stg.cs.eplus.jp
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0a:90:4a:a8:87:36:43:ab:8c:68:d7:5c:2f:d8:e1:e7 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=stg.cs.eplus.jp
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:90:4a:a8:87:36:43:ab:8c:68:d7:5c:2f:d8:e1:e7Serial Number (int): 14041484955966224410772486363859706343
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0f:ed:5a:93:72:ce:c1:0c:84:33:94:df:f5:cc:22:2a:78:ac:e7:dc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 04:fa:45:e6:47:70:65:c7:43:c6:87:54:19:6a:66:27:c4:26:4b:c5
Fingerprint (sha256): 14:71:08:7c:43:ae:60:71:ba:e3:3b:b2:be:64:ae:f5:ad:48:2c:04:7f:45:45:cc:84:c2:5d:36:59:b9:a6:27
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate stg.cs.eplus.jp
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stg.cs.eplus.jp
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stg.cs.eplus.jp
stg.cst.eplus.jp
stg.cst.eplus.jp
Other certificates including the domain name eplus.jp
(limited to 100 certificates)
eplus.jp
hercules.eplus.jp
atom.eplus.jp
atom.eplus.jp
emp.eplus.jp
stg.cs.eplus.jp
*.eplus.jp
north2.eplus.jp
*.bc.eplus.jp
atom.eplus.jp
ssl.b2b.eplus.jp
stg.cs.eplus.jp
solarbudokan-news.eplus.jp
atom.eplus.jp
ssl.exap.eplus.jp
atom.eplus.jp
*.eplus.jp
eplus.jp
eplus.jp
dev.shop.eplus.jp
wos.eplus.jp
is.tx.eplus.jp
atom.eplus.jp
stg.cs.eplus.jp
pluto.eplus.jp
sweetloveshower-flash-report.eplus.jp
cooperate.eplus.jp
hercules.eplus.jp
cp.eplus.jp
ssl.exap.eplus.jp
gesicht.eplus.jp
cl.eplus.jp
oc.eplus.jp
hubimg.eplus.jp
support-qa.eplus.jp
pinoko.eplus.jp
sweetloveshower-flash-report.eplus.jp
fes-api.eplus.jp
services.eplus.jp
services.eplus.jp
*.eplus.jp
fes-api.eplus.jp
hercules.eplus.jp
pinoko.eplus.jp
eplus.jp
eplus.jp
eplus.jp
atom.eplus.jp
gesicht.eplus.jp
sweetloveshower-news.eplus.jp
odb.aws.eplus.jp
atom.eplus.jp
solarbudokan-movies.eplus.jp
*.eplus.jp
gvpt6vv6c1.eplus.jp
*.is-mo.eplus.jp
ssl.exap.eplus.jp
atom.eplus.jp
eplus.jp
fes-admin.eplus.jp
kbml.eplus.jp
*.eplus.jp
gvpt6vv6c1.eplus.jp
stg.cs.eplus.jp
*.eplus.jp
gesicht.eplus.jp
eplus.jp
north2.eplus.jp
*.eplus.jp
ib.eplus.jp
y4cpv43hbq.eplus.jp
shop.eplus.jp
*.bc.eplus.jp
tx-admin.tx.eplus.jp
eplus.jp
support-qa.eplus.jp
test.aws.eplus.jp
st.oc.eplus.jp
ct.eplus.jp
hubimg.eplus.jp
kbml.eplus.jp
oc.eplus.jp
ct.eplus.jp
sweetloveshower-flash-report.eplus.jp
fes-admin.eplus.jp
*.eplus.jp
atom.eplus.jp
summersonic-news.eplus.jp
gesicht.eplus.jp
atom.eplus.jp
atom.eplus.jp
gw.eplus.jp
oc.eplus.jp
cst.eplus.jp
fes.eplus.jp
gvpt6vv6c1.eplus.jp
solarbudokan-news.eplus.jp
eplus.jp
tx-admin.tx.eplus.jp
atom.eplus.jp
hercules.eplus.jp
atom.eplus.jp
atom.eplus.jp
emp.eplus.jp
stg.cs.eplus.jp
*.eplus.jp
north2.eplus.jp
*.bc.eplus.jp
atom.eplus.jp
ssl.b2b.eplus.jp
stg.cs.eplus.jp
solarbudokan-news.eplus.jp
atom.eplus.jp
ssl.exap.eplus.jp
atom.eplus.jp
*.eplus.jp
eplus.jp
eplus.jp
dev.shop.eplus.jp
wos.eplus.jp
is.tx.eplus.jp
atom.eplus.jp
stg.cs.eplus.jp
pluto.eplus.jp
sweetloveshower-flash-report.eplus.jp
cooperate.eplus.jp
hercules.eplus.jp
cp.eplus.jp
ssl.exap.eplus.jp
gesicht.eplus.jp
cl.eplus.jp
oc.eplus.jp
hubimg.eplus.jp
support-qa.eplus.jp
pinoko.eplus.jp
sweetloveshower-flash-report.eplus.jp
fes-api.eplus.jp
services.eplus.jp
services.eplus.jp
*.eplus.jp
fes-api.eplus.jp
hercules.eplus.jp
pinoko.eplus.jp
eplus.jp
eplus.jp
eplus.jp
atom.eplus.jp
gesicht.eplus.jp
sweetloveshower-news.eplus.jp
odb.aws.eplus.jp
atom.eplus.jp
solarbudokan-movies.eplus.jp
*.eplus.jp
gvpt6vv6c1.eplus.jp
*.is-mo.eplus.jp
ssl.exap.eplus.jp
atom.eplus.jp
eplus.jp
fes-admin.eplus.jp
kbml.eplus.jp
*.eplus.jp
gvpt6vv6c1.eplus.jp
stg.cs.eplus.jp
*.eplus.jp
gesicht.eplus.jp
eplus.jp
north2.eplus.jp
*.eplus.jp
ib.eplus.jp
y4cpv43hbq.eplus.jp
shop.eplus.jp
*.bc.eplus.jp
tx-admin.tx.eplus.jp
eplus.jp
support-qa.eplus.jp
test.aws.eplus.jp
st.oc.eplus.jp
ct.eplus.jp
hubimg.eplus.jp
kbml.eplus.jp
oc.eplus.jp
ct.eplus.jp
sweetloveshower-flash-report.eplus.jp
fes-admin.eplus.jp
*.eplus.jp
atom.eplus.jp
summersonic-news.eplus.jp
gesicht.eplus.jp
atom.eplus.jp
atom.eplus.jp
gw.eplus.jp
oc.eplus.jp
cst.eplus.jp
fes.eplus.jp
gvpt6vv6c1.eplus.jp
solarbudokan-news.eplus.jp
eplus.jp
tx-admin.tx.eplus.jp
atom.eplus.jp
Certificate
The complete raw certificate details for stg.cs.eplus.jp in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIQCpBKqIc2Q6uMaNdcL9jh5zANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDUyMTAwMDAwMFoXDTI1MDYxOTIzNTk1OVowGjEY MBYGA1UEAxMPc3RnLmNzLmVwbHVzLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtZUg0sOhD5c3sQMFxsqb7VSQARBu3En4EOLA/v3KrvaRMKG7S7D7 R0Kc5qN2Q1uKFteRbWYEXSRG23xFfBL6g1+vvNbNCn4myTjCaX412WfCA8kQECzR j5iQ4BWHMaHNzw/r0bLbvvepq8ozdw42C073ARQynDkNT1aTulpmxb2bUf7AioKZ C8beNw0FNXq/5V4BenNYBg14SsE8IZSjLGsUpXQMwRNVn4EWU3bOhM0MMgsAIDVT vgOx5KoC9l2O7tZlQTLtfVPh8W0A1qbBmQ/Iq4VtNL1a61sce4OHqYShWkzMrgQq mnNOcvfhOKk0KqKCVezE6elvi9fjavGVmwIDAQABo4IC+DCCAvQwHwYDVR0jBBgw FoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFA/tWpNyzsEMhDOU3/XM Iip4rOfcMCwGA1UdEQQlMCOCD3N0Zy5jcy5lcGx1cy5qcIIQc3RnLmNzdC5lcGx1 cy5qcDATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcB AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0 LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5j b20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASC AWgBZgB1AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj5i14ssA AAQDAEYwRAIgBqoaQzz2XzDPcHtDY+0uv6rfVmerYeD4aM7PW9NzKKICIElBqRJh DvmX9p4EZueukP7tb0o8zNtpe25gZx40F65sAHUAfVkeEuF4KnscYWd8Xv340Idc FKBOlZ65Ay/ZDowuebgAAAGPmLXiQwAABAMARjBEAiABLZW/RLA+NbzzPZYhrSEO lxgKFEuD0arwoUUL1agzhgIge3zIbd7JUVXxJ7EBTZRQkcjEgRKsF97KfyBjGu13 AqAAdgDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY+YteJZAAAE AwBHMEUCIQCAW2D8rPIbxLTNibIqmJVxCIfwo2oWw8g8hoWClyXN1gIgHkvF+gTY 9hnRIvkw94Yh0u6Pd6KssNiCw+xHfp2cOZYwDQYJKoZIhvcNAQELBQADggEBAGmP Xmfa4mBjGTbir9tiY2hguxPrA0yLXYxicskDIrVyN1E/853nYYxXatGzMxOnxbR9 PE+78f8JS5D0n7Hvb8+sMorB9+uXyoPIi0UCl8zcDpXdFx49VIV83NNo593SnrvM FYPRRt2PsIUC3kS4/coDXfyfYZqqfo+pJDcEivH3CoyGtbn7jpbWV+f/VoDgeX1J V4uV/zMwTa/E23KqD5VZMM8pKtg4KP0kBB6Q8Zt6aeo8k3/c2Ga6GIOHli2h882R tT+ISFc/1I0iSY/tLztFfvm2rrjYZhQ4awtTWmg1HLr5iOr8ulbyb4XqFbJfHtHY KMw91A6cWOApvBFm49o= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZUg0sOhD5c3sQMFxsqb 7VSQARBu3En4EOLA/v3KrvaRMKG7S7D7R0Kc5qN2Q1uKFteRbWYEXSRG23xFfBL6 g1+vvNbNCn4myTjCaX412WfCA8kQECzRj5iQ4BWHMaHNzw/r0bLbvvepq8ozdw42 C073ARQynDkNT1aTulpmxb2bUf7AioKZC8beNw0FNXq/5V4BenNYBg14SsE8IZSj LGsUpXQMwRNVn4EWU3bOhM0MMgsAIDVTvgOx5KoC9l2O7tZlQTLtfVPh8W0A1qbB mQ/Iq4VtNL1a61sce4OHqYShWkzMrgQqmnNOcvfhOKk0KqKCVezE6elvi9fjavGV mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14041484955966224410772486363859706343 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg.cs.eplus.jp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22922671062962952129002394025253918428145771731738022957850351074791175607551061711751703239925893010262513412862187901278810678358374585467610622134848175611234058694606875030359569284588203436912314941629804751397749189540295365729349682827287298379460934327402824128678816530287115783093881875981222565060268171499492790519768372580213208615236141551232932107964343222554063742943876889154075984995997312030537754048659104177875668539755415085852727661115573274144917873279451942386441616986255552159744137613374846475288065375205540657560162594966907070414396907993095743874378839464479540002691970874518937900443 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0fed5a9372cec10c843394dff5cc222a78ace7dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cs.eplus.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cst.eplus.jp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 01660075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018f98b5e2cb0000040300463044022006aa1a433cf65f30cf707b4363ed2ebfaadf5667ab61e0f868cecf5bd37328a202204941a912610ef997f69e0466e7ae90feed6f4a3cccdb697b6e60671e3417ae6c0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018f98b5e24300000403004630440220012d95bf44b03e35bcf33d9621ad210e97180a144b83d1aaf0a1450bd5a8338602207b7cc86ddec95155f127b1014d945091c8c48112ac17deca7f20631aed7702a0007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018f98b5e2590000040300473045022100805b60fcacf21bc4b4cd89b22a9895710887f0a36a16c3c83c8685829725cdd602201e4bc5fa04d8f619d122f930f78621d2ee8f77a2acb0d882c3ec477e9d9c3996 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00698f5e67dae260631936e2afdb62636860bb13eb034c8b5d8c6272c90322b57237513ff39de7618c576ad1b33313a7c5b47d3c4fbbf1ff094b90f49fb1ef6fcfac328ac1f7eb97ca83c88b450297ccdc0e95dd171e3d54857cdcd368e7ddd29ebbcc1583d146dd8fb08502de44b8fdca035dfc9f619aaa7e8fa92437048af1f70a8c86b5b9fb8e96d657e7ff5680e0797d49578b95ff33304dafc4db72aa0f955930cf292ad83828fd24041e90f19b7a69ea3c937fdcd866ba188387962da1f3cd91b53f8848573fd48d22498fed2f3b457ef9b6aeb8d86614386b0b535a68351cbaf988eafcba56f26f85ea15b25f1ed1d828cc3dd40e9c58e029bc1166e3da