spotlight-ui-staging-1746.capstage.net
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 09:55:ff:19:24:e9:a4:ba:94:32:50:58:ce:b2:b2:7a was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=spotlight-ui-staging-1746.capstage.net
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:55:ff:19:24:e9:a4:ba:94:32:50:58:ce:b2:b2:7aSerial Number (int): 12409571201616615216540807530577834618
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: af:1d:a4:2b:d8:02:dc:78:e8:82:85:24:08:6a:e9:6e:c0:70:c0:c9
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 2e:af:57:35:1b:a8:8e:8d:f5:32:f4:ba:e4:d5:69:20:16:c8:58:47
Fingerprint (sha256): 3d:b4:59:75:54:db:74:9d:fd:22:ac:55:58:bf:94:4d:8a:f9:a0:13:52:fa:ff:bf:1f:2c:e4:ec:fc:71:b0:ff
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate spotlight-ui-staging-1746.capstage.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spotlight-ui-staging-1746.capstage.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spotlight-ui-staging-1746.capstage.net
Other certificates including the domain name capstage.net
(limited to 100 certificates)
pr1307.reviews.capstage.net
spotlight-ui-staging-1752.capstage.net
spotlight-ui-staging-1779.capstage.net
user-workspace-staging-2014.capstage.net
public-api-dev.capstage.net
sem-ui-staging-1223.capstage.net
compare-ui-staging-936.capstage.net
sem-ui-staging-909.capstage.net
sem-ui-staging-885.capstage.net
spotlight-ui-staging-1772.capstage.net
spotlight-dev.capstage.net
spotlight-ui-staging-1759.capstage.net
user-workspace-staging-2044.capstage.net
sem-ui-staging-923.capstage.net
spotlight-ui-staging-2057.capstage.net
pr1306.reviews.capstage.net
user-workspace-staging-2005.capstage.net
sem-ui-staging-925.capstage.net
compare-ui-staging-699.capstage.net
vendor-page-dev.capstage.net
compare-ui-staging-885.capstage.net
spotlight-ui-staging-1754.capstage.net
search-dev.capstage.net
spotlight-ui-staging-1741.capstage.net
main.capstage.net
search-staging-718.capstage.net
spotlight-ui-staging-1785.capstage.net
pr1834.reviews.capstage.net
pr1946.reviews.capstage.net
spotlight-ui-staging-1781.capstage.net
user-workspace-staging-2004.capstage.net
spotlight-ui-staging-1754.capstage.net
dirpa-ui-staging-2308.capstage.net
user-workspace-staging-2004.capstage.net
sem-ui-staging-895.capstage.net
user-workspace-staging-2030.capstage.net
compare-ui-staging-688.capstage.net
search-staging-694.capstage.net
dirpa-ui-staging-2060.capstage.net
spotlight-ui-staging-2034.capstage.net
spotlight-ui-staging-2320.capstage.net
user-workspace-staging-2033.capstage.net
dirpa-ui-staging-2308.capstage.net
dirpa-ui-staging-2330.capstage.net
*.capstage.net
spotlight-ui-staging-2061.capstage.net
compare-ui-staging-889.capstage.net
spotlight-ui-staging-1757.capstage.net
sem-ui-staging-1429.capstage.net
compare-ui-staging-888.capstage.net
search-staging-824.capstage.net
pr1286.reviews.capstage.net
spotlight-ui-staging-1756.capstage.net
dirpa-ui-staging-2325.capstage.net
reviews.capstage.net
user-workspace-staging-2051.capstage.net
spotlight-ui-staging-1771.capstage.net
spotlight-ui-staging-1783.capstage.net
spotlight-ui-staging-1751.capstage.net
user-workspace-staging-2016.capstage.net
search-staging-703.capstage.net
spotlight-ui-staging-2115.capstage.net
sem-ui-staging-926.capstage.net
user-workspace-staging-2050.capstage.net
colin.capstage.net
sem-ui-staging-1270.capstage.net
spotlight-ui-staging-2034.capstage.net
spotlight-dev.capstage.net
spotlight-ui-staging-1766.capstage.net
pr1669.reviews.capstage.net
vendor-page.capstage.net
spotlight-ui-staging-1745.capstage.net
search-staging-836.capstage.net
compare-ui-staging-688.capstage.net
compare-ui-staging-890.capstage.net
reviews-dev.capstage.net
dirpa-ui-staging-2329.capstage.net
sa-ppl-form.capstage.net
pr1831.reviews.capstage.net
spotlight-ui-staging-1765.capstage.net
dirpa-ui-staging-2319.capstage.net
spotlight-ui-staging-2055.capstage.net
sem-ui-staging-1426.capstage.net
pr1832.reviews.capstage.net
spotlight-ui-staging-2063.capstage.net
compare-ui-staging-894.capstage.net
sem-ui-staging-907.capstage.net
atlantisci.capstage.net
compare-ui-staging-702.capstage.net
colin.capstage.net
spotlight-ui-staging-1763.capstage.net
spotlight-ui-staging-1746.capstage.net
homepage-ui-staging-479.capstage.net
spotlight-ui-staging-1772.capstage.net
spotlight-ui-staging-2093.capstage.net
sem-ui-staging-910.capstage.net
spotlight-ui-staging-1773.capstage.net
spotlight-ui-staging-1760.capstage.net
sem-ui-staging-1212.capstage.net
*.capstage.net
spotlight-ui-staging-1752.capstage.net
spotlight-ui-staging-1779.capstage.net
user-workspace-staging-2014.capstage.net
public-api-dev.capstage.net
sem-ui-staging-1223.capstage.net
compare-ui-staging-936.capstage.net
sem-ui-staging-909.capstage.net
sem-ui-staging-885.capstage.net
spotlight-ui-staging-1772.capstage.net
spotlight-dev.capstage.net
spotlight-ui-staging-1759.capstage.net
user-workspace-staging-2044.capstage.net
sem-ui-staging-923.capstage.net
spotlight-ui-staging-2057.capstage.net
pr1306.reviews.capstage.net
user-workspace-staging-2005.capstage.net
sem-ui-staging-925.capstage.net
compare-ui-staging-699.capstage.net
vendor-page-dev.capstage.net
compare-ui-staging-885.capstage.net
spotlight-ui-staging-1754.capstage.net
search-dev.capstage.net
spotlight-ui-staging-1741.capstage.net
main.capstage.net
search-staging-718.capstage.net
spotlight-ui-staging-1785.capstage.net
pr1834.reviews.capstage.net
pr1946.reviews.capstage.net
spotlight-ui-staging-1781.capstage.net
user-workspace-staging-2004.capstage.net
spotlight-ui-staging-1754.capstage.net
dirpa-ui-staging-2308.capstage.net
user-workspace-staging-2004.capstage.net
sem-ui-staging-895.capstage.net
user-workspace-staging-2030.capstage.net
compare-ui-staging-688.capstage.net
search-staging-694.capstage.net
dirpa-ui-staging-2060.capstage.net
spotlight-ui-staging-2034.capstage.net
spotlight-ui-staging-2320.capstage.net
user-workspace-staging-2033.capstage.net
dirpa-ui-staging-2308.capstage.net
dirpa-ui-staging-2330.capstage.net
*.capstage.net
spotlight-ui-staging-2061.capstage.net
compare-ui-staging-889.capstage.net
spotlight-ui-staging-1757.capstage.net
sem-ui-staging-1429.capstage.net
compare-ui-staging-888.capstage.net
search-staging-824.capstage.net
pr1286.reviews.capstage.net
spotlight-ui-staging-1756.capstage.net
dirpa-ui-staging-2325.capstage.net
reviews.capstage.net
user-workspace-staging-2051.capstage.net
spotlight-ui-staging-1771.capstage.net
spotlight-ui-staging-1783.capstage.net
spotlight-ui-staging-1751.capstage.net
user-workspace-staging-2016.capstage.net
search-staging-703.capstage.net
spotlight-ui-staging-2115.capstage.net
sem-ui-staging-926.capstage.net
user-workspace-staging-2050.capstage.net
colin.capstage.net
sem-ui-staging-1270.capstage.net
spotlight-ui-staging-2034.capstage.net
spotlight-dev.capstage.net
spotlight-ui-staging-1766.capstage.net
pr1669.reviews.capstage.net
vendor-page.capstage.net
spotlight-ui-staging-1745.capstage.net
search-staging-836.capstage.net
compare-ui-staging-688.capstage.net
compare-ui-staging-890.capstage.net
reviews-dev.capstage.net
dirpa-ui-staging-2329.capstage.net
sa-ppl-form.capstage.net
pr1831.reviews.capstage.net
spotlight-ui-staging-1765.capstage.net
dirpa-ui-staging-2319.capstage.net
spotlight-ui-staging-2055.capstage.net
sem-ui-staging-1426.capstage.net
pr1832.reviews.capstage.net
spotlight-ui-staging-2063.capstage.net
compare-ui-staging-894.capstage.net
sem-ui-staging-907.capstage.net
atlantisci.capstage.net
compare-ui-staging-702.capstage.net
colin.capstage.net
spotlight-ui-staging-1763.capstage.net
spotlight-ui-staging-1746.capstage.net
homepage-ui-staging-479.capstage.net
spotlight-ui-staging-1772.capstage.net
spotlight-ui-staging-2093.capstage.net
sem-ui-staging-910.capstage.net
spotlight-ui-staging-1773.capstage.net
spotlight-ui-staging-1760.capstage.net
sem-ui-staging-1212.capstage.net
*.capstage.net
Certificate
The complete raw certificate details for spotlight-ui-staging-1746.capstage.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEizCCA3OgAwIBAgIQCVX/GSTppLqUMlBYzrKyejANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIwMjAwMDAwMFoXDTIzMTIzMTIzNTk1OVowMTEv MC0GA1UEAxMmc3BvdGxpZ2h0LXVpLXN0YWdpbmctMTc0Ni5jYXBzdGFnZS5uZXQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwM+MwJ2KZe7ChmUiv0K5l d8YlBbhIYkqhYb6uwX/4gQTB8vtP7iUlP6+D4oTBlBv4D+vL+GxE+QKp5toba9cp 8JVgIyhLKODczjHRuaq/l6d7UUmQlrwEquuBbV7hkyghuG5kRlenssnKGovjT0A8 ioNGa+VFXKnTgWv/NdOLfY5igXtDldPDfxOC8+lsOCnG8WM9fBeBSZsCQTQDwh8j y/8d+m+EGtFFBcc6fI8unYhNrQBqn1A5AW2e0hnjIFoDa/9ghaBzwY0/fpfuIFk+ 6q1l4Qs5C+MdaP970s6PWvZ96vlaboC4PJIHLJN3HtwjVnDMDiARFejukmbZP22v AgMBAAGjggGSMIIBjjAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAd BgNVHQ4EFgQUrx2kK9gC3HjogoUkCGrpbsBwwMkwMQYDVR0RBCowKIImc3BvdGxp Z2h0LXVpLXN0YWdpbmctMTc0Ni5jYXBzdGFnZS5uZXQwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYD VR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo dHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0 dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMB Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBr DJ3wm5tdlX+9Igka5AF7oeYrsbS3KvsqM0fzhRtXLtenraMSMHYkJMM+RzMIQsu7 nND0CIgpHxlPvP0YCUMn8cc94ZsPjZa+i1eZfLYAkx+q0DHqUj8qIqI3t08WeuI7 mfkcLxLPmVBxDCJ4DVMuxP1TUEVtGONsryzt101POUVeetGk/co3v5xGbEdNgTts 5KoQ+KLjEtTFyaztAIUnpzwO+PfDldVS4I4DlSHGuZ1T09h6ScMmm/8/dSVwD96v YhfNedTjcKi4VuHtC177ClkIhHJY6S1EITabqTpde89Fb9KgsitmBAX9dbt/6pyN 8Gp+JvCoHBMlT5mtNBXz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDPjMCdimXuwoZlIr9Cu ZXfGJQW4SGJKoWG+rsF/+IEEwfL7T+4lJT+vg+KEwZQb+A/ry/hsRPkCqebaG2vX KfCVYCMoSyjg3M4x0bmqv5ene1FJkJa8BKrrgW1e4ZMoIbhuZEZXp7LJyhqL409A PIqDRmvlRVyp04Fr/zXTi32OYoF7Q5XTw38TgvPpbDgpxvFjPXwXgUmbAkE0A8If I8v/HfpvhBrRRQXHOnyPLp2ITa0Aap9QOQFtntIZ4yBaA2v/YIWgc8GNP36X7iBZ PuqtZeELOQvjHWj/e9LOj1r2fer5Wm6AuDySByyTdx7cI1ZwzA4gERXo7pJm2T9t rwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12409571201616615216540807530577834618 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spotlight-ui-staging-1746.capstage.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22243528330984504503268906159488939426013160751032232135713625111101646533792806012457632202435824558998963722765794612513939755963863886881220684184318653768140307937530290626462714559273849395285641353941224297020854242816426379856324191475178637401738508341370753989510944212416796686276458663310045169314752532941479121979732417370636049731215491303904912656430651741332722225831777310964137951625041495873278645444447738707983679185933267128938887422048617821488992534965399799537923353054423071748681980045803718750181776110469440316559219715792923163403901130644814108855096485190888230266264367077969918651823 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af1da42bd802dc78e8828524086ae96ec070c0c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlight-ui-staging-1746.capstage.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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