paramount.tech
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 01:c3:55:16:9f:06:e0:14:7e:02:89:82:8e:12:c0:30 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=paramount.tech
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:c3:55:16:9f:06:e0:14:7e:02:89:82:8e:12:c0:30Serial Number (int): 2343451680251521270887285388366495792
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 93:84:a3:54:d0:ca:6f:e9:20:61:25:58:ab:e4:56:e2:1a:cf:25:ad
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 7a:90:b8:0f:b8:53:d9:0f:b9:90:20:90:34:ba:b7:df:d8:fe:89:01
Fingerprint (sha256): 23:f8:ab:00:9e:03:45:16:96:1b:b8:cc:ef:1b:15:b5:b2:24:1d:df:ad:de:77:0a:e4:db:e8:94:4f:d9:87:c3
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate paramount.tech
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for paramount.tech
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
paramount.tech
viacbs.tech
viacom.tech
viacbs.tech
viacom.tech
Other certificates including the domain name paramount.tech
(limited to 100 certificates)
health.autodesk.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
topaz.paramount.tech
MTVI.com
www.viacomcbs.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
www.viacomcbs.com
dev-cdp-rbe-test-wb-321.cdp.paramount.tech
gettimely-status.polaris.synopsys.com
health.autodesk.com
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
airspace.cbsivideo.com
gettimely-status.polaris.synopsys.com
www.viacomcbs.com
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
paramount.tech
dev-sbt-test.cdp.paramount.tech
argo-workflow.dev.vantage.paramount.tech
gettimely-status.polaris.synopsys.com
MTVI.com
qa-rbe-test-wb-1234.cdp.paramount.tech
gettimely-status.polaris.synopsys.com
topaz.paramount.tech
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
perf-validation-reports-generator.cdp.paramount.tech
viacomcbs.com
airflow.aso.paramount.tech
perf-process-orchestrator.cdp.paramount.tech
events-plutotv-podcasts.paramount.tech
viacomcbs.com
devops-example.ns.paramount.tech.ns.paramount.tech
pluto-api-vpce.up.paramount.tech
gettimely-status.polaris.synopsys.com
stage-purchases.up.paramount.tech
viacomcbs.com
qa-amazon-delivery-service.cdp.paramount.tech
qa-pluto-api-vpce.up.paramount.tech
airflow.dev.aso.paramount.tech
health.autodesk.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
images.paramount.tech
dev-api-content.neutron.paramount.tech
stage-internal-images.paramount.tech
www.viacomcbs.com
qa-images.paramount.tech
gettimely-status.polaris.synopsys.com
rbe-test-wb-1234.cdp.paramount.tech
gettimely-status.polaris.synopsys.com
devops-example.ns.paramount.tech.ns.paramount.tech
devops-example.ns.paramount.tech
MTVI.com
www.viacomcbs.com
viacomcbs.com
health.autodesk.com
dev-events-collector-api.i.viacom.tech
health.autodesk.com
gettimely-status.polaris.synopsys.com
www.viacomcbs.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
repo.paramount.tech
dev-api-content.neutron.paramount.tech
gettimely-status.polaris.synopsys.com
*.vtg.paramount.tech
perf-rbe-test-wb-1234.cdp.paramount.tech
dev-pluto-api-vpce.up.paramount.tech
dev-api-content.neutron.paramount.tech
MTVI.com
viacomcbs.com
airspace.cbsivideo.com
api.paramount.tech
dev-rbe-test-wb-1234.cdp.paramount.tech
devops-example.ns.paramount.tech
www.paramount.tech
health.autodesk.com
stage-cdp-rbe-test-wb-321.cdp.paramount.tech
argo-workflow.vantage.paramount.tech
argo-workflow.uat.vantage.paramount.tech
health.autodesk.com
MTVI.com
stage-reporting.up.paramount.tech
gettimely-status.polaris.synopsys.com
jupyterhub.dev.aa.paramount.tech
jupyterhub.aa.paramount.tech
perf-cdp-rbe-test-wb-321.cdp.paramount.tech
health.autodesk.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
topaz.paramount.tech
MTVI.com
www.viacomcbs.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
www.viacomcbs.com
dev-cdp-rbe-test-wb-321.cdp.paramount.tech
gettimely-status.polaris.synopsys.com
health.autodesk.com
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
airspace.cbsivideo.com
gettimely-status.polaris.synopsys.com
www.viacomcbs.com
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
paramount.tech
dev-sbt-test.cdp.paramount.tech
argo-workflow.dev.vantage.paramount.tech
gettimely-status.polaris.synopsys.com
MTVI.com
qa-rbe-test-wb-1234.cdp.paramount.tech
gettimely-status.polaris.synopsys.com
topaz.paramount.tech
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
perf-validation-reports-generator.cdp.paramount.tech
viacomcbs.com
airflow.aso.paramount.tech
perf-process-orchestrator.cdp.paramount.tech
events-plutotv-podcasts.paramount.tech
viacomcbs.com
devops-example.ns.paramount.tech.ns.paramount.tech
pluto-api-vpce.up.paramount.tech
gettimely-status.polaris.synopsys.com
stage-purchases.up.paramount.tech
viacomcbs.com
qa-amazon-delivery-service.cdp.paramount.tech
qa-pluto-api-vpce.up.paramount.tech
airflow.dev.aso.paramount.tech
health.autodesk.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
images.paramount.tech
dev-api-content.neutron.paramount.tech
stage-internal-images.paramount.tech
www.viacomcbs.com
qa-images.paramount.tech
gettimely-status.polaris.synopsys.com
rbe-test-wb-1234.cdp.paramount.tech
gettimely-status.polaris.synopsys.com
devops-example.ns.paramount.tech.ns.paramount.tech
devops-example.ns.paramount.tech
MTVI.com
www.viacomcbs.com
viacomcbs.com
health.autodesk.com
dev-events-collector-api.i.viacom.tech
health.autodesk.com
gettimely-status.polaris.synopsys.com
www.viacomcbs.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
repo.paramount.tech
dev-api-content.neutron.paramount.tech
gettimely-status.polaris.synopsys.com
*.vtg.paramount.tech
perf-rbe-test-wb-1234.cdp.paramount.tech
dev-pluto-api-vpce.up.paramount.tech
dev-api-content.neutron.paramount.tech
MTVI.com
viacomcbs.com
airspace.cbsivideo.com
api.paramount.tech
dev-rbe-test-wb-1234.cdp.paramount.tech
devops-example.ns.paramount.tech
www.paramount.tech
health.autodesk.com
stage-cdp-rbe-test-wb-321.cdp.paramount.tech
argo-workflow.vantage.paramount.tech
argo-workflow.uat.vantage.paramount.tech
health.autodesk.com
MTVI.com
stage-reporting.up.paramount.tech
gettimely-status.polaris.synopsys.com
jupyterhub.dev.aa.paramount.tech
jupyterhub.aa.paramount.tech
perf-cdp-rbe-test-wb-321.cdp.paramount.tech
health.autodesk.com
viacomcbs.com
gettimely-status.polaris.synopsys.com
viacomcbs.com
Certificate
The complete raw certificate details for paramount.tech in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEdTCCA12gAwIBAgIQAcNVFp8G4BR+AomCjhLAMDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDYwMzAwMDAwMFoXDTI1MDcwMjIzNTk1OVowGTEX MBUGA1UEAxMOcGFyYW1vdW50LnRlY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDiPVCYlybRx1yt1rFIIS6UMGgeZ6Tkv7r6YcT7hBT1ypIGzCNUQ+dQ aug55eWF9yjmPYDbtBntXVQAMOem62WKC77K5G6pnE8wHk7oylG6D9iwGW6TE58/ +uEZSX0zQ9P6vTvTtnKSA59dfpl6xAY2BfUhQ28sBLcyqBgCXpvZ/oT7fiPjy5Cz rwrEHZ7pWTrjEJ9k0k0xBssphlcv4+Ry4lyvm/5LGx5NmNiX1Kfc9Tq5hitYbiE+ YgZMm8Zl3KnMvBcIFd50Mc3bS8Ec0SYtqwr+qTsl2JU0L+/eAck6j+xkOnqt3AMP s5MdFeTNBvVCTTwfIHgbiWaYlDMZHY+3AgMBAAGjggGUMIIBkDAfBgNVHSMEGDAW gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUk4SjVNDKb+kgYSVYq+RW 4hrPJa0wMwYDVR0RBCwwKoIOcGFyYW1vdW50LnRlY2iCC3ZpYWNicy50ZWNoggt2 aWFjb20udGVjaDATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyG Kmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1Bggr BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpv bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250 cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB /wQCBQAwDQYJKoZIhvcNAQELBQADggEBAHvdCTE44167EDIXIpS0CCaqq5DslUqY xQAc+T0JokANLNn5I43mtk13GE+tDTFEu1y/+y1uv3WT5fo3NRsWfX7tZdY3ldDH 7VP+tq1VWnUroROs4njERFgMKQ3fvultX6KzieKwatTtMOGNSJshWuYYm9G3C13G WnRm2OaS8fNsyaPUaTtsDMn6H6QpZtqhcHpnhkZu65zlMbPVdCG3aeO+l1nHKWer 2tdTfUftIvgcCr/SE/Fm6xvO4nsiX76yWj/IxJZeguDUmTkeuUvIr6RPBvL8ins6 Iw/OxB5+rtUYdyadtPRky0tTpV2+QlE7N1XrZbWM5jOn7sXfSycI9Jc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j1QmJcm0cdcrdaxSCEu lDBoHmek5L+6+mHE+4QU9cqSBswjVEPnUGroOeXlhfco5j2A27QZ7V1UADDnputl igu+yuRuqZxPMB5O6MpRug/YsBlukxOfP/rhGUl9M0PT+r0707ZykgOfXX6ZesQG NgX1IUNvLAS3MqgYAl6b2f6E+34j48uQs68KxB2e6Vk64xCfZNJNMQbLKYZXL+Pk cuJcr5v+SxseTZjYl9Sn3PU6uYYrWG4hPmIGTJvGZdypzLwXCBXedDHN20vBHNEm LasK/qk7JdiVNC/v3gHJOo/sZDp6rdwDD7OTHRXkzQb1Qk08HyB4G4lmmJQzGR2P twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2343451680251521270887285388366495792 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paramount.tech' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28560092391077657386696518052805994060634551936943838320458547592593300989443435206364032879858177051244454860715520501292581142442640665137661501764725664395792533434206879498497724807041696414817547553695549583805235717093548574048313731189513332849674783997809248646841793452039993741384176471928506802545409470396711422894671824064707964639382976322956991034887033390658933659057146156300596461208037843974443099241179595691380110519462536393640539438543001668633567321805009168643180699328212411873821321184040073919597770075265927669243481302411114571885158877057670495818118775963273200638364575890321929244599 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9384a354d0ca6fe920612558abe456e21acf25ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramount.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacbs.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viacom.tech' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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