*.spin.pm
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 09:29:91:7f:d4:bf:11:c9:7c:c5:c1:b9:1f:bf:3b:d0 was issued on by Amazon.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.spin.pm
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:29:91:7f:d4:bf:11:c9:7c:c5:c1:b9:1f:bf:3b:d0Serial Number (int): 12178887210475150503374482197111061456
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0a:ad:b4:e2:ea:36:b2:07:56:d2:ef:d1:3c:f4:33:84:27:53:36:39
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): ea:6b:34:97:c7:91:9d:dc:b1:02:37:fd:b0:5c:ec:a6:8e:48:85:ef
Fingerprint (sha256): 09:c0:b3:98:b5:97:50:6f:09:ca:f8:3f:d7:a1:8e:f8:dc:23:ef:c0:e8:26:94:67:5d:87:9b:f4:92:3c:29:c3
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.spin.pm
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.spin.pm
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.spin.pm
*.api.spin.pm
*.ws.api.spin.pm
*.partner-api.api.spin.pm
*.mds.api.spin.pm
*.tvms.api.spin.pm
*.iot.api.spin.pm
*.api.spin.pm
*.ws.api.spin.pm
*.partner-api.api.spin.pm
*.mds.api.spin.pm
*.tvms.api.spin.pm
*.iot.api.spin.pm
Other certificates including the domain name spin.pm
(limited to 100 certificates)
matrix.ws.api.spin.pm
spin.pm
help.spin.pm
sni234254.cloudflaressl.com
image-prv.prd.q2w.spin.pm
api.spin.pm
sni234254.cloudflaressl.com
dps.spin.pm
integration.spin.pm
sni234254.cloudflaressl.com
ssl951885.cloudflaressl.com
stagingold.spin.pm
sni234254.cloudflaressl.com
iot-assets.dbm.q2w.spin.pm
sni234254.cloudflaressl.com
attalend.com
*.spin.pm
*.dbm.q2w.spin.pm
*.spin.pm
api.spin.pm
spin.pm
www.spin.pm
api.spin.pm
spin.pm
www.spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
centercourt.simpplr.com
spin.pm
s-img-stg.prd.q2w.spin.pm
*.spin.pm
sni234254.cloudflaressl.com
qa.spin.pm
staging.spin.pm
iot-assets.dbm.q2w.spin.pm
spin.pm
*.spin.pm
staging.spin.pm
image-prv.prd.q2w.spin.pm
sni234254.cloudflaressl.com
image-pub.prd.q2w.spin.pm
centercourt.simpplr.com
gitlab.gia.dps.spin.pm
help.spin.pm
mobile-staging.spin.pm
spin.pm
mobile-staging.spin.pm
centercourt.simpplr.com
spin.pm
centercourt.simpplr.com
sni234254.cloudflaressl.com
iot-assets.dbm.q2w.spin.pm
ci.dps.spin.pm
matrix.ws.api.spin.pm
sni234254.cloudflaressl.com
staging.spin.pm
help.spin.pm
image-pub.prd.q2w.spin.pm
help.spin.pm
*.dev.birdapp.com
mobile.spin.pm
spin.pm
*.spin.pm
spin.pm
sni234254.cloudflaressl.com
www.spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
spin.pm
staging.spin.pm
spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
qa.spin.pm
centercourt.simpplr.com
www.spin.pm
sni234254.cloudflaressl.com
api.spin.pm
centercourt.simpplr.com
sni234254.cloudflaressl.com
attalend.com
sni234254.cloudflaressl.com
ci.dps.spin.pm
sni234254.cloudflaressl.com
*.corp-srvcs.amzn.spin.pm
spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
attalend.com
qa2-h.spin.pm
teleport.dps.spin.pm
sni234254.cloudflaressl.com
spin.pm
spin.pm
spininternal.com
sni.cloudflaressl.com
teleport.dps.spin.pm
www.spin.pm
myft-api-test.ft.com
www.spin.pm
spin.pm
help.spin.pm
sni234254.cloudflaressl.com
image-prv.prd.q2w.spin.pm
api.spin.pm
sni234254.cloudflaressl.com
dps.spin.pm
integration.spin.pm
sni234254.cloudflaressl.com
ssl951885.cloudflaressl.com
stagingold.spin.pm
sni234254.cloudflaressl.com
iot-assets.dbm.q2w.spin.pm
sni234254.cloudflaressl.com
attalend.com
*.spin.pm
*.dbm.q2w.spin.pm
*.spin.pm
api.spin.pm
spin.pm
www.spin.pm
api.spin.pm
spin.pm
www.spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
centercourt.simpplr.com
spin.pm
s-img-stg.prd.q2w.spin.pm
*.spin.pm
sni234254.cloudflaressl.com
qa.spin.pm
staging.spin.pm
iot-assets.dbm.q2w.spin.pm
spin.pm
*.spin.pm
staging.spin.pm
image-prv.prd.q2w.spin.pm
sni234254.cloudflaressl.com
image-pub.prd.q2w.spin.pm
centercourt.simpplr.com
gitlab.gia.dps.spin.pm
help.spin.pm
mobile-staging.spin.pm
spin.pm
mobile-staging.spin.pm
centercourt.simpplr.com
spin.pm
centercourt.simpplr.com
sni234254.cloudflaressl.com
iot-assets.dbm.q2w.spin.pm
ci.dps.spin.pm
matrix.ws.api.spin.pm
sni234254.cloudflaressl.com
staging.spin.pm
help.spin.pm
image-pub.prd.q2w.spin.pm
help.spin.pm
*.dev.birdapp.com
mobile.spin.pm
spin.pm
*.spin.pm
spin.pm
sni234254.cloudflaressl.com
www.spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
spin.pm
staging.spin.pm
spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
qa.spin.pm
centercourt.simpplr.com
www.spin.pm
sni234254.cloudflaressl.com
api.spin.pm
centercourt.simpplr.com
sni234254.cloudflaressl.com
attalend.com
sni234254.cloudflaressl.com
ci.dps.spin.pm
sni234254.cloudflaressl.com
*.corp-srvcs.amzn.spin.pm
spin.pm
sni234254.cloudflaressl.com
sni234254.cloudflaressl.com
attalend.com
qa2-h.spin.pm
teleport.dps.spin.pm
sni234254.cloudflaressl.com
spin.pm
spin.pm
spininternal.com
sni.cloudflaressl.com
teleport.dps.spin.pm
www.spin.pm
myft-api-test.ft.com
www.spin.pm
Certificate
The complete raw certificate details for *.spin.pm in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEyjCCA7KgAwIBAgIQCSmRf9S/Ecl8xcG5H7870DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTEyNjAwMDAwMFoXDTI0MTIyNDIzNTk1OVowFDES MBAGA1UEAwwJKi5zcGluLnBtMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF/yW/qcx7Eas5pUZCV/U32+dDfl4JK7zqPHQwhYeEOD6jhTQcRXkqeXFmgC USkBFDAg1Rt6dsLFmuTU9HvjJmPY42BTbgyB3qysj9V39ILOSocq7Pxj0oTc5sKX vgFBrjZW/bsnYKJ+3X6fUXTcGlA85znyfQvskiR9cDCRvE54VDueK0TKSge8c9Iq JabZxggH9BAXfqDm/DgvXLA8EFHJpmS3p7/1h8t0sFa7CoF6oYVc7MJVByL/I6km FrI/eDNnNOIFsZ46dfBRcI797U5SvrXFz+rpsa40gppSYrgxxezoJ5hUJPzInKQp eH7QFrpJGjJQLkTwuphDfK889wIDAQABo4IB7jCCAeowHwYDVR0jBBgwFoAUwDFS zVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFAqttOLqNrIHVtLv0Tz0M4QnUzY5 MIGMBgNVHREEgYQwgYGCCSouc3Bpbi5wbYINKi5hcGkuc3Bpbi5wbYIQKi53cy5h cGkuc3Bpbi5wbYIZKi5wYXJ0bmVyLWFwaS5hcGkuc3Bpbi5wbYIRKi5tZHMuYXBp LnNwaW4ucG2CEioudHZtcy5hcGkuc3Bpbi5wbYIRKi5pb3QuYXBpLnNwaW4ucG0w EwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBn MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20w NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy bTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBu3j1FLbwZ/q4tjO0A4ywiJZoYWYomipm796v2B9hgTGXK Z3sF8r65UmI/nIfNwEv4otwY6sZoi5DkmVT9mreHuz6+CTy1nNz4NEI7Zu6bFV88 8L5IYzWE6LuNzMy/WHvAxMOl8wOTetOlkcUh0mtKKyA0RSaJvf/EZHwIIkM7o6dk RycCI69iIchEkOhimQO/tPTroB1vdBabKeaXLprKsp5uCOh+1rWxdlZAyrFh1ytn XBj76kGPM9+0A7qwRzS2aXZ7JkAt2iomo5NxszHjg+HDLvnWRHAa/a3EhRZ4fJ8S /TWopbaSVUfOKr0vzIy0+axw8WIXc1it2U4JW6TP -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF/yW/qcx7Eas5pUZCV/ U32+dDfl4JK7zqPHQwhYeEOD6jhTQcRXkqeXFmgCUSkBFDAg1Rt6dsLFmuTU9Hvj JmPY42BTbgyB3qysj9V39ILOSocq7Pxj0oTc5sKXvgFBrjZW/bsnYKJ+3X6fUXTc GlA85znyfQvskiR9cDCRvE54VDueK0TKSge8c9IqJabZxggH9BAXfqDm/DgvXLA8 EFHJpmS3p7/1h8t0sFa7CoF6oYVc7MJVByL/I6kmFrI/eDNnNOIFsZ46dfBRcI79 7U5SvrXFz+rpsa40gppSYrgxxezoJ5hUJPzInKQpeH7QFrpJGjJQLkTwuphDfK88 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12178887210475150503374482197111061456 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.spin.pm' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25294974082248122634233100692486575069048565248560883926577553101973565194446180515499696399955311412956764379050482941046500595413921686479673258307388904647941079172448127477655565621621215633905963458714042799137727016844014071608983525419428312003250326280219673529404972080250700208577875808520125965638119025608513152213282124358003372229218719871227854229225552612044589537824779575964941101271216532213098134915720138750439334744800942611211980011985500279653954021431659393671552200251971901341273873508400939913360442711748756167911265474977870104295776996512691610848002006490922830380045328147538271747319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0aadb4e2ea36b20756d2efd13cf4338427533639 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spin.pm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.spin.pm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ws.api.spin.pm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partner-api.api.spin.pm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mds.api.spin.pm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvms.api.spin.pm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iot.api.spin.pm' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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