*.bf-interred-production.aws.bfops.io
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 02:b6:30:95:ae:10:57:1a:8a:11:0f:01:00:51:e7:6c was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.bf-interred-production.aws.bfops.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:b6:30:95:ae:10:57:1a:8a:11:0f:01:00:51:e7:6cSerial Number (int): 3604439434350506137242796507891099500
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 18:a4:ad:45:0f:db:1a:91:e9:aa:c2:0a:9f:72:6f:89:83:13:8d:a9
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 60:e9:30:b7:d9:a6:58:89:aa:fe:ff:5b:a8:2e:1c:f0:f7:01:d6:0d
Fingerprint (sha256): 0e:86:c7:e3:25:2d:4f:60:2e:09:1d:f8:c0:50:58:c7:50:1b:62:65:5e:05:c0:ef:fb:e0:8e:ca:ed:b7:a4:e1
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.bf-interred-production.aws.bfops.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.bf-interred-production.aws.bfops.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.bf-interred-production.aws.bfops.io
bf-interred-production.aws.bfops.io
bf-interred-production.aws.bfops.io
Other certificates including the domain name bfops.io
(limited to 100 certificates)
cwc.bf-chipwidgets-development.aws.bfops.io
regional.bf-regioccms-development.aws.bfops.io
*.bf-nativedashboard-development.aws.bfops.io
*.bf-admanager-dr.aws.bfops.io
bfops.io
app.bf-chipdownloadsinitiator-development.aws.bfops.io
*.bf-cpx-staging.aws.bfops.io
*.bf-onelogin-dr.aws.bfops.io
bf-tools.net
*.bf-folcore-development.aws.bfops.io
*.bf-xpertcircle-staging.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bfops.io
*.bf-xpertcircle-tools.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentlounge-tools.aws.bfops.io
bfops.io
*.bf-onelogin-staging.aws.bfops.io
*.bf-trackalo-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
*.bf-operations-sandbox.aws.bfops.io
*.bf-netdoctor-development.aws.bfops.io
bfops.io
*.bf-tvspielfilm-staging.aws.bfops.io
*.bf-datalake-staging.aws.bfops.io
bitbucket.bf-services.aws.bfops.io
*.bf-folcore-dr.aws.bfops.io
bfops.io
*.bf-chipproduct-production.aws.bfops.io
bf-ctf-development.aws.bfops.io
bf-tools.net
*.bf-poc-development.aws.bfops.io
bf-tools.net
*.bf-onelogin-development.aws.bfops.io
bf-tools.net
*.bf-chipproduct-production.aws.bfops.io
*.bf-newswirefrontend-staging.aws.bfops.io
*.bf-newswirefrontend-dr.aws.bfops.io
chipstyleguide.bf-chipstyleguide-staging.aws.bfops.io
*.bf-cpx-sandbox.aws.bfops.io
*.bf-interred-production.aws.bfops.io
bf-tools.net
*.bf-poc-production.aws.bfops.io
*.bf-cpx-development.aws.bfops.io
*.bf-datalake-sandbox.aws.bfops.io
bfops.io
*.bf-nlcontentfeeder-development.aws.bfops.io
*.bf-contentplatform-dr.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
bf-ctf-staging.aws.bfops.io
cat-user-management-api.bf-personalize-development.aws.bfops.io
finanzen100-cbcfinance-etf.bf-cardscout-development.aws.bfops.io
*.bf-chipwidgets-dr.aws.bfops.io
*.bf-folapp-production.aws.bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-datalake-production.aws.bfops.io
*.bf-poc-tools.aws.bfops.io
bfops.io
bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-onelogin-tools.aws.bfops.io
*.bf-bcfinancetools-sandbox.aws.bfops.io
*.bf-contentlounge-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
bfops.io
cognito.bf-kaufberatungsseotool-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bfops.io
bf-tools.net
*.bf-admanager-sandbox.aws.bfops.io
bfops.io
*.bf-chipwidgets-tools.aws.bfops.io
bf-tools.net
*.bf-admanager-development.aws.bfops.io
bfops.io
bf-ctf-production.aws.bfops.io
*.bf-folcore-development.aws.bfops.io
bfops.io
gitlab.bfops.io
bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentassembler-dr.aws.bfops.io
*.bf-datalake-dr.aws.bfops.io
*.bf-datalake-development.aws.bfops.io
*.bf-bcfinancetools-production.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bf-tools.net
cat-fetcher-api.bf-personalize-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bf-tools.net
*.bf-operations-development.aws.bfops.io
bfops.io
bfops.io
*.bf-bcfinancetools-staging.aws.bfops.io
*.bf-powerdns-tools.aws.bfops.io
regional.bf-regioccms-development.aws.bfops.io
*.bf-nativedashboard-development.aws.bfops.io
*.bf-admanager-dr.aws.bfops.io
bfops.io
app.bf-chipdownloadsinitiator-development.aws.bfops.io
*.bf-cpx-staging.aws.bfops.io
*.bf-onelogin-dr.aws.bfops.io
bf-tools.net
*.bf-folcore-development.aws.bfops.io
*.bf-xpertcircle-staging.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bfops.io
*.bf-xpertcircle-tools.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentlounge-tools.aws.bfops.io
bfops.io
*.bf-onelogin-staging.aws.bfops.io
*.bf-trackalo-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
*.bf-operations-sandbox.aws.bfops.io
*.bf-netdoctor-development.aws.bfops.io
bfops.io
*.bf-tvspielfilm-staging.aws.bfops.io
*.bf-datalake-staging.aws.bfops.io
bitbucket.bf-services.aws.bfops.io
*.bf-folcore-dr.aws.bfops.io
bfops.io
*.bf-chipproduct-production.aws.bfops.io
bf-ctf-development.aws.bfops.io
bf-tools.net
*.bf-poc-development.aws.bfops.io
bf-tools.net
*.bf-onelogin-development.aws.bfops.io
bf-tools.net
*.bf-chipproduct-production.aws.bfops.io
*.bf-newswirefrontend-staging.aws.bfops.io
*.bf-newswirefrontend-dr.aws.bfops.io
chipstyleguide.bf-chipstyleguide-staging.aws.bfops.io
*.bf-cpx-sandbox.aws.bfops.io
*.bf-interred-production.aws.bfops.io
bf-tools.net
*.bf-poc-production.aws.bfops.io
*.bf-cpx-development.aws.bfops.io
*.bf-datalake-sandbox.aws.bfops.io
bfops.io
*.bf-nlcontentfeeder-development.aws.bfops.io
*.bf-contentplatform-dr.aws.bfops.io
bfops.io
bfops.io
cat-front-api.bf-personalize-development.aws.bfops.io
bf-ctf-staging.aws.bfops.io
cat-user-management-api.bf-personalize-development.aws.bfops.io
finanzen100-cbcfinance-etf.bf-cardscout-development.aws.bfops.io
*.bf-chipwidgets-dr.aws.bfops.io
*.bf-folapp-production.aws.bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-datalake-production.aws.bfops.io
*.bf-poc-tools.aws.bfops.io
bfops.io
bfops.io
*.bf-honeyfactory-production.aws.bfops.io
*.bf-onelogin-tools.aws.bfops.io
*.bf-bcfinancetools-sandbox.aws.bfops.io
*.bf-contentlounge-staging.aws.bfops.io
*.bf-cpx-production.aws.bfops.io
bfops.io
cognito.bf-kaufberatungsseotool-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bfops.io
bf-tools.net
*.bf-admanager-sandbox.aws.bfops.io
bfops.io
*.bf-chipwidgets-tools.aws.bfops.io
bf-tools.net
*.bf-admanager-development.aws.bfops.io
bfops.io
bf-ctf-production.aws.bfops.io
*.bf-folcore-development.aws.bfops.io
bfops.io
gitlab.bfops.io
bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
*.bf-contentassembler-dr.aws.bfops.io
*.bf-datalake-dr.aws.bfops.io
*.bf-datalake-development.aws.bfops.io
*.bf-bcfinancetools-production.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
bf-tools.net
cat-fetcher-api.bf-personalize-development.aws.bfops.io
news-feed-front-api.bf-personalize-development.aws.bfops.io
cat-fetcher-api.bf-personalize-development.aws.bfops.io
bf-tools.net
*.bf-operations-development.aws.bfops.io
bfops.io
bfops.io
*.bf-bcfinancetools-staging.aws.bfops.io
*.bf-powerdns-tools.aws.bfops.io
Certificate
The complete raw certificate details for *.bf-interred-production.aws.bfops.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIErjCCA5agAwIBAgIQArYwla4QVxqKEQ8BAFHnbDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDUyNDAwMDAwMFoXDTI1MDYyMjIzNTk1OVowMDEu MCwGA1UEAwwlKi5iZi1pbnRlcnJlZC1wcm9kdWN0aW9uLmF3cy5iZm9wcy5pbzCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM+dyRkm9Z5uxjh/mkqyPU8z rZyz+62GD1/JTNqTNc3QZ40XetXaPGBBX4z1juMzFs/HmF4tPxfoDsmm9JusYIe3 vCnWlGkVrVYCK8U+mDiUjdQ8gvV87tdx8b262MF9UVgPgRPTviNp2EVpal0jsK9S nobgzfK2ysGvW9LEbqAABVCr1uQHI9qducinCn6eC8AelSBc4IfNKSOLmnU2GBZA 8k09SOsUHvZBFLxKqzACp5kfNppOJ7Q+w3d6tv7s6CQ32g2sEIt0bDAZfC8vc2pY Q19LyaEtygHlNJa3TaeJRv2nbCCKepMGQJK/ePZXoLIS/0QZ/SA/J1Tl4C04fB8C AwEAAaOCAbYwggGyMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0G A1UdDgQWBBQYpK1FD9sakemqwgqfcm+JgxONqTBVBgNVHREETjBMgiUqLmJmLWlu dGVycmVkLXByb2R1Y3Rpb24uYXdzLmJmb3BzLmlvgiNiZi1pbnRlcnJlZC1wcm9k dWN0aW9uLmF3cy5iZm9wcy5pbzATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAz LmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIy bTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0w My5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIrTeo9SqFozbGL/HIZ7 JF+h/nZZoMDPSmdinXZdd9jBHkzT5mc5cNSmCQLiYk+JFsCpHSZTmCh1vlisSZwG BWTuHxB0fwBT4AmuPUfAgVQqxTYdBIhEE6XhyD9EZ4mnTrEpv5tMDD5/11TjBCTG Vjslk/rBwwO/8bTQuVG+zQaT5c7NLr41apkT7TQyPk6n7iN4uRNyYY+UnJGAlzJN N5iYSB6guLSmDjvvGkC51IhDZLjH9xBiNFkEUlmcJ7tCpJevYx7yBeNIsAKGv32f ScA8XeflkY56/VGn0+/1laBzrgN+ic6di+Pex9E35HjPYdAhhYYgbfS0ONuyFUBg 3OI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz53JGSb1nm7GOH+aSrI9 TzOtnLP7rYYPX8lM2pM1zdBnjRd61do8YEFfjPWO4zMWz8eYXi0/F+gOyab0m6xg h7e8KdaUaRWtVgIrxT6YOJSN1DyC9Xzu13HxvbrYwX1RWA+BE9O+I2nYRWlqXSOw r1KehuDN8rbKwa9b0sRuoAAFUKvW5Acj2p25yKcKfp4LwB6VIFzgh80pI4uadTYY FkDyTT1I6xQe9kEUvEqrMAKnmR82mk4ntD7Dd3q2/uzoJDfaDawQi3RsMBl8Ly9z alhDX0vJoS3KAeU0lrdNp4lG/adsIIp6kwZAkr949legshL/RBn9ID8nVOXgLTh8 HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3604439434350506137242796507891099500 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bf-interred-production.aws.bfops.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26209136077673519371971703838524313338441804758676618074186777132797593724944748550413874821101335974147575799039134471735170759203689255532541095754852920529526843829119416447686189418167917211461341111626301504475304387998216003831718198468073689829954637372068895376576854179501502824489874740563450099879114030811176256229790885249603782809157856250183096907165143589370600338142004945128670905223557671399807931183632452389152238742420772282099965540962540537014857449944256707996186811647557069054739968550543137029622459505237365887309639263984902066600224953379377183038579623387044225169432170658629745671199 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 18a4ad450fdb1a91e9aac20a9f726f8983138da9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bf-interred-production.aws.bfops.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-interred-production.aws.bfops.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008ad37a8f52a85a336c62ff1c867b245fa1fe7659a0c0cf4a67629d765d77d8c11e4cd3e6673970d4a60902e2624f8916c0a91d2653982875be58ac499c060564ee1f10747f0053e009ae3d47c081542ac5361d04884413a5e1c83f446789a74eb129bf9b4c0c3e7fd754e30424c6563b2593fac1c303bff1b4d0b951becd0693e5cecd2ebe356a9913ed34323e4ea7ee2378b91372618f949c918097324d379898481ea0b8b4a60e3bef1a40b9d4884364b8c7f7106234590452599c27bb42a497af631ef205e348b00286bf7d9f49c03c5de7e5918e7afd51a7d3eff595a073ae037e89ce9d8be3dec7d137e478cf61d0218586206df4b438dbb2154060dce2