accounts.bhg.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 05:28:11:f7:a2:d4:89:ff:04:35:2c:9f:ab:8a:16:a6 was issued on by Amazon.
With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=accounts.bhg.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:28:11:f7:a2:d4:89:ff:04:35:2c:9f:ab:8a:16:a6Serial Number (int): 6854196273978891104596139933187053222
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 90:17:d7:de:cf:9d:b4:64:d1:dc:28:fc:a6:2f:59:71:43:49:16:72
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): ad:48:61:da:d9:7a:a2:58:f6:d7:ac:55:02:7a:ac:19:53:4b:ee:f4
Fingerprint (sha256): 14:80:c8:b6:ef:82:8c:5c:41:5f:82:cd:94:6b:b6:6b:83:80:55:3d:d2:23:56:b1:06:99:dc:96:7f:74:af:c5
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate accounts.bhg.com
22
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for accounts.bhg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
accounts.bhg.com
mdp.com
accounts.dailypaws.com
accounts.foodandwine.com
accounts.realsimple.com
accounts.hellogiggles.com
accounts.peopleenespanol.com
accounts.travelandleisure.com
accounts.midwestliving.com
accounts.rachaelraymag.com
accounts.cookinglight.com
accounts.meredith.com
accounts.millie.us
accounts.instyle.com
accounts.southernliving.com
accounts.marthastewart.com
accounts.people.com
accounts.health.com
accounts.coastalliving.com
accounts.allpeoplequilt.com
accounts.ew.com
accounts.shape.com
mdp.com
accounts.dailypaws.com
accounts.foodandwine.com
accounts.realsimple.com
accounts.hellogiggles.com
accounts.peopleenespanol.com
accounts.travelandleisure.com
accounts.midwestliving.com
accounts.rachaelraymag.com
accounts.cookinglight.com
accounts.meredith.com
accounts.millie.us
accounts.instyle.com
accounts.southernliving.com
accounts.marthastewart.com
accounts.people.com
accounts.health.com
accounts.coastalliving.com
accounts.allpeoplequilt.com
accounts.ew.com
accounts.shape.com
Other certificates including the domain name bhg.com
(limited to 100 certificates)
bhg.com
payments.meredith.com
*.bhg.com
test.membership.bhg.com
qa4.ugc.marthastewart.com
archive.bhg.com
test.mdp.entitlements.bhg.com
accounts.bhg.com
*.secure.meredith.com
*.qa1.shopnation.com
secure.meredith.com
amp.bhg.com
ssl454052.cloudflaressl.com
images.meredith.com
test.membership.bhg.com
insider.bhg.com
sandbox-accounts.bhg.com
amp.bhg.com
sli.dailypaws.com
sli.dailypaws.com
images.meredith.com
a-ue1.mydomaine.com
www.bhg.com
payments.meredith.com
assets.qa2.shopnation.com
www.meredith.com
qa4.ugc.marthastewart.com
specialoffers.meredith.com
*.meredithperformancemarketing.com
leads.bhg.com
resolute.digital
*.bhg.com
test.membership.bhg.com
sandbox-accounts.bhg.com
globalrunningday.org
ssl454053.cloudflaressl.com
sli.dailypaws.com
*.agriculture.com
poobaj.bhg.com
test.membership.bhg.com
dev.secure.meredith.com
ssl454054.cloudflaressl.com
accounts.bhg.com
sli.dailypaws.com
*.meredithperformancemarketing.com
sli.dailypaws.com
secure.meredith.com
archive.bhg.com
images.meredith.com
accounts.bhg.com
accounts.bhg.com
origin-www.bhg.com
www.timeinclistrental.com
houseplans.bhg.com
archive.bhg.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
www.meredith.com
a-uw2.mydomaine.com
membership.bhg.com
assets.qa1.shopnation.com
mdp.api.meredith.com
dev.mdp.entitlements.bhg.com
test.mdp.entitlements.bhg.com
secure.meredith.com
accounts.bhg.com
dev.membership.bhg.com
*.bhg.com
secure.bhg.com
ssl454053.cloudflaressl.com
a-ue1.mydomaine.com
images.meredith.com
houseplans.bhg.com
amp.bhg.com
poobaj.bhg.com
poobaj.bhg.com
poobaj.bhg.com
images.meredith.com
poobaj.bhg.com
images.meredith.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
*.bhg.com
houseplans.bhg.com
secure.meredith.com
ssl454053.cloudflaressl.com
sandbox-accounts.bhg.com
sli.bhg.com
houseplans.bhg.com
nbailly-slice.bhg.com
accounts.bhg.com
membership.bhg.com
images.meredith.com
ssl454052.cloudflaressl.com
globalrunningday.org
membership.bhg.com
test.payments.meredith.com
dev.membership.bhg.com
payments.meredith.com
*.bhg.com
test.membership.bhg.com
qa4.ugc.marthastewart.com
archive.bhg.com
test.mdp.entitlements.bhg.com
accounts.bhg.com
*.secure.meredith.com
*.qa1.shopnation.com
secure.meredith.com
amp.bhg.com
ssl454052.cloudflaressl.com
images.meredith.com
test.membership.bhg.com
insider.bhg.com
sandbox-accounts.bhg.com
amp.bhg.com
sli.dailypaws.com
sli.dailypaws.com
images.meredith.com
a-ue1.mydomaine.com
www.bhg.com
payments.meredith.com
assets.qa2.shopnation.com
www.meredith.com
qa4.ugc.marthastewart.com
specialoffers.meredith.com
*.meredithperformancemarketing.com
leads.bhg.com
resolute.digital
*.bhg.com
test.membership.bhg.com
sandbox-accounts.bhg.com
globalrunningday.org
ssl454053.cloudflaressl.com
sli.dailypaws.com
*.agriculture.com
poobaj.bhg.com
test.membership.bhg.com
dev.secure.meredith.com
ssl454054.cloudflaressl.com
accounts.bhg.com
sli.dailypaws.com
*.meredithperformancemarketing.com
sli.dailypaws.com
secure.meredith.com
archive.bhg.com
images.meredith.com
accounts.bhg.com
accounts.bhg.com
origin-www.bhg.com
www.timeinclistrental.com
houseplans.bhg.com
archive.bhg.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
www.meredith.com
a-uw2.mydomaine.com
membership.bhg.com
assets.qa1.shopnation.com
mdp.api.meredith.com
dev.mdp.entitlements.bhg.com
test.mdp.entitlements.bhg.com
secure.meredith.com
accounts.bhg.com
dev.membership.bhg.com
*.bhg.com
secure.bhg.com
ssl454053.cloudflaressl.com
a-ue1.mydomaine.com
images.meredith.com
houseplans.bhg.com
amp.bhg.com
poobaj.bhg.com
poobaj.bhg.com
poobaj.bhg.com
images.meredith.com
poobaj.bhg.com
images.meredith.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
*.bhg.com
houseplans.bhg.com
secure.meredith.com
ssl454053.cloudflaressl.com
sandbox-accounts.bhg.com
sli.bhg.com
houseplans.bhg.com
nbailly-slice.bhg.com
accounts.bhg.com
membership.bhg.com
images.meredith.com
ssl454052.cloudflaressl.com
globalrunningday.org
membership.bhg.com
test.payments.meredith.com
dev.membership.bhg.com
Certificate
The complete raw certificate details for accounts.bhg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgIQBSgR96LUif8ENSyfq4oWpjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIyNDAwMDAwMFoXDTIzMDcwNzIzNTk1OVowGzEZ MBcGA1UEAxMQYWNjb3VudHMuYmhnLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOazjAliZDorNgH+osaNOcXMJYNzGWNU3IhpBgtyvCTYaLbTfxRL roF7WJMUbn5T1vYWm9kH4IROYVhLrMN9ZqPJqa2VT+5t6CSHnQUUGeRN3G31o6Cz zR+cy3PuIjIWIa8zPU8x7Rhd8LRHoCqDf5vnOykuDN/r88LdRhwx1zOsXr/qZ5cB FfE3+HVXq8L4Byly56NGM7fjE8D9ekb8LeEZwCcjNi889L5X00LV5oo/da76Hkgz upas/uBhVaPCq36V+Zi6Hz/3NDdG0durNIW6GeM7qNc3TZV8djGfU3ptZgejkFof SMemoehRO3pSGQWU3F7WGXVhpZhKm5Zb5H8CAwEAAaOCA4MwggN/MB8GA1UdIwQY MBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBSQF9fez520ZNHcKPym L1lxQ0kWcjCCAiAGA1UdEQSCAhcwggITghBhY2NvdW50cy5iaGcuY29tggdtZHAu Y29tghZhY2NvdW50cy5kYWlseXBhd3MuY29tghhhY2NvdW50cy5mb29kYW5kd2lu ZS5jb22CF2FjY291bnRzLnJlYWxzaW1wbGUuY29tghlhY2NvdW50cy5oZWxsb2dp Z2dsZXMuY29tghxhY2NvdW50cy5wZW9wbGVlbmVzcGFub2wuY29tgh1hY2NvdW50 cy50cmF2ZWxhbmRsZWlzdXJlLmNvbYIaYWNjb3VudHMubWlkd2VzdGxpdmluZy5j b22CGmFjY291bnRzLnJhY2hhZWxyYXltYWcuY29tghlhY2NvdW50cy5jb29raW5n bGlnaHQuY29tghVhY2NvdW50cy5tZXJlZGl0aC5jb22CEmFjY291bnRzLm1pbGxp ZS51c4IUYWNjb3VudHMuaW5zdHlsZS5jb22CG2FjY291bnRzLnNvdXRoZXJubGl2 aW5nLmNvbYIaYWNjb3VudHMubWFydGhhc3Rld2FydC5jb22CE2FjY291bnRzLnBl b3BsZS5jb22CE2FjY291bnRzLmhlYWx0aC5jb22CGmFjY291bnRzLmNvYXN0YWxs aXZpbmcuY29tghthY2NvdW50cy5hbGxwZW9wbGVxdWlsdC5jb22CD2FjY291bnRz LmV3LmNvbYISYWNjb3VudHMuc2hhcGUuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0 cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQM MAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov L29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v Y3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIw ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLYYcES7 xF/QZkVKLh6ECJEa600Kqr0dC0pSht/maArnJZJ7OH7Vr3zMLyhkbfxiDmyRI+t3 VzBxRvd7VW4IXbledT7Bw4lAPdqDiLLcw9BwlSeiaRtvfuonksP9mZabAJ9FV6KV 4Q+fSczjAQxpvKq9mpNvNMQ3JcY/xk2N0tFFGZaRz58UlFi8wjLxzVRLeGbLrllR EZc4f/6HCCCdYAhSL7RyBLM668LeyyS/gAbO0qZFLT/q/NmvXTMS7k0gc4uFKy5Q D54Icb0iapMMQjQqc4lMidUWlg9RvpPH/8Jnr0xN8gR5jvUsHvS5/XG67G1nMF/t xgwXgvuXr0Ga7A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rOMCWJkOis2Af6ixo05 xcwlg3MZY1TciGkGC3K8JNhottN/FEuugXtYkxRuflPW9hab2QfghE5hWEusw31m o8mprZVP7m3oJIedBRQZ5E3cbfWjoLPNH5zLc+4iMhYhrzM9TzHtGF3wtEegKoN/ m+c7KS4M3+vzwt1GHDHXM6xev+pnlwEV8Tf4dVerwvgHKXLno0Yzt+MTwP16Rvwt 4RnAJyM2Lzz0vlfTQtXmij91rvoeSDO6lqz+4GFVo8KrfpX5mLofP/c0N0bR26s0 hboZ4zuo1zdNlXx2MZ9Tem1mB6OQWh9Ix6ah6FE7elIZBZTcXtYZdWGlmEqbllvk fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6854196273978891104596139933187053222 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accounts.bhg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29123348076718802877127460770302048311908705047024570126689097080507778790839543111629583143947630961925985465784914779801603556837159328024076380952163916015015026371598474583202414234198287361119540957329560322285153471531741098462886693841323459833198358100010521482000980428949802688268488681669454220598480438299078455856933618000637977500166688690550760351914187360908446267454686760930590124734160430264203632038545042763127576958157714107547199894044256866203130204178207030144050672335854624248975458315871376256074342212440928870247231370706515551423192779007297196483036476362761889317860329898810258744447 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9017d7decf9db464d1dc28fca62f597143491672 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (535 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.bhg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.dailypaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.foodandwine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.realsimple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.hellogiggles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.peopleenespanol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.travelandleisure.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.midwestliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.rachaelraymag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.cookinglight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.meredith.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.millie.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.instyle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.southernliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.marthastewart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.people.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.health.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.coastalliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.allpeoplequilt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.ew.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.shape.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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