onespot.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0e:33:3b:8b:f8:91:6a:46:a8:b4:a0:86:ac:bf:5f:f6 was issued on by Amazon.
With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=onespot.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:33:3b:8b:f8:91:6a:46:a8:b4:a0:86:ac:bf:5f:f6Serial Number (int): 18875206832583381914819777957753479158
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 60:ff:8d:d5:9e:25:92:14:5c:1d:44:8d:76:7f:ad:e5:d6:b9:f0:84
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 10:19:1c:8e:d3:b3:3f:47:87:90:de:d9:44:c4:c1:3f:d7:36:22:e4
Fingerprint (sha256): 0a:7f:8b:e8:94:89:a7:64:e3:74:05:02:c4:d5:91:6a:cf:e5:32:d1:31:6a:26:e5:d6:61:4b:4f:f5:b2:3c:9a
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate onespot.com
22
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for onespot.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
onespot.com
alterpoint.com
gensym.com
everestsoftwareinc.com
*.bespeakinc.com
bespeakinc.com
*.epmlive.com
prologic.com
*.gensym.com
biznessapps.com
*.prologic.com
eti.com
*.everestsoftwareinc.com
ecora.com
epmlive.com
*.onespot.com
*.biznessapps.com
*.auto-trol.com
*.alterpoint.com
*.ecora.com
auto-trol.com
*.eti.com
alterpoint.com
gensym.com
everestsoftwareinc.com
*.bespeakinc.com
bespeakinc.com
*.epmlive.com
prologic.com
*.gensym.com
biznessapps.com
*.prologic.com
eti.com
*.everestsoftwareinc.com
ecora.com
epmlive.com
*.onespot.com
*.biznessapps.com
*.auto-trol.com
*.alterpoint.com
*.ecora.com
auto-trol.com
*.eti.com
Other certificates including the domain name onespot.com
(limited to 100 certificates)
onespot.com
preview.onespot.com
support.engineyard.com
*.staging.onespot.com
pages.onespot.com
onespot.com
onespot.com
*.onespot.com
*.dashboard.onespot.com
*.onespot.com
hello.onespot.com
preview.onespot.com
*.dashboard.onespot.com
support.infinio.com
auth.onespot.com
onespot.com
preview.onespot.com
hello.onespot.com
*.dashboard.onespot.com
onespot.com
hello.onespot.com
*.dashboard.onespot.com
www.onespot.com
preview.onespot.com
*.dev.onespot.com
*.qa.onespot.com
preview.onespot.com
*.dev.onespot.com
www.onespot.com
pages.onespot.com
preview.onespot.com
hello.onespot.com
*.onespot.com
support.onespot.com
preview.onespot.com
*.onespot.com
onespot.com
*.onespot.com
*.onespot.com
preview.onespot.com
*.onespot.com
*.onespot.com
*.onespot.com
www.onespot.com
*.staging.onespot.com
onespot.com
auth.onespot.com
support.engineyard.com
support.onespot.com
onespot.com
onespot.com
*.stage.onespot.com
*.onespot.com
www.onespot.com
*.stage.onespot.com
support.onespot.com
pages.onespot.com
www.onespot.com
www.onespot.com
www.onespot.com
*.onespot.com
*.dashboard.onespot.com
www.onespot.com
pages.onespot.com
onespot.com
www.onespot.com
*.qa.onespot.com
preview.onespot.com
support.engineyard.com
support.engineyard.com
*.onespot.com
*.onespot.com
*.onespot.com
preview.onespot.com
*.dashboard.onespot.com
pages.onespot.com
www.onespot.com
auth.onespot.com
*.stage.onespot.com
*.dev.onespot.com
*.onespot.com
*.dashboard.onespot.com
www.onespot.com
*.staging.onespot.com
*.stage.onespot.com
pages.onespot.com
pages.onespot.com
preview.onespot.com
*.onespot.com
image.onespot.com
image.onespot.com
*.onespot.com
dashboard.onespot.com
onespot.com
onespot.com
*.staging.onespot.com
hello.onespot.com
preview.onespot.com
*.onespot.com
*.onespot.com
preview.onespot.com
support.engineyard.com
*.staging.onespot.com
pages.onespot.com
onespot.com
onespot.com
*.onespot.com
*.dashboard.onespot.com
*.onespot.com
hello.onespot.com
preview.onespot.com
*.dashboard.onespot.com
support.infinio.com
auth.onespot.com
onespot.com
preview.onespot.com
hello.onespot.com
*.dashboard.onespot.com
onespot.com
hello.onespot.com
*.dashboard.onespot.com
www.onespot.com
preview.onespot.com
*.dev.onespot.com
*.qa.onespot.com
preview.onespot.com
*.dev.onespot.com
www.onespot.com
pages.onespot.com
preview.onespot.com
hello.onespot.com
*.onespot.com
support.onespot.com
preview.onespot.com
*.onespot.com
onespot.com
*.onespot.com
*.onespot.com
preview.onespot.com
*.onespot.com
*.onespot.com
*.onespot.com
www.onespot.com
*.staging.onespot.com
onespot.com
auth.onespot.com
support.engineyard.com
support.onespot.com
onespot.com
onespot.com
*.stage.onespot.com
*.onespot.com
www.onespot.com
*.stage.onespot.com
support.onespot.com
pages.onespot.com
www.onespot.com
www.onespot.com
www.onespot.com
*.onespot.com
*.dashboard.onespot.com
www.onespot.com
pages.onespot.com
onespot.com
www.onespot.com
*.qa.onespot.com
preview.onespot.com
support.engineyard.com
support.engineyard.com
*.onespot.com
*.onespot.com
*.onespot.com
preview.onespot.com
*.dashboard.onespot.com
pages.onespot.com
www.onespot.com
auth.onespot.com
*.stage.onespot.com
*.dev.onespot.com
*.onespot.com
*.dashboard.onespot.com
www.onespot.com
*.staging.onespot.com
*.stage.onespot.com
pages.onespot.com
pages.onespot.com
preview.onespot.com
*.onespot.com
image.onespot.com
image.onespot.com
*.onespot.com
dashboard.onespot.com
onespot.com
onespot.com
*.staging.onespot.com
hello.onespot.com
preview.onespot.com
*.onespot.com
*.onespot.com
Certificate
The complete raw certificate details for onespot.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIQDjM7i/iRakaotKCGrL9f9jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDYyNjAwMDAwMFoXDTI0MDcyNTIzNTk1OVowFjEU MBIGA1UEAxMLb25lc3BvdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPu7vmfs3TgBdffpIJLzj6ubbqaWNu9PZmlH9pU5i0zyN7+E7hqug729rJ BV+qSCu0bEvRKWjGWHfMvc97+qQTFP+3nJDrjgSc8E27f/MSv6pgZ1soH2ayAOWH d0kQ5pJjl0sw+EFTk8tndIvHIlRl/uCdWdQXWfvDvYbBBUWGJiZQ7z/nOZT74OUW RThYYJtNrjMd7QMcMuiFyHpvhabQut5CyhVXMGhWuA9X7WaMLnIPJyYjp5g2bDDo Uu6MMO8vSbLGk+hFY5tjPbpDth7X4ULkQ+QB5UouMtcGIhwX0VJBzpaj3mn9QcdR lRqzokdaHB9MkcmCvceTw7Y6oBiPAgMBAAGjggQ0MIIEMDAfBgNVHSMEGDAWgBSB uA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUYP+N1Z4lkhRcHUSNdn+t5da5 8IQwggFjBgNVHREEggFaMIIBVoILb25lc3BvdC5jb22CDmFsdGVycG9pbnQuY29t ggpnZW5zeW0uY29tghZldmVyZXN0c29mdHdhcmVpbmMuY29tghAqLmJlc3BlYWtp bmMuY29tgg5iZXNwZWFraW5jLmNvbYINKi5lcG1saXZlLmNvbYIMcHJvbG9naWMu Y29tggwqLmdlbnN5bS5jb22CD2Jpem5lc3NhcHBzLmNvbYIOKi5wcm9sb2dpYy5j b22CB2V0aS5jb22CGCouZXZlcmVzdHNvZnR3YXJlaW5jLmNvbYIJZWNvcmEuY29t ggtlcG1saXZlLmNvbYINKi5vbmVzcG90LmNvbYIRKi5iaXpuZXNzYXBwcy5jb22C DyouYXV0by10cm9sLmNvbYIQKi5hbHRlcnBvaW50LmNvbYILKi5lY29yYS5jb22C DWF1dG8tdHJvbC5jb22CCSouZXRpLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAK MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v Y3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny dC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAw ggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8 vOzew1FIWUZxH7WbAAABiPYUTLEAAAQDAEcwRQIgRosHOZ4djK+f22bkjBkbNOq3 qHO57kLkG0SSlnphWLECIQDF87rInsIONFQezzZJdL/N5TYRinqOeFxNhqaL7K5f UgB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiPYUTPgAAAQD AEcwRQIgN0OjQ6WQw468qOALKYQIX1K6SjCm4GwXHxZgRIRXDZICIQCGEIVH9fXc OB3vf3rS++m2P+MZk5yezobnt3T6fx3HwwB3ANq2v2s/tbYin5vCu1xr6HCRcWy7 UYSFNL2kPTBI1/urAAABiPYUTK0AAAQDAEgwRgIhAOmofLXOiPFzyjzuILKZPSRy oK/bobA/cLfn71ek9SulAiEA36fkacoocx7am+9QIcmBeLx1UJdOfUriB1HKHWBe uhowDQYJKoZIhvcNAQELBQADggEBAIVUPQFIGK3EQ7kILOUZxNRe8/pdBCzY4rCj +vzH3bELycuOyheqa9iMbVZ8kDVpIQcTFZqTgxigfiqIcuxOTd47JgwPdDInQHwB d48zYGf8+j5HZHYkzUZ5Wn5/ugCMM0EOHiNNr8E0H1vo682fD5rsHMA5x9O/VtO1 hBX+VFe1VNwjID+sbJiOifWaoyxZOpfW09+IXpIizYtc155XMYdEdNv/jgmvU8qq IzC+TmV/MYYK27jVzwN7JyaZQQRImqbd9hrHgbBMF2NCc1KpZsipCqsVGPry7Jrp ILUKesgM1cOoJlV7PQu3pz9PIPJ56O0sv+lmqnYdBzQ2Ga5bL1M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7u75n7N04AXX36SCS84 +rm26mljbvT2ZpR/aVOYtM8je/hO4aroO9vayQVfqkgrtGxL0Sloxlh3zL3Pe/qk ExT/t5yQ644EnPBNu3/zEr+qYGdbKB9msgDlh3dJEOaSY5dLMPhBU5PLZ3SLxyJU Zf7gnVnUF1n7w72GwQVFhiYmUO8/5zmU++DlFkU4WGCbTa4zHe0DHDLohch6b4Wm 0LreQsoVVzBoVrgPV+1mjC5yDycmI6eYNmww6FLujDDvL0myxpPoRWObYz26Q7Ye 1+FC5EPkAeVKLjLXBiIcF9FSQc6Wo95p/UHHUZUas6JHWhwfTJHJgr3Hk8O2OqAY jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18875206832583381914819777957753479158 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onespot.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26223904206707141822263941767719328113990258605169728863530981543348432689493745259767545028159432712977145955063721533377787637392076354985262384691721991590521343322755518464160265006948786037537546183263473727066179834280770537186604074417006574651888689374864727122185239617772868479873280273653247797777651193575440752522356023806248034068744729320955670232857334282901183904682200175673237563633332089879512539030214877586771986875106895172192575871376101262839638170332696175980511119177953494481437589493505059756227067836727947347350059697025945208770240605180721355782851406044668336346941084633573353330831 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60ff8dd59e2592145c1d448d767fade5d6b9f084 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (346 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onespot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alterpoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gensym.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everestsoftwareinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bespeakinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespeakinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epmlive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prologic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensym.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biznessapps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prologic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everestsoftwareinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecora.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epmlive.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onespot.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biznessapps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto-trol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alterpoint.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecora.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-trol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eti.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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