images.idg.zone
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 04:78:aa:e1:c5:00:30:ed:61:7c:75:7a:01:26:d3:61 was issued on by Amazon.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=images.idg.zone
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:78:aa:e1:c5:00:30:ed:61:7c:75:7a:01:26:d3:61Serial Number (int): 5943453503101807287786037817308009313
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 74:b2:7e:90:52:b5:75:5c:0a:47:81:b5:70:95:15:31:e8:7c:3f:fb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): b8:6f:e9:e8:7a:ec:6b:9a:d5:58:3c:ed:30:8b:48:84:1c:89:e0:63
Fingerprint (sha256): 26:8c:24:a4:74:26:52:8c:cc:fb:9a:af:af:1e:65:2a:ec:cf:ad:86:0d:4f:94:0e:aa:8f:0c:b5:e2:09:3f:2d
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate images.idg.zone
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for images.idg.zone
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
images.idg.zone
images.channelpartner.de
images.pcwelt.de
images.computerwoche.de
images.cio.de
cf.image.onecms.idg.zone
images.tecchannel.de
images.macwelt.de
images.channelpartner.de
images.pcwelt.de
images.computerwoche.de
images.cio.de
cf.image.onecms.idg.zone
images.tecchannel.de
images.macwelt.de
Other certificates including the domain name idg.zone
(limited to 100 certificates)
speedmeter.de
alb.cio-of-the-year.idg.zone
cio-des-jahres.de
alb.frontend.onecms.idg.zone
beta.idg.de
admin.best-in-cloud.de
se.cloud.idg.zone
alb.frontend.b2c-symfony.idg.zone
de.csoonline.com
cloud.idg.de
pcwelt-forum.de
pdf.idg.zone
tecchannel.de
nl.cloud.idg.zone
whitepaper.computerwoche.de
www.toolsmag.de
sustainabilitylifecycle.cio.com
techrps.idg.zone
alb.frontend.onecms.idg.zone
igs.cloud.idg.zone
central-it.de
a.1cms.io
events.cio.de
alb.whitepaperdb.idg.zone
cio-des-jahres.de
cio-of-the-year.com
hands-on-ai.de
addefend.idg.zone
idg.de
events.cio.de
igs.cloud.idg.zone
digital-leader-award.de
archiv.idg-executive-education.de
admin.best-in-cloud.de
archiv.idg-executive-education.de
qa.com.wp.idg.zone
cio-des-jahres.de
au.cloud.idg.zone
cloud.idg.de
mobil.pcwelt.de
1cms.io
igs.cloud.idg.zone
n.pcwelt.de
cloud.idg.de
alb.wpdb.idg.zone
alb.frontend.b2c-symfony.idg.zone
data-jack.idg.zone
*.beta.1cms.io
newsletterqualifizierung.idg.zone
stage.1cms.io
channel-excellence-awards.de
10jahre.cio.de
central-it.de
tecchannel.de
*.beta.1cms.io
a.1cms.io
api.pcwelt.de
dev.resources.computerworld.com
nl.cloud.idg.zone
systemhauskongress-chancen.de
idg-executive-education.de
relocator.idg.zone
amp.pcwelt.de
amazon.idg.de
relocator.idg.zone
cio-des-jahres.de
*.beta.1cms.io
rabbitmq-admin.onecms.idg.zone
adserver.idg.de
es.cloud.idg.zone
download.macwelt.de
download.pcwelt.de
beyond.idg.de
easycrm.idg.zone
tmp.idg.zone
macwelt.de
alb.frontend.b2c-symfony.idg.zone
channel-meets-cloud.de
archiv.idg-executive-education.de
events.cio.de
logicalis.computerwoche.de
connect.cloud.idg.zone
s.idg.de
mobil.pcwelt.de
computerwoche.de
alb.shop.idg.zone
us.cloud.idg.zone
syndication.contimate.idg.de
tecchannel.de
digital-leader-award.de
beta.cio-des-jahres.de
cio-of-the-year.com
techinsights.se
intextlinks.idg.zone
beyond-event.com
computerwoche.de
es.cloud.idg.zone
digital-leader-award.de
*.beta.1cms.io
se.cloud.idg.zone
alb.cio-of-the-year.idg.zone
cio-des-jahres.de
alb.frontend.onecms.idg.zone
beta.idg.de
admin.best-in-cloud.de
se.cloud.idg.zone
alb.frontend.b2c-symfony.idg.zone
de.csoonline.com
cloud.idg.de
pcwelt-forum.de
pdf.idg.zone
tecchannel.de
nl.cloud.idg.zone
whitepaper.computerwoche.de
www.toolsmag.de
sustainabilitylifecycle.cio.com
techrps.idg.zone
alb.frontend.onecms.idg.zone
igs.cloud.idg.zone
central-it.de
a.1cms.io
events.cio.de
alb.whitepaperdb.idg.zone
cio-des-jahres.de
cio-of-the-year.com
hands-on-ai.de
addefend.idg.zone
idg.de
events.cio.de
igs.cloud.idg.zone
digital-leader-award.de
archiv.idg-executive-education.de
admin.best-in-cloud.de
archiv.idg-executive-education.de
qa.com.wp.idg.zone
cio-des-jahres.de
au.cloud.idg.zone
cloud.idg.de
mobil.pcwelt.de
1cms.io
igs.cloud.idg.zone
n.pcwelt.de
cloud.idg.de
alb.wpdb.idg.zone
alb.frontend.b2c-symfony.idg.zone
data-jack.idg.zone
*.beta.1cms.io
newsletterqualifizierung.idg.zone
stage.1cms.io
channel-excellence-awards.de
10jahre.cio.de
central-it.de
tecchannel.de
*.beta.1cms.io
a.1cms.io
api.pcwelt.de
dev.resources.computerworld.com
nl.cloud.idg.zone
systemhauskongress-chancen.de
idg-executive-education.de
relocator.idg.zone
amp.pcwelt.de
amazon.idg.de
relocator.idg.zone
cio-des-jahres.de
*.beta.1cms.io
rabbitmq-admin.onecms.idg.zone
adserver.idg.de
es.cloud.idg.zone
download.macwelt.de
download.pcwelt.de
beyond.idg.de
easycrm.idg.zone
tmp.idg.zone
macwelt.de
alb.frontend.b2c-symfony.idg.zone
channel-meets-cloud.de
archiv.idg-executive-education.de
events.cio.de
logicalis.computerwoche.de
connect.cloud.idg.zone
s.idg.de
mobil.pcwelt.de
computerwoche.de
alb.shop.idg.zone
us.cloud.idg.zone
syndication.contimate.idg.de
tecchannel.de
digital-leader-award.de
beta.cio-des-jahres.de
cio-of-the-year.com
techinsights.se
intextlinks.idg.zone
beyond-event.com
computerwoche.de
es.cloud.idg.zone
digital-leader-award.de
*.beta.1cms.io
se.cloud.idg.zone
Certificate
The complete raw certificate details for images.idg.zone in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIQBHiq4cUAMO1hfHV6ASbTYTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTEwMzAwMDAwMFoXDTI0MTIwMTIzNTk1OVowGjEY MBYGA1UEAxMPaW1hZ2VzLmlkZy56b25lMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA2Uo7yZ4KfC1MMlAAjhPCrUFjJb6zI5uWblSZl7OZ09LT/wRu2cPP a73JXTvg2y9I+Bt/kYcKUdhBVCaTjf++j6O/QzG0v2THiNwRysAjVlhRuEOfgJYv ATkqslQbNLjyD465NBwpV93N6y64SczKNUl+UTKTdbMfH21CwS7GvYQ9/log6HBl FeGw3opJ+2jceO55lawrS+xFCPL5KY5g9+quK8ws1f7FI9Uyf4+Iy+aALaZEIhNw Kpgm79Id3z+xcMZWoPBtw3Z7+KIzHp5UEft2bUK/YnByzJDdXbEGOjmkpQGlpn6F glA3nvq54BFsHDdqHDkkeapMu6SahyG/nwIDAQABo4IDgTCCA30wHwYDVR0jBBgw FoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFHSyfpBStXVcCkeBtXCV FTHofD/7MIGzBgNVHREEgaswgaiCD2ltYWdlcy5pZGcuem9uZYIYaW1hZ2VzLmNo YW5uZWxwYXJ0bmVyLmRlghBpbWFnZXMucGN3ZWx0LmRlghdpbWFnZXMuY29tcHV0 ZXJ3b2NoZS5kZYINaW1hZ2VzLmNpby5kZYIYY2YuaW1hZ2Uub25lY21zLmlkZy56 b25lghRpbWFnZXMudGVjY2hhbm5lbC5kZYIRaW1hZ2VzLm1hY3dlbHQuZGUwEwYD VR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy bTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy LmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDu zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYuTGTmQAAAEAwBHMEUC IGT3N8qDslyitpARuEf4O07gI+d1bDm75PHB6O+hpKiuAiEA6D00PdPIfq0Qd+mV cUkKNE/2WbYzw1vY88TvGwbl7o0AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ u7+rOdiEcwAAAYuTGTmtAAAEAwBHMEUCIQDzqkuYm3CB/aCGYMrsnN+JoIoV8ewQ sfkaxnYzmJEGOAIgO3i+oc5QpOskKucPl8F2FvZ4IMok9gsy3rv6OPZXfBwAdQA/ F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAYuTGTnoAAAEAwBGMEQC IDP6KQ/YE+9iCFNfh+8woufK8wUNn55S4r9Q321lwUzzAiB1vVH51PrjDye9rSyT m40eC4jBmLL9mWn2tPduiClo+TANBgkqhkiG9w0BAQsFAAOCAQEAH7IGDR3LVuic 2do1OPS1xenR6RM1kWRn/FnJPTwoSjJliLzxCUEJxdE+FwkEhasQUYbvthdZFq5S C5LV8rmtkxrt3M215cuyUn3mA+pJ8HAZcyQF2GXP8pK5sM5a9rp1pXZ979POeJzB ouOOhL0dEyPURP7Qy8J+4Exhzg00a8BoLuCMgYgw5+ifNudf7ou4UCuxLkZipm6Z hbRxgBY5G/KYHzSsEWvnPJzH/55HxXi74B/dJwUS8lynkC07wkQhIiRboXG269mw AXWWeaBSlnFRR72LstjhpmuezrcbdNK8Ww7+lNiw8pn9sPT2MZw/myrMbaW5vDLV lEmu30bILA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Uo7yZ4KfC1MMlAAjhPC rUFjJb6zI5uWblSZl7OZ09LT/wRu2cPPa73JXTvg2y9I+Bt/kYcKUdhBVCaTjf++ j6O/QzG0v2THiNwRysAjVlhRuEOfgJYvATkqslQbNLjyD465NBwpV93N6y64SczK NUl+UTKTdbMfH21CwS7GvYQ9/log6HBlFeGw3opJ+2jceO55lawrS+xFCPL5KY5g 9+quK8ws1f7FI9Uyf4+Iy+aALaZEIhNwKpgm79Id3z+xcMZWoPBtw3Z7+KIzHp5U Eft2bUK/YnByzJDdXbEGOjmkpQGlpn6FglA3nvq54BFsHDdqHDkkeapMu6SahyG/ nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5943453503101807287786037817308009313 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'images.idg.zone' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27430318103087747439494369054287856217795265835500879261942801119134042550566830815468273229969690590698275777809198276482980429268483106196693630042505575873079157689271170858292164487003776282345344387465043264848173922179818245577262349012352224779442450900568470192361772502261099701399734142881116256226779965838850512724823332427385138591248883648495329949213977122735858897263978649322286949347862806712371941098950350663665865954904962353000698709663694019449126538122826851932692064857394413738325266768702920752520145404618992928124297125101442860999175967610488851162312770105423530901820673777954839445407 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 74b27e9052b5755c0a4781b570951531e87c3ffb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.idg.zone' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.channelpartner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pcwelt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.computerwoche.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.cio.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.image.onecms.idg.zone' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.tecchannel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.macwelt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b931939900000040300473045022064f737ca83b25ca2b69011b847f83b4ee023e7756c39bbe4f1c1e8efa1a4a8ae022100e83d343dd3c87ead1077e99571490a344ff659b633c35bd8f3c4ef1b06e5ee8d00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b931939ad0000040300473045022100f3aa4b989b7081fda08660caec9cdf89a08a15f1ec10b1f91ac676339891063802203b78bea1ce50a4eb242ae70f97c17616f67820ca24f60b32debbfa38f6577c1c0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018b931939e80000040300463044022033fa290fd813ef6208535f87ef30a2e7caf3050d9f9e52e2bf50df6d65c14cf3022075bd51f9d4fae30f27bdad2c939b8d1e0b88c198b2fd9969f6b4f76e882968f9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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