device-gn.cm.spectrum.net
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 04:26:dc:f1:36:6d:20:e2:1c:aa:af:00:1c:3e:de:33 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=device-gn.cm.spectrum.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:26:dc:f1:36:6d:20:e2:1c:aa:af:00:1c:3e:de:33Serial Number (int): 5518700504708074978145912113304886835
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f3:71:94:57:92:5e:7b:17:20:6e:b5:1a:04:1e:62:e1:1e:3a:50:af
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): b0:96:a1:f0:7b:c4:56:25:34:0f:d6:87:84:b5:9d:cd:9c:9a:2c:6e
Fingerprint (sha256): 0e:34:2c:5b:08:cf:05:3f:f0:93:ac:14:65:c7:9a:af:8b:88:ed:99:3d:66:a2:66:94:6f:52:f4:d7:df:98:c9
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate device-gn.cm.spectrum.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for device-gn.cm.spectrum.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
device-gn.cm.spectrum.net
Other certificates including the domain name spectrum.net
(limited to 100 certificates)
privacy.portals.spectrum.net
mail.charter.net
api-private.cm.spectrum.net
self-care.portals.spectrum.net
device.cmdev.spectrum.net
*.pi.spectrum.net
activate-uat.spectrum.net
aviatrix-lab.scratch.spectrum.net
report.cm.spectrum.net
device.cm.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
*.pi.spectrum.net
report.cm.spectrum.net
*.scl.spectrum.net
*.stage.tau.spectrum.net
artifactory.scratch.spectrum.net
esim-api.cmstage.spectrum.net
report-qa.cmdev.spectrum.net
pci.spectrum.net
wifiprofile.spectrum.net
api.spectrum.net
ci-private-api.cmdev.spectrum.net
*.spectrum.net
preprod.idp.aws.spectrum.net
*.cmdev.spectrum.net
*.spectrum.net
advisor2.spectrum.net
*.wtg.spectrum.net
cii.spectrum.net
ocsports.tv
xspca02.hv.rr.com
tdcs-origin.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
device-gn.cm.spectrum.net
spectrum.net
*.portals.spectrum.net
report.cm.stg.spectrum.net
report-sit.cm.spectrum.net
edge-vod.spectrum.net
xspca02.hv.rr.com
preprod.idp.aws.spectrum.net
*.wireless-api.spectrum.net
xspca01.hv.spectrum.net
spectrum.net
2.symend.io
xspca02.hv.rr.com
ci-cmt3teamportal.cmdev.spectrum.net
*.pi.spectrum.net
nsl-mock.ci.wearable-dev.spectrum.net
spectrum.net
xspca01.hv.rr.com
spectrumtv.com
logpull-prod.tau.spectrum.net
gitlab.meta.spectrum.net
xspca01.hv.rr.com
device.cm.stg.spectrum.net
opensearch.impulse-dev.spectrum.net
cm-policy-sit.cm.spectrum.net
*.meta.spectrum.net
sonar.cm.spectrum.net
scratch.spectrum.net
api2.cmdev.spectrum.net
tdcs-origin.spectrum.net
fols.spectrum.net
activate.spectrum.net
*.failover.pi.spectrum.net
dsexp.spectrum.net
care.spectrumwifi.spectrum.net
stage-spectrum.net
airflow-pilot-private.dev.dsexp.spectrum.net
*.dev.wtg.spectrum.net
self-care.portals.spectrum.net
cms.prd-aws.charter.net
cloudnet-controller.meta.spectrum.net
mediaportals-news-64.dev-charter.net
tdcs.spectrum.net
community.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
watch.spectrum.net
cmt3teamportal.cmdev.spectrum.net
prd-infra-instana-2.prd.spectrum.net
api-ondemand.spectrum.net
*.ci.wearable-dev.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
sdptpsiproxyvip.charter.com
instanadist.tools.prd.spectrum.net
privacy.portals.spectrum.net
xspca01.hv.rr.com
*.eos.spectrum.net
spectrumtv.com
report.cm.stg.spectrum.net
device-ci.cmdev.spectrum.net
edge-vod.spectrum.net
spectrumwifi.spectrum.net
report.cm.spectrum.net
private-api.cm.spectrum.net
cm-policy.cm.spectrum.net
prd.effiedataservice-external.spectrum.net
cloudnet-controller.meta.spectrum.net
*.nls-sit.wtg.spectrum.net
mail.charter.net
api-private.cm.spectrum.net
self-care.portals.spectrum.net
device.cmdev.spectrum.net
*.pi.spectrum.net
activate-uat.spectrum.net
aviatrix-lab.scratch.spectrum.net
report.cm.spectrum.net
device.cm.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
*.pi.spectrum.net
report.cm.spectrum.net
*.scl.spectrum.net
*.stage.tau.spectrum.net
artifactory.scratch.spectrum.net
esim-api.cmstage.spectrum.net
report-qa.cmdev.spectrum.net
pci.spectrum.net
wifiprofile.spectrum.net
api.spectrum.net
ci-private-api.cmdev.spectrum.net
*.spectrum.net
preprod.idp.aws.spectrum.net
*.cmdev.spectrum.net
*.spectrum.net
advisor2.spectrum.net
*.wtg.spectrum.net
cii.spectrum.net
ocsports.tv
xspca02.hv.rr.com
tdcs-origin.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
device-gn.cm.spectrum.net
spectrum.net
*.portals.spectrum.net
report.cm.stg.spectrum.net
report-sit.cm.spectrum.net
edge-vod.spectrum.net
xspca02.hv.rr.com
preprod.idp.aws.spectrum.net
*.wireless-api.spectrum.net
xspca01.hv.spectrum.net
spectrum.net
2.symend.io
xspca02.hv.rr.com
ci-cmt3teamportal.cmdev.spectrum.net
*.pi.spectrum.net
nsl-mock.ci.wearable-dev.spectrum.net
spectrum.net
xspca01.hv.rr.com
spectrumtv.com
logpull-prod.tau.spectrum.net
gitlab.meta.spectrum.net
xspca01.hv.rr.com
device.cm.stg.spectrum.net
opensearch.impulse-dev.spectrum.net
cm-policy-sit.cm.spectrum.net
*.meta.spectrum.net
sonar.cm.spectrum.net
scratch.spectrum.net
api2.cmdev.spectrum.net
tdcs-origin.spectrum.net
fols.spectrum.net
activate.spectrum.net
*.failover.pi.spectrum.net
dsexp.spectrum.net
care.spectrumwifi.spectrum.net
stage-spectrum.net
airflow-pilot-private.dev.dsexp.spectrum.net
*.dev.wtg.spectrum.net
self-care.portals.spectrum.net
cms.prd-aws.charter.net
cloudnet-controller.meta.spectrum.net
mediaportals-news-64.dev-charter.net
tdcs.spectrum.net
community.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
watch.spectrum.net
cmt3teamportal.cmdev.spectrum.net
prd-infra-instana-2.prd.spectrum.net
api-ondemand.spectrum.net
*.ci.wearable-dev.spectrum.net
ci-cmt3teamportal.cmdev.spectrum.net
sdptpsiproxyvip.charter.com
instanadist.tools.prd.spectrum.net
privacy.portals.spectrum.net
xspca01.hv.rr.com
*.eos.spectrum.net
spectrumtv.com
report.cm.stg.spectrum.net
device-ci.cmdev.spectrum.net
edge-vod.spectrum.net
spectrumwifi.spectrum.net
report.cm.spectrum.net
private-api.cm.spectrum.net
cm-policy.cm.spectrum.net
prd.effiedataservice-external.spectrum.net
cloudnet-controller.meta.spectrum.net
*.nls-sit.wtg.spectrum.net
Certificate
The complete raw certificate details for device-gn.cm.spectrum.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcTCCA1mgAwIBAgIQBCbc8TZtIOIcqq8AHD7eMzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyNTAwMDAwMFoXDTI0MDYyMzIzNTk1OVowJDEi MCAGA1UEAxMZZGV2aWNlLWduLmNtLnNwZWN0cnVtLm5ldDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANFyxhuvaRvMAACA/rd1uBCljboC9UOjmHlFqieY e39jP6Ec9jto99CdCV7PORas04VP3UZot51aSyV8My4krBPaTVjO8bioHqcnjTyR cYIT8osJbTEUuZHOoEb3UpXO39X3oGslyUrgE9Bb5BcmvAlOeNJ/uf/ldGJDeApY HXmhqgg+3+R9bALEv0iD0+ghfrIh7b27+MLcscxp4fRLbk/uR7/gYp7Kg0IfeZRF zSLETAIq6QjqISOuvo2hPAQ1LXKdKH5CQEAOp7p6impbedCVETVweQMA3DvkWuzq WYUxYeJjlC5+R9mE/dgFqvBTLw7RT8N5KNiO3AxBMAIiR8UCAwEAAaOCAYUwggGB MB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBTzcZRX kl57FyButRoEHmLhHjpQrzAkBgNVHREEHTAbghlkZXZpY2UtZ24uY20uc3BlY3Ry dW0ubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250 cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1 c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0 LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEACMmVTkdNek7eUq5LuzjtlUl4AennprEh45Ye QPnhQrDKrqQw6YmZo/1CIRvNVgGnlOYNI8L8P0D26LrMuhIIpEVwOqEupery8RHk 0ijGwaJXdM1qiGhphJpVkTzQ1YaPLfgnNYTETWlUgEwsVfI9b97JGQ4gyVyl4Xba /yGlHelyubUvxs02X4F/G+OmMXSpal1e/rvK4LtLr3Y9DmvKI06RQ0D2DpD2EouA 1rqLTwzmo9cLMQa3XJBgTMGMZ9IGR8WXFZpmHm/sEktKcowRrqSxjGOVor+nfG91 qgw5y0mehuOx4//cenSLXq51U5nzqvspEulQgySXbtjhJ1HTKg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XLGG69pG8wAAID+t3W4 EKWNugL1Q6OYeUWqJ5h7f2M/oRz2O2j30J0JXs85FqzThU/dRmi3nVpLJXwzLiSs E9pNWM7xuKgepyeNPJFxghPyiwltMRS5kc6gRvdSlc7f1fegayXJSuAT0FvkFya8 CU540n+5/+V0YkN4ClgdeaGqCD7f5H1sAsS/SIPT6CF+siHtvbv4wtyxzGnh9Etu T+5Hv+BinsqDQh95lEXNIsRMAirpCOohI66+jaE8BDUtcp0ofkJAQA6nunqKalt5 0JURNXB5AwDcO+Ra7OpZhTFh4mOULn5H2YT92AWq8FMvDtFPw3ko2I7cDEEwAiJH xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5518700504708074978145912113304886835 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'device-gn.cm.spectrum.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26440402837646737908548387509587295684209236804454169566224217053674570447041569549733669787332240344558244290534452629809768713814240527202790378533812872659096243213575809622631070804116696959097265821176584432626183600026001734055783364098382714962606182914138511952337592793846221869207109805049823877924232398032147646328609758477042803760421507195855702497291961852874932045048357583098073240930569040075613569991386961468697427442996536610212634328246896686350247277467806879136934562256957065461931680219880457578164868766465255396656016084030028159251173821955115154734251411915765836512364888892465806985157 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f3719457925e7b17206eb51a041e62e11e3a50af . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'device-gn.cm.spectrum.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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