tpo.paytheory.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:cd:e4:f3:57:0f:74:c0:6a:0b:df:f1:33:df:4a:23 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=tpo.paytheory.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:cd:e4:f3:57:0f:74:c0:6a:0b:df:f1:33:df:4a:23Serial Number (int): 21007484461550382390176115723738237475
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 80:8f:60:6c:d4:75:f0:ee:50:12:30:1d:2c:ac:50:7a:b0:cf:33:bf
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 83:26:56:60:7c:37:99:47:2f:d8:77:04:ee:3e:fa:c2:57:8d:65:f8
Fingerprint (sha256): 31:0f:ab:02:ff:9f:04:96:75:62:74:64:b2:f0:2d:7e:21:08:74:68:58:dc:8d:96:59:bd:80:64:7c:c1:be:6f
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate tpo.paytheory.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tpo.paytheory.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tpo.paytheory.com
tpo.paytheorystudy.com
tpo.paytheorylab.com
tpo.paytheorystudy.com
tpo.paytheorylab.com
Other certificates including the domain name paytheory.com
(limited to 100 certificates)
carefeed.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
Certificate
The complete raw certificate details for tpo.paytheory.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjzCCA3egAwIBAgIQD83k81cPdMBqC9/xM99KIzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIxMTAwMDAwMFoXDTI1MDEwODIzNTk1OVowHDEa MBgGA1UEAxMRdHBvLnBheXRoZW9yeS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJLtZidXN0nY8jmcDDqmzdYZlDOaHXaRHE9l1NnLPdPf7+u3Tr SAveIoSqZc4WNIh1nfOGkaoZzDfDaOEpWmR9+BQzLz5gCFZUJ//3/owNhIyTHSFd 5ofZVp0KiFwKNH2GUCWzWsD4ebjzurSuzVSMb22oM6dCioxRcgFIKvG6eBYvHqiz f0QFQZetyBBOK6SMdN3YjAkJg4MbMF9DZVmHNdC8LdjWfXTbQ0sjKa0vsiGXCR5k wBhM99OF/zGEhDjCq4efS99eN1YMgWEZi6Fc+Vmj85h8Fq+wWMpesxPGrLug4b2N KhLSFiddUgPWajTi/P3opREmoq8s04UTUC/jAgMBAAGjggGrMIIBpzAfBgNVHSME GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUgI9gbNR18O5QEjAd LKxQerDPM78wSgYDVR0RBEMwQYIRdHBvLnBheXRoZW9yeS5jb22CFnRwby5wYXl0 aGVvcnlzdHVkeS5jb22CFHRwby5wYXl0aGVvcnlsYWIuY29tMBMGA1UdIAQMMAow CAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6 b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw AYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC hipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYD VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt7wswZWsvDfcbD7ebEK+5RvTOOZmw+pa2XwcVCPMvDJyw/fD1HLsPe7TgNxZ HMat3MM7OIKWm27k2Fnl4JETPYxCEFx5Aw4dxMW/GhGHRBzStFyfdBTlUii+PT37 ctxW69TktNytUuw+AIzGFGkSvKK0zODxEl5UQ0y50uqY2fWjjYvO8BzdoAPql04V mP3KpjU+HBBe5lrOXah4gRzv0bwH/GCCyvGfzKS4UzxV7F+r1XyBnU5a3GeudH8R IUekUCrRyHmIjIlPBc4FM5O+vLr1WDqIQfGqKRoEZnEkHQfSpJKPWGgVEB4pvjbE JQTIHp1diI4bUUw7MFqdePFjzQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS7WYnVzdJ2PI5nAw6ps 3WGZQzmh12kRxPZdTZyz3T3+/rt060gL3iKEqmXOFjSIdZ3zhpGqGcw3w2jhKVpk ffgUMy8+YAhWVCf/9/6MDYSMkx0hXeaH2VadCohcCjR9hlAls1rA+Hm487q0rs1U jG9tqDOnQoqMUXIBSCrxungWLx6os39EBUGXrcgQTiukjHTd2IwJCYODGzBfQ2VZ hzXQvC3Y1n1020NLIymtL7IhlwkeZMAYTPfThf8xhIQ4wquHn0vfXjdWDIFhGYuh XPlZo/OYfBavsFjKXrMTxqy7oOG9jSoS0hYnXVID1mo04vz96KURJqKvLNOFE1Av 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21007484461550382390176115723738237475 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tpo.paytheory.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25396995700588418514494104495451162772237376519509937435446039771863585197517978237489665751101130038021634661437708290719301078657218204406752542106794696349599662785813858540665933788657102464039157948832063697571957823619101167463629013436131222413383742325996297385962309664050009908606853864612467624187199868682784676301828381591450154723795157636096946559548138973583605961399666774417524299538864789377720225640982788865631168514371049934901116333285502965021695611127376099318102184467989356025695027849114615698360038139092484322679270926468778135232331492120858673413628193647269510915850352624444162191331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 808f606cd475f0ee5012301d2cac507ab0cf33bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpo.paytheory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpo.paytheorystudy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpo.paytheorylab.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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