kevincox.ca
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 02:02:5f:f4:98:7c:4a:e1:db:a0:54:2e:bf:4e:b3:06 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kevincox.ca
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:02:5f:f4:98:7c:4a:e1:db:a0:54:2e:bf:4e:b3:06Serial Number (int): 2670786793062883706192877979375153926
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 33:a1:91:4b:6c:f7:45:74:d8:9b:60:3c:b6:00:9d:5f:01:72:0c:8c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 8f:b0:e0:a5:8e:80:91:3b:bf:74:b0:94:59:68:15:f9:73:70:a6:16
Fingerprint (sha256): 3e:f2:a0:df:32:12:42:86:af:20:b4:a1:3b:30:f7:06:de:46:03:a6:51:29:97:de:79:07:63:09:9f:92:ee:d1
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate kevincox.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kevincox.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kevincox.ca
www.kevincox.ca
www.kevincox.ca
Other certificates including the domain name kevincox.ca
(limited to 100 certificates)
sni58265.cloudflaressl.com
www.mbase.dev
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
6.s.kevincox.ca
mumble.kevincox.ca
mahiru.fans
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
raizdobrasil.com.br
sni58265.cloudflaressl.com
ricochetrobots.kevincox.ca
sni58265.cloudflaressl.com
www.anim-gag.fr
sni58265.cloudflaressl.com
www.zudello.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
ricochetrobots.kevincox.ca
mumble.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
nginx.certs.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.niccouillard.com
sni58265.cloudflaressl.com
seafile.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
logistia.app
9.s.kevincox.ca
api.dontsayit.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
mumble.kevincox.ca
nginx.certs.kevincox.ca
mumble.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.ffreefire2021.ga
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
v8.material.angular.io
nginx.certs.kevincox.ca
test.api.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
confero-staging.televic.com
mumble.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.designcloud.ca
sni58265.cloudflaressl.com
my.coinapp.co
www.vitaminbre.com
nginx.certs.kevincox.ca
6.s.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.hellovallalkozo.hu
sni58265.cloudflaressl.com
bobbywhite.ca
ricochetrobots.kevincox.ca
www.kevincox.ca
sni58265.cloudflaressl.com
9.s.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
7.s.kevincox.ca
sni58265.cloudflaressl.com
api.dontsayit.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.elton.codes
sni58265.cloudflaressl.com
9.s.kevincox.ca
www.mbase.dev
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
6.s.kevincox.ca
mumble.kevincox.ca
mahiru.fans
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
raizdobrasil.com.br
sni58265.cloudflaressl.com
ricochetrobots.kevincox.ca
sni58265.cloudflaressl.com
www.anim-gag.fr
sni58265.cloudflaressl.com
www.zudello.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
ricochetrobots.kevincox.ca
mumble.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
nginx.certs.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.niccouillard.com
sni58265.cloudflaressl.com
seafile.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
logistia.app
9.s.kevincox.ca
api.dontsayit.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
mumble.kevincox.ca
nginx.certs.kevincox.ca
mumble.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.ffreefire2021.ga
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
v8.material.angular.io
nginx.certs.kevincox.ca
test.api.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
confero-staging.televic.com
mumble.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.designcloud.ca
sni58265.cloudflaressl.com
my.coinapp.co
www.vitaminbre.com
nginx.certs.kevincox.ca
6.s.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.hellovallalkozo.hu
sni58265.cloudflaressl.com
bobbywhite.ca
ricochetrobots.kevincox.ca
www.kevincox.ca
sni58265.cloudflaressl.com
9.s.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
7.s.kevincox.ca
sni58265.cloudflaressl.com
api.dontsayit.kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
kevincox.ca
sni58265.cloudflaressl.com
sni58265.cloudflaressl.com
www.elton.codes
sni58265.cloudflaressl.com
9.s.kevincox.ca
Certificate
The complete raw certificate details for kevincox.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgIQAgJf9Jh8SuHboFQuv06zBjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDIxNTAwMDAwMFoXDTI1MDMxNTIzNTk1OVowFjEU MBIGA1UEAxMLa2V2aW5jb3guY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDFEPAfb8u+6lYjyHGApuxSdH2wEFA6Q17osGgEb50rNzw3xGnL9n1hSrxc 8ULjeHm9bDhoq19R3EflBlxXW67KPD0HlDNrV9+AWtCQs43AbSiddi53DyWhvVo7 AXlwSh0QypU4T6JGWpDi46HsK759SBlUHZC2zlAIX/o4xe/G7KDlT/U9zOGSWwHs BKTyyVRdi09szj3g3gSdwp6SRx543Nerk33R69240GAd+JuXHIt3/mIKjjeqaQdr FfDoXZ47JEqXRazwKBUbkhg6lxxhWA04wQ4bnbh8NcoH1QMGE9+OgFMgBUvFv+zg ljJLIAfIoqQPgW4qNpZPkHr6RGqfAgMBAAGjggL1MIIC8TAfBgNVHSMEGDAWgBRV 2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUM6GRS2z3RXTYm2A8tgCdXwFy DIwwJwYDVR0RBCAwHoILa2V2aW5jb3guY2GCD3d3dy5rZXZpbmNveC5jYTATBgNV HSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJt MDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYI KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2Bggr BgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMu Y2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AE51 oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjazqTOYAAAQDAEcwRQIg Xof19Q+Gc6vThxNVCSCYMSh6gXIdsfnaGkEgo/Q+Th0CIQCdMhtwAg/m330WsTMB J2e3SfT79b2zgJYuCGJKCcnsYgB1AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv 2Q6MLnm4AAABjazqTO4AAAQDAEYwRAIgbzjC+kKMTAIQVMdsMs18ve70o4rVFLxD deZ5YXFgTzoCIAbxTAg8xiQ2POLYYO/oRZurByo6YIoC6GV25mRLOx7AAHcA5tIx Y0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGNrOpNGQAABAMASDBGAiEA /TXa4gflmUbYohVXw80BsursVHOFJpeNeVA0clpB6dkCIQChhL24rDioZB0Spg4N YH7L144vvdUPFrMwN1de7HdtJTANBgkqhkiG9w0BAQsFAAOCAQEAQszqW0U7L9rg gRsmZoCLzTrRoKoBBS7ZCApivSNXnoRosQUqth7aH2e1E9JDieL1wUTHd4BaapoO 5lPH65MW5k+EqIfB/p9TWJnr78oqvR2UBVdXY3VhMC2+Wg5uwpsF68RAfk8PUKWr eywbwhGHDPDQDvHdeJyUm7G6IRWO9OIvtsCto8FQNOBuWb01ywnKC3xFeMTvMGMN 3AmEHknzlZp47DE6N1OhUfL/1bP4SkUxJJNZbX1kPo//6OBJdbpt86fFGtYXmyd7 2xvbi+Y3i34/w6zEXShTF91Bh0srj+tfxiJJn7hAz44DEiBYGwmHrPehhQLjWDb8 inZUDEJv5Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRDwH2/LvupWI8hxgKbs UnR9sBBQOkNe6LBoBG+dKzc8N8Rpy/Z9YUq8XPFC43h5vWw4aKtfUdxH5QZcV1uu yjw9B5Qza1ffgFrQkLONwG0onXYudw8lob1aOwF5cEodEMqVOE+iRlqQ4uOh7Cu+ fUgZVB2Qts5QCF/6OMXvxuyg5U/1PczhklsB7ASk8slUXYtPbM494N4EncKekkce eNzXq5N90evduNBgHfiblxyLd/5iCo43qmkHaxXw6F2eOyRKl0Ws8CgVG5IYOpcc YVgNOMEOG524fDXKB9UDBhPfjoBTIAVLxb/s4JYySyAHyKKkD4FuKjaWT5B6+kRq nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2670786793062883706192877979375153926 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kevincox.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24877298507396017484303902773298026882717974633322963582889126948542440123981727523390960621554668468266283749117795465029760760313016727975145299416310396677703518801068487669638520261248555595269372778452601928794382756035702525460853898648367001529491760728888636730146086753033055212796065916878710964733025860465275133074036487772131842299090061374429989763723994669557343201658922070672428083351568257413143282718691466431973640047770605931940903906732085665092791061360955943430995044060884262509109165193729679465882894536846635634240141323634917708517982360428497788335351946896296058483337479816024699464351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33a1914b6cf74574d89b603cb6009d5f01720c8c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevincox.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevincox.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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