sanelma.dev.internal.aws.op-palvelut.net
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 06:0d:24:2e:34:1e:1e:76:12:2c:d4:23:12:d2:9b:c5 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sanelma.dev.internal.aws.op-palvelut.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:0d:24:2e:34:1e:1e:76:12:2c:d4:23:12:d2:9b:c5Serial Number (int): 8043601661241287247206854292805950405
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 2b:54:ff:74:c7:86:f5:3b:ea:e1:9f:75:e7:5c:0e:ad:26:e4:9f:02
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): ec:3a:37:48:38:8e:9d:69:dc:1a:ec:70:b0:b7:7a:e2:49:22:5f:ad
Fingerprint (sha256): 0e:23:8f:02:0c:a5:fb:87:75:86:38:35:16:9c:e2:a2:09:48:fd:11:6b:24:b1:07:09:2f:27:45:14:f2:e7:40
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate sanelma.dev.internal.aws.op-palvelut.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sanelma.dev.internal.aws.op-palvelut.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sanelma.dev.internal.aws.op-palvelut.net
Other certificates including the domain name op-palvelut.net
(limited to 100 certificates)
www124.jyty.op-palvelut.net
op-palvelut.net
hae-korvausta.qa.op-auttaja.aws.op-palvelut.net
mtls-apis.psd2-sandbox-test.jty.op-palvelut.net
hae-korvausta.test.op-auttaja.aws.op-palvelut.net
*.global.kubelb.jty.op-palvelut.net
idp.teco.hty.op-palvelut.net
*.bravo.dev.internal.aws.op-palvelut.net
jtyvordsm.jty.op-palvelut.net
*.devops-coe.test.internal.aws.op-palvelut.net
smn-sandbox.test.aws.op-palvelut.net
*.kehi.op-auttaja.aws.op-palvelut.net
www131.jty.op-palvelut.net
brm.runtime.hty.op-palvelut.net
*.vhahpral.test.internal.aws.op-palvelut.net
smn.dev.aws.op-palvelut.net
sni.cloudflaressl.com
*.vhahmyty.test.internal.aws.op-palvelut.net
wmp-fund-info-master.wealth.dev.aws.op-palvelut.net
*.rip.test.aws.op-palvelut.net
*.dev.op-auttaja.aws.op-palvelut.net
xp200uatsip11.Digiaspa.jty.op-palvelut.net
sni.cloudflaressl.com
*.bravo.dev.internal.aws.op-palvelut.net
*.staging.nl-web-event-stream.test.internal.aws.op-palvelut.net
sni.cloudflaressl.com
scl.dev.internal.aws.op-palvelut.net
www.opgwjty2.jty.op-palvelut.net
*.digiaspa.jty.op-palvelut.net
*.mtls-apis.jty.op-palvelut.net
*.idbroker-staging.aws.op-palvelut.net
webmail.op-palvelut.net
*.idbroker-staging.aws.op-palvelut.net
JTY.DA.OP-PALVELUT.NET
eta.op-palvelut.net
sni.cloudflaressl.com
services.jty.op-palvelut.net
*.uat.op-auttaja.aws.op-palvelut.net
jtyvaasrtcmsr1.jty.op-palvelut.net
isam-mgmt.jty.op-palvelut.net
opa-manager.staging.aws.op-palvelut.net
rip.test.aws.op-palvelut.net
kehicgiiissr1.pohjola.fi
api.www.etos.test.aws.op-palvelut.net
*.bravo.dev.internal.aws.op-palvelut.net
*.opa-manager.dev.aws.op-palvelut.net
sni.cloudflaressl.com
smn.dev.aws.op-palvelut.net
sni.cloudflaressl.com
*.avw.test.aws.op-palvelut.net
messaging.op-atlas-dev.aws.op-palvelut.net
*.bravo.dev.internal.aws.op-palvelut.net
*.apiauth.aws.op-palvelut.net
sni.cloudflaressl.com
ditjty45.op-palvelut.net
oidc-client-registration.jty.op-palvelut.net
sanelma.dev.internal.aws.op-palvelut.net
sni.cloudflaressl.com
optiger.aws.kehi.op-palvelut.net
hae-korvausta.test.op-auttaja.aws.op-palvelut.net
backend.nl-rh.dev.aws.op-palvelut.net
hae-korvausta.test.op-auttaja.aws.op-palvelut.net
allekirjoitus.jty.op-palvelut.net
*.aws.kehi.op-palvelut.net
sni.cloudflaressl.com
internalidp.jty.op-palvelut.net
jtyvordsm.jty.op-palvelut.net
*.test.nl-web-cc-person.test.internal.aws.op-palvelut.net
*.team-qa.ccc.test.internal.aws.op-palvelut.net
*.sst.aws.jty.op-palvelut.net
*.securitytesting-dev.aws.op-palvelut.net
alkjty45.jty.op-palvelut.net
*.apiauth.aws.op-palvelut.net
icpmaster.jty.op-palvelut.net
*.apiauth.aws.op-palvelut.net
eta.op-palvelut.net
govapi.test.aws.op-palvelut.net
hae-korvausta.qa.op-auttaja.aws.op-palvelut.net
rip.test.aws.op-palvelut.net
pa-commpool.hty.op-palvelut.net
*.rip.test.aws.op-palvelut.net
kontio.kehi.op-palvelut.net
scl.dev.aws.op-palvelut.net
xp200uatcim12.digiaspa.jty.op-palvelut.net
*.test.nl-web-event-stream.test.internal.aws.op-palvelut.net
mobile.hty.op-palvelut.net
jtyvaasvresr1.jty.op-palvelut.net
aws.bdw.kehi.op-palvelut.net
app.kortteli.dev.aws.op-palvelut.net
softagram.devtools.dev.aws.op-palvelut.net
idm.dev.op-auttaja.aws.op-palvelut.net
jtyvVortoke.exj.op-palvelut.net
pa-cards.hty.op-palvelut.net
fluukku-vakuudet-5398.coda.dev.internal.aws.op-palvelut.net
*.idbroker-dev.aws.op-palvelut.net
*.op-atlas-dev.aws.op-palvelut.net
*.vhahmyty.test.internal.aws.op-palvelut.net
scl.dev.aws.op-palvelut.net
rip.test.aws.op-palvelut.net
mobile.jty.op-palvelut.net
op-palvelut.net
hae-korvausta.qa.op-auttaja.aws.op-palvelut.net
mtls-apis.psd2-sandbox-test.jty.op-palvelut.net
hae-korvausta.test.op-auttaja.aws.op-palvelut.net
*.global.kubelb.jty.op-palvelut.net
idp.teco.hty.op-palvelut.net
*.bravo.dev.internal.aws.op-palvelut.net
jtyvordsm.jty.op-palvelut.net
*.devops-coe.test.internal.aws.op-palvelut.net
smn-sandbox.test.aws.op-palvelut.net
*.kehi.op-auttaja.aws.op-palvelut.net
www131.jty.op-palvelut.net
brm.runtime.hty.op-palvelut.net
*.vhahpral.test.internal.aws.op-palvelut.net
smn.dev.aws.op-palvelut.net
sni.cloudflaressl.com
*.vhahmyty.test.internal.aws.op-palvelut.net
wmp-fund-info-master.wealth.dev.aws.op-palvelut.net
*.rip.test.aws.op-palvelut.net
*.dev.op-auttaja.aws.op-palvelut.net
xp200uatsip11.Digiaspa.jty.op-palvelut.net
sni.cloudflaressl.com
*.bravo.dev.internal.aws.op-palvelut.net
*.staging.nl-web-event-stream.test.internal.aws.op-palvelut.net
sni.cloudflaressl.com
scl.dev.internal.aws.op-palvelut.net
www.opgwjty2.jty.op-palvelut.net
*.digiaspa.jty.op-palvelut.net
*.mtls-apis.jty.op-palvelut.net
*.idbroker-staging.aws.op-palvelut.net
webmail.op-palvelut.net
*.idbroker-staging.aws.op-palvelut.net
JTY.DA.OP-PALVELUT.NET
eta.op-palvelut.net
sni.cloudflaressl.com
services.jty.op-palvelut.net
*.uat.op-auttaja.aws.op-palvelut.net
jtyvaasrtcmsr1.jty.op-palvelut.net
isam-mgmt.jty.op-palvelut.net
opa-manager.staging.aws.op-palvelut.net
rip.test.aws.op-palvelut.net
kehicgiiissr1.pohjola.fi
api.www.etos.test.aws.op-palvelut.net
*.bravo.dev.internal.aws.op-palvelut.net
*.opa-manager.dev.aws.op-palvelut.net
sni.cloudflaressl.com
smn.dev.aws.op-palvelut.net
sni.cloudflaressl.com
*.avw.test.aws.op-palvelut.net
messaging.op-atlas-dev.aws.op-palvelut.net
*.bravo.dev.internal.aws.op-palvelut.net
*.apiauth.aws.op-palvelut.net
sni.cloudflaressl.com
ditjty45.op-palvelut.net
oidc-client-registration.jty.op-palvelut.net
sanelma.dev.internal.aws.op-palvelut.net
sni.cloudflaressl.com
optiger.aws.kehi.op-palvelut.net
hae-korvausta.test.op-auttaja.aws.op-palvelut.net
backend.nl-rh.dev.aws.op-palvelut.net
hae-korvausta.test.op-auttaja.aws.op-palvelut.net
allekirjoitus.jty.op-palvelut.net
*.aws.kehi.op-palvelut.net
sni.cloudflaressl.com
internalidp.jty.op-palvelut.net
jtyvordsm.jty.op-palvelut.net
*.test.nl-web-cc-person.test.internal.aws.op-palvelut.net
*.team-qa.ccc.test.internal.aws.op-palvelut.net
*.sst.aws.jty.op-palvelut.net
*.securitytesting-dev.aws.op-palvelut.net
alkjty45.jty.op-palvelut.net
*.apiauth.aws.op-palvelut.net
icpmaster.jty.op-palvelut.net
*.apiauth.aws.op-palvelut.net
eta.op-palvelut.net
govapi.test.aws.op-palvelut.net
hae-korvausta.qa.op-auttaja.aws.op-palvelut.net
rip.test.aws.op-palvelut.net
pa-commpool.hty.op-palvelut.net
*.rip.test.aws.op-palvelut.net
kontio.kehi.op-palvelut.net
scl.dev.aws.op-palvelut.net
xp200uatcim12.digiaspa.jty.op-palvelut.net
*.test.nl-web-event-stream.test.internal.aws.op-palvelut.net
mobile.hty.op-palvelut.net
jtyvaasvresr1.jty.op-palvelut.net
aws.bdw.kehi.op-palvelut.net
app.kortteli.dev.aws.op-palvelut.net
softagram.devtools.dev.aws.op-palvelut.net
idm.dev.op-auttaja.aws.op-palvelut.net
jtyvVortoke.exj.op-palvelut.net
pa-cards.hty.op-palvelut.net
fluukku-vakuudet-5398.coda.dev.internal.aws.op-palvelut.net
*.idbroker-dev.aws.op-palvelut.net
*.op-atlas-dev.aws.op-palvelut.net
*.vhahmyty.test.internal.aws.op-palvelut.net
scl.dev.aws.op-palvelut.net
rip.test.aws.op-palvelut.net
mobile.jty.op-palvelut.net
Certificate
The complete raw certificate details for sanelma.dev.internal.aws.op-palvelut.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjzCCA3egAwIBAgIQBg0kLjQeHnYSLNQjEtKbxTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDYwNzAwMDAwMFoXDTI0MDcwNTIzNTk1OVowMzEx MC8GA1UEAxMoc2FuZWxtYS5kZXYuaW50ZXJuYWwuYXdzLm9wLXBhbHZlbHV0Lm5l dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM5LVjefrFAVoIEQrhsX El+Yo/wb0J6T3HWQu5gLatdnre3EhUgtj6yMqwWbBTbwo1/cS6fLvoLyQKEiCIoq gHfYJOAUwDJQpONCRswVYgu2zRCOglfbgIU3dPNrqMUjaRLwKlBR5oHpa3708AmJ KiKIzlFHHGMHtcqTAn8+stUn+VvDJ5wfZ4EYmfkp1pJnFI9N4KOUQv8Hb3aBIOjd oIXzqUqZp8qjW3va8xwHmGNBSlGUVxCbbbOvmzF9+8F5yK09H/OH825p8kgons18 eNV+b6kLQxkmGtcV3Lj4clCQrWZxnU9ep91WYhQGn0PObAv1qO8kDEOeYUsYz4Oe azMCAwEAAaOCAZQwggGQMB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664Li MB0GA1UdDgQWBBQrVP90x4b1O+rhn3XnXA6tJuSfAjAzBgNVHREELDAqgihzYW5l bG1hLmRldi5pbnRlcm5hbC5hd3Mub3AtcGFsdmVsdXQubmV0MA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw oC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3Js MBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw AYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC hipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYD VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAId9jY/9wFy5NN1zbRz38Mp7P9FtK8e4fsHPA03fovTriT1lGX2ZFZKpgWBnD 5FMOk1SrJStZogfWP5/pPc+3akpVZmb4dYQLog66L+mg0/doW48o4LHiI0SFQMn8 233yqFjLoBtdyrwHlOyLOOVLT5Blh0u6QwVweiRI9rZgAxtlRE6LU7jChPZ9eEr0 e/JjSKP2crr74scUd/0FcLmQkapJhsQrhaiXc9YOBoUO4LuncVfbKKNFH5A/Ua8r qJ2J3s/7sOQc8nMPXSslpuLZupIPG/TSBzLAnEgfnWdE6A0MLVA6GIkw+R3zfjSf AZkK0MXaTyVG6D+4BMuxqlf8pg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzktWN5+sUBWggRCuGxcS X5ij/BvQnpPcdZC7mAtq12et7cSFSC2PrIyrBZsFNvCjX9xLp8u+gvJAoSIIiiqA d9gk4BTAMlCk40JGzBViC7bNEI6CV9uAhTd082uoxSNpEvAqUFHmgelrfvTwCYkq IojOUUccYwe1ypMCfz6y1Sf5W8MnnB9ngRiZ+SnWkmcUj03go5RC/wdvdoEg6N2g hfOpSpmnyqNbe9rzHAeYY0FKUZRXEJtts6+bMX37wXnIrT0f84fzbmnySCiezXx4 1X5vqQtDGSYa1xXcuPhyUJCtZnGdT16n3VZiFAafQ85sC/Wo7yQMQ55hSxjPg55r MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8043601661241287247206854292805950405 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanelma.dev.internal.aws.op-palvelut.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26042240776906018250064508632284582448257433073175836905914783531144506045483414750768185182683212147409032973687819466187701122839596345077935045181988828674045343902691945036420014143360859406462914657790477934826917017520829765591811374455785382769127829126661601488887307705064856582637505965415137728652185242233563828082730441405998932200425117274140192211699259515590587186777632600602142462341655384359202823273636211016306803684588002622933186958859679416996607430318663689836878502985326510870884089583081767405764029303728304478718698242766963617666504686477429152049515399420751169163658086159842728110899 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2b54ff74c786f53beae19f75e75c0ead26e49f02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanelma.dev.internal.aws.op-palvelut.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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