go.th.knightfrank.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0e:68:71:14:3e:60:06:31:ff:e8:6a:a1:18:01:73:1a was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=go.th.knightfrank.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:68:71:14:3e:60:06:31:ff:e8:6a:a1:18:01:73:1aSerial Number (int): 19151484330429063962200989778179093274
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 5b:4f:bd:b9:e3:d9:5d:ba:ee:e8:f8:b2:f4:5d:03:3c:f4:9b:a6:0a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): f9:88:00:74:b1:85:6a:a3:7c:d7:cc:35:ff:03:18:8d:95:af:33:07
Fingerprint (sha256): 2d:4d:57:63:db:8f:65:54:2a:4b:a5:24:fa:b3:a1:fb:b7:29:78:8e:95:6a:3a:e4:10:20:01:63:99:22:82:18
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate go.th.knightfrank.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for go.th.knightfrank.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
go.th.knightfrank.com
Other certificates including the domain name knightfrank.com
(limited to 100 certificates)
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
globalprotect.in.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
mail.tz.knightfrank.com
webmail.ke.knightfrank.com
www.acumenthirdsector.net
mail.knightfrank.com
mail.tz.knightfrank.com
secure.knightfrank.com
support4.cdnetworks.net
remote.kfdublin.ie
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
sip.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
mail.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
mail.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
meet.hk.knightfrank.com
lyncweb.au.knightfrank.com
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
vxprint.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
mail.knightfrank.com
mylets.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
*.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
go.th.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
sip.au.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
globalprotect.in.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
secure.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
mail.tz.knightfrank.com
webmail.ke.knightfrank.com
www.acumenthirdsector.net
mail.knightfrank.com
mail.tz.knightfrank.com
secure.knightfrank.com
support4.cdnetworks.net
remote.kfdublin.ie
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
sip.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
mail.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
mail.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
emails.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
meet.hk.knightfrank.com
lyncweb.au.knightfrank.com
www.webmail.ke.knightfrank.com
support4.cdnetworks.net
vxprint.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
www.acumenthirdsector.net
support4.cdnetworks.net
mail.knightfrank.com
mylets.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
*.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
media.knightfrank.com
support4.cdnetworks.net
draganddrop.knightfrank.com
go.th.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
sip.au.knightfrank.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
Certificate
The complete raw certificate details for go.th.knightfrank.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIQDmhxFD5gBjH/6GqhGAFzGjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIyNjAwMDAwMFoXDTI1MDEyMzIzNTk1OVowIDEe MBwGA1UEAxMVZ28udGgua25pZ2h0ZnJhbmsuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA8MGuls4D0112gW7rL1pnLQLeLWIR7aapi80IZ/Cfpki3 xc9i85FdhHkd1+JYhEtowelEyRoaRhmrFwDTQOFpjADW4/o84jmRaBcJfUtUqC8O Wb68DlBB/zOsnRcGCkceEdJ+aBEXb49nWr+cj9t0VJeZq0iYWBQzEVA2OqUahD/x vFQKjzeCxXUSTAy2qAKMW6Cxz1T4BNjKWm8b10olnrFP9oruQdtlsY0v6HLTipps xWjYn3SvBlqqsYAtMd0oD+ABABf1yr7bgNDT0o98ZTBiXQEkKKGElRUR0Tr6UxVn iPTj5bAVkB5t3eZEqCFzbxMHPVqetxz61kyJmJzwHQIDAQABo4IC7jCCAuowHwYD VR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFFtPvbnj2V26 7uj4svRdAzz0m6YKMCAGA1UdEQQZMBeCFWdvLnRoLmtuaWdodGZyYW5rLmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu cjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJt MDMuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2 AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjKRkzj0AAAQDAEcw RQIhAPZ5J2a7pZH4/Wpu9BZTs+hRwR3fjQWUH6jCNh8e59tNAiB5Ty5vYZ411Kzl MfHimNTHq9zKko5Ga6I7mfxNwScXvAB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWe uQMv2Q6MLnm4AAABjKRkzmUAAAQDAEcwRQIhAJsvBh10SGlGcN5pRFgok4Bj6t0m /wIJynccZRT+qNiLAiAddziZQVM+WWok5EUvYaFXWRzq5PLiQW2OKZJcvLJuIwB2 AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjKRkzokAAAQDAEcw RQIgWkJsIlf6Lh8AV3ldaL5sEzpYcZTD5/QCFhS5mx8Y72gCIQCvGD7bfNjCNhrl 46LwXseX50e+OFHmyGVRbgR2scXW5DANBgkqhkiG9w0BAQsFAAOCAQEAnUY1FjBb 2Pfm9TNn2iNCJuGqnLVCjck1ZhZR9Ij12iVTmQ0GNcFuvxVu7ufZbGrL4Ux8pRgo GGV1oaHWCaOgxl2/8gL4hAXjMdzRtfhJJWfpZCsp6WUF1YKXig9riiGdzDcqWLOV kdt3KQD5XO54SJ/nMGTTfDRrOd/pbbI5a9OP+XwYkB+2rEx7ihfqIEhPRvf/U+Pj /JPoI5CSqNJiiVIacZG6aJG0Z21D5qNP7AokHDoA2frdhQndsrnIuC3Dfc0LqmVL sqe8cNd/138iVVwpYXYFQMtxFuEwU88+zb5uCnljeyILfQDf3NTKqjI20ftzkQlw zsKr3D8xdGLX8Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MGuls4D0112gW7rL1pn LQLeLWIR7aapi80IZ/Cfpki3xc9i85FdhHkd1+JYhEtowelEyRoaRhmrFwDTQOFp jADW4/o84jmRaBcJfUtUqC8OWb68DlBB/zOsnRcGCkceEdJ+aBEXb49nWr+cj9t0 VJeZq0iYWBQzEVA2OqUahD/xvFQKjzeCxXUSTAy2qAKMW6Cxz1T4BNjKWm8b10ol nrFP9oruQdtlsY0v6HLTippsxWjYn3SvBlqqsYAtMd0oD+ABABf1yr7bgNDT0o98 ZTBiXQEkKKGElRUR0Tr6UxVniPTj5bAVkB5t3eZEqCFzbxMHPVqetxz61kyJmJzw HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19151484330429063962200989778179093274 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.th.knightfrank.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30392701340069079655092537739252579218005685771967934971342404491187360797102133219476461878936369838851202713383513033602637199551541168064885924873613337769828858941850752656287792391163615629131054352622772762385268111494412250271109124750448298941147466789640183407747932991087401921162164384182563325111933395034233900534269603032381974232502025447329397870464889878155508651250181518490170919784644440416835058768597881605876287830610319337962286767842538825124860563936053371326535236765813850033077420374053008751300652875554011500942563308033185968367650707232083217463535572281677622556273619089220186206237 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5b4fbdb9e3d95dbaeee8f8b2f45d033cf49ba60a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.th.knightfrank.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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