*.axb1224.od.aws.freewheel.tv
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 02:ef:c1:6d:bf:55:b2:51:9e:22:38:d2:be:f6:05:56 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.axb1224.od.aws.freewheel.tv
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:ef:c1:6d:bf:55:b2:51:9e:22:38:d2:be:f6:05:56Serial Number (int): 3903338140898112033590127117636863318
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: d5:4a:c8:11:b6:b0:3d:9f:ad:31:54:8b:02:3e:c5:a3:1b:4c:44:52
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): f4:fe:fc:54:e9:4f:01:b3:95:14:4c:7c:7e:71:b2:dc:0f:b2:18:20
Fingerprint (sha256): 15:97:ea:16:02:da:82:c4:d1:ff:00:e2:c8:e2:15:bf:b8:88:db:ce:c7:88:fe:18:f6:b6:2c:9a:e7:0d:4e:eb
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.axb1224.od.aws.freewheel.tv
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.axb1224.od.aws.freewheel.tv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.axb1224.od.aws.freewheel.tv
Other certificates including the domain name freewheel.tv
(limited to 100 certificates)
*.hylda.od.aws.freewheel.tv
cannes.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.prog42.od.aws.freewheel.tv
*.fw151408a.od.aws.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.qrd0t6wanw.od.aws.freewheel.tv
*.listing68.od.aws.freewheel.tv
*.net038jjsy.od.aws.freewheel.tv
*.order68.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.sup06qxpmh.od.aws.freewheel.tv
*.net22mcmmf.od.aws.freewheel.tv
*.stg.freewheel.tv
*.dat1203vuq.od.aws.freewheel.tv
apic.freewheel.tv
*.prog41.od.aws.freewheel.tv
*.lytest80.od.aws.freewheel.tv
*.databook.od.aws.freewheel.tv
*.order247.od.aws.freewheel.tv
*.order406.od.aws.freewheel.tv
*.qk4jdk0daf.modplus.aws.freewheel.tv
*.r7k8hfhm04.od.aws.freewheel.tv
cannes.freewheel.tv
*.order414.od.aws.freewheel.tv
*.ui15onuc7y.od.aws.freewheel.tv
*.sup21uj35v.od.aws.freewheel.tv
freewheel.tv
*.freewheel.tv
*.prog44.od.aws.freewheel.tv
*.freewheel.tv
*.dat06067u5.od.aws.freewheel.tv
*.axb1224.od.aws.freewheel.tv
*.freewheel.tv
*.dat1651rv7.od.aws.freewheel.tv
*.listing212.od.aws.freewheel.tv
*.net27hssa6.od.aws.freewheel.tv
*.listing218.od.aws.freewheel.tv
*.net12rbjih.od.aws.freewheel.tv
*.stg.freewheel.tv
*.chconsumer.od.aws.freewheel.tv
*.helm3.od.aws.freewheel.tv
*.one15n15o1.od.aws.freewheel.tv
*.sup20ua3nz.od.aws.freewheel.tv
*.listing206.od.aws.freewheel.tv
*.ui091hdkra.od.aws.freewheel.tv
*.listing210.od.aws.freewheel.tv
*.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.newsa.od.aws.freewheel.tv
*.sup15ngdqt.od.aws.freewheel.tv
*.one07cy23m.od.aws.freewheel.tv
ideas.freewheel.tv
*.freewheel.tv
*.reg221209.od.aws.freewheel.tv
*.ui09yxe0yf.od.aws.freewheel.tv
*.fw155366.od.aws.freewheel.tv
*.listing81.od.aws.freewheel.tv
*.one05xvu3f.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.order75.od.aws.freewheel.tv
*.freewheel.tv
*.uslinear.od.aws.freewheel.tv
api-docs.freewheel.tv
*.sup300qu3u.od.aws.freewheel.tv
*.net05cjjc6.od.aws.freewheel.tv
*.listing220.od.aws.freewheel.tv
*.or08ffgq39.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.one2078ktj.od.aws.freewheel.tv
*.sup227xgae.od.aws.freewheel.tv
*.net20o9ekm.od.aws.freewheel.tv
*.sup253wv3d.od.aws.freewheel.tv
*.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.xttydyk8ae.od.aws.freewheel.tv
*.sup12kfu26.od.aws.freewheel.tv
*.stg.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.sup06odc8i.od.aws.freewheel.tv
*.reg221205.od.aws.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.test221219.od.aws.freewheel.tv
*.j07.od.aws.freewheel.tv
*.sup19lhbre.od.aws.freewheel.tv
*.order249.od.aws.freewheel.tv
*.dec.od.aws.freewheel.tv
*.freewheel.tv
staticui.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.net05hoxvs.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.ui19ae48cb.od.aws.freewheel.tv
*.stg.freewheel.tv
*.sup05zhupo.od.aws.freewheel.tv
*.mocksstf.od.aws.freewheel.tv
staticui.freewheel.tv
*.hylda.od.aws.freewheel.tv
cannes.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.prog42.od.aws.freewheel.tv
*.fw151408a.od.aws.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.qrd0t6wanw.od.aws.freewheel.tv
*.listing68.od.aws.freewheel.tv
*.net038jjsy.od.aws.freewheel.tv
*.order68.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.sup06qxpmh.od.aws.freewheel.tv
*.net22mcmmf.od.aws.freewheel.tv
*.stg.freewheel.tv
*.dat1203vuq.od.aws.freewheel.tv
apic.freewheel.tv
*.prog41.od.aws.freewheel.tv
*.lytest80.od.aws.freewheel.tv
*.databook.od.aws.freewheel.tv
*.order247.od.aws.freewheel.tv
*.order406.od.aws.freewheel.tv
*.qk4jdk0daf.modplus.aws.freewheel.tv
*.r7k8hfhm04.od.aws.freewheel.tv
cannes.freewheel.tv
*.order414.od.aws.freewheel.tv
*.ui15onuc7y.od.aws.freewheel.tv
*.sup21uj35v.od.aws.freewheel.tv
freewheel.tv
*.freewheel.tv
*.prog44.od.aws.freewheel.tv
*.freewheel.tv
*.dat06067u5.od.aws.freewheel.tv
*.axb1224.od.aws.freewheel.tv
*.freewheel.tv
*.dat1651rv7.od.aws.freewheel.tv
*.listing212.od.aws.freewheel.tv
*.net27hssa6.od.aws.freewheel.tv
*.listing218.od.aws.freewheel.tv
*.net12rbjih.od.aws.freewheel.tv
*.stg.freewheel.tv
*.chconsumer.od.aws.freewheel.tv
*.helm3.od.aws.freewheel.tv
*.one15n15o1.od.aws.freewheel.tv
*.sup20ua3nz.od.aws.freewheel.tv
*.listing206.od.aws.freewheel.tv
*.ui091hdkra.od.aws.freewheel.tv
*.listing210.od.aws.freewheel.tv
*.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.newsa.od.aws.freewheel.tv
*.sup15ngdqt.od.aws.freewheel.tv
*.one07cy23m.od.aws.freewheel.tv
ideas.freewheel.tv
*.freewheel.tv
*.reg221209.od.aws.freewheel.tv
*.ui09yxe0yf.od.aws.freewheel.tv
*.fw155366.od.aws.freewheel.tv
*.listing81.od.aws.freewheel.tv
*.one05xvu3f.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.order75.od.aws.freewheel.tv
*.freewheel.tv
*.uslinear.od.aws.freewheel.tv
api-docs.freewheel.tv
*.sup300qu3u.od.aws.freewheel.tv
*.net05cjjc6.od.aws.freewheel.tv
*.listing220.od.aws.freewheel.tv
*.or08ffgq39.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.one2078ktj.od.aws.freewheel.tv
*.sup227xgae.od.aws.freewheel.tv
*.net20o9ekm.od.aws.freewheel.tv
*.sup253wv3d.od.aws.freewheel.tv
*.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.xttydyk8ae.od.aws.freewheel.tv
*.sup12kfu26.od.aws.freewheel.tv
*.stg.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.sup06odc8i.od.aws.freewheel.tv
*.reg221205.od.aws.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.test221219.od.aws.freewheel.tv
*.j07.od.aws.freewheel.tv
*.sup19lhbre.od.aws.freewheel.tv
*.order249.od.aws.freewheel.tv
*.dec.od.aws.freewheel.tv
*.freewheel.tv
staticui.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.net05hoxvs.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.ui19ae48cb.od.aws.freewheel.tv
*.stg.freewheel.tv
*.sup05zhupo.od.aws.freewheel.tv
*.mocksstf.od.aws.freewheel.tv
staticui.freewheel.tv
*.hylda.od.aws.freewheel.tv
Certificate
The complete raw certificate details for *.axb1224.od.aws.freewheel.tv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEeTCCA2GgAwIBAgIQAu/Bbb9VslGeIjjSvvYFVjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDYwNjAwMDAwMFoXDTI1MDcwNTIzNTk1OVowKDEm MCQGA1UEAwwdKi5heGIxMjI0Lm9kLmF3cy5mcmVld2hlZWwudHYwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdDHu+sHWb0Xe51xle84Qd6mj+Zs1/vukK Muw6Ct/Q+ljGaEUIeWwQxV/qSOMZkrD//QYiEGcsyZBfcuQ3xEksEO3HcwTXBASr wdsDMPscPbN93/1uIyRXZQpVZnSDN5335wvq7l56Abx6bQuZuhhxLsDN+mCM3sGr HTWKLN2g16VXP3X4pJzezt3niOqo3zggyQHzJQzwe7e2dmr6TMhsVF65k90zkCwd 7tSzUOGWykHcIZeIOHvHbmtkB6WpiiRNxAOD5nUc2MkObW9QsxPyEtr54yFKxArg NYoa74YP2qOfHXJsiz/bzytSsLI0zLo7LJaguk7YUaOC3VjaOQeRAgMBAAGjggGJ MIIBhTAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU 1UrIEbawPZ+tMVSLAj7FoxtMRFIwKAYDVR0RBCEwH4IdKi5heGIxMjI0Lm9kLmF3 cy5mcmVld2hlZWwudHYwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg LqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmww dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1h em9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXY/0+rUYp6nEdug0k2X/55FFb K7ltIbEX+LeVKhIyd9eg8G/CcFGr3rIOrubG3hA0He05lCqFEPHzFXkn573UF9no FhG5KmU9dsUlafew+VdSSBRo5MSjU33AQ2ky9uvoDsaD0RFRQ884CQy3odQT1z5k Qhut5A+wkPYxsawweCgNWMIkNY7PNGxeWJtLhsabxys+V8uhw8t3r1MDPbWRIsey fuUeSnC1zw93xV4yxkKof4+e0Q4t35SetWh5DFfm5Ncx3xIkQ+F5Z43fHC0lgE9r 0unbVbb8sITmYwQ1Box6E+9fy9cRVsuNolvuDVncGT2oFpYkcpzAFD3OKScR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQx7vrB1m9F3udcZXvOE Hepo/mbNf77pCjLsOgrf0PpYxmhFCHlsEMVf6kjjGZKw//0GIhBnLMmQX3LkN8RJ LBDtx3ME1wQEq8HbAzD7HD2zfd/9biMkV2UKVWZ0gzed9+cL6u5eegG8em0LmboY cS7AzfpgjN7Bqx01iizdoNelVz91+KSc3s7d54jqqN84IMkB8yUM8Hu3tnZq+kzI bFReuZPdM5AsHe7Us1DhlspB3CGXiDh7x25rZAelqYokTcQDg+Z1HNjJDm1vULMT 8hLa+eMhSsQK4DWKGu+GD9qjnx1ybIs/288rUrCyNMy6OyyWoLpO2FGjgt1Y2jkH kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3903338140898112033590127117636863318 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.axb1224.od.aws.freewheel.tv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19825569663008031440966914573349356973172442564309699776091463081157835111748451360330141984698087324326183380408621442709898786793593894592527561295903071117193845880605584647236240671875996686723638258316250065339111942618024022687348596119929729857324148972473353718416203688446902620315042973812960700077361888353204198336559572777063702184709750922670150254437817440909727028993609904039647180092233127220492713988893786599034198804083655660283215357070085261378714038465661922197932210080389244872409433875971054557575997823704344141016996372587532471318176267345824211952497175167493319903585769060825076139921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d54ac811b6b03d9fad31548b023ec5a31b4c4452 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axb1224.od.aws.freewheel.tv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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