thecollective.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0d:94:3e:78:e4:e0:3a:ce:fa:27:91:16:0f:82:ef:d5 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=thecollective.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:94:3e:78:e4:e0:3a:ce:fa:27:91:16:0f:82:ef:d5Serial Number (int): 18049690967875648290229974980706365397
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 48:96:db:0a:71:90:4e:5a:de:df:d5:f1:30:57:59:b6:2b:34:33:2b
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 86:7f:23:4b:27:da:da:ff:89:e1:ac:ed:a8:52:de:63:f3:a7:dc:1f
Fingerprint (sha256): 43:97:fe:6e:65:44:da:2f:fd:0a:44:60:d5:76:2f:06:bf:55:fd:18:52:ba:ca:96:5a:91:33:d1:7e:cd:41:7d
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate thecollective.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thecollective.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
thecollective.com
Other certificates including the domain name thecollective.com
(limited to 100 certificates)
referrals.thecollective.com
thecollective.com
booking.thecollective.com
joinqatch.com
*.island.thecollective.com
www.seekingforme.com.br
bemoretogether.thecollective.com
bemoretogether.thecollective.com
www.fitabbey.com
*.perf.thecollective.com
www.kidscantext.com
www.nithipoomtransports.com
milk1000.cc
bemoretogether.thecollective.com
be4cert07.tlcresort.com
groundscan.org
app.gowboss.com.br
technoabhi.ml
*.staging.thecollective.com
eldu.tech
joinqatch.com
assets.thecollective.com
beta.thecollective.com
be4cert07.tlcresort.com
*.thecollective.com
thecollective.com
cuartomedioa.cicp.7x7.cl
*.collector.thecollective.com
www.thecollective.com
notes.andymatuschak.org
leveluptriathloncoaching.johnghidiu.com
*.thecollective.com
starflyaviation.com
*.thecollective.com
duetandroid.com
www.thecollective.com
*.thecollective.com
mobile-dev.dionysus.dev
www.thecollective.com
*.thecollective.com
thecollective.com
berichte.aktamirov.de
dev.moneystack.app
www.thecollective.com
partners.popin.nyc
*.thecollective.com
luxetravelandliving.com
bemoretogether.thecollective.com
www.thecollective.com
berichte.aktamirov.de
petersteffey.ninja
be4cert07.tlcresort.com
connective.thecollective.com
www.vrplayer.app
360tour.thecollective.com
connective.thecollective.com
assets.thecollective.com
*.prod.thecollective.com
bemoretogether.thecollective.com
beta.mobills.com.br
referrals.thecollective.com
assets.thecollective.com
mvhs.io
www.nevidelia.com
*.collector.thecollective.com
www.ondeassistir.com
thecollective.com
dieting-for-engineers.co.uk
resume.cameronboy.com
*.staging.thecollective.com
assets.thecollective.com
thecollective.com
*.perf.thecollective.com
join.voystory.com
*.thecollective.com
*.thecollective.com
www.treatsti.com
appmeup.in
fujiwara.pwa.chatcenter.ai
penekli.com
*.thecollective.com
*.island.thecollective.com
www.tuitionsupport.co.uk
360tour.thecollective.com
admin.utila.app
thecollective.com
inmobiliariamarcelolopez.com
dev.moneystack.app
tippingpointtrikes.com
*.thecollective.com
peloozoid.co.uk
ivanismy.name
*.thecollective.com
thecollective.com
iottable.com
*.prod.thecollective.com
thecollective.com
www.pleaseletthemcelroysbe.in
*.dev.thecollective.com
www.thecollective.com
thecollective.com
booking.thecollective.com
joinqatch.com
*.island.thecollective.com
www.seekingforme.com.br
bemoretogether.thecollective.com
bemoretogether.thecollective.com
www.fitabbey.com
*.perf.thecollective.com
www.kidscantext.com
www.nithipoomtransports.com
milk1000.cc
bemoretogether.thecollective.com
be4cert07.tlcresort.com
groundscan.org
app.gowboss.com.br
technoabhi.ml
*.staging.thecollective.com
eldu.tech
joinqatch.com
assets.thecollective.com
beta.thecollective.com
be4cert07.tlcresort.com
*.thecollective.com
thecollective.com
cuartomedioa.cicp.7x7.cl
*.collector.thecollective.com
www.thecollective.com
notes.andymatuschak.org
leveluptriathloncoaching.johnghidiu.com
*.thecollective.com
starflyaviation.com
*.thecollective.com
duetandroid.com
www.thecollective.com
*.thecollective.com
mobile-dev.dionysus.dev
www.thecollective.com
*.thecollective.com
thecollective.com
berichte.aktamirov.de
dev.moneystack.app
www.thecollective.com
partners.popin.nyc
*.thecollective.com
luxetravelandliving.com
bemoretogether.thecollective.com
www.thecollective.com
berichte.aktamirov.de
petersteffey.ninja
be4cert07.tlcresort.com
connective.thecollective.com
www.vrplayer.app
360tour.thecollective.com
connective.thecollective.com
assets.thecollective.com
*.prod.thecollective.com
bemoretogether.thecollective.com
beta.mobills.com.br
referrals.thecollective.com
assets.thecollective.com
mvhs.io
www.nevidelia.com
*.collector.thecollective.com
www.ondeassistir.com
thecollective.com
dieting-for-engineers.co.uk
resume.cameronboy.com
*.staging.thecollective.com
assets.thecollective.com
thecollective.com
*.perf.thecollective.com
join.voystory.com
*.thecollective.com
*.thecollective.com
www.treatsti.com
appmeup.in
fujiwara.pwa.chatcenter.ai
penekli.com
*.thecollective.com
*.island.thecollective.com
www.tuitionsupport.co.uk
360tour.thecollective.com
admin.utila.app
thecollective.com
inmobiliariamarcelolopez.com
dev.moneystack.app
tippingpointtrikes.com
*.thecollective.com
peloozoid.co.uk
ivanismy.name
*.thecollective.com
thecollective.com
iottable.com
*.prod.thecollective.com
thecollective.com
www.pleaseletthemcelroysbe.in
*.dev.thecollective.com
www.thecollective.com
Certificate
The complete raw certificate details for thecollective.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIQDZQ+eOTgOs76J5EWD4Lv1TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDMyNzAwMDAwMFoXDTI1MDQyNDIzNTk1OVowHDEa MBgGA1UEAxMRdGhlY29sbGVjdGl2ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx3S9gPXBpV12PwCbu39tP5mmHTJMHX8clXkarD2mtnh/b0j4E AcYUd+hZ/Zs9LZ81sFzlyaa5K04R7Qpv9WBOpNghsnCqZOcqtjnKlXOVCHsuBrkA NbDCn06o31mwTEmFz20ETDsSnRpdmT1WpVJF0LEGJUDprJKJeHYwx2RVJsAgSicL +5u28V/lYJuxJVwTWwcFHaVaM19ONgGObMAQfP6+RqIKosUvluWjCsa3vkfVpj7j Q2PdwS4ilKQJpEPMnbd4UudnpM+6SZnAt/iqVU6ETEh7xk7vBUvS6NtMcZGrCpwQ mHG8Q+KzTeAx29HFfv0rZH9L/ilzxVwGFtGrAgMBAAGjggLpMIIC5TAfBgNVHSME GDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUSJbbCnGQTlre39Xx MFdZtis0MyswHAYDVR0RBBUwE4IRdGhlY29sbGVjdGl2ZS5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFt YXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAM BgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgBOdaMnXJoQ wzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY5/ih0cAAAEAwBHMEUCIQDXNcRH QnAF5dyzuDKRNji6SL4p2bZS62lD3bDxEnQEBgIgZnJsN4cz2Iegx73Wp3WTI+sM YTFaCujrZNtoWlof7bQAdQB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55 uAAAAY5/ih1dAAAEAwBGMEQCIQCFLfxs7PdpwFINTYdpNsKEi3U4nLatpNvkcQL8 +cDATAIfdxlIulcC/7m4L60Ql1Co8mJtIzRfgZOj0eKZs4p6bwB2AM8RVu7VLnyv 84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjn+KHZsAAAQDAEcwRQIhAN98GKP1 2p+Ub9xiFuTImF11ayMObHU1cgH/Z2CQHGZ2AiBGdtUEA66DVYH/glqKsTAWeu70 6MwyJO89m8IEZoKPpjANBgkqhkiG9w0BAQsFAAOCAQEAam3Hd7GD6Bonm4O/Tk9v bIpXdjc5IwllH46Mif7zqHATicxkMZ62y2TqffJDXXEpIWLtTzwluEv5nWDkhzNR y1P/Qw1O7aKM1ZokFrT/xBUv5A1ULcZVpvMJke9QWy6xsoz9mtRuUIhcHj25xHkd bUeAwqa2zQLXssA6BTFADkhiGd0zJJEEsAC69N0Ltn2y27s41T/um0uzL4pdEx38 DG0W6Xk3q0QiHOcTzRBmLI/tJY7occfzs94KahIiR5iINN9TXW12zY2p0vRX3tYg fq7X/bgsbQbTEQO8eRJRbftEzBq1hU3fdTuk3pvdgHYKq+e7Op6DvE6Y7kXInCX4 fA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd0vYD1waVddj8Am7t/b T+Zph0yTB1/HJV5Gqw9prZ4f29I+BAHGFHfoWf2bPS2fNbBc5cmmuStOEe0Kb/Vg TqTYIbJwqmTnKrY5ypVzlQh7Lga5ADWwwp9OqN9ZsExJhc9tBEw7Ep0aXZk9VqVS RdCxBiVA6aySiXh2MMdkVSbAIEonC/ubtvFf5WCbsSVcE1sHBR2lWjNfTjYBjmzA EHz+vkaiCqLFL5blowrGt75H1aY+40Nj3cEuIpSkCaRDzJ23eFLnZ6TPukmZwLf4 qlVOhExIe8ZO7wVL0ujbTHGRqwqcEJhxvEPis03gMdvRxX79K2R/S/4pc8VcBhbR qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18049690967875648290229974980706365397 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thecollective.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22453250398300911772967527964851658002931644505489282875884703347129645985789275815976349401533485739689196746460464108020112255898027775123732443265276117136678198169719191881690420442786565057080759835218550637777891030456309977864969970646288479203148238571393337111543070524614861590468556544088577176499559770113435232785633728298356848904812604051954724014033892764913467997341851561950748655118930859553497599574879000578186347206038011238579326221148277020197839488119209495545540892087192498576062649662888122898236752359836599776715890142859180087591715715858757907451774899531784824750205996310947947794859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4896db0a71904e5adedfd5f1305759b62b34332b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecollective.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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