notifications-email-api-us.highbond.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0c:69:78:3f:02:17:2a:f4:0d:84:36:74:51:96:d5:6b was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=notifications-email-api-us.highbond.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:69:78:3f:02:17:2a:f4:0d:84:36:74:51:96:d5:6bSerial Number (int): 16498366000738802129811153312684627307
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9d:07:be:74:6b:1d:2d:60:a8:c1:88:d3:a2:9b:1c:07:d2:b0:28:1b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): a2:fe:f0:24:94:4e:f9:91:5c:e5:71:45:88:ae:ce:86:5a:cf:59:93
Fingerprint (sha256): 0f:60:e2:45:91:99:6a:b9:23:0b:f2:2e:f7:fa:8f:01:03:ff:b4:60:65:d5:3b:e2:00:33:cd:f4:65:6b:b0:5f
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate notifications-email-api-us.highbond.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for notifications-email-api-us.highbond.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
notifications-email-api-us.highbond.com
Other certificates including the domain name highbond.com
(limited to 100 certificates)
*.projects.highbond.com
api-status.360cities.net
api-status.360cities.net
andrei.sterda.com
*.extractor-sa.highbond.com
highbond-combined-eu.aclgrc.com
captable.highbond.com
api-status.360cities.net
api-status.360cities.net
*.hub-ap.highbond.com
*.asset-types-api-sa.highbond.com
contributor.be-importhub-eu.highbond.com
*.hub-ap.highbond.com
highbond-combined-au.aclgrc.com
boardeffect.highbond.com
*.hub-eu.highbond.com
risks-assets-api-jp.highbond.com
equity-appapi.highbond.com
*.web-components-af.highbond.com
api-status.360cities.net
be-manage-eu.highbond.com
sdk-toolkits-api-eu.highbond.com
au.be-wopi.highbond.com
*.hub-ca.highbond.com
gallery.highbond.com
sdk-toolkits-api-au.highbond.com
highbond-combined.aclgrc.com
api-status.360cities.net
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
*.projects-au.highbond.com
api-status.360cities.net
*.roles-configuration.highbond.com
andrei.sterda.com
api-status.360cities.net
notifications-email-api-us.highbond.com
*.static.highbond.com
eu.be-wopi.highbond.com
*.bulkimportercdk1.highbond.com
downloads.highbond.com
*.highbond.com
*.cdkbulkimporter-eu.highbond.com
equity-gateway.highbond.com
notifications-email-api-ca.highbond.com
*.results.highbond.com
audit-eu-api.highbond.com
importer-cdkgateway-eu.highbond.com
*.risks.highbond.com
*.highbond.com
*.hub-af.highbond.com
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
*.highbond.com
highbond-combined-eu.aclgrc.com
api-status.360cities.net
*.results-ca.highbond.com
*.cdkbulkimporter.highbond.com
api-status.360cities.net
*.email-configuration-sa.highbond.com
api-status.360cities.net
highbond-combined-eu.aclgrc.com
api-status.360cities.net
*.cdkbulkimporter-af.highbond.com
*.highbond.com
be-manage.highbond.com
equity-portal.highbond.com
api-status.360cities.net
*.web-components.highbond.com
*.robots-ap.highbond.com
api-status.360cities.net
*.hub-au.highbond.com
compliance-library-api-af.highbond.com
*.asset-inventory-af.highbond.com
importer-cdkgateway-au.highbond.com
gallery.highbond.com
integration-service-api-au.highbond.com
api.dmi.highbond.com
api-status.360cities.net
highbond-combined-eu.aclgrc.com
andrei.sterda.com
highbond-combined-au.aclgrc.com
api-status.360cities.net
highbond-combined-au.aclgrc.com
assessments-jp.highbond.com
*.highbond.com
equity-gateway.highbond.com
*.cdkbulkimporter-sa.highbond.com
audit-af-api.highbond.com
highbond-combined.aclgrc.com
*.cdkbulkimporter.highbond.com
api-status.360cities.net
andrei.sterda.com
be-manage-ca.highbond.com
highbond-combined.aclgrc.com
andrei.sterda.com
*.projects-ap.highbond.com
gallery.highbond.com
andrei.sterda.com
api-status.360cities.net
api-status.360cities.net
andrei.sterda.com
*.extractor-sa.highbond.com
highbond-combined-eu.aclgrc.com
captable.highbond.com
api-status.360cities.net
api-status.360cities.net
*.hub-ap.highbond.com
*.asset-types-api-sa.highbond.com
contributor.be-importhub-eu.highbond.com
*.hub-ap.highbond.com
highbond-combined-au.aclgrc.com
boardeffect.highbond.com
*.hub-eu.highbond.com
risks-assets-api-jp.highbond.com
equity-appapi.highbond.com
*.web-components-af.highbond.com
api-status.360cities.net
be-manage-eu.highbond.com
sdk-toolkits-api-eu.highbond.com
au.be-wopi.highbond.com
*.hub-ca.highbond.com
gallery.highbond.com
sdk-toolkits-api-au.highbond.com
highbond-combined.aclgrc.com
api-status.360cities.net
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
*.projects-au.highbond.com
api-status.360cities.net
*.roles-configuration.highbond.com
andrei.sterda.com
api-status.360cities.net
notifications-email-api-us.highbond.com
*.static.highbond.com
eu.be-wopi.highbond.com
*.bulkimportercdk1.highbond.com
downloads.highbond.com
*.highbond.com
*.cdkbulkimporter-eu.highbond.com
equity-gateway.highbond.com
notifications-email-api-ca.highbond.com
*.results.highbond.com
audit-eu-api.highbond.com
importer-cdkgateway-eu.highbond.com
*.risks.highbond.com
*.highbond.com
*.hub-af.highbond.com
andrei.sterda.com
api-status.360cities.net
andrei.sterda.com
*.highbond.com
highbond-combined-eu.aclgrc.com
api-status.360cities.net
*.results-ca.highbond.com
*.cdkbulkimporter.highbond.com
api-status.360cities.net
*.email-configuration-sa.highbond.com
api-status.360cities.net
highbond-combined-eu.aclgrc.com
api-status.360cities.net
*.cdkbulkimporter-af.highbond.com
*.highbond.com
be-manage.highbond.com
equity-portal.highbond.com
api-status.360cities.net
*.web-components.highbond.com
*.robots-ap.highbond.com
api-status.360cities.net
*.hub-au.highbond.com
compliance-library-api-af.highbond.com
*.asset-inventory-af.highbond.com
importer-cdkgateway-au.highbond.com
gallery.highbond.com
integration-service-api-au.highbond.com
api.dmi.highbond.com
api-status.360cities.net
highbond-combined-eu.aclgrc.com
andrei.sterda.com
highbond-combined-au.aclgrc.com
api-status.360cities.net
highbond-combined-au.aclgrc.com
assessments-jp.highbond.com
*.highbond.com
equity-gateway.highbond.com
*.cdkbulkimporter-sa.highbond.com
audit-af-api.highbond.com
highbond-combined.aclgrc.com
*.cdkbulkimporter.highbond.com
api-status.360cities.net
andrei.sterda.com
be-manage-ca.highbond.com
highbond-combined.aclgrc.com
andrei.sterda.com
*.projects-ap.highbond.com
gallery.highbond.com
andrei.sterda.com
Certificate
The complete raw certificate details for notifications-email-api-us.highbond.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjTCCA3WgAwIBAgIQDGl4PwIXKvQNhDZ0UZbVazANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDUzMTAwMDAwMFoXDTI1MDYzMDIzNTk1OVowMjEw MC4GA1UEAxMnbm90aWZpY2F0aW9ucy1lbWFpbC1hcGktdXMuaGlnaGJvbmQuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZhQcHMOZLv/AC/F+ytA ruCzPEASgG4MlGQC4fv97WJ2QUrGGQFsy0Tv0o6QBVyUQfu+YDWDbXtctX2/VU/a 0rkpHx1rzqDNdCPxcYPFFe+OpDjxz7eaYrMgX4FDUwvnvG95/gj4JDPSowh3Egvm jElEcjJqDOq+MXNvOjHmYW1AAQKW43queFynQaA06JimFoC/YMVa7HRxHZnWJCu5 qURgo5ZhDL9NgqnISPgpZLC0hJh1FMtZfUYKpm3qrU74Nktwwn9lWlR8BK74vNyN tQXLVRBHfSYTOVNgVoOtHExvSCOS42SSfp6K8AcgXMp5W3ER5z6ZN7GViXfhrVBo UwIDAQABo4IBkzCCAY8wHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIw HQYDVR0OBBYEFJ0HvnRrHS1gqMGI06KbHAfSsCgbMDIGA1UdEQQrMCmCJ25vdGlm aWNhdGlvbnMtZW1haWwtYXBpLXVzLmhpZ2hib25kLmNvbTATBgNVHSAEDDAKMAgG BmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9u dHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG IWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq aHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1Ud EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB ACLQna1uX9CQgiPmRr00ZHDP+GWurDX9WRJL1bSNBprL1cH3Xyml5nbNtFqpUzn0 eKAN2QTSJQsswYJv6XsPRX92//v6mKMJvAiwUofLklfcMf484K72CJqyZjnEvLCa AO7EKaG93zpRwDecOmB1iSe3dJsI+1bneSHIRcdwwaPqNS7DHrfwYnAuv3IWou6f 60UpbcpeF+2bgW9+bBZIKrcl3ZTm7uRhGycK4PGXQhB5auZQGgXBI43dHBBIfH7X kxPEAh/smsTvuEY6HLhg3A3I5hIdCuVyxjKU1AF8l1sMaN5L6HnQXFTU23Ksc3Kr 7DOybLtkugi6eVSzlQzEn5c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZhQcHMOZLv/AC/F+ytA ruCzPEASgG4MlGQC4fv97WJ2QUrGGQFsy0Tv0o6QBVyUQfu+YDWDbXtctX2/VU/a 0rkpHx1rzqDNdCPxcYPFFe+OpDjxz7eaYrMgX4FDUwvnvG95/gj4JDPSowh3Egvm jElEcjJqDOq+MXNvOjHmYW1AAQKW43queFynQaA06JimFoC/YMVa7HRxHZnWJCu5 qURgo5ZhDL9NgqnISPgpZLC0hJh1FMtZfUYKpm3qrU74Nktwwn9lWlR8BK74vNyN tQXLVRBHfSYTOVNgVoOtHExvSCOS42SSfp6K8AcgXMp5W3ER5z6ZN7GViXfhrVBo UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16498366000738802129811153312684627307 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'notifications-email-api-us.highbond.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27973774336679273276666988193111249515910771475873091298205695135340864277961581527283934350018506465983309953920977798118630644153734859839633462590489254349036429097285383594284361420877283672794972486344747512721216306138148932125204922804796736801371237666408163276068329318935330995094842608301579690258661532900619059785375845622567991618732785392526335280210736512888756106863543811800866311870499996971438362350582194613483927768729571404655875390408168675828138028238554584841548832998646468634360094322345158462847846311758936820864194893927300781441065230908496938964144550166733547034559586570533243742291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9d07be746b1d2d60a8c188d3a29b1c07d2b0281b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications-email-api-us.highbond.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0022d09dad6e5fd0908223e646bd346470cff865aeac35fd59124bd5b48d069acbd5c1f75f29a5e676cdb45aa95339f478a00dd904d2250b2cc1826fe97b0f457f76fffbfa98a309bc08b05287cb9257dc31fe3ce0aef6089ab26639c4bcb09a00eec429a1bddf3a51c0379c3a60758927b7749b08fb56e77921c845c770c1a3ea352ec31eb7f062702ebf7216a2ee9feb45296dca5e17ed9b816f7e6c16482ab725dd94e6eee4611b270ae0f1974210796ae6501a05c1238ddd1c10487c7ed79313c4021fec9ac4efb8463a1cb860dc0dc8e6121d0ae572c63294d4017c975b0c68de4be879d05c54d4db72ac7372abec33b26cbb64ba08ba7954b3950cc49f97