blogs.cbc.be
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 04:14:22:73:ba:59:db:f9:79:10:65:9b:2b:1f:ee:5e was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=blogs.cbc.be
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:14:22:73:ba:59:db:f9:79:10:65:9b:2b:1f:ee:5eSerial Number (int): 5421456691148418366317567412476571230
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 4c:ac:b9:80:fb:b1:18:a7:7c:88:49:be:64:4b:b4:ba:ff:ef:d2:f4
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 0c:fe:ca:8a:73:ec:61:12:90:5f:aa:50:cd:9b:b7:1a:37:d8:c0:41
Fingerprint (sha256): 0c:a2:ad:6d:41:40:1a:8d:95:37:85:38:67:20:54:f9:4f:73:1b:b1:94:39:6b:80:f0:74:68:ac:75:a6:df:e4
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate blogs.cbc.be
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for blogs.cbc.be
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
blogs.cbc.be
Other certificates including the domain name cbc.be
(limited to 100 certificates)
kbc.eu
kbc.com
publiccontent-a.cbc.be
forwrd.it
pdf-accept.kbc.be
cbconline.cbc.be
business.api.acc.kbc-group.com
wcmassets-a.kbc.be
bmid.apigw.acc.cbc.be
mobile-f.kbc.be
business.api.fet.kbc-group.com
expense-management-f.kbc.be
app.brand.ambassify.eu
psd2.api.acc.kbc-group.com
t.info.kbc.be
investments.kbc.be
bluecandyapi.kbc-group.com
psd2.api.kbc-group.com
bluecandyapi.kbc-group.com
multimedia.kbc.be
www.cbc.be
www.cbc.be
ambassadors.nationallottery.be
internal.acc.kbc-group.com
kbctouch-a.kbc.be
privatebanking.cbc.be
ul-a.kbc.be
psd2-mtls.api.kbc-group.com
internal.kbc-group.com
ul.kbc.be
touch.cbc.be
link.socialsharing.kbccorporatebanking.be
blogs.cbc.be
wcmassets.kbc.be
internal.kbc-group.com
psacontent-f.kbc.be
elb2-a.cbc.be
elb-a.cbc.be
internal.kbc-group.com
acc.cbcvousinvite.cbc.be
oob.kbc.be
businessdashboard.kbc.be
businessdashboard.kbc.be
ul-a.kbc.be
bluecandyapi-a.kbc-group.com
businessdashboard2-f.cbc.be
cbctouch-f.cbc.be
wa-a.kbc.be
mmed.cbc.be
psd2.api.kbc-group.com
cl.sw-t.ch
wcmassets-f.kbc.be
internal.acc.kbc-group.com
ambassadors.revivalanimal.com
wa-a.kbc.be
www.cbc.be
elb-a.cbc.be
new.cbc.be
wcmcontent-a.kbc.be
acc.cbcvousinvite.cbc.be
app.brand.ambassify.eu
mm.cbc.be
pdf-accept.kbc.be
www.cbc.be
cbctouch-f.cbc.be
mobile-o.kbc.be
publiccontent-f.cbc.be
apigw.psd2.api.fet.kbc-group.com
wcmassets-f.kbc.be
multimedia.kbc.be
www-o.cbc.be
psd2.api.fet.kbc-group.com
assistcontent-a.kbc.be
cartebusinesscbc.cbc.be
cbcinvest-f.cbc.be
psd2.api.acc.kbc-group.com
cbconline2.cbc.be
privatebanking-accept.cbc.be
wcmassets-a.kbc.be
forwrd.it
apigw.psd2.api.kbc-group.com
info.nucleairforum.be
kbctouch-a.kbc.be
ambassadors.nationallottery.be
ipa2-a.cbc.be
kbc.com
kbc.com
cbconline.cbc.be
businessdashboard.kbc.be
ambassadors.nationallottery.be
businessdashboard-a.kbc.be
businessdashboard.cbc.be
cbcinvest-o.cbc.be
kbctouch-a.kbc.be
wcmassets-o.kbc.be
publiccontent.cbc.be
www4.cbc.be
cbcinvest.cbc.be
forwrd.it
businessdashboard.kbc.be
kbc.com
publiccontent-a.cbc.be
forwrd.it
pdf-accept.kbc.be
cbconline.cbc.be
business.api.acc.kbc-group.com
wcmassets-a.kbc.be
bmid.apigw.acc.cbc.be
mobile-f.kbc.be
business.api.fet.kbc-group.com
expense-management-f.kbc.be
app.brand.ambassify.eu
psd2.api.acc.kbc-group.com
t.info.kbc.be
investments.kbc.be
bluecandyapi.kbc-group.com
psd2.api.kbc-group.com
bluecandyapi.kbc-group.com
multimedia.kbc.be
www.cbc.be
www.cbc.be
ambassadors.nationallottery.be
internal.acc.kbc-group.com
kbctouch-a.kbc.be
privatebanking.cbc.be
ul-a.kbc.be
psd2-mtls.api.kbc-group.com
internal.kbc-group.com
ul.kbc.be
touch.cbc.be
link.socialsharing.kbccorporatebanking.be
blogs.cbc.be
wcmassets.kbc.be
internal.kbc-group.com
psacontent-f.kbc.be
elb2-a.cbc.be
elb-a.cbc.be
internal.kbc-group.com
acc.cbcvousinvite.cbc.be
oob.kbc.be
businessdashboard.kbc.be
businessdashboard.kbc.be
ul-a.kbc.be
bluecandyapi-a.kbc-group.com
businessdashboard2-f.cbc.be
cbctouch-f.cbc.be
wa-a.kbc.be
mmed.cbc.be
psd2.api.kbc-group.com
cl.sw-t.ch
wcmassets-f.kbc.be
internal.acc.kbc-group.com
ambassadors.revivalanimal.com
wa-a.kbc.be
www.cbc.be
elb-a.cbc.be
new.cbc.be
wcmcontent-a.kbc.be
acc.cbcvousinvite.cbc.be
app.brand.ambassify.eu
mm.cbc.be
pdf-accept.kbc.be
www.cbc.be
cbctouch-f.cbc.be
mobile-o.kbc.be
publiccontent-f.cbc.be
apigw.psd2.api.fet.kbc-group.com
wcmassets-f.kbc.be
multimedia.kbc.be
www-o.cbc.be
psd2.api.fet.kbc-group.com
assistcontent-a.kbc.be
cartebusinesscbc.cbc.be
cbcinvest-f.cbc.be
psd2.api.acc.kbc-group.com
cbconline2.cbc.be
privatebanking-accept.cbc.be
wcmassets-a.kbc.be
forwrd.it
apigw.psd2.api.kbc-group.com
info.nucleairforum.be
kbctouch-a.kbc.be
ambassadors.nationallottery.be
ipa2-a.cbc.be
kbc.com
kbc.com
cbconline.cbc.be
businessdashboard.kbc.be
ambassadors.nationallottery.be
businessdashboard-a.kbc.be
businessdashboard.cbc.be
cbcinvest-o.cbc.be
kbctouch-a.kbc.be
wcmassets-o.kbc.be
publiccontent.cbc.be
www4.cbc.be
cbcinvest.cbc.be
forwrd.it
businessdashboard.kbc.be
Certificate
The complete raw certificate details for blogs.cbc.be in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIQBBQic7pZ2/l5EGWbKx/uXjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIyMTAwMDAwMFoXDTI1MDExOTIzNTk1OVowFzEV MBMGA1UEAxMMYmxvZ3MuY2JjLmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAkkY6GRM0/u+CDQkyF3ciEZ/Y0Uhe1yVBMLuWM6yPuuPI2hpnXLZA0A9d FllOimpKRTc5xWHa6rwvjyEhrgkLVPhZXp2J0vmXX/eiNA6Q50asNU90MVJ9+0wb tcu+Md0SzP3aJ0ju8FHGE/bKqGp3W8w5qTjBiRa2RKFOcW51hWIFLNDIyimD2dd3 GWY/LMSEV39sruRh1OTOQunMXWa88HB4sdrjvrB1x6Qc/qtRPHmsUTPSzhA6Z2mZ 0zSit+5MBJL+3WI2B5B+KMrbJ95p6CfpChElBrEOvP4Pddy9aPCZVOS59Qgc6hSl Gxh3NWSz9O/5gCn3A/WESim48wsAPQIDAQABo4IC5TCCAuEwHwYDVR0jBBgwFoAU wDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFEysuYD7sRinfIhJvmRLtLr/ 79L0MBcGA1UdEQQQMA6CDGJsb2dzLmNiYy5iZTATBgNVHSAEDDAKMAgGBmeBDAEC ATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3Qu Y29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6 Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDov L2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQC MAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AE51oydcmhDDOFts1N8/Uusd 8OCOG41pwLH6ZLFimjnfAAABjIsHaMMAAAQDAEYwRAIgAR6ioynx52g5cHUDwCpJ oqKCdLysi6ERBwO0dVWuuHkCIHCVc7nDW0FIcf7JxFCKEfP8IRT8crztv/44aARS OBOxAHcAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGMiwdpAwAA BAMASDBGAiEAm0/9+TbJnuiY7i3nDFgOAbmBpl6XYZ8+UYDsMuFj0FsCIQDImaQD 9JJ85jGj7g52MB/Cwmu3wHMNUGW2EWKx5p7uvAB2AH1ZHhLheCp7HGFnfF79+NCH XBSgTpWeuQMv2Q6MLnm4AAABjIsHaPQAAAQDAEcwRQIhAJu4YlYQcIYP1ctLJ0fN XeUgjpbulrNbRXeF5D3CcDrXAiB91BYPCOA5KQnEk/vyOVwlrtTyR43ieqvqB5BY 7tX2zjANBgkqhkiG9w0BAQsFAAOCAQEAc8hwCoIUswHG/zaD4AD60mk4AhOrH5XC D+IU1+PbvFFSPTMOgp0WH9JCK4xmx9/0pI5DC0ZAI7yAiba7jy8lCs3R+MbHldDx TZElH+g+Rl1W5cbrw9Xs46/bEQMmzBOTJcPoIGYoeDJkcyeFtorYxBm2IB/Lm6zp EI0ifkHw+w/Z8lCjSpWXjLxAzLNl6akgx8q02+f6WqZw2WDb5yfn6PYVQojZaJ49 Plu5cq3gaUMas7etuAeQ1sCrs40XZ/O8KcVsXLBMzTe4Sqc18LyP79JxcI9mYZu5 tW84qlT+r1SLPX+yv/Stu81XQmdnarFV0ZaXegiIFraDW77KrAOLXw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkY6GRM0/u+CDQkyF3ci EZ/Y0Uhe1yVBMLuWM6yPuuPI2hpnXLZA0A9dFllOimpKRTc5xWHa6rwvjyEhrgkL VPhZXp2J0vmXX/eiNA6Q50asNU90MVJ9+0wbtcu+Md0SzP3aJ0ju8FHGE/bKqGp3 W8w5qTjBiRa2RKFOcW51hWIFLNDIyimD2dd3GWY/LMSEV39sruRh1OTOQunMXWa8 8HB4sdrjvrB1x6Qc/qtRPHmsUTPSzhA6Z2mZ0zSit+5MBJL+3WI2B5B+KMrbJ95p 6CfpChElBrEOvP4Pddy9aPCZVOS59Qgc6hSlGxh3NWSz9O/5gCn3A/WESim48wsA PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5421456691148418366317567412476571230 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogs.cbc.be' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18465422722365674913749553162386963648070662799276319363325186923960674243866427789639148407003418682515149077597511819799791432780919337741425792231988318614531252069482249155208943665421864109718453865393357411824363282056298706782417874760879665688188394489603093817666410830514543545172329830705467479056969698788150458316352633125269995733498488162145897048977494895820197183161518134118203992632230107202118982144915435626043686893205612556273756250359722848025983576659051296106712520324447899601683737908323105501256712102540448830948693866465248083762527571555307694678488969773071043302318276117772752322621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4cacb980fbb118a77c8849be644bb4baffefd2f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.cbc.be' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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