accounts-us-prod.jaguarusa.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 08:e8:20:5a:9e:3f:66:49:7c:dd:e5:b0:b9:19:22:9d was issued on by Amazon.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=accounts-us-prod.jaguarusa.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:e8:20:5a:9e:3f:66:49:7c:dd:e5:b0:b9:19:22:9dSerial Number (int): 11839093054076627045692894120488018589
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d5:68:8b:37:bb:07:37:bf:f3:01:d7:f7:9e:c3:58:90:28:dd:b8:bb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): b8:f4:a3:84:bc:86:50:ff:27:96:37:b3:ed:07:8e:8d:b7:01:2a:39
Fingerprint (sha256): 24:f5:9f:ee:ea:e7:c7:83:44:bb:28:37:55:0a:09:38:7a:e1:1e:d2:37:aa:60:49:35:8c:8c:0f:f6:62:8d:a5
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate accounts-us-prod.jaguarusa.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for accounts-us-prod.jaguarusa.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
accounts-us-prod.jaguarusa.com
accounts-us-prod.landroverusa.com
accounts-us-prod.jaguar.ca
accounts-us-prod.jlr-dev.com
accounts-us-prod.landrover.ca
accounts-us-prod.landrover.com.mx
accounts-us-prod.jaguarmexico.com.mx
accounts-us-prod.landroverusa.com
accounts-us-prod.jaguar.ca
accounts-us-prod.jlr-dev.com
accounts-us-prod.landrover.ca
accounts-us-prod.landrover.com.mx
accounts-us-prod.jaguarmexico.com.mx
Other certificates including the domain name jaguarusa.com
(limited to 100 certificates)
tracking.jaguarusa.com
magazin.peak-muenster.de
catalogues.meister.com
www.jaguar.com
kiosk.greater.sydney
sv.citedisplay.com
magazine.landroverusa.com
www.jaguar.com
www.hochseescheinkurs.online
charging-staging.jaguarusa.com
www.jaguar.com
online-katalog.baude.com
lemagazine.landrover.com
www.jaguar.com
www.jaguar.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
journal.flyskywork.com
www.jaguar.com
publikationen.kreis-goerlitz.de
catalog.sogears.com
www.jaguar.com
sv.citedisplay.com
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
online-katalog.baude.com
magazine.landrover.com.cn
kataloge.quester.at
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.jaguar.com
www.jaguar.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
www.jaguar.com
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
online-katalog.baude.com
www.jaguar.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
approved.jp.jaguar.com
kataloge.quester.at
www.jaguar.com
quote.insurance.jaguarusa.com
www.jaguar.com
www.jaguar.com
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
www.jaguar.com
kataloge.quester.at
hetmagazine.landrover.com
kiosk.greater.sydney
accounts-us-prod.jaguarusa.com
sv.citedisplay.com
webkiosk.mvz-atrium.de
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kiosk.greater.sydney
sv.citedisplay.com
bibliothek.bregenzerfestspiele.com
webkiosk.reven.de
www.jaguar.com
kurier.leimbacherdruck.ch
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
catalogues.meister.com
kataloge.fuerholz.de
online.hansestyle.hamburg
katalog.ud-shop.de
pub.vermoegenszentrum.ch
webkiosk.mvz-atrium.de
kataloge.fuerholz.de
bibliothek.bregenzerfestspiele.com
www.jaguar.com
app.langguth.wine
online-katalog.baude.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
kataloge.quester.at
catalogues.meister.com
kataloge.larimarhotel.at
kataloge.fuerholz.de
kataloge.quester.at
webkiosk.mvz-atrium.de
online.hansestyle.hamburg
magazin.peak-muenster.de
catalogues.meister.com
www.jaguar.com
kiosk.greater.sydney
sv.citedisplay.com
magazine.landroverusa.com
www.jaguar.com
www.hochseescheinkurs.online
charging-staging.jaguarusa.com
www.jaguar.com
online-katalog.baude.com
lemagazine.landrover.com
www.jaguar.com
www.jaguar.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
journal.flyskywork.com
www.jaguar.com
publikationen.kreis-goerlitz.de
catalog.sogears.com
www.jaguar.com
sv.citedisplay.com
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
online-katalog.baude.com
magazine.landrover.com.cn
kataloge.quester.at
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.jaguar.com
www.jaguar.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
www.jaguar.com
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
online-katalog.baude.com
www.jaguar.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
approved.jp.jaguar.com
kataloge.quester.at
www.jaguar.com
quote.insurance.jaguarusa.com
www.jaguar.com
www.jaguar.com
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
www.jaguar.com
kataloge.quester.at
hetmagazine.landrover.com
kiosk.greater.sydney
accounts-us-prod.jaguarusa.com
sv.citedisplay.com
webkiosk.mvz-atrium.de
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kiosk.greater.sydney
sv.citedisplay.com
bibliothek.bregenzerfestspiele.com
webkiosk.reven.de
www.jaguar.com
kurier.leimbacherdruck.ch
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
catalogues.meister.com
kataloge.fuerholz.de
online.hansestyle.hamburg
katalog.ud-shop.de
pub.vermoegenszentrum.ch
webkiosk.mvz-atrium.de
kataloge.fuerholz.de
bibliothek.bregenzerfestspiele.com
www.jaguar.com
app.langguth.wine
online-katalog.baude.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
kataloge.quester.at
catalogues.meister.com
kataloge.larimarhotel.at
kataloge.fuerholz.de
kataloge.quester.at
webkiosk.mvz-atrium.de
online.hansestyle.hamburg
Certificate
The complete raw certificate details for accounts-us-prod.jaguarusa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgIQCOggWp4/Zkl83eWwuRkinTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDMxMTAwMDAwMFoXDTI1MDQwODIzNTk1OVowKTEn MCUGA1UEAxMeYWNjb3VudHMtdXMtcHJvZC5qYWd1YXJ1c2EuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshbUkn8uMmVDBZevi0f1lFzo+ZhwvUny d385rjPzn/e8KHTQxhV3m0l9VMIzLIajWZiUzM1eLKJFPsSPQ2CG248nsUewsgRp tSCOKJCX6kZBVgT0uqPrPCJd9fShsk9Kcsc1C09PVYXDQjmflJ+o4qYc0bLDS9ON UoKvgfOQMunNMeALHrx/7sphy7BjbV4m2HU3MaP6ZMHUHrdYPftcyo3pW57FPH8r EBWEXGa5bDe2O/WyLoaRvBo5vKAw3kOfI6spGC5vwSbHix4LZ5vuepkf01+xVDer EH2+QpfP7N0qPfXGWAkAWMUpew3NZMyX7ZXZ0GhAP2pHoFIXK2yzKQIDAQABo4ID vTCCA7kwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYE FNVoize7Bze/8wHX957DWJAo3bi7MIHwBgNVHREEgegwgeWCHmFjY291bnRzLXVz LXByb2QuamFndWFydXNhLmNvbYIhYWNjb3VudHMtdXMtcHJvZC5sYW5kcm92ZXJ1 c2EuY29tghphY2NvdW50cy11cy1wcm9kLmphZ3Vhci5jYYIcYWNjb3VudHMtdXMt cHJvZC5qbHItZGV2LmNvbYIdYWNjb3VudHMtdXMtcHJvZC5sYW5kcm92ZXIuY2GC IWFjY291bnRzLXVzLXByb2QubGFuZHJvdmVyLmNvbS5teIIkYWNjb3VudHMtdXMt cHJvZC5qYWd1YXJtZXhpY28uY29tLm14MBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYD VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20v cjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j c3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0 LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADCC AXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUATnWjJ1yaEMM4W2zU3z9S6x3w4I4b jWnAsfpksWKaOd8AAAGOLC81JQAABAMARjBEAiBijbv/ueSX6yFGhCDMhc44rgNV PBa6IWqBFJUYDueZuwIgYZwuM5rXKOY0uNOmj6fsPPwxW8+f6fcLdMBNP9jpRHsA dQB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAY4sLzUlAAAEAwBG MEQCIChJHHNke914MoEkTpYUn+cQaV4e1Xdt1+gfhieJa7rsAiAwdCa9aDlfTxqX KeCYZLoV4UWGoRhwVGjSpH6QBAzIuQB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7 uocyHf0eN45QAAABjiwvNUsAAAQDAEcwRQIgOZB9kqUu7ggEpBp/U05btvTHQdAV 4S3RZDLf/uYMDVYCIQD6zrhjiDY6a+CprRUN1CslwJhb+pSZh/UFW24cxQpbrjAN BgkqhkiG9w0BAQsFAAOCAQEAZzJHVYPJ4Uk2bb2bMb/UA+jJQAald/g/mVkkq3vc LlOKWPSP6mnVQ0VLvyooTXkS3KlBfMXTbvexk+qPAy7hiBH4TRw+xZealm3Me+os v07l3B7ICqfOIIGW3V8MnNNsWLL3K60c/VOI8rSoktqJlcgd26ptZYLDKCwRwaIS n7WqbPoe+5VGy17iluq3CaoZILuRmwo8i913a0NPjQmGGrofLObkqx5zLWQW8Jqo E+a4PabwWwhBCfhweFkOXQdbxdb1FaCGY/OvIYPzopLiBTkSSgV7KguhJF1whklr gK1VXSatUPghz3m2UDdyZ9HlXsr+ZEBuIDNVsppGIjtLiQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshbUkn8uMmVDBZevi0f1 lFzo+ZhwvUnyd385rjPzn/e8KHTQxhV3m0l9VMIzLIajWZiUzM1eLKJFPsSPQ2CG 248nsUewsgRptSCOKJCX6kZBVgT0uqPrPCJd9fShsk9Kcsc1C09PVYXDQjmflJ+o 4qYc0bLDS9ONUoKvgfOQMunNMeALHrx/7sphy7BjbV4m2HU3MaP6ZMHUHrdYPftc yo3pW57FPH8rEBWEXGa5bDe2O/WyLoaRvBo5vKAw3kOfI6spGC5vwSbHix4LZ5vu epkf01+xVDerEH2+QpfP7N0qPfXGWAkAWMUpew3NZMyX7ZXZ0GhAP2pHoFIXK2yz KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11839093054076627045692894120488018589 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accounts-us-prod.jaguarusa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22481676354247825272902931691392970155502277738725853104659377116555096525277021572609970352856402422007939908327287505032951908357024534775058416967216434099935713466199871705715111396337961916536837814683286963507717069714402218005620460457201937932862658728332370817795123928784376651074070811392697058051963092011045093602337282193119586953806709234713270333376022078498964920794880842039686573508202652826994840313384145804199338020471662242043388040614119118198744218882003554076289774514957093161874399443942543327344964797227792382969959468536506110137493417276329014786389547679357088137208669254716454908713 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d5688b37bb0737bff301d7f79ec3589028ddb8bb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jaguarusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.landroverusa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jaguar.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jlr-dev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.landrover.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.landrover.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jaguarmexico.com.mx' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006732475583c9e149366dbd9b31bfd403e8c94006a577f83f995924ab7bdc2e538a58f48fea69d543454bbf2a284d7912dca9417cc5d36ef7b193ea8f032ee18811f84d1c3ec5979a966dcc7bea2cbf4ee5dc1ec80aa7ce208196dd5f0c9cd36c58b2f72bad1cfd5388f2b4a892da8995c81ddbaa6d6582c3282c11c1a2129fb5aa6cfa1efb9546cb5ee296eab709aa1920bb919b0a3c8bdd776b434f8d09861aba1f2ce6e4ab1e732d6416f09aa813e6b83da6f05b084109f87078590e5d075bc5d6f515a08663f3af2183f3a292e20539124a057b2a0ba1245d7086496b80ad555d26ad50f821cf79b650377267d1e55ecafe64406e203355b29a46223b4b89