charitableimpact.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:1e:d6:15:86:bc:d0:62:11:62:d0:db:88:8d:0f:8c was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=charitableimpact.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:1e:d6:15:86:bc:d0:62:11:62:d0:db:88:8d:0f:8cSerial Number (int): 20098530983675630610844773861655646092
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 05:f5:38:e5:8a:27:f9:d7:8e:95:43:50:87:65:fb:4d:27:1c:31:b4
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 16:67:d0:8d:6b:70:32:f9:d0:da:92:40:9f:06:18:4c:b6:a6:fe:aa
Fingerprint (sha256): 1b:28:bb:9a:b9:4c:36:27:d4:30:cf:0c:e5:9a:82:46:a5:2b:48:86:67:eb:40:84:6a:82:b5:ab:ef:91:5f:83
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate charitableimpact.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for charitableimpact.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
charitableimpact.com
*.charitableimpact.com
*.charitableimpact.com
Other certificates including the domain name charitableimpact.com
(limited to 100 certificates)
alaminamdar.tech
motes.dk
help.charitableimpact.com
sandbox.charitableimpact.com
m.stg.charitableimpact.com
elestio.dev.charitableimpact.com
iturrima.it
dev.charitableimpact.com
giving.charitableimpact.com
weare.charitableimpact.com
milestoneshealthcentre.com
aashaar.in
cash-airport.com
preview.charitableimpact.com
xn--y8ja6ob5749g5na497h.app
meriadecgouriou.com
www.linefest.app
charitableimpact.com
docs.as-known-as.tk
iturrima.it
investor-flow.salesmonk.co
www.viverdefotovoltaico.com.br
www.viverdefotovoltaico.com.br
help.charitableimpact.com
social.charitableimpact.com
dev.marketing.charitableimpact.com
perf.charitableimpact.com
preview.charitableimpact.com
dev.charitableimpact.com
charitableimpact.com
admin.luka.la
m.qa.charitableimpact.com
app.linkvendas.com.br
giving.charitableimpact.com
uflymarket.com
alaminamdar.tech
www.nexigoenergy.com
stg.charitableimpact.com
giving.charitableimpact.com
milestoneshealthcentre.com
social.charitableimpact.com
stg.charitableimpact.com
www.editmarkdown.com
www.marzanoarchitects.com.ar
go2.charitableimpact.com
my.precise.credit
*.affiliateapp.dev.marketing.charitableimpact.com
help.charitableimpact.com
*.charitableimpact.com
m.preview.charitableimpact.com
testing.sandbox.charitableimpact.com
demo.atowapp.com
cash-airport.com
www.prinki.com
lab.charitableimpact.com
xn--lasanluquea-beb.com
www.tenderapp.co
vendor.wedready.com
www.nexigoenergy.com
go.charitableimpact.com
mytbl.app
charitableimpact.com
jmolinadev.tech
mytbl.app
dev.charitableimpact.com
demo.atowapp.com
charitableimpact.com
identity.charitableimpact.com
tech-pong.marketing.charitableimpact.com
dev.charitableimpact.com
go2.charitableimpact.com
clappr.app
designer.hpi.studyu.health
xn--y8ja6ob5749g5na497h.app
dev.charitableimpact.com
qa.charitableimpact.com
admin.qa.charitableimpact.com
www.hotelgirirajkathiyawadi.com
lab.charitableimpact.com
giving.charitableimpact.com
staging.inertiacosmetics.com
m.qa.charitableimpact.com
auth.tinito.app
giving.charitableimpact.com
giving.charitableimpact.com
auth.staging.wondercraft.ai
demo.charitableimpact.com
connext.co.nz
corp.charitableimpact.com
instagram-identify.ga
satyamnx.store
giving.charitableimpact.com
view.charitableimpact.com
*.stg.charitableimpact.com
www.marzanoarchitects.com.ar
cliohealth.aspire-dev2.com
sandbox.charitableimpact.com
healingwithkan.com
giving-dev.marketing.charitableimpact.com
mybattery.ausgrid.com.au
motes.dk
help.charitableimpact.com
sandbox.charitableimpact.com
m.stg.charitableimpact.com
elestio.dev.charitableimpact.com
iturrima.it
dev.charitableimpact.com
giving.charitableimpact.com
weare.charitableimpact.com
milestoneshealthcentre.com
aashaar.in
cash-airport.com
preview.charitableimpact.com
xn--y8ja6ob5749g5na497h.app
meriadecgouriou.com
www.linefest.app
charitableimpact.com
docs.as-known-as.tk
iturrima.it
investor-flow.salesmonk.co
www.viverdefotovoltaico.com.br
www.viverdefotovoltaico.com.br
help.charitableimpact.com
social.charitableimpact.com
dev.marketing.charitableimpact.com
perf.charitableimpact.com
preview.charitableimpact.com
dev.charitableimpact.com
charitableimpact.com
admin.luka.la
m.qa.charitableimpact.com
app.linkvendas.com.br
giving.charitableimpact.com
uflymarket.com
alaminamdar.tech
www.nexigoenergy.com
stg.charitableimpact.com
giving.charitableimpact.com
milestoneshealthcentre.com
social.charitableimpact.com
stg.charitableimpact.com
www.editmarkdown.com
www.marzanoarchitects.com.ar
go2.charitableimpact.com
my.precise.credit
*.affiliateapp.dev.marketing.charitableimpact.com
help.charitableimpact.com
*.charitableimpact.com
m.preview.charitableimpact.com
testing.sandbox.charitableimpact.com
demo.atowapp.com
cash-airport.com
www.prinki.com
lab.charitableimpact.com
xn--lasanluquea-beb.com
www.tenderapp.co
vendor.wedready.com
www.nexigoenergy.com
go.charitableimpact.com
mytbl.app
charitableimpact.com
jmolinadev.tech
mytbl.app
dev.charitableimpact.com
demo.atowapp.com
charitableimpact.com
identity.charitableimpact.com
tech-pong.marketing.charitableimpact.com
dev.charitableimpact.com
go2.charitableimpact.com
clappr.app
designer.hpi.studyu.health
xn--y8ja6ob5749g5na497h.app
dev.charitableimpact.com
qa.charitableimpact.com
admin.qa.charitableimpact.com
www.hotelgirirajkathiyawadi.com
lab.charitableimpact.com
giving.charitableimpact.com
staging.inertiacosmetics.com
m.qa.charitableimpact.com
auth.tinito.app
giving.charitableimpact.com
giving.charitableimpact.com
auth.staging.wondercraft.ai
demo.charitableimpact.com
connext.co.nz
corp.charitableimpact.com
instagram-identify.ga
satyamnx.store
giving.charitableimpact.com
view.charitableimpact.com
*.stg.charitableimpact.com
www.marzanoarchitects.com.ar
cliohealth.aspire-dev2.com
sandbox.charitableimpact.com
healingwithkan.com
giving-dev.marketing.charitableimpact.com
mybattery.ausgrid.com.au
Certificate
The complete raw certificate details for charitableimpact.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIQDx7WFYa80GIRYtDbiI0PjDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIyNzAwMDAwMFoXDTI1MDEyNDIzNTk1OVowHzEd MBsGA1UEAxMUY2hhcml0YWJsZWltcGFjdC5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCss20eHSS6t9Aw+BbgD3X1NiePRmGOteKNUsTAP2mgVWa AnLLKAQYA4Vn6HBVGAER4QlwYW59xxYxvkUAQKVUfNQE+PzxKaJFReCVRPG0Pnvb r8G/oiQJvF7AfrYqw9coHkMNyY0YOEHsE1K/2//DaQ3gq8ajasW98/RCtBMM0ea8 IoY//dkMoxeEA/MRAoY4cKg1Vu03WAP/GTPTw1tMPlB6FTJTD11RF7YyiB/shVtG Yc2PsJ82i4Q5I0m5faM0bxr/9PPCU1e6iWi1maQT+ZzZhUo7n89ePeFsPNsMd0Ig k8O0f6Sd8jgAwpk3TD8BCe9NeOL7J8ChAOLi5PcdAgMBAAGjggMFMIIDATAfBgNV HSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUBfU45Yon+deO lUNQh2X7TSccMbQwNwYDVR0RBDAwLoIUY2hhcml0YWJsZWltcGFjdC5jb22CFiou Y2hhcml0YWJsZWltcGFjdC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0w Mi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5y Mm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJt MDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYK KwYBBAHWeQIEAgSCAW4EggFqAWgAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx +mSxYpo53wAAAYyo+K7/AAAEAwBHMEUCIHXO+zdJzBhRVajwzwT3FRU44s74LPJy FPxv/8dEXZZbAiEA1MmKn/vsZzxFZ+qMsxor1zAb3e70aMEL8wsEJ5ByFEUAdgBV gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYyo+K9fAAAEAwBHMEUC IQCKv4Gw2pu/C/Shp0CV4pkD5iOCISPm5J3AF5//Xarj0AIgFnMowfUVXpY9aI0a C4U1V2ZPXgBv6gaqjDZ4JwMxjXkAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkD L9kOjC55uAAAAYyo+K6sAAAEAwBHMEUCIQCrb5++o3rV+aoKJSi6zOX/9LkMdQw8 rrwmtGYjXgLbuwIgQEeWD+DE0/0bi2JZPb9vzwnhatUeyKIpeWrd44D5H6wwDQYJ KoZIhvcNAQELBQADggEBAKdcPylcVcZZnq2Gb0BWFQ3C8XvIACoZqFeqtZuix32c QkNTWq2k6pmaejbCH9++YXjw+c3RIQIsOFtDIpozFjJm2hnRB+puQ3zL9MEXK6LA CNV3d8roW7ojb66tE8N5zYPpciHq7EZmQbEQqhQ1hivSTU3oLE4kIszbAC/WsBGQ RzYGAgTW5QgGdNMNVdufs9baCncMPbVGwwBtUA5lI7CxgKzeSdtT1zeiIwfYoDC4 e/o8q0FgMnICbDPbYvUap4vYKeqbDlIFlMldlQrXpsywTw93moFraG9vwzJbjJGF WE7JAUat+a9Lu51qrVQ5on+eCZ4Atik9X9mYuYoCmAs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrLNtHh0kurfQMPgW4A9 19TYnj0ZhjrXijVLEwD9poFVmgJyyygEGAOFZ+hwVRgBEeEJcGFufccWMb5FAECl VHzUBPj88SmiRUXglUTxtD5726/Bv6IkCbxewH62KsPXKB5DDcmNGDhB7BNSv9v/ w2kN4KvGo2rFvfP0QrQTDNHmvCKGP/3ZDKMXhAPzEQKGOHCoNVbtN1gD/xkz08Nb TD5QehUyUw9dURe2Mogf7IVbRmHNj7CfNouEOSNJuX2jNG8a//TzwlNXuolotZmk E/mc2YVKO5/PXj3hbDzbDHdCIJPDtH+knfI4AMKZN0w/AQnvTXji+yfAoQDi4uT3 HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20098530983675630610844773861655646092 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'charitableimpact.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24578402472719357827625120882496633025203984362625228165528839013902199640703592194754248089812988505064141109886274794466871414311362291672496590702641798397083710423333845302156602417910535238484884370276191890831715077301594564345886815620976694892271525987693128305508823392895087172953595102007918482939195032482344852089090349479396073801601127119756825219009067068676626773587249787703131604326524351845539733774532504230211786308976985213067198593257849447857783965584615430204317890814943351501049557519583642854657313330064467843473731732409470459035929656172697682791047160060427458126005706280833378481949 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 05f538e58a27f9d78e9543508765fb4d271c31b4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitableimpact.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charitableimpact.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a75c3f295c55c6599ead866f4056150dc2f17bc8002a19a857aab59ba2c77d9c4243535aada4ea999a7a36c21fdfbe6178f0f9cdd121022c385b43229a33163266da19d107ea6e437ccbf4c1172ba2c008d57777cae85bba236faead13c379cd83e97221eaec466641b110aa1435862bd24d4de82c4e2422ccdb002fd6b011904736060204d6e5080674d30d55db9fb3d6da0a770c3db546c3006d500e6523b0b180acde49db53d737a22307d8a030b87bfa3cab41603272026c33db62f51aa78bd829ea9b0e520594c95d950ad7a6ccb04f0f779a816b686f6fc3325b8c9185584ec90146adf9af4bbb9d6aad5439a27f9e099e00b6293d5fd998b98a02980b