3DNss0vUuIm4t mBgviWFlAb4kb4wb+fMI1Knxryj1iZGs1TmpQbq2qiqoT6IYolW5/UHPdI5HsgyS JvJ5fZr+7eNzBHcQ9rWEvC6Xef4RQozGXaI2s7gSRDErugOpqsMXgk8CAwEAAaOC AfkwggH1MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQW BBTXcWN5sipOQB2IqnDezadjXxzCNzCBlwYDVR0RBIGPMIGMgh9iZi1jdGYtZGV2 ZWxvcG1lbnQuYXdzLmJmb3BzLmlvgiEqLmJmLWN0Zi1kZXZlbG9wbWVudC5hd3Mu YmZvcHMuaW+CIyouZGV2ZWxvcG1lbnQtdmliZS5idXJkYS1mb3J3YXJkLmRlgiFk ZXZlbG9wbWVudC12aWJlLmJ1cmRhLWZvcndhcmQuZGUwEwYDVR0gBAwwCjAIBgZn gQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRy dXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMB Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAT i/bcII0lXX9abErBF0Y8FSuepoK6Q7QX2jLdW3v0NVQ4Fjblc+59kslyo6hgnlB+ b9/Vm5vBZ/pwQc6l9lSxfWVO9BXxkCRr/xsWbuCPsFw4RgcO8ZFW3B7Hoxdmh3CT veZfmFBH0w0patKTTTVO2uh93ojPtdgsEASc+VRzpZ15lDmDl23aRipMbgCCIx3G VQT3f6vVXoEa7RqUz67U1ZxRtpSPJje6VkSUorBx9PZW3hwVfYYO7nsQpTDe1tdH qP09cNVBmPhnueGrdmpXons3Ow3Yf4CCZX/nY3fQ5+BpoXAIw41fCgjQh0XGf8oU 2ulHVhhWSVfhBjxAPqSW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnwMaecslyuavzwjyc1r UwtaAR2ucgFI2VZgfA6ZjFfmUbEzlTqvwuF5kGaLRPDVjOnkP6Lz8sou4XenN3zp jlhMFojoIhKoSqjJv3yg1kPYAjqDxejCzcOm1HuihcjZ+VUZnxVNVtpm6Woth41k 4mu6W5NsbI1VVCZCxQ7wbO0Z2yCkoebq8hnyRoFys8n0Y83Us8jyeCk10q3TlvcM 2yzS9S4ibi2YGC+JYWUBviRvjBv58wjUqfGvKPWJkazVOalBuraqKqhPohiiVbn9 Qc90jkeyDJIm8nl9mv7t43MEdxD2tYS8Lpd5/hFCjMZdojazuBJEMSu6A6mqwxeC TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19963425900493616768064410458264719413 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-ctf-development.aws.bfops.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25056354974027131200402588294807477801373341074631016372838273107743817560769676035017049673327793879665850311265617290245913330947550968066893661929616015884912888879443720554127920320654867094198018936167303610526388325911921581877660801001820375632886775072016718055308601829930961688848664544300047546131302326680944496966716760005076053476375012624854804364820942317149493977749317253690104590727861289314467141208624608815134914824960167645126684007232592565975989262100575976353482488757994261531975554039845554242507872309919058735006285002989213665998002355997339951345550858262071721796067465000086517809743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d7716379b22a4e401d88aa70decda7635f1cc237 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-ctf-development.aws.bfops.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bf-ctf-development.aws.bfops.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.development-vibe.burda-forward.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-vibe.burda-forward.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00138bf6dc208d255d7f5a6c4ac117463c152b9ea682ba43b417da32dd5b7bf43554381636e573ee7d92c972a3a8609e507e6fdfd59b9bc167fa7041cea5f654b17d654ef415f190246bff1b166ee08fb05c3846070ef19156dc1ec7a31766877093bde65f985047d30d296ad2934d354edae87dde88cfb5d82c10049cf95473a59d79943983976dda462a4c6e0082231dc65504f77fabd55e811aed1a94cfaed4d59c51b6948f2637ba564494a2b071f4f656de1c157d860eee7b10a530ded6d747a8fd3d70d54198f867b9e1ab766a57a27b373b0dd87f8082657fe76377d0e7e069a17008c38d5f0a08d08745c67fca14dae9475618564957e1063c403ea496