demo-app-sre5-hello-alb.exactsciences.net
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0f:fc:16:bf:a3:9b:e5:94:1b:f3:bc:6c:5b:67:43:be was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=demo-app-sre5-hello-alb.exactsciences.net
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:fc:16:bf:a3:9b:e5:94:1b:f3:bc:6c:5b:67:43:beSerial Number (int): 21247340141349359474160972599518512062
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 88:24:ef:6e:99:99:57:23:9e:1b:73:40:47:47:6b:fe:ad:6b:9d:ad
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 3e:84:cb:4a:01:64:b5:2e:c6:14:bb:88:18:af:d6:2b:b0:b1:cf:d9
Fingerprint (sha256): 0f:30:19:4e:28:49:43:a1:6b:16:f3:d7:b7:02:0a:d1:30:4b:c5:3a:4a:0c:50:4a:04:48:22:05:02:ac:76:ae
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate demo-app-sre5-hello-alb.exactsciences.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for demo-app-sre5-hello-alb.exactsciences.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
demo-app-sre5-hello-alb.exactsciences.net
Other certificates including the domain name exactsciences.net
(limited to 100 certificates)
xfactor-omap-dev.exactsciences.net
arrowhead-test2.exactsciences.net
groundcontrol.exactsciences.net
viewpsr-dev.exactsciences.net
custom-subdomain-dev.exactsciences.net
xfactor-campaigns-test4.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
specimen-estimations-dev.exactsciences.net
xfactor-campaigns-test5.exactsciences.net
feyereisentest9.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
prx01-datadog-prod.exactsciences.net
dev2-lis.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
sni.cloudflaressl.com
demo-app-sre5-hello-alb.exactsciences.net
result-report-dev.exactsciences.net
demo-app-sre5-hello-nlb.exactsciences.net
vault-ent.exactsciences.net
addressbook-purple-ft.exactsciences.net
dev3-discovery.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
feyereisentest8.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
lab-odxoutcome-stage.exactsciences.net
www.montraitement-cancerdusein.fr
xfactor-campaigns-test2.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
ansible-dev.exactsciences.net
shuttle-api-dev-shuttle-nlb.exactsciences.net
addressbook-stage.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
dsci-kit-return-model-dev.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
custom-subdomain-dev.exactsciences.net
status.exactsciences.net
application-corepoint-test.exactsciences.net
vault-ent.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
xfactor-campaigns-test3.exactsciences.net
650-covid-19-qa.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
*.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
testing-oregon-network.exactsciences.net
*.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
cio-api-test-cio-api-nlb.exactsciences.net
addressbook-pp.exactsciences.net
status.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
*.exactsciences.net
a-test-domain.exactsciences.net
dev-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-calypso-dev.exactsciences.net
stage2-cms.exactsciences.net
exas-helix-ds.exactsciences.net
test-inbound-endpoint.exactsciences.net
result-report-test.exactsciences.net
pcdx-manifest-dev.exactsciences.net
status.exactsciences.net
consul-test.exactsciences.net
lis-dev.exactsciences.net
xfactor-lis-test1.aws.exactsciences.net
www.oncoguardliver.com
demo-app-sre5-hello-alb.exactsciences.net
xfactor-text-dev.exactsciences.net
xfactor-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-fax-test1.exactsciences.net
arrowhead-test2.exactsciences.net
nomad.exactsciences.net
xfactor-epic-consumer-api-service-dev.exactsciences.net
testing-oregon-network.exactsciences.net
a-test-domain.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
discovery-lis.exactsciences.net
stage.deploy-slot.exactsciences.net
uat-cms.exactsciences.net
status.exactsciences.net
xfactor-fax-test2.exactsciences.net
hello-dev-hello-nlb.exactsciences.net
api.xfactor-integration-test.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
test-ib-endpt.exactsciences.net
audit-log-stage-audit-log-nlb.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
addressbook-stage.exactsciences.net
cdohostserver-test.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
xfactor-campaigns-test1.exactsciences.net
sre3-my-subdomain.exactsciences.net
dsci-incoming-texts-classifier-dev.exactsciences.net
arrowhead-test2.exactsciences.net
groundcontrol.exactsciences.net
viewpsr-dev.exactsciences.net
custom-subdomain-dev.exactsciences.net
xfactor-campaigns-test4.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
specimen-estimations-dev.exactsciences.net
xfactor-campaigns-test5.exactsciences.net
feyereisentest9.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
prx01-datadog-prod.exactsciences.net
dev2-lis.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
sni.cloudflaressl.com
demo-app-sre5-hello-alb.exactsciences.net
result-report-dev.exactsciences.net
demo-app-sre5-hello-nlb.exactsciences.net
vault-ent.exactsciences.net
addressbook-purple-ft.exactsciences.net
dev3-discovery.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
feyereisentest8.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
lab-odxoutcome-stage.exactsciences.net
www.montraitement-cancerdusein.fr
xfactor-campaigns-test2.exactsciences.net
exas-bg.exactsciences.net
*.exactsciences.net
ansible-dev.exactsciences.net
shuttle-api-dev-shuttle-nlb.exactsciences.net
addressbook-stage.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
dsci-kit-return-model-dev.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
custom-subdomain-dev.exactsciences.net
status.exactsciences.net
application-corepoint-test.exactsciences.net
vault-ent.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
demo-app-sre5-hello-alb.exactsciences.net
xfactor-campaigns-test3.exactsciences.net
650-covid-19-qa.exactsciences.net
api.xfactor-campaigns-integration-test-alb-1.exactsciences.net
*.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
testing-oregon-network.exactsciences.net
*.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
cio-api-test-cio-api-nlb.exactsciences.net
addressbook-pp.exactsciences.net
status.exactsciences.net
api.xfactor-campaigns-test1.exactsciences.net
*.exactsciences.net
a-test-domain.exactsciences.net
dev-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-calypso-dev.exactsciences.net
stage2-cms.exactsciences.net
exas-helix-ds.exactsciences.net
test-inbound-endpoint.exactsciences.net
result-report-test.exactsciences.net
pcdx-manifest-dev.exactsciences.net
status.exactsciences.net
consul-test.exactsciences.net
lis-dev.exactsciences.net
xfactor-lis-test1.aws.exactsciences.net
www.oncoguardliver.com
demo-app-sre5-hello-alb.exactsciences.net
xfactor-text-dev.exactsciences.net
xfactor-lis.exactsciences.net
exas-bg.exactsciences.net
xfactor-fax-test1.exactsciences.net
arrowhead-test2.exactsciences.net
nomad.exactsciences.net
xfactor-epic-consumer-api-service-dev.exactsciences.net
testing-oregon-network.exactsciences.net
a-test-domain.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
discovery-lis.exactsciences.net
stage.deploy-slot.exactsciences.net
uat-cms.exactsciences.net
status.exactsciences.net
xfactor-fax-test2.exactsciences.net
hello-dev-hello-nlb.exactsciences.net
api.xfactor-integration-test.exactsciences.net
xfactor-campaigns-test2.exactsciences.net
test-ib-endpt.exactsciences.net
audit-log-stage-audit-log-nlb.exactsciences.net
api.xfactor-campaigns-test1-alb-1.exactsciences.net
addressbook-stage.exactsciences.net
cdohostserver-test.exactsciences.net
demo-app-sre5-hello-world-nlb.exactsciences.net
xfactor-campaigns-test1.exactsciences.net
sre3-my-subdomain.exactsciences.net
dsci-incoming-texts-classifier-dev.exactsciences.net
Certificate
The complete raw certificate details for demo-app-sre5-hello-alb.exactsciences.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEkTCCA3mgAwIBAgIQD/wWv6Ob5ZQb87xsW2dDvjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIwMjAwMDAwMFoXDTIzMTIzMTIzNTk1OVowNDEy MDAGA1UEAxMpZGVtby1hcHAtc3JlNS1oZWxsby1hbGIuZXhhY3RzY2llbmNlcy5u ZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbYKlFLkkq1yqAoTfV fGW/HPxWkG2FkHOoWiBOhBx+sxn+wWZ8QxmwoN8zn3a/NAz6YAk8PkDu5SJmah3q lV+Y3B3tSKLq0ltMRewn84eM+nZTyTMKoJr1jw6rPL4Rm+0HJWcthwINfFKSQ4Df AD7AJ1llObOeU4L2kQj9xWijBtYHWJfKoQVOmZOFFyvtVYTSuW7GVi0VkRDXd2Be Kz0plljop0a6/K5EuQ94kmJEkHu4wtcudeyVqsgD/oZtRoMws+b3eRBvItW+Z1Vh 7nQm4k+nmeReZwKk6FV79x5PBKTIH5okwwRHjqKVjofaCndZQH8OO1GjRQSnlksp 1pZhAgMBAAGjggGVMIIBkTAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAT hTAdBgNVHQ4EFgQUiCTvbpmZVyOeG3NAR0dr/q1rna0wNAYDVR0RBC0wK4IpZGVt by1hcHAtc3JlNS1oZWxsby1hbGIuZXhhY3RzY2llbmNlcy5uZXQwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBNGTyo7J+rt1FUPFzZGcNNZUDpUQeMQCeO/k7nhFFAUWDtQIHwl68cjHZZ s2TemeQwzosDQA3qqazlIRHySiwZ58i9fPKkUAJHsv49oBxXRJD9JaQmt/6ywIdQ ka5lIB4z6tF4RGvjmH1CUXj4G8BOs1UDTTkbIpmeMjtUczwu7QUlFp8M362W7SlF XsTjWXekR5BVhy3UMQzjKQPc6ZeWSxhbnLS3mlFT1cBCGDeG6CaZc7Syx5po8DNI JvN2xaJqyKl/aU6U9jM2sh10uWc6TMYchtPNaYeJoc1RBLt2fNfxmG4Nc6A74IzH tkq7GJ/ZB2IMTI0tRJvJBj7SmNVu -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2CpRS5JKtcqgKE31Xxl vxz8VpBthZBzqFogToQcfrMZ/sFmfEMZsKDfM592vzQM+mAJPD5A7uUiZmod6pVf mNwd7Uii6tJbTEXsJ/OHjPp2U8kzCqCa9Y8Oqzy+EZvtByVnLYcCDXxSkkOA3wA+ wCdZZTmznlOC9pEI/cVoowbWB1iXyqEFTpmThRcr7VWE0rluxlYtFZEQ13dgXis9 KZZY6KdGuvyuRLkPeJJiRJB7uMLXLnXslarIA/6GbUaDMLPm93kQbyLVvmdVYe50 JuJPp5nkXmcCpOhVe/ceTwSkyB+aJMMER46ilY6H2gp3WUB/DjtRo0UEp5ZLKdaW YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21247340141349359474160972599518512062 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo-app-sre5-hello-alb.exactsciences.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19614602689824398406432602019284791083148096473185004909035696418428556031464792803976907008860076924710931548932308764701533238167678432061121220815997506166136936476954713502368640685328061135623040504531193343261567403867272736950787768710299191176389666910396163787597316061517719319969690312202703380204089302403584680173138006811259000445663569944121236783972081776120534740156257135349384731775237680562680575909813978619836223060362883755390370971044901017519064458782753084603555725092784004138723655770697857615049638369931866811089491931071715201002287541991842667217000913078913681330497384946236520830561 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8824ef6e999957239e1b734047476bfead6b9dad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-app-sre5-hello-alb.exactsciences.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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