twitch.amazon.eu
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0d:d8:2e:1d:bb:3c:ca:11:8e:7c:e8:19:e1:cf:b7:53 was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=twitch.amazon.eu
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:d8:2e:1d:bb:3c:ca:11:8e:7c:e8:19:e1:cf:b7:53Serial Number (int): 18402435413053096633677301748859909971
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 20:9b:d4:2a:e7:29:34:2b:45:22:e2:49:a2:20:7f:42:f0:7d:3e:2d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 85:6a:6f:bc:16:71:7c:bb:44:90:29:13:08:7a:c9:00:15:8f:5b:ae
Fingerprint (sha256): 18:f9:2c:dd:84:45:56:1f:48:1f:bb:e2:fd:28:07:79:4e:16:6e:0f:6a:40:a3:e9:5d:a8:df:c7:94:9e:b7:83
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate twitch.amazon.eu
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for twitch.amazon.eu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
twitch.amazon.eu
twitch.amazon.de
twitch.amazon.es
twitch.amazon.fr
twitch.amazon.it
twitch.amazon.co.uk
twitch.amazon.ae
twitch.amazon.in
twitch.amazon.nl
twitch.amazon.com.tr
twitch.amazon.de
twitch.amazon.es
twitch.amazon.fr
twitch.amazon.it
twitch.amazon.co.uk
twitch.amazon.ae
twitch.amazon.in
twitch.amazon.nl
twitch.amazon.com.tr
Other certificates including the domain name amazon.eu
(limited to 100 certificates)
sdu.amazon.eu
pay-api.amazon.eu
sdu.amazon.eu
prime.amazon.eu
luna.amazon.eu
webservices.amazon.eu
chat.amazon.eu
freight.amazon.co.uk
vendorexpress.amazon.eu
sdu.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
gaming.amazon.eu
music-xray-service.amazon.eu
twitch.amazon.eu
vendorcentral.amazon.eu
vendorexpress.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
www.amazon.eu
sdu.amazon.eu
twitch.amazon.eu
dolphin-preprod.amazon.eu
music-xray-service.amazon.eu
prime.amazon.eu
ab.amazon.eu
pay-api.amazon.eu
digprjsurvey.amazon.eu
digital-music-delivery.amazon.eu
vendorcentral-prod.amazon.com
vat-assist.amazon.eu
sdu.amazon.eu
relay.amazon.eu
vendorcentral-prod.amazon.com
prime.amazon.eu
mlis.amazon.eu
www.amazon.eu
music-xray-service.amazon.eu
webservices.amazon.eu
freight.amazon.eu
pay.amazon.eu
pay.amazon.eu
twitch.amazon.eu
sellercentral.amazon.eu
twitch.amazon.eu
xb-node-report.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
chat.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
vat-assist-beta.amazon.eu
vendorcentral-prod.amazon.com
sdu.amazon.eu
dcp.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
pay.amazon.eu
webservices.amazon.eu
credential-locker-service.amazon.eu
gaming.amazon.eu
www.amazon.eu
vendorcentral-prod.amazon.com
digital-music-delivery.amazon.eu
freight.amazon.co.uk
pay.amazon.eu
carriercentral.amazon.eu
vendorcentral.amazon.eu
gaming.amazon.eu
dolphin-preprod.amazon.eu
poweredby.amazon.de
push.amazon.eu
twitch.amazon.eu
twitch.amazon.eu
photos.amazon.eu
webservices.amazon.eu
storepickup.amazon.eu
prime.amazon.eu
chat.amazon.eu
www.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
vendorcentral.amazon.com
dcp.amazon.eu
rtn.amazon.eu
klite-services.amazon.eu
www.amazon.eu
webservices.amazon.eu
www.amazon.eu
luna.amazon.eu
api.relay.amazon.eu
sellercentral.amazon.eu
dcp.amazon.eu
webservices.amazon.eu
www.amazon.eu
amcentral.amazon.eu
photos.amazon.eu
luna.amazon.eu
pay-api.amazon.eu
sdu.amazon.eu
prime.amazon.eu
luna.amazon.eu
webservices.amazon.eu
chat.amazon.eu
freight.amazon.co.uk
vendorexpress.amazon.eu
sdu.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
gaming.amazon.eu
music-xray-service.amazon.eu
twitch.amazon.eu
vendorcentral.amazon.eu
vendorexpress.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
www.amazon.eu
sdu.amazon.eu
twitch.amazon.eu
dolphin-preprod.amazon.eu
music-xray-service.amazon.eu
prime.amazon.eu
ab.amazon.eu
pay-api.amazon.eu
digprjsurvey.amazon.eu
digital-music-delivery.amazon.eu
vendorcentral-prod.amazon.com
vat-assist.amazon.eu
sdu.amazon.eu
relay.amazon.eu
vendorcentral-prod.amazon.com
prime.amazon.eu
mlis.amazon.eu
www.amazon.eu
music-xray-service.amazon.eu
webservices.amazon.eu
freight.amazon.eu
pay.amazon.eu
pay.amazon.eu
twitch.amazon.eu
sellercentral.amazon.eu
twitch.amazon.eu
xb-node-report.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
chat.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
vat-assist-beta.amazon.eu
vendorcentral-prod.amazon.com
sdu.amazon.eu
dcp.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
pay.amazon.eu
webservices.amazon.eu
credential-locker-service.amazon.eu
gaming.amazon.eu
www.amazon.eu
vendorcentral-prod.amazon.com
digital-music-delivery.amazon.eu
freight.amazon.co.uk
pay.amazon.eu
carriercentral.amazon.eu
vendorcentral.amazon.eu
gaming.amazon.eu
dolphin-preprod.amazon.eu
poweredby.amazon.de
push.amazon.eu
twitch.amazon.eu
twitch.amazon.eu
photos.amazon.eu
webservices.amazon.eu
storepickup.amazon.eu
prime.amazon.eu
chat.amazon.eu
www.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
vendorcentral.amazon.com
dcp.amazon.eu
rtn.amazon.eu
klite-services.amazon.eu
www.amazon.eu
webservices.amazon.eu
www.amazon.eu
luna.amazon.eu
api.relay.amazon.eu
sellercentral.amazon.eu
dcp.amazon.eu
webservices.amazon.eu
www.amazon.eu
amcentral.amazon.eu
photos.amazon.eu
luna.amazon.eu
Certificate
The complete raw certificate details for twitch.amazon.eu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIQDdguHbs8yhGOfOgZ4c+3UzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTI0MDExODAwMDAwMFoXDTI0MTIxOTIzNTk1OVowGzEZ MBcGA1UEAxMQdHdpdGNoLmFtYXpvbi5ldTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALXPhiGbw66iye4zESEpYBE/rGC2HTSugxyAfYqV5DkqG8jWNRkE +Bdx69UaaZQKtYdRMGdi9+r0TBT10MYmAMACEC0awVzA8djkR6CBNMGDqUjP9i29 Vot3AAosaizXiQ0UDCxXxbm3DReNQqJKoT87yeHxpejZ8WoIFCf5UGv0+ACMhMol yu8kHSMLhNUcwqXP2gp8jD1Z8tXaJCV3a1dwpsBrSBfiBeQMbtOko2tx6dT9zlCk PQ88BdTAbi33k7UiCkQMIRo95PCERIQ6+MK93KKahckIXI5HdX/eB0I07uwNZdfe kCeaNL/8PQdg3NXlSUuPieDcOBVD36mwAZMCAwEAAaOCA5UwggORMB8GA1UdIwQY MBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBQgm9Qq5yk0K0Ui4kmi IH9C8H0+LTCBxgYDVR0RBIG+MIG7ghB0d2l0Y2guYW1hem9uLmV1ghB0d2l0Y2gu YW1hem9uLmRlghB0d2l0Y2guYW1hem9uLmVzghB0d2l0Y2guYW1hem9uLmZyghB0 d2l0Y2guYW1hem9uLml0ghN0d2l0Y2guYW1hem9uLmNvLnVrghB0d2l0Y2guYW1h em9uLmFlghB0d2l0Y2guYW1hem9uLmlughB0d2l0Y2guYW1hem9uLm5sghR0d2l0 Y2guYW1hem9uLmNvbS50cjATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNy bDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAx LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5h bWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEE AdZ5AgQCBIIBbgSCAWoBaAB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx H7WbAAABjRvh+kUAAAQDAEcwRQIgAX1BzYF1gkkRfo4r60djF+miH5ItsDk8V2BY My8Tzh4CIQCqwN7+WxPs2ztNVykXcWvoiYs0it5B+RWlWhdeVNbGswB2AEiw42va pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjRvh+noAAAQDAEcwRQIgFmM7 n0zJJuGBDfMrROPFa/1bmiy4jY3ehfOjIkZ3ZRoCIQDzp8Hxaeseobq/5XyfWGiH YqM4NYA991Y0uHOs9tnDOwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI 1/urAAABjRvh+n8AAAQDAEcwRQIhAKPH2yPm84lqq/Gpgr41gPLCa+oJlKwXVXmw WEJS76OUAiAwFFo61QF/4m9KuSGDRvM158KqEoNgI5IPoMqvBgJiVDANBgkqhkiG 9w0BAQsFAAOCAQEAcbfT1+G7r5lU6mOC7BYJTfYdJidTB1vDL4TxINPwslHtMN/z rptcd+caAa6kWtTDUnb+8q+kph+YaS0pFZfXYF8S65aidWpmbu2uwoJMVCy9A+/w iEcaOZvL8PsIOTiQXmUyARqKClHM03DE0YOuTP/wAgamU9nM14pUNCrBLLxiqxR+ UtXfzRW1bmt3JfMU8lEzzmTnlIVkrwWxu5aVTKvOaWOTGuoK5Y5lDMcE0VU2XyTC CJTqYi4hcoQeCilRmyargh1dclZH9kRrOe6OtZdqA2LlZiwUc1cWpqEoUxwXtY9G h9zpDa43Z5ieLr02IKs15Wl6gGpGS7df4pxEew== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc+GIZvDrqLJ7jMRISlg ET+sYLYdNK6DHIB9ipXkOSobyNY1GQT4F3Hr1RpplAq1h1EwZ2L36vRMFPXQxiYA wAIQLRrBXMDx2ORHoIE0wYOpSM/2Lb1Wi3cACixqLNeJDRQMLFfFubcNF41Cokqh PzvJ4fGl6NnxaggUJ/lQa/T4AIyEyiXK7yQdIwuE1RzCpc/aCnyMPVny1dokJXdr V3CmwGtIF+IF5Axu06Sja3Hp1P3OUKQ9DzwF1MBuLfeTtSIKRAwhGj3k8IREhDr4 wr3copqFyQhcjkd1f94HQjTu7A1l196QJ5o0v/w9B2Dc1eVJS4+J4Nw4FUPfqbAB kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18402435413053096633677301748859909971 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twitch.amazon.eu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22951467072797246115472504501682480938037496860040478076826133649869967675390640931832300493879573069400445140148979741318827385588315827852392881476205282468264240823231984731383542189378421484919050569722652430337527744796638391033389511411960866866683120296722062741735850476523013215725988702346656620859114710272801096159082937282241331900012186649317472564604072415756463300620122212317917426153428543349693587183986186986107122015456891393420456141574646848160622004928269173906186738894771982379741573807958296521778288876174737234447858255416429894289066580899158251882997613941750524808255411892727162339731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 209bd42ae729342b4522e249a2207f42f07d3e2d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.ae' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.com.tr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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