adv-ue2-dev-insights-api.corp.aperturecvo.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 03:30:a2:02:ed:a8:a8:b0:3f:d3:7e:82:8d:c1:30:a9 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=adv-ue2-dev-insights-api.corp.aperturecvo.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:30:a2:02:ed:a8:a8:b0:3f:d3:7e:82:8d:c1:30:a9Serial Number (int): 4240200218928379418167516452505071785
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 66:6c:38:79:8d:13:78:71:40:40:4c:cd:ba:f4:65:bb:79:50:d8:ca
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): a0:ce:81:3f:2f:c5:59:10:36:1b:f6:60:71:5f:d7:18:ee:70:b3:3b
Fingerprint (sha256): 0a:36:2b:7a:3d:b0:98:3d:6a:6c:62:dc:85:f0:19:f4:2f:4c:6b:fc:54:ac:82:4c:73:17:19:d5:ea:bc:63:1d
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate adv-ue2-dev-insights-api.corp.aperturecvo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for adv-ue2-dev-insights-api.corp.aperturecvo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
adv-ue2-dev-insights-api.corp.aperturecvo.com
Other certificates including the domain name aperturecvo.com
(limited to 100 certificates)
aperturecvo.com
prime-ue2-prod-profile-primeapi.nsapps.aperturecvo.com
adv-ue2-dev-insights-api.corp.aperturecvo.com
api-np.aperturecvo.com
credforecast.corp.aperturecvo.com
*.nsapps.aperturecvo.com
*.aperturecvo.com
prime-ue2-qa-profile-curateweb.nsapps.aperturecvo.com
dcl-ue2-dev-dcm-api.nsapps.aperturecvo.com
ss-ue2-prod-central-authapi.nsapps.aperturecvo.com
adv-ue2-prod-advntgvs-veriapi.corp.aperturecvo.com
aperturecvo.com
ss-ue2-stage-central-confapi.nsapps.aperturecvo.com
prime-ue2-stage-popmon-api.nsapps.aperturecvo.com
remote.aperturecvo.com
www.aperturecvo.com
cm-uw2-dev-chkmdc-app.nsapps.aperturecvo.com
aperturecvo.com
ss-ue2-stage-central-authapi.nsapps.aperturecvo.com
prime-ue2-qa-profile-curateapi.nsapps.aperturecvo.com
*.aperturecvo.com
sip.aperturecvo.com
*.id.aperturecvo.com
outreach.aperturecvo.com
adv-ue2-dev-insights-api.corp.aperturecvo.com
credforecast-stage.corp.aperturecvo.com
adv-ue2-qa-insights-api.corp.aperturecvo.com
sip.aperturecvo.com
prime-ue2-qa-psv-psvorders.nsapps.aperturecvo.com
*.aperturecvo.com
adv-ue2-qa-npdb-webui.corp.aperturecvo.com
prime-ue2-stage-profile-api.nsapps.aperturecvo.com
prime-ue2-dev-profile-curateapi.nsapps.aperturecvo.com
ss-ue2-prod-central-confapi.nsapps.aperturecvo.com
*.pid.aperturecvo.com
adv-ue2-prod-insights-api.corp.aperturecvo.com
adv-ue2-dev-crdfcast-webapp2.corp.aperturecvo.com
adv-ue2-qa-insights-api.corp.aperturecvo.com
adv-ue2-qa-insights-webui.corp.aperturecvo.com
*.aperturecvo.com
adv-ue2-prod-advntgvs-veriapi.corp.aperturecvo.com
prime-ue2-dev-psv1-psvorders.nsapps.aperturecvo.com
sip.aperturecvo.com
adv-ue2-qa-insights-webui.corp.aperturecvo.com
srv-rdgw01.corp.aperturecvo.com
prime-ue2-qa-psv-provapi.nsapps.aperturecvo.com
prime-ue2-prod-profile-api.nsapps.aperturecvo.com
outreach.aperturecvo.com
cm-uw2-qa-chkmdc-app.nsapps.aperturecvo.com
prime-ue2-prod-popmon-api.nsapps.aperturecvo.com
alleng-ue2-dev-alleng-dev-webui.nsapps.aperturecvo.com
outreach.aperturecvo.com
adv-ue2-stage-insights-api.corp.aperturecvo.com
prime-ue2-dev-psv1-provapi.nsapps.aperturecvo.com
alleng-ue2-dev-alleng-dev-webui.nsapps.aperturecvo.com
prime-ue2-stage-profile-primeapi.nsapps.aperturecvo.com
adv-ue2-dev-insights-webui.corp.aperturecvo.com
sip.aperturecvo.com
sip.aperturecvo.com
outreach.aperturecvo.com
prime-ue2-prod-profile-primeapi.nsapps.aperturecvo.com
adv-ue2-dev-insights-api.corp.aperturecvo.com
api-np.aperturecvo.com
credforecast.corp.aperturecvo.com
*.nsapps.aperturecvo.com
*.aperturecvo.com
prime-ue2-qa-profile-curateweb.nsapps.aperturecvo.com
dcl-ue2-dev-dcm-api.nsapps.aperturecvo.com
ss-ue2-prod-central-authapi.nsapps.aperturecvo.com
adv-ue2-prod-advntgvs-veriapi.corp.aperturecvo.com
aperturecvo.com
ss-ue2-stage-central-confapi.nsapps.aperturecvo.com
prime-ue2-stage-popmon-api.nsapps.aperturecvo.com
remote.aperturecvo.com
www.aperturecvo.com
cm-uw2-dev-chkmdc-app.nsapps.aperturecvo.com
aperturecvo.com
ss-ue2-stage-central-authapi.nsapps.aperturecvo.com
prime-ue2-qa-profile-curateapi.nsapps.aperturecvo.com
*.aperturecvo.com
sip.aperturecvo.com
*.id.aperturecvo.com
outreach.aperturecvo.com
adv-ue2-dev-insights-api.corp.aperturecvo.com
credforecast-stage.corp.aperturecvo.com
adv-ue2-qa-insights-api.corp.aperturecvo.com
sip.aperturecvo.com
prime-ue2-qa-psv-psvorders.nsapps.aperturecvo.com
*.aperturecvo.com
adv-ue2-qa-npdb-webui.corp.aperturecvo.com
prime-ue2-stage-profile-api.nsapps.aperturecvo.com
prime-ue2-dev-profile-curateapi.nsapps.aperturecvo.com
ss-ue2-prod-central-confapi.nsapps.aperturecvo.com
*.pid.aperturecvo.com
adv-ue2-prod-insights-api.corp.aperturecvo.com
adv-ue2-dev-crdfcast-webapp2.corp.aperturecvo.com
adv-ue2-qa-insights-api.corp.aperturecvo.com
adv-ue2-qa-insights-webui.corp.aperturecvo.com
*.aperturecvo.com
adv-ue2-prod-advntgvs-veriapi.corp.aperturecvo.com
prime-ue2-dev-psv1-psvorders.nsapps.aperturecvo.com
sip.aperturecvo.com
adv-ue2-qa-insights-webui.corp.aperturecvo.com
srv-rdgw01.corp.aperturecvo.com
prime-ue2-qa-psv-provapi.nsapps.aperturecvo.com
prime-ue2-prod-profile-api.nsapps.aperturecvo.com
outreach.aperturecvo.com
cm-uw2-qa-chkmdc-app.nsapps.aperturecvo.com
prime-ue2-prod-popmon-api.nsapps.aperturecvo.com
alleng-ue2-dev-alleng-dev-webui.nsapps.aperturecvo.com
outreach.aperturecvo.com
adv-ue2-stage-insights-api.corp.aperturecvo.com
prime-ue2-dev-psv1-provapi.nsapps.aperturecvo.com
alleng-ue2-dev-alleng-dev-webui.nsapps.aperturecvo.com
prime-ue2-stage-profile-primeapi.nsapps.aperturecvo.com
adv-ue2-dev-insights-webui.corp.aperturecvo.com
sip.aperturecvo.com
sip.aperturecvo.com
outreach.aperturecvo.com
Certificate
The complete raw certificate details for adv-ue2-dev-insights-api.corp.aperturecvo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEmTCCA4GgAwIBAgIQAzCiAu2oqLA/036CjcEwqTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIwNzAwMDAwMFoXDTI0MDEwNjIzNTk1OVowODE2 MDQGA1UEAxMtYWR2LXVlMi1kZXYtaW5zaWdodHMtYXBpLmNvcnAuYXBlcnR1cmVj dm8uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9pSLDw24OAn 7HapSSQZ9JIs3J9tIB2DMqaPVezdDN1yAXL3PQiE642tiYtNxd/GpQxi+2SNH6uH 2oICTODgA5/zzuLXu9FHyeZs5FJ/vzWABEcQ0teSLdT5aQeVm9HmjPaJBh1IOuOI IoXErH+mRf+dpFc4L40pKIPTIeI3UrkqLicTe7eJG2xoulk02rEz8iKMmvWCGbH2 cPqWEii+OerTU0XOlqQIiJfbl3BsHlC5oEr30O3tIRe759xqmOWWHjuySBSASDVr kqCTcU8qVNFlzdLLCS3qcg5/CSmxpxE5nIYzG0UB+jSDfkEqnzOc+R8FGUi/yKCL 3phdoUP1CwIDAQABo4IBmTCCAZUwHwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf 5uWQE4UwHQYDVR0OBBYEFGZsOHmNE3hxQEBMzbr0Zbt5UNjKMDgGA1UdEQQxMC+C LWFkdi11ZTItZGV2LWluc2lnaHRzLWFwaS5jb3JwLmFwZXJ0dXJlY3ZvLmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29t L3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJt MDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBANFh0UkKC9OUI+Gg0SvN2yh9+EoE/LjAptzyHZ1LMydrim/k HapPtmZbsyF0jKRCHinjzFgVHmxcU/6NtQbx6tumNT018GFF+wKky4wVryRhKAzm 6z8KS4AB9Rj6PHf4a4ob75Dw9JkuZi91LNpjZdkAwg0W4pGkNXxRuxFlmz+Hquyj jfgc7PEIAifPMZWJ48aUa5o1vFCpHT16gIFguLaUOl7qkQKniUfo21C9DB5OIICZ XdwVLDD5HyEPT3g+ApaF620oqFStYSArMKINn2ht9PwY9dtIP1MWXU5gskb19RsT Q2IZyKhespPCOdLHWtffg+m8JYDPvdf+XI6dnpQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9pSLDw24OAn7HapSSQZ 9JIs3J9tIB2DMqaPVezdDN1yAXL3PQiE642tiYtNxd/GpQxi+2SNH6uH2oICTODg A5/zzuLXu9FHyeZs5FJ/vzWABEcQ0teSLdT5aQeVm9HmjPaJBh1IOuOIIoXErH+m Rf+dpFc4L40pKIPTIeI3UrkqLicTe7eJG2xoulk02rEz8iKMmvWCGbH2cPqWEii+ OerTU0XOlqQIiJfbl3BsHlC5oEr30O3tIRe759xqmOWWHjuySBSASDVrkqCTcU8q VNFlzdLLCS3qcg5/CSmxpxE5nIYzG0UB+jSDfkEqnzOc+R8FGUi/yKCL3phdoUP1 CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4240200218928379418167516452505071785 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adv-ue2-dev-insights-api.corp.aperturecvo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22704314680320813409624659506682879067622745606031277564501180574622657768479975880372430758688213607140491015835410262099498532156318142094987604308006484163278893517722866690817192514564754633594978468868508960371161939541073752122625660304595575996016018628055855677378202865083290876692853015070871902943550533485468030441044838820998796771597754686023524639842766558307388433170981904183915700604546492739307194096176324602266986887219668934059463563518462329417801023088273708779565220320745662636017223413356179941070449365139087573971543990891848428525648588348991544724322343031734731331372577645372467574027 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 666c38798d13787140404ccdbaf465bb7950d8ca . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv-ue2-dev-insights-api.corp.aperturecvo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00d161d1490a0bd39423e1a0d12bcddb287df84a04fcb8c0a6dcf21d9d4b33276b8a6fe41daa4fb6665bb321748ca4421e29e3cc58151e6c5c53fe8db506f1eadba6353d35f06145fb02a4cb8c15af2461280ce6eb3f0a4b8001f518fa3c77f86b8a1bef90f0f4992e662f752cda6365d900c20d16e291a4357c51bb11659b3f87aaeca38df81cecf1080227cf319589e3c6946b9a35bc50a91d3d7a808160b8b6943a5eea9102a78947e8db50bd0c1e4e2080995ddc152c30f91f210f4f783e029685eb6d28a854ad61202b30a20d9f686df4fc18f5db483f53165d4e60b246f5f51b13436219c8a85eb293c239d2c75ad7df83e9bc2580cfbdd7fe5c8e9d9e94