*.inqdoconnect.nl
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 07:d0:6f:7e:9f:e3:25:0b:5e:6d:02:cd:40:ea:2c:fa was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.inqdoconnect.nl
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:d0:6f:7e:9f:e3:25:0b:5e:6d:02:cd:40:ea:2c:faSerial Number (int): 10386855096766855049709123020054473978
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 52:92:41:2e:95:48:9f:5c:2f:55:28:3b:b8:70:13:16:68:7f:fd:d1
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 51:17:a9:24:cd:96:e9:8c:6c:23:0f:b9:32:ab:10:1e:43:e1:0b:ce
Fingerprint (sha256): 3f:e5:22:75:58:1a:de:e0:c8:9f:73:18:b5:82:30:3a:df:62:07:1d:72:23:1c:68:2b:a5:55:ce:59:f4:54:7b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.inqdoconnect.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.inqdoconnect.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.inqdoconnect.nl
Other certificates including the domain name inqdoconnect.nl
(limited to 100 certificates)
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
bildstatus.de
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
*.inqdoconnect.nl
bildstatus.de
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
bildstatus.de
cloudstatus.azeti.net
bildstatus.de
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
bildstatus.de
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
bildstatus.de
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
*.inqdoconnect.nl
bildstatus.de
*.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
bildstatus.de
cloudstatus.azeti.net
bildstatus.de
*.inqdoconnect.nl
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
*.inqdoconnect.nl
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
bildstatus.de
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
cloudstatus.azeti.net
leiden-status.inqdoconnect.nl
cloudstatus.azeti.net
Certificate
The complete raw certificate details for *.inqdoconnect.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEYTCCA0mgAwIBAgIQB9Bvfp/jJQtebQLNQOos+jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNDAwMDAwMFoXDTI1MDEwMTIzNTk1OVowHDEa MBgGA1UEAwwRKi5pbnFkb2Nvbm5lY3QubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCrIX6HGci6qYYf7Gi7+ophAbmr0HahDlXi523UqQQtKnQ4xg3X 2gEsQxa9DBXPkeAF76lfPXxMsZYE+Std4jqre2Den7Y50BkgHp1faR49ub5ww/VY XLVQzAjY5INGQ3B+84+/D0dTCDyNNa4xu96cosne87ZStXuKZwzVXTuqh+zrQ5+e gRkJ++nmxn1ByvI6pP+tDgckbJ9EtSy1Cz5sRjH8fQR/fCuBXfKjbwggDOSnxIPZ AfyNsZ+icef9wvp0hSpnU2Wtde2dYtUvJjvmq2slMkbTJJ5WtyIbr11SIFPt2K8A PYUxk2JFllRY7bUPFssP37nW/vbqHPxJToF3AgMBAAGjggF9MIIBeTAfBgNVHSME GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUUpJBLpVIn1wvVSg7 uHATFmh//dEwHAYDVR0RBBUwE4IRKi5pbnFkb2Nvbm5lY3QubmwwEwYDVR0gBAww CjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFt YXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAM BgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCVqxXWcMwLvTu1kpzGTwQ25nL4nV+b4AQMgFwYvJRd5LoK366040Az0eMK NGxFrWhdK1G/hhgPLgIJm3C5rQUb6WLyCKjZI0HRtYqxoE8kT4y/6dWprwtHjw7S eluOrnWi7Qmhif+c4MD5cXnxXEtGtkuUYcj5wZh0mV9312paIhQUbpXOAVaUrmfo Jao2MFnVmE11vyDhjHrIlGn3wj70f9UCluYPuBFwRR5t8cc9CugPZj+St1DHSpvF oPWr0T/eryaR9BP+9AOK5FbKcOPKbfqqOO/MeXtIxaNV/GWINhbiJslrkUnD1aQy 4nWKwdthIC2fdt5a0dYdloDdTbl3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyF+hxnIuqmGH+xou/qK YQG5q9B2oQ5V4udt1KkELSp0OMYN19oBLEMWvQwVz5HgBe+pXz18TLGWBPkrXeI6 q3tg3p+2OdAZIB6dX2kePbm+cMP1WFy1UMwI2OSDRkNwfvOPvw9HUwg8jTWuMbve nKLJ3vO2UrV7imcM1V07qofs60OfnoEZCfvp5sZ9QcryOqT/rQ4HJGyfRLUstQs+ bEYx/H0Ef3wrgV3yo28IIAzkp8SD2QH8jbGfonHn/cL6dIUqZ1NlrXXtnWLVLyY7 5qtrJTJG0ySeVrciG69dUiBT7divAD2FMZNiRZZUWO21DxbLD9+51v726hz8SU6B dwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10386855096766855049709123020054473978 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.inqdoconnect.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21603266778948016855058394482348650414930910814734278783670625963135500039599397627685738488580222679049047283745657427519101467432706151047274224032275532106719043280936148752455794501677166281342643285489794519180979749122698118891739131898084190562382503534931980976512401856506004358126237373432753723000102376984312774888251400801045074390180546546934572900381853760396274007348521141490357660092357782492962495348607515098925103736234451487705181041533714716872216927851701288017758949125296435200703188941475275618610301924626781771844834744346184349217532642300537061136457627721410883944583575652864720011639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5292412e95489f5c2f55283bb8701316687ffdd1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inqdoconnect.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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