mcs2-dev.dht.live
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0d:42:b1:ea:09:10:b8:fd:5f:e4:75:64:f1:de:cb:f8 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mcs2-dev.dht.live
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:42:b1:ea:09:10:b8:fd:5f:e4:75:64:f1:de:cb:f8Serial Number (int): 17626264066562661145627355247397489656
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 83:b4:c6:fd:9e:6b:55:b9:b4:7f:f2:b3:bc:b1:5f:1d:5c:0f:0c:27
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 43:9b:9b:43:13:86:66:0f:2d:3b:1f:ec:83:ee:6d:f1:2b:8e:a7:03
Fingerprint (sha256): 17:06:5a:32:43:46:6d:aa:59:7b:41:68:46:32:20:ef:d6:22:b8:4b:93:27:40:b5:bd:e3:4a:7b:8e:ba:5b:eb
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate mcs2-dev.dht.live
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mcs2-dev.dht.live
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mcs2-dev.dht.live
*.mcs2-dev.dht.live
*.mcs2-dev.dht.live
Other certificates including the domain name dht.live
(limited to 100 certificates)
test-iot-cms-a.machine-services-perf-stg.dht.live
static.showtime7-sbx.dht.live
sc-1761-survey-api.honeybadgers-sbx.dht.live
amr-prod-overflow-a.prod-messaging-prd.dht.live
green-mcs-d.messaging2-amr-prd.dht.live
static.showtime8-sbx.dht.live
green-iot-avx-a.airview-messaging-stg.dht.live
sc-2061-werewolf-api.honeybadgers-sbx.dht.live
avw.airview0-dev.dht.live
blue-ace-a.machine-services-dev.dht.live
docs.sc-2377b-survey-api.honeybadgers-sbx.dht.live
sc-1457-scui.honeybadgers-sbx.dht.live
green-mcsmonaco-a.airview-messaging-qa.dht.live
green-iot-hub-c.messaging2-amr-prd.dht.live
support-api.showtime5-sbx.dht.live
api.airdba.atlas-eu-prd.dht.live
airview-apac-pre-prod.dht.live
fsg-dev3.airview-kona-dev.dht.live
sc-1761-werewolf-api.honeybadgers-sbx.dht.live
monaco.airview0-dev.dht.live
chat.dawn-us-prd.dht.live
external.showtime8-sbx.dht.live
sc-1769-survey-api.honeybadgers-sbx.dht.live
support-api.showtime8-sbx.dht.live
graphql.showtime9-sbx.dht.live
artifactory-edge-amr.artifactory-shared.dht.live
api.aloe-dev.dht.live
avx-mock-amr.showtime6-sbx.dht.live
avx-mock-apac.showtime7-sbx.dht.live
mobilequestionsui.sleep-concierge-qa.dht.live
docs.showtime8-sbx.dht.live
nexus-new.airview0-shared.dht.live
sc-1764-survey-api.honeybadgers-sbx.dht.live
*.mgmt.paas.dht.live
sc-2374-scui.honeybadgers-sbx.dht.live
api.airdba.atlas-eu-stg.dht.live
docs.showtime2-sbx.dht.live
avx-mock-apac.showtime8-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
external.showtime12-dev.dht.live
data-platform-mock.showtime8-sbx.dht.live
sc-2206-werewolf.honeybadgers-sbx.dht.live
cdk-multicare-aws.saas-sltc-sandbox-dev.dht.live
external.showtime4-sbx.dht.live
sc-1741-survey-api.honeybadgers-sbx.dht.live
green-iot-avx-d.airview-messaging-stg.dht.live
docs.showtime5-sbx.dht.live
peep-ws10.smart-coaching-dev.dht.live
test-lost-ebs-a.machine-services-perf-stg.dht.live
bitbucket.prod.dht.live
blue-avw-b.machine-services-dev.dht.live
sc-1470-mobilequestionsui.honeybadgers-sbx.dht.live
content-ws2.smart-coaching-dev.dht.live
graphql.showtime8-sbx.dht.live
amr-stg-mcs-c.airview-messaging-stg.dht.live
cdk-multicare-aws.saas-sltc-sandbox-dev.dht.live
blue-avw-c.machine-services-dev.dht.live
docs.sc-1760-survey-api.honeybadgers-sbx.dht.live
sc-2377-werewolf.honeybadgers-sbx.dht.live
graphql.showtime5-sbx.dht.live
green-mcspacific-a.messaging2-amr-prd.dht.live
external.myair-eu-dev.dht.live
docs.showtime7-sbx.dht.live
sc-1761-scui.honeybadgers-sbx.dht.live
support-api.showtime6-sbx.dht.live
peep-ws5.smart-coaching-dev.dht.live
green-iot-mds-h.messaging2-amr-stg.dht.live
api.showtime4-sbx.dht.live
docs.sc-2371-survey-api.honeybadgers-sbx.dht.live
sc-2037-mobilequestionsui.honeybadgers-sbx.dht.live
green-iot-mds-f.airview-messaging-stg.dht.live
api.hellosleep-prd.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
docs.sc-728-survey-api.honeybadgers-sbx.dht.live
sc-1764-scui.honeybadgers-sbx.dht.live
support.showtime5-sbx.dht.live
customer-service.saas-sltc-sandbox-dev.dht.live
nightowl.showtime6-sbx.dht.live
green-mcspacific-c.messaging2-amr-stg.dht.live
scui.sleep-concierge-prd.dht.live
amr-prod-dps-ebs-d.prod-messaging-prd.dht.live
api.showtime8-sbx.dht.live
sc-1457-werewolf-api.honeybadgers-sbx.dht.live
support.showtime4-sbx.dht.live
*.sre-dev-ave-qa.dht.live
sc-2066-scui.honeybadgers-sbx.dht.live
mcs2-dev.dht.live
support-api.showtime7-sbx.dht.live
amr-qa-avx-d.airview-messaging-qa.dht.live
avx-mock-amr.showtime14-dev.dht.live
green-dps-ebs-b.messaging2-amr-prd.dht.live
graphql.showtime8-sbx.dht.live
support-api.myair-eu-dev.dht.live
avx-mock-amr.showtime2-sbx.dht.live
data-platform-mock.showtime3-sbx.dht.live
data-platform-mock.myair-eu-dev.dht.live
content-ws4.smart-coaching-dev.dht.live
green-iot-mds-c.messaging2-amr-stg.dht.live
amr-qa-envoymq-hub.airview-messaging-qa.dht.live
*.airview-icm-dev.dht.live
static.showtime7-sbx.dht.live
sc-1761-survey-api.honeybadgers-sbx.dht.live
amr-prod-overflow-a.prod-messaging-prd.dht.live
green-mcs-d.messaging2-amr-prd.dht.live
static.showtime8-sbx.dht.live
green-iot-avx-a.airview-messaging-stg.dht.live
sc-2061-werewolf-api.honeybadgers-sbx.dht.live
avw.airview0-dev.dht.live
blue-ace-a.machine-services-dev.dht.live
docs.sc-2377b-survey-api.honeybadgers-sbx.dht.live
sc-1457-scui.honeybadgers-sbx.dht.live
green-mcsmonaco-a.airview-messaging-qa.dht.live
green-iot-hub-c.messaging2-amr-prd.dht.live
support-api.showtime5-sbx.dht.live
api.airdba.atlas-eu-prd.dht.live
airview-apac-pre-prod.dht.live
fsg-dev3.airview-kona-dev.dht.live
sc-1761-werewolf-api.honeybadgers-sbx.dht.live
monaco.airview0-dev.dht.live
chat.dawn-us-prd.dht.live
external.showtime8-sbx.dht.live
sc-1769-survey-api.honeybadgers-sbx.dht.live
support-api.showtime8-sbx.dht.live
graphql.showtime9-sbx.dht.live
artifactory-edge-amr.artifactory-shared.dht.live
api.aloe-dev.dht.live
avx-mock-amr.showtime6-sbx.dht.live
avx-mock-apac.showtime7-sbx.dht.live
mobilequestionsui.sleep-concierge-qa.dht.live
docs.showtime8-sbx.dht.live
nexus-new.airview0-shared.dht.live
sc-1764-survey-api.honeybadgers-sbx.dht.live
*.mgmt.paas.dht.live
sc-2374-scui.honeybadgers-sbx.dht.live
api.airdba.atlas-eu-stg.dht.live
docs.showtime2-sbx.dht.live
avx-mock-apac.showtime8-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
external.showtime12-dev.dht.live
data-platform-mock.showtime8-sbx.dht.live
sc-2206-werewolf.honeybadgers-sbx.dht.live
cdk-multicare-aws.saas-sltc-sandbox-dev.dht.live
external.showtime4-sbx.dht.live
sc-1741-survey-api.honeybadgers-sbx.dht.live
green-iot-avx-d.airview-messaging-stg.dht.live
docs.showtime5-sbx.dht.live
peep-ws10.smart-coaching-dev.dht.live
test-lost-ebs-a.machine-services-perf-stg.dht.live
bitbucket.prod.dht.live
blue-avw-b.machine-services-dev.dht.live
sc-1470-mobilequestionsui.honeybadgers-sbx.dht.live
content-ws2.smart-coaching-dev.dht.live
graphql.showtime8-sbx.dht.live
amr-stg-mcs-c.airview-messaging-stg.dht.live
cdk-multicare-aws.saas-sltc-sandbox-dev.dht.live
blue-avw-c.machine-services-dev.dht.live
docs.sc-1760-survey-api.honeybadgers-sbx.dht.live
sc-2377-werewolf.honeybadgers-sbx.dht.live
graphql.showtime5-sbx.dht.live
green-mcspacific-a.messaging2-amr-prd.dht.live
external.myair-eu-dev.dht.live
docs.showtime7-sbx.dht.live
sc-1761-scui.honeybadgers-sbx.dht.live
support-api.showtime6-sbx.dht.live
peep-ws5.smart-coaching-dev.dht.live
green-iot-mds-h.messaging2-amr-stg.dht.live
api.showtime4-sbx.dht.live
docs.sc-2371-survey-api.honeybadgers-sbx.dht.live
sc-2037-mobilequestionsui.honeybadgers-sbx.dht.live
green-iot-mds-f.airview-messaging-stg.dht.live
api.hellosleep-prd.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
docs.sc-728-survey-api.honeybadgers-sbx.dht.live
sc-1764-scui.honeybadgers-sbx.dht.live
support.showtime5-sbx.dht.live
customer-service.saas-sltc-sandbox-dev.dht.live
nightowl.showtime6-sbx.dht.live
green-mcspacific-c.messaging2-amr-stg.dht.live
scui.sleep-concierge-prd.dht.live
amr-prod-dps-ebs-d.prod-messaging-prd.dht.live
api.showtime8-sbx.dht.live
sc-1457-werewolf-api.honeybadgers-sbx.dht.live
support.showtime4-sbx.dht.live
*.sre-dev-ave-qa.dht.live
sc-2066-scui.honeybadgers-sbx.dht.live
mcs2-dev.dht.live
support-api.showtime7-sbx.dht.live
amr-qa-avx-d.airview-messaging-qa.dht.live
avx-mock-amr.showtime14-dev.dht.live
green-dps-ebs-b.messaging2-amr-prd.dht.live
graphql.showtime8-sbx.dht.live
support-api.myair-eu-dev.dht.live
avx-mock-amr.showtime2-sbx.dht.live
data-platform-mock.showtime3-sbx.dht.live
data-platform-mock.myair-eu-dev.dht.live
content-ws4.smart-coaching-dev.dht.live
green-iot-mds-c.messaging2-amr-stg.dht.live
amr-qa-envoymq-hub.airview-messaging-qa.dht.live
*.airview-icm-dev.dht.live
Certificate
The complete raw certificate details for mcs2-dev.dht.live in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdjCCA16gAwIBAgIQDUKx6gkQuP1f5HVk8d7L+DANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyNzAwMDAwMFoXDTI0MDYyNTIzNTk1OVowHDEa MBgGA1UEAxMRbWNzMi1kZXYuZGh0LmxpdmUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4KjvHPDA7mtwiyATPhx+nvr28zkspu+7Y+8Smgrv+lkTOT+MT mbgxK1hIB779HaTJ9noAgPMA3ZEvMR3YxDrfJ+7p6cyrs91qt2syt8qo1c3xmwMn 04qNDZiEQsZ83Iu15g4OFBzTiwdMRyphuEgT+I5ffvFPiKfoUKwFksAe33xaqzeI bB7wzKoH/csjPuWR91c9bnEOffgdHH3HDzbwzSMOVWRAsKtTVS+s/uaMNupeR2Nv rid/mN0xvu0MF6qABuici747sNlLAOy20/lk9FgOrL1dRLqLVbXr/flHvGOvso3M DTspS80uzgpNSlUqoaGb83NhBdK6U529yK/FAgMBAAGjggGSMIIBjjAfBgNVHSME GDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUg7TG/Z5rVbm0f/Kz vLFfHVwPDCcwMQYDVR0RBCowKIIRbWNzMi1kZXYuZGh0LmxpdmWCEyoubWNzMi1k ZXYuZGh0LmxpdmUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFt YXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9u dHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBGjTnm7FPkD3AcA02q8zx8XECWl52 UQfWcrtkvAQXyaLFF7HUJ53X6ljBCoNZQvPKX/zINwdC5OUeWav876yNmVMpUeCo GuDD95v9p/7Ds8aU2GAaWoBVWWblQ16Q7pKR30ObukqGn8fstYiv0zxSzWUKIUmr Ph4m8ARVzkbqYJoTvoaoywo5doLyQyoeqrXnWdjEIjyv8LH7fYsWFX0jxxfHIF8e eezipiK0gEmzFX32Aeylyb5okUzZmwAZfpMDXTHmJY9K+c5IXRZbVY3sgaZMszlO OnHUjRwL+75x5RkVUprc1tt0/RYpbc7eLb+vqyfivE1Ni2ryaWTvakNx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCo7xzwwO5rcIsgEz4cf p769vM5LKbvu2PvEpoK7/pZEzk/jE5m4MStYSAe+/R2kyfZ6AIDzAN2RLzEd2MQ6 3yfu6enMq7PdardrMrfKqNXN8ZsDJ9OKjQ2YhELGfNyLteYODhQc04sHTEcqYbhI E/iOX37xT4in6FCsBZLAHt98Wqs3iGwe8MyqB/3LIz7lkfdXPW5xDn34HRx9xw82 8M0jDlVkQLCrU1UvrP7mjDbqXkdjb64nf5jdMb7tDBeqgAbonIu+O7DZSwDsttP5 ZPRYDqy9XUS6i1W16/35R7xjr7KNzA07KUvNLs4KTUpVKqGhm/NzYQXSulOdvciv xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17626264066562661145627355247397489656 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcs2-dev.dht.live' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23248674233162180576279438554418453894721362736577548019446980899285988849432276872869069064896935695987329155201022480771997615855408718386090827033740239845241973268601870339042571080196076361059689874610110500840957546623967652749173763249362732810523565574814749176706338297516908528126237775665558076012671996398553210604390471373865874735061863012847560623185923598854395837630191627151798981792233983404102227391823597326740190351522141546559597041927529933127652500882968901289953912187817147539629501638711944139695273051585944576378547031349573168576867258460654901654632712641795135287447856922843685629893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 83b4c6fd9e6b55b9b47ff2b3bcb15f1d5c0f0c27 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcs2-dev.dht.live' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcs2-dev.dht.live' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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