instride.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 07:e9:43:ea:6a:b2:77:a8:42:57:37:41:b7:20:c7:41 was issued on by Amazon.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=instride.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:e9:43:ea:6a:b2:77:a8:42:57:37:41:b7:20:c7:41Serial Number (int): 10515778632387663849946453855562680129
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 5b:fe:73:f1:33:4e:25:a9:c9:84:94:64:39:91:75:60:19:29:9c:b7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 30:0c:fc:ad:6f:ed:6a:a8:16:4c:e1:01:f8:73:53:8b:9c:9e:92:52
Fingerprint (sha256): 16:65:02:ad:d7:4f:56:4b:67:07:8d:39:56:9a:ad:be:7e:ad:48:f0:4f:08:c7:e9:74:33:37:9c:3b:b9:e7:1e
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate instride.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for instride.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
instride.com
*.oregon.instride.com
*.green.instride.com
*.instride.com
*.virginia.instride.com
*.oregon.instride.com
*.green.instride.com
*.instride.com
*.virginia.instride.com
Other certificates including the domain name instride.com
(limited to 100 certificates)
tracking.duckvideo.co
sni.cloudflaressl.com
agency.ibex.co
*.instride.com
www.instride.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
cheetah.apstra.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
*.instride.com
san-004.ceros.com
cloudvps-status.com
its.msudenverstatus.com
*.instride.com
san-004.ceros.com
cloudvps-status.com
san-004.ceros.com
*.prod-a.instride.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
www.instride.com
*.instride.com
*.instride.com
*.intercom.instride.com
*.instride.com
san-004.ceros.com
instride.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
sales.blueriveranalytics.com
*.instride.com
*.instride.com
its.msudenverstatus.com
san-004.ceros.com
its.msudenverstatus.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
*.instride.com
cloudvps-status.com
*.instride.com
its.msudenverstatus.com
*.instride.com
san-004.ceros.com
sales.decent.com
its.msudenverstatus.com
cloudvps-status.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
cloudvps-status.com
san-004.ceros.com
its.msudenverstatus.com
*.load.instride.com
san-004.ceros.com
try.instride.com
its.msudenverstatus.com
*.staging.instride.com
san-004.ceros.com
*.instride.com
san-004.ceros.com
san-004.ceros.com
tracking.duckvideo.co
instride.com
preview.instride.com
san-004.ceros.com
www.instride.com
its.msudenverstatus.com
its.msudenverstatus.com
san-004.ceros.com
cloudvps-status.com
instride.com
*.instride.com
cloudvps-status.com
san-004.ceros.com
*.instride.com
san-004.ceros.com
*.instride.com
its.msudenverstatus.com
san-004.ceros.com
*.instride.com
*.instride.com
san-004.ceros.com
san-004.ceros.com
*.instride.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
www.instride.com
its.msudenverstatus.com
san-004.ceros.com
sni.cloudflaressl.com
agency.ibex.co
*.instride.com
www.instride.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
cheetah.apstra.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
*.instride.com
san-004.ceros.com
cloudvps-status.com
its.msudenverstatus.com
*.instride.com
san-004.ceros.com
cloudvps-status.com
san-004.ceros.com
*.prod-a.instride.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
www.instride.com
*.instride.com
*.instride.com
*.intercom.instride.com
*.instride.com
san-004.ceros.com
instride.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
sales.blueriveranalytics.com
*.instride.com
*.instride.com
its.msudenverstatus.com
san-004.ceros.com
its.msudenverstatus.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
*.instride.com
cloudvps-status.com
*.instride.com
its.msudenverstatus.com
*.instride.com
san-004.ceros.com
sales.decent.com
its.msudenverstatus.com
cloudvps-status.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
its.msudenverstatus.com
cloudvps-status.com
san-004.ceros.com
its.msudenverstatus.com
*.load.instride.com
san-004.ceros.com
try.instride.com
its.msudenverstatus.com
*.staging.instride.com
san-004.ceros.com
*.instride.com
san-004.ceros.com
san-004.ceros.com
tracking.duckvideo.co
instride.com
preview.instride.com
san-004.ceros.com
www.instride.com
its.msudenverstatus.com
its.msudenverstatus.com
san-004.ceros.com
cloudvps-status.com
instride.com
*.instride.com
cloudvps-status.com
san-004.ceros.com
*.instride.com
san-004.ceros.com
*.instride.com
its.msudenverstatus.com
san-004.ceros.com
*.instride.com
*.instride.com
san-004.ceros.com
san-004.ceros.com
*.instride.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
san-004.ceros.com
www.instride.com
its.msudenverstatus.com
san-004.ceros.com
Certificate
The complete raw certificate details for instride.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgIQB+lD6mqyd6hCVzdBtyDHQTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIzMTAwMDAwMFoXDTI1MDEyOTIzNTk1OVowFzEV MBMGA1UEAxMMaW5zdHJpZGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA0gGRqCKXyATYsdPvhX6pO8wU+0CyWPoY2dukgMs0whmm2XrnGhDwjuw9 uoQlpPkE/vKZB3N+iwAHkLH/cPlb6WtOYakUg7QEXxUyXandOyuDrqB6CB55D2lK ZSGwmCUzYELZoUAJcydPH0A3kLFvFZddyVcqEWZulg0C9Qb5p7yeDxt5pLvSPGG0 kltdvrM/WS6iwMyUPuPRlPsCqR9R/NAXThcLm+//qDbzeWWwiUTIM/Qz1Z2VpuGj aa31UVNmJgURZSQxOxbSum89rJKEnahQI/XLbC33RGTD+zh/eG3Efn5YPnlH4KFj f8VfkeKFk2/rhkOzEquNNfiIBpaNIwIDAQABo4IDPDCCAzgwHwYDVR0jBBgwFoAU wDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFFv+c/EzTiWpyYSUZDmRdWAZ KZy3MG0GA1UdEQRmMGSCDGluc3RyaWRlLmNvbYIVKi5vcmVnb24uaW5zdHJpZGUu Y29tghQqLmdyZWVuLmluc3RyaWRlLmNvbYIOKi5pbnN0cmlkZS5jb22CFyoudmly Z2luaWEuaW5zdHJpZGUuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQw MjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIu Y3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJt MDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAy LmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisG AQQB1nkCBAIEggFvBIIBawFpAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpk sWKaOd8AAAGMvW8GvwAABAMARzBFAiEA1d7qB4dOxBN9DLPeeiN/wV15i5ewjQAK k/8k/cXAXq4CIGmXEg+IS1pr+jKCN+OsfEXdFLnECEu5irBohxmUAyvHAHYAfVke EuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGMvW8GmAAABAMARzBFAiEA hgdv89NeuT2usaXNacu0UhYvYek3IebGe4Hh8oNCCgMCIG5wTR1xKyI0qZDwW1bk 9qTHfcAsEIZG6SuSDNDvUiAOAHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId /R43jlAAAAGMvW8GwgAABAMASDBGAiEA989h8sg1fFjd8HyBrBkR0PaYtDeldbFu y0sa10G1nzoCIQDVTZ+EOQF9bqf5kI63445u6yzvQHvR36fWhVNjH2MDxzANBgkq hkiG9w0BAQsFAAOCAQEADgvf2F8OMmMYWG7B9I66G4TH0jGZMU0HMeO3SLYHO38a jbb+7lqcj55ikx037R+v97zc6JeSalv+tEolnmGVnOdpVpWood/G/33W/XjH1AwZ 186hhVmI2acOL7bWIOi0i0PeRfFdZbQ8wENrZQxDlbocBtmgy1D/rWnnC7mUe1PF czDJ2acgjg+OBxHPNzuS+ZjKj7SFNQf9qbMyiKb9OMxHZd0cFvWBFPqk+JSwvLzw D3Rq+88zqftX7Bm6dip/fgLOcYlHRx72mdsS+lLKRkSrRkOX6Lr5rPHG+g6Gwieg z+YxdiNad4qFlK1vOdpDmb9bj54blB4fTdlUdqQHgw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gGRqCKXyATYsdPvhX6p O8wU+0CyWPoY2dukgMs0whmm2XrnGhDwjuw9uoQlpPkE/vKZB3N+iwAHkLH/cPlb 6WtOYakUg7QEXxUyXandOyuDrqB6CB55D2lKZSGwmCUzYELZoUAJcydPH0A3kLFv FZddyVcqEWZulg0C9Qb5p7yeDxt5pLvSPGG0kltdvrM/WS6iwMyUPuPRlPsCqR9R /NAXThcLm+//qDbzeWWwiUTIM/Qz1Z2VpuGjaa31UVNmJgURZSQxOxbSum89rJKE nahQI/XLbC33RGTD+zh/eG3Efn5YPnlH4KFjf8VfkeKFk2/rhkOzEquNNfiIBpaN IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10515778632387663849946453855562680129 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'instride.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26510817731696977576056121083874680803300919794635118187419394850810831302878322508776715413455689809243911275199993140453739528140937724555522601449789711149382670798710637087606155885951717779139000828657529682673696110790107133564654719948208346960700419661456619090139779187102722134332751487220933721417375787880222087566824186912454946859349062883219439907424696425071173040385575134301634636336724629031816920107863263721121653794048653915709105379246607066188038414295685725125356680124625977152264764658120833416462506630650000514380669024352983806022206970032846826416380876859817291435266033982776131620131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5bfe73f1334e25a9c98494643991756019299cb7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instride.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregon.instride.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.green.instride.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instride.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virginia.instride.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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