payment-files.mykaarma.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0c:e0:7a:7c:f1:2a:4f:e3:b8:a3:e2:c6:b1:d6:41:6c was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=payment-files.mykaarma.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:e0:7a:7c:f1:2a:4f:e3:b8:a3:e2:c6:b1:d6:41:6cSerial Number (int): 17116294798631628655241853554463752556
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e1:e3:f7:92:83:f0:de:59:6f:11:ac:40:9d:98:44:d1:87:19:34:de
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): ad:a1:37:db:bf:67:b2:de:7e:fe:73:eb:03:75:3e:dc:28:b0:42:bf
Fingerprint (sha256): 21:bf:c6:51:7e:3f:c9:d1:d2:7e:18:c6:91:83:d6:e7:1f:de:d3:94:e5:bb:21:76:96:35:62:01:2c:96:ae:6d
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate payment-files.mykaarma.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for payment-files.mykaarma.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
payment-files.mykaarma.com
Other certificates including the domain name mykaarma.com
(limited to 100 certificates)
mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
dev-communication-files.mykaarma.com
isitup.mykaarma.com
eu-status.walkme.com
payisland.mykaarma.com
isitup.mykaarma.com
mykaarma.com
bluefoxstatus.com
accounts.mykaarma.com
qa-payment-files.mykaarma.com
isitup.mykaarma.com
graylog02.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
mykaarma.com
connect2018.mykaarma.com
isitup.mykaarma.com
stg-01.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
homecaretrust.wellsky.com
qa.mykaarma.com
dev-api.mykaarma.com
homecaretrust.wellsky.com
dev-transportation-files.mykaarma.com
dev-api.mykaarma.com
qa02-communication-files.mykaarma.com
sandbox1.status-ovhcloud.com
isitup.mykaarma.com
mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
connect.mykaarma.com
isitup.mykaarma.com
eu-status.walkme.com
homecaretrust.wellsky.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
stg01-api.mykaarma.com
bluefoxstatus.com
isitup.mykaarma.com
isitup.mykaarma.com
eu-status.walkme.com
sonar.mykaarma.com
homecaretrust.wellsky.com
isitup.mykaarma.com
isitup.mykaarma.com
communication-files.mykaarma.com
support.mykaarma.com
*.dev.mykaarma.com
static.mykaarma.com
stg01-api.mykaarma.com
isitup.mykaarma.com
sandbox1.status-ovhcloud.com
qa-docs.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
dms-logs.mykaarma.com
isitup.mykaarma.com
api-tpr.mykaarma.com
payment-files.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
qa-static.mykaarma.com
homecaretrust.wellsky.com
eu-status.walkme.com
homecaretrust.wellsky.com
isitup.mykaarma.com
loadtest01.mykaarma.com
mykaarma.com
connect.mykaarma.com
connect.mykaarma.com
homecaretrust.wellsky.com
accounts.mykaarma.com
bluefoxstatus.com
*.dev.mykaarma.com
dev-api.mykaarma.com
support.mykaarma.com
files.mykaarma.com
*.dev.mykaarma.com
sandbox1.status-ovhcloud.com
sandbox1.status-ovhcloud.com
isitup.mykaarma.com
download.mykaarma.com
dev-cdn-dealer.mykaarma.com
admin.mykaarma.com
stg01-api.mykaarma.com
swarm.mykaarma.com
pi2elb.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
mykaarma.com
homecaretrust.wellsky.com
isitup.mykaarma.com
isitup.mykaarma.com
dev-communication-files.mykaarma.com
isitup.mykaarma.com
eu-status.walkme.com
payisland.mykaarma.com
isitup.mykaarma.com
mykaarma.com
bluefoxstatus.com
accounts.mykaarma.com
qa-payment-files.mykaarma.com
isitup.mykaarma.com
graylog02.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
mykaarma.com
connect2018.mykaarma.com
isitup.mykaarma.com
stg-01.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
homecaretrust.wellsky.com
qa.mykaarma.com
dev-api.mykaarma.com
homecaretrust.wellsky.com
dev-transportation-files.mykaarma.com
dev-api.mykaarma.com
qa02-communication-files.mykaarma.com
sandbox1.status-ovhcloud.com
isitup.mykaarma.com
mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
connect.mykaarma.com
isitup.mykaarma.com
eu-status.walkme.com
homecaretrust.wellsky.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
stg01-api.mykaarma.com
bluefoxstatus.com
isitup.mykaarma.com
isitup.mykaarma.com
eu-status.walkme.com
sonar.mykaarma.com
homecaretrust.wellsky.com
isitup.mykaarma.com
isitup.mykaarma.com
communication-files.mykaarma.com
support.mykaarma.com
*.dev.mykaarma.com
static.mykaarma.com
stg01-api.mykaarma.com
isitup.mykaarma.com
sandbox1.status-ovhcloud.com
qa-docs.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
dms-logs.mykaarma.com
isitup.mykaarma.com
api-tpr.mykaarma.com
payment-files.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
qa-static.mykaarma.com
homecaretrust.wellsky.com
eu-status.walkme.com
homecaretrust.wellsky.com
isitup.mykaarma.com
loadtest01.mykaarma.com
mykaarma.com
connect.mykaarma.com
connect.mykaarma.com
homecaretrust.wellsky.com
accounts.mykaarma.com
bluefoxstatus.com
*.dev.mykaarma.com
dev-api.mykaarma.com
support.mykaarma.com
files.mykaarma.com
*.dev.mykaarma.com
sandbox1.status-ovhcloud.com
sandbox1.status-ovhcloud.com
isitup.mykaarma.com
download.mykaarma.com
dev-cdn-dealer.mykaarma.com
admin.mykaarma.com
stg01-api.mykaarma.com
swarm.mykaarma.com
pi2elb.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
isitup.mykaarma.com
mykaarma.com
homecaretrust.wellsky.com
Certificate
The complete raw certificate details for payment-files.mykaarma.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgIQDOB6fPEqT+O4o+LGsdZBbDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwNjAwMDAwMFoXDTI1MDEwMjIzNTk1OVowJTEj MCEGA1UEAxMacGF5bWVudC1maWxlcy5teWthYXJtYS5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCiFe+EMdL01kfxFG8PDLDfdBCf861bP86b2BF5 zxgEcuCDzb8+d9kzlbxpokHXrAxQgp/YaEuGbaS9Zyck45OaFgvgNZOIChxEXe8G OC9+nANBWTx7PEqsb6k5DWw4zOE3jUaDJA85HEwZufBafjAKoUlbnUHapYxxBCd0 x5EH/ohIS5SBfxrgkOKIFNASnQencO6og+kEFe6TsEgg4wi6aHBTSfyScwmKvb4B JLskem9XnmauMqVmRCC2LzER7wj2NfTM5TUqXRPAid9/hDRulSaJp1JQVtw6vV2X 9NdVdSiTqgyRRYuIiX7Gn/rgbGM+Q5SerrxWoybXMeY74dujAgMBAAGjggLyMIIC 7jAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU4eP3 koPw3llvEaxAnZhE0YcZNN4wJQYDVR0RBB4wHIIacGF5bWVudC1maWxlcy5teWth YXJtYS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1 c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSC AW0EggFpAWcAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAYw9 bLKxAAAEAwBHMEUCIASrRhnGkwg2BSu+rSNrYA52eT8XUvW81t7T+2mNnP08AiEA uPdzpDt0qVVsx9eLmWjeX0G7qX3PnXhuQjnS3g36vGkAdQA/F0tP1yJHWJQdZRyE vg0S7ZA3fx+FauvBvyiF7PhkbgAAAYw9bLLdAAAEAwBGMEQCIAzPj8gbCX5ttPSk XUy4ot8/F/pcuwPDmZ0iLeLNoRWBAiAEHiBIItZ+3FphtmWFBro2k0h1m/qRQcVp zbB01gHBHgB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjD1s srwAAAQDAEcwRQIgBDi/3rqtQVl7yQBmc8knzMz/PRWFxzOcwOXP6tuvvncCIQCl YqhZz1be76Kq4EyBzKKLklMeKcJko4sScgJCM35R0jANBgkqhkiG9w0BAQsFAAOC AQEAYwhwdEYaXXxUOKmo13AKZqmSR7TGVI5Z2Mscv4AZzZIBY4yvr64g3N6NbV4y vMNuRmmFmjKhdd073s1Y5zjhvCGUZs9yJ8FtkAdFOCyui9sBIFR22n3SC4rwbgVZ Xii/KdknE7R1tq5k6fp+HF20fHDgcZyZ2LjeZxajVH2LGDb+TuDyx6Ms2TWthxQH q+xwLMYBxxtr8AyviEMQFixVzK0gq18YENLfxZgTa3Eoxi4UO7dTWcBVDqtQf5XL XJ/c55Qh0HL1+pfj1V4IRvx7/iczGtSUO4BD/eJvW6Ul6t2mZoZZM0pFBTkUOgsh 1PoAVnIv2Qkt2EQex8/EEXvfRg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXvhDHS9NZH8RRvDwyw 33QQn/OtWz/Om9gRec8YBHLgg82/PnfZM5W8aaJB16wMUIKf2GhLhm2kvWcnJOOT mhYL4DWTiAocRF3vBjgvfpwDQVk8ezxKrG+pOQ1sOMzhN41GgyQPORxMGbnwWn4w CqFJW51B2qWMcQQndMeRB/6ISEuUgX8a4JDiiBTQEp0Hp3DuqIPpBBXuk7BIIOMI umhwU0n8knMJir2+ASS7JHpvV55mrjKlZkQgti8xEe8I9jX0zOU1Kl0TwInff4Q0 bpUmiadSUFbcOr1dl/TXVXUok6oMkUWLiIl+xp/64GxjPkOUnq68VqMm1zHmO+Hb owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17116294798631628655241853554463752556 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'payment-files.mykaarma.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20461422257376003567419448562900312834696079534038364327660838449112196667240310177226151528631386645382336296782074649939970154543091233176992260526954218827516852433632045663214027582638216796486199100009800202422955307903482349759609967056393265030721575369902666977060025021633481891522311888761638360747521248059821300336101526722763886136620630985936799046355179253840036997934005578253993292436806699107990552403414917104810889665683950626591686760464063334833430848618690393446888403413330965123173169836390402756598053485219626059960426462334084079180611508882239489514264522948820897808030733028187464391587 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1e3f79283f0de596f11ac409d9844d1871934de . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment-files.mykaarma.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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