iffedi-uat.kerrylogistics.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0a:7a:bc:9a:54:45:e2:a4:84:e8:b1:01:26:82:cc:f5 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=iffedi-uat.kerrylogistics.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:7a:bc:9a:54:45:e2:a4:84:e8:b1:01:26:82:cc:f5Serial Number (int): 13929565494814148406681133684202065141
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: df:91:6e:a6:8a:bd:8a:6b:7f:2c:12:bb:a4:14:91:dc:67:1f:71:53
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 0f:2f:0d:c3:1b:f6:a8:63:d4:04:0f:be:fa:4f:6f:5c:d7:67:6a:0d
Fingerprint (sha256): 18:20:c3:dd:4f:b3:b5:bc:33:b1:5b:d8:9c:6a:c7:1d:08:c6:88:02:13:4a:b6:87:e9:15:79:2d:68:44:70:b4
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate iffedi-uat.kerrylogistics.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for iffedi-uat.kerrylogistics.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
iffedi-uat.kerrylogistics.com
Other certificates including the domain name kerrylogistics.com
(limited to 100 certificates)
*.gmr.kerrylogistics.com
oms.kerrylogistics.com
survey.abundantpower.com
customer.zohosurvey.com
allinteractive.tv
kvc-api.apac.kerrylogistics.com
allinteractive.tv
servicedesk.kerrylogistics.com
bms2.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
*.th.kerrylogistics.com
customer.zohosurvey.com
ceapp-uat.kerrylogistics.com
*.vpn.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4pub.apac.kerrylogistics.com
sctcms.kerrylogistics.com
project.kerrylogistics.com
kerrierbook-api.kerrylogistics.com
ecom2.kerrylogistics.com
klclub.kerrylogistics.com
kerrierbook-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-uat.apac.kerrylogistics.com
kerrierbookb2bapi.kerrylogistics.com
*.vpn.kerrylogistics.com
mycrm-login.kerrylogistics.com
awstest.hk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
kerrierbook-b2b-uat.kerrylogistics.com
tdc.hk.kerrylogistics.com
customer.zohosurvey.com
kvc-uat.apac.kerrylogistics.com
*.cn.kerrylogistics.com
tdc.kerrylogistics.com
ecom2.kerrylogistics.com
ceapp.kerrylogistics.com
project.kerrylogistics.com
servicedesk.kerrylogistics.com
survey.abundantpower.com
www.kerrylogistics.com
*.hk.kerrylogistics.com
mydesktop.kerrylogistics.com
hfm.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
customer.zohosurvey.com
survey.multiplyinggood.org
customer.zohosurvey.com
servicedesk.kerrylogistics.com
sharepoint.kerrylogistics.com
qv.kerrylogistics.com
customer.zohosurvey.com
servicedesk.kerrylogistics.com
uat.arbitration.kerrylogistics.com
allinteractive.tv
*.kerrylogistics.com
klclub.kerrylogistics.com
webscan-fnb.hk.kerrylogistics.com
ap.kerrylogistics.com
kerrierbookapi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4-uat.apac.kerrylogistics.com
fsus-12.freshservice.com
kbos-uat.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
fsus-12.freshservice.com
c4-uat-api.apac.kerrylogistics.com
klclub.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
survey.abundantpower.com
kv-iff-api-uat.apac.kerrylogistics.com
allinteractive.tv
iffedi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
fsus-12.freshservice.com
www.kerrylogistics.com
kerrierbook-api-uat.kerrylogistics.com
hfm-dev.kerrylogistics.com
survey.abundantpower.com
servicedesk.kerrylogistics.com
survey.seaworldentertainment.com
survey.leakdtech.com
servicedesk.kerrylogistics.com
ksmart-uat.cn.kerrylogistics.com
survey.abundantpower.com
apptest.hk.kerrylogistics.com
kwms3.apac.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
*.vpn.kerrylogistics.com
kbos-uat.hk.kerrylogistics.com
customer.zohosurvey.com
mycrm.kerrylogistics.com
oms.kerrylogistics.com
survey.abundantpower.com
customer.zohosurvey.com
allinteractive.tv
kvc-api.apac.kerrylogistics.com
allinteractive.tv
servicedesk.kerrylogistics.com
bms2.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
*.th.kerrylogistics.com
customer.zohosurvey.com
ceapp-uat.kerrylogistics.com
*.vpn.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4pub.apac.kerrylogistics.com
sctcms.kerrylogistics.com
project.kerrylogistics.com
kerrierbook-api.kerrylogistics.com
ecom2.kerrylogistics.com
klclub.kerrylogistics.com
kerrierbook-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-uat.apac.kerrylogistics.com
kerrierbookb2bapi.kerrylogistics.com
*.vpn.kerrylogistics.com
mycrm-login.kerrylogistics.com
awstest.hk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
kerrierbook-b2b-uat.kerrylogistics.com
tdc.hk.kerrylogistics.com
customer.zohosurvey.com
kvc-uat.apac.kerrylogistics.com
*.cn.kerrylogistics.com
tdc.kerrylogistics.com
ecom2.kerrylogistics.com
ceapp.kerrylogistics.com
project.kerrylogistics.com
servicedesk.kerrylogistics.com
survey.abundantpower.com
www.kerrylogistics.com
*.hk.kerrylogistics.com
mydesktop.kerrylogistics.com
hfm.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
customer.zohosurvey.com
survey.multiplyinggood.org
customer.zohosurvey.com
servicedesk.kerrylogistics.com
sharepoint.kerrylogistics.com
qv.kerrylogistics.com
customer.zohosurvey.com
servicedesk.kerrylogistics.com
uat.arbitration.kerrylogistics.com
allinteractive.tv
*.kerrylogistics.com
klclub.kerrylogistics.com
webscan-fnb.hk.kerrylogistics.com
ap.kerrylogistics.com
kerrierbookapi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4-uat.apac.kerrylogistics.com
fsus-12.freshservice.com
kbos-uat.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
fsus-12.freshservice.com
c4-uat-api.apac.kerrylogistics.com
klclub.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
survey.abundantpower.com
kv-iff-api-uat.apac.kerrylogistics.com
allinteractive.tv
iffedi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
fsus-12.freshservice.com
www.kerrylogistics.com
kerrierbook-api-uat.kerrylogistics.com
hfm-dev.kerrylogistics.com
survey.abundantpower.com
servicedesk.kerrylogistics.com
survey.seaworldentertainment.com
survey.leakdtech.com
servicedesk.kerrylogistics.com
ksmart-uat.cn.kerrylogistics.com
survey.abundantpower.com
apptest.hk.kerrylogistics.com
kwms3.apac.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
*.vpn.kerrylogistics.com
kbos-uat.hk.kerrylogistics.com
customer.zohosurvey.com
mycrm.kerrylogistics.com
Certificate
The complete raw certificate details for iffedi-uat.kerrylogistics.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEeTCCA2GgAwIBAgIQCnq8mlRF4qSE6LEBJoLM9TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwNDAwMDAwMFoXDTI1MDEwMTIzNTk1OVowKDEm MCQGA1UEAxMdaWZmZWRpLXVhdC5rZXJyeWxvZ2lzdGljcy5jb20wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrLb9ZWBO1FcuYFdmUZzLgMl9O00r5XIUS Z9ZlrmGE/8ALDc3Hhl9f2XkRji2orK1h/3nvhmTHLrNODnFO8B6yTnnP/FjY2dar pjIcV4aLKnpDasRJGX5gmbhhMDsG+5HNZT7SkcHDeIQXRwuPfNL5ZeotcK9nz7Ej vLSn8dSz7ZlAIpFDq7guPv8l8/Umtzcma/hkHVg/UAvmyuCRDmAsJQJYVnSg/dBF Fon9s/d5DL1C3EK+d8yoKNzkoe9iOJrKa1xKse0fc7s11lEi5lERJ5wrGmNxZDM+ KEErkNzbQzK6xCttxnnocP6FTwKV0n86iBcV4Wpg3Ewx0Tw5xZ+9AgMBAAGjggGJ MIIBhTAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU 35Fupoq9imt/LBK7pBSR3GcfcVMwKAYDVR0RBCEwH4IdaWZmZWRpLXVhdC5rZXJy eWxvZ2lzdGljcy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg LqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmww dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1h em9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJHUJBIhlqQ9wW76zPt1OPgkQQ QsZL4wt5TwiauJJLwPd9NtqQ8P7ou6ccWLFR/ZYt2cnsnn2MuJWws9BYKcT8HHa1 KOTGaDyAsfcQh+16LWYQ4V3qsIHGyqjPggB9gKxOu4WDx8G1OsSE5M11ttmWciCW l2ixL/FWx4B1zFpMtWUDfq79IrnmGv/OHqEtXqJuvPBlGZpFI/AzGKKDhMbPinwv YQyuhm1Jw7YCo9tt700GqfCHrHOeRf/ws01qJHkMQHhkFj+znFjiuwyXhEv7MEk1 IFxWMyKqKu6/LYW3XwvwYeGClPgb/lI0MGFNAvj0WPp9/1H5MzCLyWfan64k -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y2/WVgTtRXLmBXZlGcy 4DJfTtNK+VyFEmfWZa5hhP/ACw3Nx4ZfX9l5EY4tqKytYf9574Zkxy6zTg5xTvAe sk55z/xY2NnWq6YyHFeGiyp6Q2rESRl+YJm4YTA7BvuRzWU+0pHBw3iEF0cLj3zS +WXqLXCvZ8+xI7y0p/HUs+2ZQCKRQ6u4Lj7/JfP1Jrc3Jmv4ZB1YP1AL5srgkQ5g LCUCWFZ0oP3QRRaJ/bP3eQy9QtxCvnfMqCjc5KHvYjiaymtcSrHtH3O7NdZRIuZR ESecKxpjcWQzPihBK5Dc20MyusQrbcZ56HD+hU8CldJ/OogXFeFqYNxMMdE8OcWf vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13929565494814148406681133684202065141 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iffedi-uat.kerrylogistics.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29688560578868425768647740329966718106073158691255095316971127604322533448760971199605112199744388798504775711016024429596151729185449391670056528172281069628743461525849568561906416655042928765665914484736613778220450032313154816202569806242271728515839517157108786088918358785376488306319539436764342780814456682457562442921525101755518457895573844937102300373107275194694453025446698938381841274005838483867961314063237940726515178644892236800511047179168898281045489533609973098575007388647404482864976152783221661107086241244691747000813177569032225568597197747599801879864992185402131555637789112941581462511549 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) df916ea68abd8a6b7f2c12bba41491dc671f7153 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iffedi-uat.kerrylogistics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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