notices.superiortelegram.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0c:9d:13:c7:29:4b:32:1d:e3:a0:b5:95:f8:bb:69:0b was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=notices.superiortelegram.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:9d:13:c7:29:4b:32:1d:e3:a0:b5:95:f8:bb:69:0bSerial Number (int): 16766327701175559641694484884340041995
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 3e:9f:fb:80:d1:9d:3b:98:32:a2:1c:9d:7d:f5:61:39:73:b1:6f:20
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): d1:15:10:44:23:45:29:8b:3a:19:74:f4:06:ac:84:de:66:02:c9:61
Fingerprint (sha256): 3b:a3:eb:75:ef:76:fb:52:76:92:c7:10:d9:b1:6a:9d:fc:ec:58:32:05:81:1e:c8:4f:89:9a:6a:51:39:30:68
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate notices.superiortelegram.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for notices.superiortelegram.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
notices.superiortelegram.com
notices.wctrib.com
notices.wadenapj.com
notices.dglobe.com
notices.wctrib.com
notices.wadenapj.com
notices.dglobe.com
Other certificates including the domain name superiortelegram.com
(limited to 100 certificates)
local.thefirsthundredmiles.com
link.superiortelegram.com
subscriber.agweek.com
local.bensonnews-sun.com
mylocal.palmbeachpost.com
www.forumcomm.com
*.forum.cue.cloud
*.forum.cue.cloud
local.airgunshooting.co.uk
the-nelson-leader.origami.neighbourly.co.nz
epaper.agweek.com
*.forum.cue.cloud
western-leader.origami.neighbourly.co.nz
dealers.aws.wehaa.net
origin.web.production.forum-communications.brightspot.cloud
local.ottawasun.com
local.sachem.ca
url188.superiortelegram.com
local.brechinadvertiser.co.uk
*.forum.cue.cloud
dealers.aws.wehaa.net
notices.superiortelegram.com
local.clevelandcountyherald.com
www.forumcomm.com
local.cambstimes.co.uk
statejournal.wanderful.ownlocal.com
local.moodycountyenterprise.com
local.thefirsthundredmiles.com
local.militarynews.com
local.uintacountyherald.com
impactousa.wanderful.ownlocal.com
admin.adforge.com
web.production.forum-communications.brightspot.cloud
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud
*.forum.cue.cloud
local.eastlondonadvertiser.co.uk
web.production.forum-communications.brightspot.cloud
local.toronto.cjnews.com
local.devonlife.co.uk
web.production.forum-communications.brightspot.cloud
the-nelson-leader.origami.neighbourly.co.nz
cms.forumcomm.com
local.eastlondonadvertiser.co.uk
local.insidebiz.com
*.forum.cue.cloud
fk.local.kentonline.co.uk
*.forum.cue.cloud
*.forum.cue.cloud
subscriber.superiortelegram.com
local.newtondailynews.com
local.cambstimes.co.uk
local.brainerddispatch.com
link.superiortelegram.com
*.forum.cue.cloud
local.beloitdailynews.com
web.production.forum-communications.brightspot.cloud
local.cornwalllife.co.uk
subscriber.agweek.com
local.janesvillemarketplace.com
link.superiortelegram.com
*.forum.cue.cloud
local.fauquier.com
dealers.aws.wehaa.net
cms.forumcomm.com
link.superiortelegram.com
alliston.simcoe.com
www.forumcomm.com
st.local.kentonline.co.uk
local.wnypapers.com
web.production.forum-communications.brightspot.cloud
local.mywebtimes.com
st.local.kentonline.co.uk
www.forumcomm.com
local.yourdailyjournal.com
link.superiortelegram.com
www.forumcomm.com
link.superiortelegram.com
web.production.forum-communications.brightspot.cloud
local.wellsvilledaily.com
dealers.aws.wehaa.net
western-leader.origami.neighbourly.co.nz
local.pentictonherald.ca
link.superiortelegram.com
subscriber.agweek.com
local.bensonnews-sun.com
mylocal.palmbeachpost.com
www.forumcomm.com
*.forum.cue.cloud
*.forum.cue.cloud
local.airgunshooting.co.uk
the-nelson-leader.origami.neighbourly.co.nz
epaper.agweek.com
*.forum.cue.cloud
western-leader.origami.neighbourly.co.nz
dealers.aws.wehaa.net
origin.web.production.forum-communications.brightspot.cloud
local.ottawasun.com
local.sachem.ca
url188.superiortelegram.com
local.brechinadvertiser.co.uk
*.forum.cue.cloud
dealers.aws.wehaa.net
notices.superiortelegram.com
local.clevelandcountyherald.com
www.forumcomm.com
local.cambstimes.co.uk
statejournal.wanderful.ownlocal.com
local.moodycountyenterprise.com
local.thefirsthundredmiles.com
local.militarynews.com
local.uintacountyherald.com
impactousa.wanderful.ownlocal.com
admin.adforge.com
web.production.forum-communications.brightspot.cloud
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud
*.forum.cue.cloud
local.eastlondonadvertiser.co.uk
web.production.forum-communications.brightspot.cloud
local.toronto.cjnews.com
local.devonlife.co.uk
web.production.forum-communications.brightspot.cloud
the-nelson-leader.origami.neighbourly.co.nz
cms.forumcomm.com
local.eastlondonadvertiser.co.uk
local.insidebiz.com
*.forum.cue.cloud
fk.local.kentonline.co.uk
*.forum.cue.cloud
*.forum.cue.cloud
subscriber.superiortelegram.com
local.newtondailynews.com
local.cambstimes.co.uk
local.brainerddispatch.com
link.superiortelegram.com
*.forum.cue.cloud
local.beloitdailynews.com
web.production.forum-communications.brightspot.cloud
local.cornwalllife.co.uk
subscriber.agweek.com
local.janesvillemarketplace.com
link.superiortelegram.com
*.forum.cue.cloud
local.fauquier.com
dealers.aws.wehaa.net
cms.forumcomm.com
link.superiortelegram.com
alliston.simcoe.com
www.forumcomm.com
st.local.kentonline.co.uk
local.wnypapers.com
web.production.forum-communications.brightspot.cloud
local.mywebtimes.com
st.local.kentonline.co.uk
www.forumcomm.com
local.yourdailyjournal.com
link.superiortelegram.com
www.forumcomm.com
link.superiortelegram.com
web.production.forum-communications.brightspot.cloud
local.wellsvilledaily.com
dealers.aws.wehaa.net
western-leader.origami.neighbourly.co.nz
local.pentictonherald.ca
Certificate
The complete raw certificate details for notices.superiortelegram.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtTCCA52gAwIBAgIQDJ0TxylLMh3joLWV+LtpCzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwNTAwMDAwMFoXDTI1MDEwMjIzNTk1OVowJzEl MCMGA1UEAxMcbm90aWNlcy5zdXBlcmlvcnRlbGVncmFtLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAJ+tVJE+oPAyBDOtcA4u964uPJjZi3QOMtEm BWC7i8r2iLDTqL35nxBqv1OtfsDV2KLb5O2f1BO+kxh6sot/XGd8FevlGpheH+Nt EEjF8WJIiC8rnKae/8Cw4uhejAW73NjM2qdZNv+KI6FG2rlJrlYcaNwtDZUe0kjT +5eM+thXFFsw4Vs17cyfKGdw6xofLJf/vV3PTXLtl1SQ7gNHHHmYlynIQtwtG/8y 0aZrZjSrcQ0qicLOkMrAxMr/U3KBiF11dtEn7f8Df279ii8CD0WQ7nXshW+VFJwK IAmkxa29cQVlaQUK3b2XOdjJHl9PI/qJm6DSMTBqu3HOQSGj9XMCAwEAAaOCAcYw ggHCMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQ+ n/uA0Z07mDKiHJ199WE5c7FvIDBlBgNVHREEXjBcghxub3RpY2VzLnN1cGVyaW9y dGVsZWdyYW0uY29tghJub3RpY2VzLndjdHJpYi5jb22CFG5vdGljZXMud2FkZW5h cGouY29tghJub3RpY2VzLmRnbG9iZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNv bS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmQRtAw3BS 5bF8+0Ayp5IfTvFsLuMjvb82UzE60/GHO9e623cIfNYveFi5VS05H/ErQ+L8dXye R3kuyBWYfOoeuAbUlGB8hauGhnAOVcHexpYT1jUn2ORSRQzFkGvzoTlJh+tgrmGN emXSjvPHV3QoD8lPFV8pIJEhgYtYbp6Q82tM1cRWLfPPsZdxnEE6kuzzoOJCBzqb w5nB6Hfr/wpAwd9k4ViKtKx5NLNFeuZSDMi7BYX59r5TQQFdZ07rboxhuInmY80h kXJQcIRJYqPxc9/KRYhPNLvy9uChcBlQo2V++p1L+efKqF5SmYrb8f8a4btnq5g/ p3XDCeRW895R -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn61UkT6g8DIEM61wDi73 ri48mNmLdA4y0SYFYLuLyvaIsNOovfmfEGq/U61+wNXYotvk7Z/UE76TGHqyi39c Z3wV6+UamF4f420QSMXxYkiILyucpp7/wLDi6F6MBbvc2Mzap1k2/4ojoUbauUmu Vhxo3C0NlR7SSNP7l4z62FcUWzDhWzXtzJ8oZ3DrGh8sl/+9Xc9Ncu2XVJDuA0cc eZiXKchC3C0b/zLRpmtmNKtxDSqJws6QysDEyv9TcoGIXXV20Sft/wN/bv2KLwIP RZDudeyFb5UUnAogCaTFrb1xBWVpBQrdvZc52MkeX08j+omboNIxMGq7cc5BIaP1 cwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16766327701175559641694484884340041995 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'notices.superiortelegram.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20157362866476443268523240067577460821738302519897887301961806817854931100272545303772976628087989669994731829810651324989568833963091219112892441744478464299632211318982169392438400022157158484446939892045933841114500365988195756328610936701096737717299061193178690888149184984952398123004188985754097881390520325061348619502889836432380720801852359212046622305766891788688876748792846261500286553374248465452925721358074027654070570423308191864185932369819295329573110428198409489990784416504292910600862777333628829796577952227653001325470574131345701813188882001681872058562127122849695121007958841462083215947123 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e9ffb80d19d3b9832a21c9d7df5613973b16f20 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notices.superiortelegram.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notices.wctrib.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notices.wadenapj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notices.dglobe.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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