staging-api.napkin.io
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 07:20:8c:bf:3c:db:db:99:84:af:87:91:f8:cd:86:26 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=staging-api.napkin.io
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:20:8c:bf:3c:db:db:99:84:af:87:91:f8:cd:86:26Serial Number (int): 9473604158725969426736367524127802918
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 9e:48:a1:5e:fa:d3:07:48:79:bf:58:0b:a9:cd:93:77:9e:37:74:13
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 77:43:e8:a1:47:a7:ee:1d:09:38:08:1c:26:d4:07:aa:63:da:b4:3d
Fingerprint (sha256): 0b:49:9e:f3:7f:44:bd:f4:26:5d:9d:79:0a:d7:ca:b1:8e:42:96:cd:fd:a1:f3:49:2b:e2:4c:09:78:8f:51:f7
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate staging-api.napkin.io
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for staging-api.napkin.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
staging-api.napkin.io
*.staging.npkn.net
legacy-dev-api.napkin.io
*.staging.npkn.net
legacy-dev-api.napkin.io
Other certificates including the domain name napkin.io
(limited to 100 certificates)
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
staging-api.napkin.io
napkin.io
auth.napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
partner.fidelizzare.app
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
sni.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
staging-api.napkin.io
napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
www.pinosgarabandal.es
app.oshiete.catekyo.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
skillseastriding.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
auth.napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
www.smartfixvoghera.it
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni.cloudflaressl.com
tribunessa.co.za
napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
staging-api.napkin.io
napkin.io
auth.napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
partner.fidelizzare.app
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
sni.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
staging-api.napkin.io
napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
www.pinosgarabandal.es
app.oshiete.catekyo.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
skillseastriding.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
auth.napkin.io
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
www.smartfixvoghera.it
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni62155.cloudflaressl.com
sni.cloudflaressl.com
tribunessa.co.za
napkin.io
Certificate
The complete raw certificate details for staging-api.napkin.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElzCCA3+gAwIBAgIQByCMvzzb25mEr4eR+M2GJjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUzMDAwMDAwMFoXDTI0MDYyNzIzNTk1OVowIDEe MBwGA1UEAxMVc3RhZ2luZy1hcGkubmFwa2luLmlvMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEArZWOU5v3kNvAceSriOJKizdBtGuIBCH1lf3Fc3BOqYw0 QU1gAAzF0qx6gmHNct1WsVAe6Uit1/xlsUmoFMYyQlqiQqh1pUxprJ88s/Jd83/E ufVkTU5DwEqqpcXZ2ZG49UgsvK545F1fDCyykz9sJzQprTE86Eww7h9Abmtci1wZ ELRk/NXE9sRs74Uk9iFZ/CsJfK9A4imRlE2S9S13oI90asZGftixYDdFUiRkmEnP +fhFHaw0fQmrLH57dtsSxAcJwdJ6xP8SdVOVV6KZBGuLOGwV3Fpl94mrJhl8InRU Iv5Lhtok+hpqcagYitw4Cg2jAGsRIT5GGcDW9sE4bwIDAQABo4IBrzCCAaswHwYD VR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFJ5IoV760wdI eb9YC6nNk3eeN3QTME4GA1UdEQRHMEWCFXN0YWdpbmctYXBpLm5hcGtpbi5pb4IS Ki5zdGFnaW5nLm5wa24ubmV0ghhsZWdhY3ktZGV2LWFwaS5uYXBraW4uaW8wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9y Mm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAx LmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQDidX3hbpqbuyt4gobqfL2dfReprnBx3jLSVEXsM/q4UD/do6/w DJ7sfvgaHItQwV2KktBPMupO1fWx3pODon9F48nParUj+BMVvpNunIEjJrtwb0CL quaG8ToESkeNFW4LfTJ7PkCj0PICirmTqfU3jtdLwNcwrR9oPeOxDvLbqNaIg0yi U+pCXnwLPB62YCUdAqmNXKVmKbCWQ6U0KiIlyqg4KOFzwQ5dnpKjBiUPeyOLZHJo sZ0G4b9N+1gDjPNVL+zpZLqBeXdgs76WEnNwSDo48Yz+huqxGNgaS5utOrR0Jv0q bM4oc//+rNplg/LHvXseRGjKWpjxnOLMioZh -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZWOU5v3kNvAceSriOJK izdBtGuIBCH1lf3Fc3BOqYw0QU1gAAzF0qx6gmHNct1WsVAe6Uit1/xlsUmoFMYy QlqiQqh1pUxprJ88s/Jd83/EufVkTU5DwEqqpcXZ2ZG49UgsvK545F1fDCyykz9s JzQprTE86Eww7h9Abmtci1wZELRk/NXE9sRs74Uk9iFZ/CsJfK9A4imRlE2S9S13 oI90asZGftixYDdFUiRkmEnP+fhFHaw0fQmrLH57dtsSxAcJwdJ6xP8SdVOVV6KZ BGuLOGwV3Fpl94mrJhl8InRUIv5Lhtok+hpqcagYitw4Cg2jAGsRIT5GGcDW9sE4 bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9473604158725969426736367524127802918 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging-api.napkin.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21912975553274664310015819131538467964067537774609758257632502705285570119563065124477771162626222530655143676897247662828168937265003681655682622774367677647959100610839266010306869510235016452518394566015963814163178873628928549182075322399385949210294841659370112968986556549860815143067970889647411032201517979569740486731111550101975978213536911318593296624762229117864680693532969308455309587982778038940894771423768922079802371766171130458640808042844212375764559114132679320992069698254814499980857675708878493178438466562846399581055274059104113755382518087772155474092778937508865593317298540727047844608111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9e48a15efad3074879bf580ba9cd93779e377413 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-api.napkin.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.npkn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy-dev-api.napkin.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00e2757de16e9a9bbb2b788286ea7cbd9d7d17a9ae7071de32d25445ec33fab8503fdda3aff00c9eec7ef81a1c8b50c15d8a92d04f32ea4ed5f5b1de9383a27f45e3c9cf6ab523f81315be936e9c812326bb706f408baae686f13a044a478d156e0b7d327b3e40a3d0f2028ab993a9f5378ed74bc0d730ad1f683de3b10ef2dba8d688834ca253ea425e7c0b3c1eb660251d02a98d5ca56629b09643a5342a2225caa83828e173c10e5d9e92a306250f7b238b647268b19d06e1bf4dfb58038cf3552fece964ba81797760b3be96127370483a38f18cfe86eab118d81a4b9bad3ab47426fd2a6cce2873fffeacda6583f2c7bd7b1e4468ca5a98f19ce2cc8a8661