*.test.sweeps.sbgservices.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0d:fc:b7:53:23:8c:c5:87:df:5d:c2:8f:e0:0a:1c:87 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.test.sweeps.sbgservices.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:fc:b7:53:23:8c:c5:87:df:5d:c2:8f:e0:0a:1c:87Serial Number (int): 18592141021451797620862714796950822023
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ec:d5:23:77:2d:a6:b8:67:13:d1:5c:37:08:41:f5:91:d6:b0:03:71
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 4f:7d:3c:ae:ed:a6:77:98:af:8c:ac:c4:bb:14:d9:31:db:1e:7f:07
Fingerprint (sha256): 12:01:df:98:ac:96:c7:29:97:c2:e4:82:99:11:ce:53:9f:e4:94:f0:96:23:87:8c:be:43:e1:8b:1a:b3:78:af
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.test.sweeps.sbgservices.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.test.sweeps.sbgservices.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.test.sweeps.sbgservices.com
Other certificates including the domain name sbgservices.com
(limited to 100 certificates)
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
ui.browser-test.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
*.test.ff.sbgservices.com
ui.browser-test.cbe01-1.dev.messaging.sbgservices.com
assetstore.test.gs.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
publicgateway.test.gs.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
api.messaging.sbgservices.com
test.feedback.s6.sbgservices.com
ui.browser-test.preenn-1.dev.messaging.sbgservices.com
rcs.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
rc.ges.sbgservices.com
*.dev.ff.sbgservices.com
push.staging.gamingservices.sbgservices.com
push.gs.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
ui.preenn-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
api.messaging.sbgservices.com
push.gamingservices.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
minigames.ges.sbgservices.com
clearpass.skybettingandgaming.com
feedback.s6.sbgservices.com
ui.am04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.test.sweeps.sbgservices.com
ui.browser-test.leahyc-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
rcs.sbgservices.com
push.gamingservices.sbgservices.com
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
push.test.gamingservices.sbgservices.com
demo-portal.test.ges.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
api.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
ci.api.ff.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
*.staging.sbgservices.com
*.loadtest.sweeps.sbgservices.com
rcs.ges.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
chris.test.s6.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.prod.sweeps.sbgservices.com
push.gs.sbgservices.com
rc.ges.sbgservices.com
gate.sbgservices.com
ui.iba01-2.dev.messaging.sbgservices.com
api.staging.skysportsquiz.com
*.staging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
*.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
*.prod.itv7.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
oauth.loadtest.sweeps.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
skyvegas.com
ui.iba01-1.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
api.s6.sbgservices.com
ui.browser-test.iba01-1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
rcs.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
sbgservices.com
*.staging.ff.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
publicgateway.gs.sbgservices.com
ui.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
ui.browser-test.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
*.test.ff.sbgservices.com
ui.browser-test.cbe01-1.dev.messaging.sbgservices.com
assetstore.test.gs.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
publicgateway.test.gs.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
api.messaging.sbgservices.com
test.feedback.s6.sbgservices.com
ui.browser-test.preenn-1.dev.messaging.sbgservices.com
rcs.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
rc.ges.sbgservices.com
*.dev.ff.sbgservices.com
push.staging.gamingservices.sbgservices.com
push.gs.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
ui.preenn-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
api.messaging.sbgservices.com
push.gamingservices.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
minigames.ges.sbgservices.com
clearpass.skybettingandgaming.com
feedback.s6.sbgservices.com
ui.am04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.test.sweeps.sbgservices.com
ui.browser-test.leahyc-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
rcs.sbgservices.com
push.gamingservices.sbgservices.com
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
push.test.gamingservices.sbgservices.com
demo-portal.test.ges.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
api.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
ci.api.ff.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
*.staging.sbgservices.com
*.loadtest.sweeps.sbgservices.com
rcs.ges.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
chris.test.s6.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.prod.sweeps.sbgservices.com
push.gs.sbgservices.com
rc.ges.sbgservices.com
gate.sbgservices.com
ui.iba01-2.dev.messaging.sbgservices.com
api.staging.skysportsquiz.com
*.staging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
*.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
*.prod.itv7.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
oauth.loadtest.sweeps.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
skyvegas.com
ui.iba01-1.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
api.s6.sbgservices.com
ui.browser-test.iba01-1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
rcs.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
sbgservices.com
*.staging.ff.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
publicgateway.gs.sbgservices.com
ui.messaging.sbgservices.com
Certificate
The complete raw certificate details for *.test.sweeps.sbgservices.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEeTCCA2GgAwIBAgIQDfy3UyOMxYffXcKP4AochzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDkyNjAwMDAwMFoXDTI0MTAyNDIzNTk1OVowKDEm MCQGA1UEAwwdKi50ZXN0LnN3ZWVwcy5zYmdzZXJ2aWNlcy5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaz+6A+1SI0hSFI22+iFiDHtDQgVuRv6An eLdPLYgy6uNmIFiO1E8jTmQ80uQ87RL3ZWWO2d65bYHIS9GasefhURK4NRDW3Pjo bPkZcz80cIHptCH86BN9l4RJSJeEZRsZFJLhJXZi/SM5VLStkreUtVYFvk9GujZz Qhh2+T1MabXS6lr3b576kwysHmDR8JpFoeJt9+MS8sKQ9q9lM4f8TEaRCEDsbs/D vDxOXuYEimymAxgQFzVBExgqr/Za2azUtE2COYXg3tC/7ARFg0N1UqNe3DkD7HTu wn9yH0RqbRbJEZOnmU/GWBUM6VrP2WMqkOi/5WvqjDI/IS+jncS1AgMBAAGjggGJ MIIBhTAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU 7NUjdy2muGcT0Vw3CEH1kdawA3EwKAYDVR0RBCEwH4IdKi50ZXN0LnN3ZWVwcy5z YmdzZXJ2aWNlcy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg LqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmww dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1h em9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcXfQd/GgNrMdl+uWX1ff/pAhY O220pRbc72i4BXxNgVWt3IaY7tUmVUJlaybKScyaCN0zqv108ZC/XG04ilOAoeq1 pr30+0wgZDtnjeryaA3WIrtePkEDagsBXpKVWjzs6Sy03y567jAR0leaXAd03Wyb b/H0s5QzvKCCNBIrTYzqBCbFAv00h7CTcVzZI07JGUcFp+TXf6Lk7EKrDbn1h1PS G90Xj6fm9rK1IN/f0bnoB6sfg5dDWWi9CG7NaEZtf20CI8TJsbl3X/FKi3/mnNWA 3ChqRMqnT6lCmqflAQXgkJFePT1Ntj/iggR784YRiAeNqDcct6BbCPZBgyRM -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s/ugPtUiNIUhSNtvohY gx7Q0IFbkb+gJ3i3Ty2IMurjZiBYjtRPI05kPNLkPO0S92VljtneuW2ByEvRmrHn 4VESuDUQ1tz46Gz5GXM/NHCB6bQh/OgTfZeESUiXhGUbGRSS4SV2Yv0jOVS0rZK3 lLVWBb5PRro2c0IYdvk9TGm10upa92+e+pMMrB5g0fCaRaHibffjEvLCkPavZTOH /ExGkQhA7G7Pw7w8Tl7mBIpspgMYEBc1QRMYKq/2Wtms1LRNgjmF4N7Qv+wERYND dVKjXtw5A+x07sJ/ch9Eam0WyRGTp5lPxlgVDOlaz9ljKpDov+Vr6owyPyEvo53E tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18592141021451797620862714796950822023 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.sweeps.sbgservices.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27622485403508662559879098289976659496183544151667613487959220164678575863580759764177323589721411385778996559446208984757729718096122011020298751625131371213024946991172937565216645792457878273133956876027939363096600720301468738046162893061768347516367987942138208977581172103781362682864332697313923927228924252079985352230825200894003969493994628909971427340123493755132825987140828416789100484621885540943038869291388591119646949232229921747388831192188506426302965809029803674028561805430493044843649717885301689223706652598254683292399751439127848665491327494220408603999973824212512380361757331843478705783989 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ecd523772da6b86713d15c370841f591d6b00371 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.sweeps.sbgservices.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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