sst.sanoma.fi
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0b:85:34:8a:62:82:8f:ab:9e:20:04:91:1a:b7:58:10 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sst.sanoma.fi
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:85:34:8a:62:82:8f:ab:9e:20:04:91:1a:b7:58:10Serial Number (int): 15313149085092393315113184410853660688
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: bc:44:c8:89:0d:b1:83:85:49:1e:58:78:da:1a:c6:0a:43:d2:c1:20
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 33:57:4c:f6:7b:58:2e:a3:9c:85:a4:34:da:e7:e4:67:1e:92:27:7b
Fingerprint (sha256): 4a:cc:02:f5:15:f9:c1:32:4e:bf:15:f0:28:cb:16:94:8d:73:c4:18:66:f0:93:f9:43:c4:c0:11:d2:a1:c7:ba
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate sst.sanoma.fi
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sst.sanoma.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sst.sanoma.fi
Other certificates including the domain name sanoma.fi
(limited to 100 certificates)
*.mainos.sanoma.fi
oma.sanoma.fi
papi.sanoma.fi
digilehdet.ap.richiefi.net
receiver.sanoma.fi
ratasdev.sanoma.fi
digilehdet.ap.richiefi.net
media.sanoma.prod.wunder.io
media.sanoma.fi
ratas.sanoma.fi
*.sanoma.fi
www2.media.sanoma.fi
ussr.sanoma.fi
analytics.sanoma.fi
artifactory.sanoma.fi
amonas.10kysymysta.fi
*.sanoma.fi
www2.media.sanoma.fi
www2.media.sanoma.fi
digilehdet.ap.richiefi.net
mainos.sanoma.fi
mobimail.sanoma.fi
media.sanoma.fi
mainos.sanoma.fi
*.sanoma.fi
*.sanoma.fi
sanoma.fi
*.mainos.sanoma.fi
*.sanoma.fi
sposti.sanoma.fi
ratas.sanoma.fi
sanoma.fi
digilehdet.ap.richiefi.net
digilehdet.sanomapaino.fi
ratasdev.sanoma.fi
sat.sanoma.fi
*.sanoma.fi
*.sanoma.fi
sanoma.fi
*.sanoma.fi
ussr.sanoma.fi
moderointi.sanoma.fi
digilehdet.ap.richiefi.net
artifactory.sanoma.fi
media.sanoma.fi
*.sanoma.fi
*.sanoma.fi
ratasdev.sanoma.fi
ratasdev.sanoma.fi
*.sanoma.fi
ussr-admin.sanoma.fi
tili.sanoma.fi
sat.sanoma.fi
mainos.sanoma.fi
media.sanoma.fi
ratas.sanoma.fi
*.sanoma.fi
tili.sanoma.fi
markkinoijalle.media.sanoma.fi
*.sanoma.fi
mainos.sanoma.fi
*.sanoma.fi
www.tilaa-staging.sanoma.fi
digilehdet-tutkimus.ap.richiefi.net
*.sanoma.fi
digilehdet-tutkimus.ap.richiefi.net
*.sanoma.fi
kauppa.etlehti.fi
*.sanoma.fi
ratas.sanoma.fi
sat.sanoma.fi
*.sanoma.fi
sanoma.fi
artifactory.sanoma.fi
www2.media.sanoma.fi
myprofile.sanoma.fi
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
dco-rtb.sanoma.fi
ilmoitusaineisto.sanoma.fi
*.sanoma.fi
sov.sanoma.fi
*.mainos.sanoma.fi
ratas.sanoma.fi
tili.sanoma.fi
mainos.sanoma.fi
media.sanoma.prod.wunder.io
media.sanoma.prod.wunder.io
mainos.sanoma.fi
sst.sanoma.fi
digilehdet.sanomapaino.fi
media.sanoma.fi
mainos.sanoma.fi
ratas.sanoma.fi
oma.sanoma.fi
sposti.sanoma.fi
static.arkku.datadesk.hs.fi
www2.media.sanoma.fi
analytics.sanoma.fi
digilehdet.sanomapaino.fi
oma.sanoma.fi
papi.sanoma.fi
digilehdet.ap.richiefi.net
receiver.sanoma.fi
ratasdev.sanoma.fi
digilehdet.ap.richiefi.net
media.sanoma.prod.wunder.io
media.sanoma.fi
ratas.sanoma.fi
*.sanoma.fi
www2.media.sanoma.fi
ussr.sanoma.fi
analytics.sanoma.fi
artifactory.sanoma.fi
amonas.10kysymysta.fi
*.sanoma.fi
www2.media.sanoma.fi
www2.media.sanoma.fi
digilehdet.ap.richiefi.net
mainos.sanoma.fi
mobimail.sanoma.fi
media.sanoma.fi
mainos.sanoma.fi
*.sanoma.fi
*.sanoma.fi
sanoma.fi
*.mainos.sanoma.fi
*.sanoma.fi
sposti.sanoma.fi
ratas.sanoma.fi
sanoma.fi
digilehdet.ap.richiefi.net
digilehdet.sanomapaino.fi
ratasdev.sanoma.fi
sat.sanoma.fi
*.sanoma.fi
*.sanoma.fi
sanoma.fi
*.sanoma.fi
ussr.sanoma.fi
moderointi.sanoma.fi
digilehdet.ap.richiefi.net
artifactory.sanoma.fi
media.sanoma.fi
*.sanoma.fi
*.sanoma.fi
ratasdev.sanoma.fi
ratasdev.sanoma.fi
*.sanoma.fi
ussr-admin.sanoma.fi
tili.sanoma.fi
sat.sanoma.fi
mainos.sanoma.fi
media.sanoma.fi
ratas.sanoma.fi
*.sanoma.fi
tili.sanoma.fi
markkinoijalle.media.sanoma.fi
*.sanoma.fi
mainos.sanoma.fi
*.sanoma.fi
www.tilaa-staging.sanoma.fi
digilehdet-tutkimus.ap.richiefi.net
*.sanoma.fi
digilehdet-tutkimus.ap.richiefi.net
*.sanoma.fi
kauppa.etlehti.fi
*.sanoma.fi
ratas.sanoma.fi
sat.sanoma.fi
*.sanoma.fi
sanoma.fi
artifactory.sanoma.fi
www2.media.sanoma.fi
myprofile.sanoma.fi
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
dco-rtb.sanoma.fi
ilmoitusaineisto.sanoma.fi
*.sanoma.fi
sov.sanoma.fi
*.mainos.sanoma.fi
ratas.sanoma.fi
tili.sanoma.fi
mainos.sanoma.fi
media.sanoma.prod.wunder.io
media.sanoma.prod.wunder.io
mainos.sanoma.fi
sst.sanoma.fi
digilehdet.sanomapaino.fi
media.sanoma.fi
mainos.sanoma.fi
ratas.sanoma.fi
oma.sanoma.fi
sposti.sanoma.fi
static.arkku.datadesk.hs.fi
www2.media.sanoma.fi
analytics.sanoma.fi
digilehdet.sanomapaino.fi
Certificate
The complete raw certificate details for sst.sanoma.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgIQC4U0imKCj6ueIASRGrdYEDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxOTAwMDAwMFoXDTI1MDExNzIzNTk1OVowGDEW MBQGA1UEAxMNc3N0LnNhbm9tYS5maTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALDVc3QIEPh0Eo1Ycp3XaGaTbW8MRDH8by3utmkEsiJ5g7M9Bi7hI4rX gZ4oOvSsCz0pMRD2VKSdb1NCSQ9lPnch1W/qXMa+saB4igavhQyuhZqiVMG7EIiP 3dxlWXXoyN4Ok6+QwdRYqliJxH5lkU3FATwbmFRIhDtBwiSqa4FrySDx2gfQXw+Y grkBTw2kpWfDMm/bmvre8r/uKJa8YQTtM1AR70aISHqxdfS3iTU7rGfkK0LQ3zbU 9C61/HirumEK6vr3UrscXVlrP+Tbtfy0quoX/GWyu2zAdegGtZSV1cRkO6KHO7aE FRLmxP9Q9AgZ0rp0m/8K9meR+7p2QwcCAwEAAaOCAucwggLjMB8GA1UdIwQYMBaA FFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBS8RMiJDbGDhUkeWHjaGsYK Q9LBIDAYBgNVHREEETAPgg1zc3Quc2Fub21hLmZpMBMGA1UdIAQMMAowCAYGZ4EM AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVz dC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/ BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHUATnWjJ1yaEMM4W2zU3z9S 6x3w4I4bjWnAsfpksWKaOd8AAAGMf3rhNQAABAMARjBEAiBDa00fQL03hOy1zSc/ QevV17XvqvyWqmkY71E7HvhpXQIgcejgAe2d9ITt7qDV58CvKfruf6SrB7QLkgV/ S4WOlRAAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAYx/euF8 AAAEAwBIMEYCIQC1bgBPim4xTf92mjnl2JxSOT4Xc5tVhztGmFGxLOSeAwIhAMFq oalCVrN6te+0cmWbs/zjMRKlf8N/fn5w/lpCGRPNAHcAfVkeEuF4KnscYWd8Xv34 0IdcFKBOlZ65Ay/ZDowuebgAAAGMf3rhZwAABAMASDBGAiEAhyWiAldYM1xYDbkX p13lgdT7crTco3o64EsDEwPZs9wCIQC/psDRFvZpBkXA/97PTl+8/rtZWgZksUnt L4Zj58THozANBgkqhkiG9w0BAQsFAAOCAQEAb+BpWn1EHSNNCBWnkVdEZ+7AEHyv YHOT+qChRpbsg2b/I2Dq0aq2fHAoFmdCmL4R+idtuKyU8OFh+pINTC0KQnvvltMO +gk9lwtNXr37lYzsQ53o3oEEoOqGaxPLFfzi6ehaCqH99Vm0WpcGGDmFzLON7pI7 pZ4ekEetK3lEIRQSqyYVxk5rDqb89spcHWCI+4wbdnDn34O2ymTbzrjZeWv3f3EU H3giAIVUwE3EwAQgUUH7QApgDJee7SEyj3YGLQVkHEHMfxcSF94Z/BmfACeBYyek avCiMr5fSab/lWcpKGmp4PqWXwi2M8HTTMhJkOKcDGbphQqGdXnoHUzAWg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNVzdAgQ+HQSjVhynddo ZpNtbwxEMfxvLe62aQSyInmDsz0GLuEjiteBnig69KwLPSkxEPZUpJ1vU0JJD2U+ dyHVb+pcxr6xoHiKBq+FDK6FmqJUwbsQiI/d3GVZdejI3g6Tr5DB1FiqWInEfmWR TcUBPBuYVEiEO0HCJKprgWvJIPHaB9BfD5iCuQFPDaSlZ8Myb9ua+t7yv+4olrxh BO0zUBHvRohIerF19LeJNTusZ+QrQtDfNtT0LrX8eKu6YQrq+vdSuxxdWWs/5Nu1 /LSq6hf8ZbK7bMB16Aa1lJXVxGQ7ooc7toQVEubE/1D0CBnSunSb/wr2Z5H7unZD BwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15313149085092393315113184410853660688 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sst.sanoma.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22323198279793070467034917365718467626502854514167576314387817185043346415979817581850020493971793133568824674690481638761170389260855784128140200622379400689978950737581608086005245138751650194005668857689883334000986919871682197596687380759544606596280709384349944720373350054670718744492557295978607003234321263086685902181864147603593185450391649359827334735361183129793544012616288587260841711277881586677722522482604578285757871692739602338231336018067890009052744205937740509338687353036027426747865240463870654277948382368734940897186269107631412038291116622941241351749076516703750851173052968760705656701703 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bc44c8890db18385491e5878da1ac60a43d2c120 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sst.sanoma.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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