pr.newsmax.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 07:d1:c7:0c:76:1b:fa:b4:cd:33:1a:0c:21:81:fd:c4 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=pr.newsmax.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:d1:c7:0c:76:1b:fa:b4:cd:33:1a:0c:21:81:fd:c4Serial Number (int): 10393823200730323021145094197558246852
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 7b:8a:9d:8d:22:13:28:90:00:85:78:b8:b9:15:e2:4b:76:f5:49:93
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 55:8d:97:f8:2b:08:7b:c6:87:97:1a:5e:62:a3:1e:81:fc:62:7e:ad
Fingerprint (sha256): 40:cd:1c:35:d4:00:4a:c3:b4:2b:b2:89:0e:32:da:60:77:7e:12:cc:02:61:c8:4f:6a:22:94:72:f0:75:2a:f2
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate pr.newsmax.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pr.newsmax.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pr.newsmax.com
lifestylepr.newsmax.com
newsmax-staging.newsengine.io
lifestylepr.newsmax.com
newsmax-staging.newsengine.io
Other certificates including the domain name newsmax.com
(limited to 100 certificates)
ithelpdesk.tallen-inc.com
www.newsmax.com
www.newsmax.com
shop.newsmax.com
newsmax.com
profiles.newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
ithelpdesk.tallen-inc.com
ithelpdesk.tallen-inc.com
pr.newsmax.com
owas.newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
www.newsmax.com
s1.wac.edgecastcdn.net
enps.newsmax.com
webmail.newsmax.com
s1.wac.edgecastcdn.net
www.newsmax.com
shop.newsmax.com
w3.newsmax.com
gpvpn.newsmax.com
sip.newsmax.com
www.newsmax.com
*.streetiq.com
www.newsmax.com
s1.wac.edgecastcdn.net
www.newsmax.com
sip.newsmax.com
w3.newsmax.com
clients.newsmax.com
shop.newsmax.com
subscribers.newsmax.com
www.newsmax.com
shop.newsmax.com
news.newsmax.com
subscribers.newsmax.com
pr.newsmax.com
www.newsmax.com
news.newsmax.com
webmail.newsmax.com
www.newsmax.com
ithelpdesk.tallen-inc.com
clients.newsmax.com
hnvly01.corporate.newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
www.newsmax.com
sip.newsmax.com
pr.newsmax.com
www.newsmax.com
w3.newsmax.com
gpvpn.newsmax.com
shop.newsmax.com
enps.newsmax.com
sip.newsmax.com
www.newsmax.com
webmail.newsmax.com
www.newsmax.com
s1.wac.edgecastcdn.net
newsmax.com
gp-datacenter.newsmax.com
sip.newsmax.com
servicedesk.newsmax.com
clients.newsmax.com
ithelpdesk.tallen-inc.com
filedrop.newsmax.com
s1.wac.edgecastcdn.net
newsmax.com
www.newsmax.com
clients.newsmax.com
w3.newsmax.com
enps.newsmax.com
pr.newsmax.com
gpvpn.newsmax.com
newsmax.com
ithelpdesk.tallen-inc.com
t.eletters.newsmax.com
ithelpdesk.tallen-inc.com
hnvely01.corporate.newsmax.com
news.newsmax.com
webmail.newsmax.com
www.newsmax.com
servicedesk.applaudostudios.com
selfservice.newsmax.com
ithelpdesk.tallen-inc.com
gp-datacenter.newsmax.com
newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
clients.newsmax.com
enet.newsmax.com
sip.newsmax.com
WWW.NEWSMAX.COM
www.newsmax.com
newsvideo.newsmax.com
www.newsmax.com
www.newsmax.com
pr.newsmax.com
www.newsmax.com
www.newsmax.com
shop.newsmax.com
newsmax.com
profiles.newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
ithelpdesk.tallen-inc.com
ithelpdesk.tallen-inc.com
pr.newsmax.com
owas.newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
www.newsmax.com
s1.wac.edgecastcdn.net
enps.newsmax.com
webmail.newsmax.com
s1.wac.edgecastcdn.net
www.newsmax.com
shop.newsmax.com
w3.newsmax.com
gpvpn.newsmax.com
sip.newsmax.com
www.newsmax.com
*.streetiq.com
www.newsmax.com
s1.wac.edgecastcdn.net
www.newsmax.com
sip.newsmax.com
w3.newsmax.com
clients.newsmax.com
shop.newsmax.com
subscribers.newsmax.com
www.newsmax.com
shop.newsmax.com
news.newsmax.com
subscribers.newsmax.com
pr.newsmax.com
www.newsmax.com
news.newsmax.com
webmail.newsmax.com
www.newsmax.com
ithelpdesk.tallen-inc.com
clients.newsmax.com
hnvly01.corporate.newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
www.newsmax.com
sip.newsmax.com
pr.newsmax.com
www.newsmax.com
w3.newsmax.com
gpvpn.newsmax.com
shop.newsmax.com
enps.newsmax.com
sip.newsmax.com
www.newsmax.com
webmail.newsmax.com
www.newsmax.com
s1.wac.edgecastcdn.net
newsmax.com
gp-datacenter.newsmax.com
sip.newsmax.com
servicedesk.newsmax.com
clients.newsmax.com
ithelpdesk.tallen-inc.com
filedrop.newsmax.com
s1.wac.edgecastcdn.net
newsmax.com
www.newsmax.com
clients.newsmax.com
w3.newsmax.com
enps.newsmax.com
pr.newsmax.com
gpvpn.newsmax.com
newsmax.com
ithelpdesk.tallen-inc.com
t.eletters.newsmax.com
ithelpdesk.tallen-inc.com
hnvely01.corporate.newsmax.com
news.newsmax.com
webmail.newsmax.com
www.newsmax.com
servicedesk.applaudostudios.com
selfservice.newsmax.com
ithelpdesk.tallen-inc.com
gp-datacenter.newsmax.com
newsmax.com
ithelpdesk.tallen-inc.com
www.newsmax.com
clients.newsmax.com
enet.newsmax.com
sip.newsmax.com
WWW.NEWSMAX.COM
www.newsmax.com
newsvideo.newsmax.com
www.newsmax.com
www.newsmax.com
pr.newsmax.com
Certificate
The complete raw certificate details for pr.newsmax.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIQB9HHDHYb+rTNMxoMIYH9xDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDUxNzAwMDAwMFoXDTI1MDYxNjIzNTk1OVowGTEX MBUGA1UEAxMOcHIubmV3c21heC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCUr+R5g3XCN9sGDCqwmtVxfjCTfK0Ggz4fDDS/ttzyst3slJWDKPMc VlMrs999NvYieO3LYIBq4qeTQV2CL5kpBIKHbx8kFCBWZksw2diiIGVytiqmTHgv Zil3JI7M97XIYvXWSRV1pjnhLSFxvkn1qYRhJC5LMY7TTv5lzUy3ocO6Ak3RufW+ +Uj6F/VLFhP9DoTCLzZYiui8klDZckGg74mGE5MNzZTDS6TOX3VR1DMLu1iOv9km HS8dr8x6iMmyN9XKwYaqHNR3wDIqVM2gg00PLfeW4dbenNBgJm6dCh37pQIKCbYl bgZWzyKpc15ObmwlWkYTY/4SQzYAfl7XAgMBAAGjggMeMIIDGjAfBgNVHSMEGDAW gBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUe4qdjSITKJAAhXi4uRXi S3b1SZMwUQYDVR0RBEowSIIOcHIubmV3c21heC5jb22CF2xpZmVzdHlsZXByLm5l d3NtYXguY29tgh1uZXdzbWF4LXN0YWdpbmcubmV3c2VuZ2luZS5pbzATBgNVHSAE DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMu YW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2Vy MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AE51oydc mhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj4UCe58AAAQDAEcwRQIhAPgr geHswJEN2cVnOIWVyqQWRuMtG7mlG8hhMEyH4EIpAiABW0R+OB+eIZtUMHDQBaQA hmRckE+xfodAz5PTDuzuTQB1AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6M Lnm4AAABj4UCe9EAAAQDAEYwRAIge/xS36VIzKnUeyCk3Q4FkVFBFViIkDn4nUqH sdLeo9MCICiE+AEwejpZRq6VXhYfB12zPmUdyfaNNbBxBpXTrZvbAHYA5tIxY0B3 jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGPhQJ75gAABAMARzBFAiBElI0T zkcegUXUdWnaiNY4IeH1QWI7vHTpp1uFoWNjhwIhAN71ZR7f0IQytpVYIxhflUb8 iLOtRS+vNoD+CPvtMTZWMA0GCSqGSIb3DQEBCwUAA4IBAQALFosXkixHZ6tzjhNi JEifjzVUK1v+wyqRUpMGUUClgE3OMe3KiY2puNq9qB70AYu8mlDuLH87gQglf0RJ NzH6CS3y/YE4zpLlBMF2+Oduw4lxUZREuhA3ruKm6oJDkFdlDEbHhGGuj8wMKbPK hghzsqe0SqUYzL3THs831iuOwAb7QWZEK1LhZ5qFpOBiZAz2tm+V0wwChQl03+7W TpQsLq7antKBNQRz3Ha/SQKPhqRLW0M1134+nvK6bJpHNzoJmygR2+oZEzkpzJOm CJ4MhoU1QQVOxgTqiAOl53ppmlH7NTsyS3beW2T9IxLlPEzSehSZZjNw9Ny5OmxZ 5b3M -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK/keYN1wjfbBgwqsJrV cX4wk3ytBoM+Hww0v7bc8rLd7JSVgyjzHFZTK7PffTb2Injty2CAauKnk0Fdgi+Z KQSCh28fJBQgVmZLMNnYoiBlcrYqpkx4L2YpdySOzPe1yGL11kkVdaY54S0hcb5J 9amEYSQuSzGO007+Zc1Mt6HDugJN0bn1vvlI+hf1SxYT/Q6Ewi82WIrovJJQ2XJB oO+JhhOTDc2Uw0ukzl91UdQzC7tYjr/ZJh0vHa/MeojJsjfVysGGqhzUd8AyKlTN oINNDy33luHW3pzQYCZunQod+6UCCgm2JW4GVs8iqXNeTm5sJVpGE2P+EkM2AH5e 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10393823200730323021145094197558246852 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pr.newsmax.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18770004949133162632674042958092804325559142118022818658760629370135946683311425091745180305086641737494809799777427021793913300352958098925296945772416403259852689290813259341047750170227627480598087706968938227371844487893736288511743654460921187046030819115425463910171077269134087461682575510544032711544030793910831762916260380346078752882940213788542778510252004650281997587080074739190210417390754224770946371841576761690566516582715054958465166222446963450801637458694814670568665949943280723562027627193051667369007507516448618969968218423101286327385193414266406583150597026226385205328720129737315378421463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7b8a9d8d22132890008578b8b915e24b76f54993 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.newsmax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestylepr.newsmax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsmax-staging.newsengine.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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