ult-mfe-mr-mr-311.ult-sandbox.controlant.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 05:7c:d2:0e:61:b7:1c:b7:7c:d4:52:01:d9:99:c1:e3 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ult-mfe-mr-mr-311.ult-sandbox.controlant.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 05:7c:d2:0e:61:b7:1c:b7:7c:d4:52:01:d9:99:c1:e3Serial Number (int): 7294245234835355029617111246464205283
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 51:69:71:84:22:11:fd:fb:63:ad:02:b2:10:99:bb:fb:e5:fe:23:e8
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 8f:c4:d0:8e:ef:02:f0:13:bc:47:c4:8e:89:3e:0e:bd:9c:be:49:13
Fingerprint (sha256): 14:8b:c2:69:01:db:d2:18:65:13:eb:4a:00:dc:f2:3f:d6:83:08:77:b6:75:05:f4:ea:19:62:23:12:57:e3:b3
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate ult-mfe-mr-mr-311.ult-sandbox.controlant.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ult-mfe-mr-mr-311.ult-sandbox.controlant.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ult-mfe-mr-mr-311.ult-sandbox.controlant.com
Other certificates including the domain name controlant.com
(limited to 100 certificates)
ult-mfe-stub-mr-mr-451.ult-sandbox.controlant.com
ult-host-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
ui-api-mr-mr-307.ult-sandbox.controlant.com
ult-host-mr-mr-302.ult-sandbox.controlant.com
ult-host-mr-mr-307.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-tz.ult-sandbox.controlant.com
ult-mfe-mr-mr-306.ult-sandbox.controlant.com
private.zacharyhill.dev
controlant.com
ult-host-mr-mr-319.ult-sandbox.controlant.com
www.feriaganaderachile.cl
ui-api-mr-mr-317.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-host-mr-mr-284.ult-sandbox.controlant.com
sharing.controlant.com
private.zacharyhill.dev
status-pre.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
private.zacharyhill.dev
api-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-mr-387.ult-sandbox.controlant.com
bob.controlant.com
sharing.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
www.controlant.com
in.controlant.com
freebirdfindings.com
ui-api-mr-mr-503.ult-sandbox.controlant.com
api-mr-mr-301.ult-sandbox.controlant.com
api-mr-mr-304.ult-sandbox.controlant.com
merck.bi.controlant.com
ult-host-mr-hv.ult-sandbox.controlant.com
private.zacharyhill.dev
bi.test.controlant.com
modalforms.controlant.com
ult-mfe-mr-mr-318.ult-sandbox.controlant.com
private.zacharyhill.dev
api-mr-mr-315.ult-sandbox.controlant.com
bi.live.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
status-pre.cardiff.ac.uk
*.bi.dev.controlant.com
ult-mfe-mr-mr-316.ult-sandbox.controlant.com
ult-mfe-mr-mr-315.ult-sandbox.controlant.com
api-mr-mr-499.ult-sandbox.controlant.com
am-users.sandbox.controlant.com
api-mr-tz.ult-sandbox.controlant.com
private.zacharyhill.dev
testrail.controlant.com
ult-host-mr-mr-503.ult-sandbox.controlant.com
private.zacharyhill.dev
testrail.controlant.com
api-mr-mr-296.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
ult-mfe-mr-dg.ult-sandbox.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
*.component-library.tools.controlant.com
ult-host-mr-mr-304.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-mr-311.ult-sandbox.controlant.com
ui-api-mr-mr-310.ult-sandbox.controlant.com
uat.controlant.com
confluence.controlant.com
ult-mfe-stub-mr-mr-311.ult-sandbox.controlant.com
registry-staging.tools.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
dev.controlant.com
private.zacharyhill.dev
www.controlant.com
ult-mfe-stub-mr-tz.ult-sandbox.controlant.com
in.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
ult-mfe-stub-mr-mr-301.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-310.ult-sandbox.controlant.com
in.controlant.com
flyingpaperclips.com
private.zacharyhill.dev
api-mr-mr-321.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
test.controlant.com
ult-mfe-mr-mr-310.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
testrail.controlant.com
pamacloud.auxswot.com
ult-mfe-mr-mr-312.ult-sandbox.controlant.com
audit-trail-mfe.uat.controlant.com
staffmeeting.controlant.com
api-mr-mr-284.ult-sandbox.controlant.com
ult-mfe-mr-mr-385.ult-sandbox.controlant.com
*.component-library.tools.controlant.com
test.controlant.com
ult-host-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
ui-api-mr-mr-307.ult-sandbox.controlant.com
ult-host-mr-mr-302.ult-sandbox.controlant.com
ult-host-mr-mr-307.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-tz.ult-sandbox.controlant.com
ult-mfe-mr-mr-306.ult-sandbox.controlant.com
private.zacharyhill.dev
controlant.com
ult-host-mr-mr-319.ult-sandbox.controlant.com
www.feriaganaderachile.cl
ui-api-mr-mr-317.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-host-mr-mr-284.ult-sandbox.controlant.com
sharing.controlant.com
private.zacharyhill.dev
status-pre.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
private.zacharyhill.dev
api-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-mr-387.ult-sandbox.controlant.com
bob.controlant.com
sharing.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
www.controlant.com
in.controlant.com
freebirdfindings.com
ui-api-mr-mr-503.ult-sandbox.controlant.com
api-mr-mr-301.ult-sandbox.controlant.com
api-mr-mr-304.ult-sandbox.controlant.com
merck.bi.controlant.com
ult-host-mr-hv.ult-sandbox.controlant.com
private.zacharyhill.dev
bi.test.controlant.com
modalforms.controlant.com
ult-mfe-mr-mr-318.ult-sandbox.controlant.com
private.zacharyhill.dev
api-mr-mr-315.ult-sandbox.controlant.com
bi.live.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
status-pre.cardiff.ac.uk
*.bi.dev.controlant.com
ult-mfe-mr-mr-316.ult-sandbox.controlant.com
ult-mfe-mr-mr-315.ult-sandbox.controlant.com
api-mr-mr-499.ult-sandbox.controlant.com
am-users.sandbox.controlant.com
api-mr-tz.ult-sandbox.controlant.com
private.zacharyhill.dev
testrail.controlant.com
ult-host-mr-mr-503.ult-sandbox.controlant.com
private.zacharyhill.dev
testrail.controlant.com
api-mr-mr-296.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
ult-mfe-mr-dg.ult-sandbox.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
*.component-library.tools.controlant.com
ult-host-mr-mr-304.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-mr-311.ult-sandbox.controlant.com
ui-api-mr-mr-310.ult-sandbox.controlant.com
uat.controlant.com
confluence.controlant.com
ult-mfe-stub-mr-mr-311.ult-sandbox.controlant.com
registry-staging.tools.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
dev.controlant.com
private.zacharyhill.dev
www.controlant.com
ult-mfe-stub-mr-tz.ult-sandbox.controlant.com
in.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
ult-mfe-stub-mr-mr-301.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-310.ult-sandbox.controlant.com
in.controlant.com
flyingpaperclips.com
private.zacharyhill.dev
api-mr-mr-321.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
test.controlant.com
ult-mfe-mr-mr-310.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
testrail.controlant.com
pamacloud.auxswot.com
ult-mfe-mr-mr-312.ult-sandbox.controlant.com
audit-trail-mfe.uat.controlant.com
staffmeeting.controlant.com
api-mr-mr-284.ult-sandbox.controlant.com
ult-mfe-mr-mr-385.ult-sandbox.controlant.com
*.component-library.tools.controlant.com
test.controlant.com
Certificate
The complete raw certificate details for ult-mfe-mr-mr-311.ult-sandbox.controlant.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElzCCA3+gAwIBAgIQBXzSDmG3HLd81FIB2ZnB4zANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIxNDAwMDAwMFoXDTI1MDExMTIzNTk1OVowNzE1 MDMGA1UEAxMsdWx0LW1mZS1tci1tci0zMTEudWx0LXNhbmRib3guY29udHJvbGFu dC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3oAGupvaXaIk 6sYTYLeAnWTAiEqBzRcGrsZPqoB7XvElnRnvtva4/GzyxuMg4XPo6Vtq+pJIcQzp eAU3YHuMYv0hRdfmXv0XR/DQmkbX4cusuvX1BxmTojRDeNlD/ovPZkTALPaPZya4 p4of3OxCUGy1uiEd7vAqClbJAG7f25qpJs7kyaDgtbXwYdbu73L0VwqrtUriZuii iluQ7/pDw/eHTBNElwZDs0038nBXPqmnGDfjSpx11FoC0oFvcrtgSvzgH+wu59k4 UPkD9w9zwk69vTf99eCniTIpn5nSv1h4O9qGnGi99AZM+yzqdlBMO2DK8z2wd67Q slCjzuklAgMBAAGjggGYMIIBlDAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5 euuC4jAdBgNVHQ4EFgQUUWlxhCIR/ftjrQKyEJm7++X+I+gwNwYDVR0RBDAwLoIs dWx0LW1mZS1tci1tci0zMTEudWx0LXNhbmRib3guY29udHJvbGFudC5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy bTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy LmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQAPdZZ0grJDAupvmVma2I+96IVibGGGsetvhdTAwZUSbioTOJz6 835jtyM3B8TAmOuAkqUgRXQ3GhZgHtakzF1L1RvxNxS4qnJeblM4sCZj3M2vqTHi TIphJ7cb9Dw4eQlqL2W9B0lsjObi/qHAszfMmNupHwDIYRzMC+xEHxPOFDduWs9S bRzWtld/H6YmHZytwT4WuXpuHQNlCWNnTfJB0Bs8XcRW+8ILEabNRIdC0L5Ugw3E a2GQoQWKsmXgG7+Go2/wS7NC81jH+5WrHt1U0cItlSFX/9GeMziWVb4Hw0+Unz2N cuVVGXfWgJBksVE6TbMyRnIcmnuVh1mN1FeD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt6ABrqb2l2iJOrGE2C3 gJ1kwIhKgc0XBq7GT6qAe17xJZ0Z77b2uPxs8sbjIOFz6OlbavqSSHEM6XgFN2B7 jGL9IUXX5l79F0fw0JpG1+HLrLr19QcZk6I0Q3jZQ/6Lz2ZEwCz2j2cmuKeKH9zs QlBstbohHe7wKgpWyQBu39uaqSbO5Mmg4LW18GHW7u9y9FcKq7VK4mbooopbkO/6 Q8P3h0wTRJcGQ7NNN/JwVz6ppxg340qcddRaAtKBb3K7YEr84B/sLufZOFD5A/cP c8JOvb03/fXgp4kyKZ+Z0r9YeDvahpxovfQGTPss6nZQTDtgyvM9sHeu0LJQo87p JQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7294245234835355029617111246464205283 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ult-mfe-mr-mr-311.ult-sandbox.controlant.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21570230734138275606608370024471145713684648575609628135482192693870129514458435803248062299750747158962955777552144531314271000854192497154447927199415506564288173295260998324888546806439319911867127842067453262975451304809155199775565108245426795871867865411543155206544915269199179733774397170980370212396105187556150262320997971749667115631293486102354764648272907240995485727249480255089945060017650282298407661995900903873764982984684560764197765601225771347797060575506401209431765481831941757963910207953455393786059727264010901583780137030273327355985970502874251627829170112756595127645366070224941470378277 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 516971842211fdfb63ad02b21099bbfbe5fe23e8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ult-mfe-mr-mr-311.ult-sandbox.controlant.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000f75967482b24302ea6f99599ad88fbde885626c6186b1eb6f85d4c0c195126e2a13389cfaf37e63b7233707c4c098eb8092a5204574371a16601ed6a4cc5d4bd51bf13714b8aa725e6e5338b02663dccdafa931e24c8a6127b71bf43c3879096a2f65bd07496c8ce6e2fea1c0b337cc98dba91f00c8611ccc0bec441f13ce14376e5acf526d1cd6b6577f1fa6261d9cadc13e16b97a6e1d03650963674df241d01b3c5dc456fbc20b11a6cd448742d0be54830dc46b6190a1058ab265e01bbf86a36ff04bb342f358c7fb95ab1edd54d1c22d952157ffd19e33389655be07c34f949f3d8d72e5551977d6809064b1513a4db33246721c9a7b9587598dd45783