terraform-aws-lambda-7a9d.oss.champtest.net
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 01:0f:09:d5:33:83:39:4b:c1:79:6a:aa:af:1e:d6:c3 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=terraform-aws-lambda-7a9d.oss.champtest.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:0f:09:d5:33:83:39:4b:c1:79:6a:aa:af:1e:d6:c3Serial Number (int): 1407311881890362046264222883002635971
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 2a:91:52:71:b7:3b:5b:1b:66:50:ef:c5:7f:69:e4:ed:bf:1f:c7:4d
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 2e:27:fc:4e:3b:7b:55:01:78:ce:46:4a:65:d8:12:73:83:28:49:1b
Fingerprint (sha256): 4d:28:ef:2a:be:21:c1:a9:e8:a7:89:d2:fd:00:fe:61:66:ba:ae:78:b3:bd:e8:2b:88:4c:e4:3b:1a:c8:97:47
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate terraform-aws-lambda-7a9d.oss.champtest.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for terraform-aws-lambda-7a9d.oss.champtest.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
terraform-aws-lambda-7a9d.oss.champtest.net
Other certificates including the domain name champtest.net
(limited to 100 certificates)
*.oss.champtest.net
*.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-api-gateway2-utqep.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak-y1pmu.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-alb.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-alb.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-api-gateway-rgvk7.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-6yph6.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
terraform-aws-api-gateway-w453f.oss.champtest.net
keycloak-6k58m.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-api-gateway-npx68.oss.champtest.net
keycloak-waj09.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway2-6bom4.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
keycloak-6f0p6.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
keycloak-me1sy.oss.champtest.net
keycloak-rafp4.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-crx4j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-api-gateway-smd7j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
keycloak-c84nr.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-acm.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-8575.oss.champtest.net
metabase-report-executor.oss.champtest.net
cc-cade.ephemeral.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-hr4vv.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-lambda-3db2.oss.champtest.net
*.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
*.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
terraform-aws-api-gateway1-utqep.oss.champtest.net
terraform-aws-lambda-93c8.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
*.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-7451.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-xu5wr.oss.champtest.net
terraform-aws-alb.oss.champtest.net
*.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-api-gateway2-utqep.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak-y1pmu.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-alb.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-alb.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-api-gateway-rgvk7.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-6yph6.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
terraform-aws-api-gateway-w453f.oss.champtest.net
keycloak-6k58m.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-api-gateway-npx68.oss.champtest.net
keycloak-waj09.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway2-6bom4.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
keycloak-6f0p6.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
keycloak-me1sy.oss.champtest.net
keycloak-rafp4.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-crx4j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-api-gateway-smd7j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
keycloak-c84nr.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-acm.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-8575.oss.champtest.net
metabase-report-executor.oss.champtest.net
cc-cade.ephemeral.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-hr4vv.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-lambda-3db2.oss.champtest.net
*.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
*.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
terraform-aws-api-gateway1-utqep.oss.champtest.net
terraform-aws-lambda-93c8.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
*.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-7451.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-xu5wr.oss.champtest.net
terraform-aws-alb.oss.champtest.net
Certificate
The complete raw certificate details for terraform-aws-lambda-7a9d.oss.champtest.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElTCCA32gAwIBAgIQAQ8J1TODOUvBeWqqrx7WwzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIwOTAwMDAwMFoXDTI1MDEwNjIzNTk1OVowNjE0 MDIGA1UEAxMrdGVycmFmb3JtLWF3cy1sYW1iZGEtN2E5ZC5vc3MuY2hhbXB0ZXN0 Lm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL7xgnuIVIToJV7K 1w3O5POZGw4Pv3cDDTiVQJhkl33kxX0CxKF5Bxg/QXiEp9tY+8AjiiuIsod4vbmG 7IqlOz7IqPirF93iG436v15LjCq7EiBJCFIol0l+/VZqVSouRnBzztuYYLfjMewr MU+r5WrVNsN537kXdRjPy40C3S30nijtWiIzgPvEfpWJtnnL6Wg1u2h/T915aUD3 Lk9+prthuvqu21iOkjfx6kemHuR2OrqYB4hEWmwL/O0OegySdbkce8UYcLUWVzhW 50dGSJJ4OWAgyUSyaT6YZjrZCQLMT+HnOhBfRpside0ONFSU5CS/pAjMOrOAxbX9 UFHjCKUCAwEAAaOCAZcwggGTMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB 1y4CMB0GA1UdDgQWBBQqkVJxtztbG2ZQ78V/aeTtvx/HTTA2BgNVHREELzAtgit0 ZXJyYWZvcm0tYXdzLWxhbWJkYS03YTlkLm9zcy5jaGFtcHRlc3QubmV0MBMGA1Ud IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w My5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsG AQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5j ZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEAfz4P7d6k6haDKQGNZLc7jlhBS36j0odZ2A0Codt7GYT8FSqZNlhj 8t05d2IPnjKBo3AzE3jbgQ53TgyG871QMsK9nOAyJNZxe6Lizagd/9ptEuyjgv/R vw6KYY+XuznPcpovFf4PFeCTnO5V0GLWGYqQv/HHvBi+Vfwemtx774svcvu+c1X6 FtkHxqbPzt4ksWvs5+97+1boap2Qn60kEET35ThbidJM4NCDG+ohGwfkZl5urPEL MhOwFp8ydbE0x8tyQgF9t2ye78Uh13pnKn3hOhQ0Udsi2iGumsK/OlTwgl9KHxW5 DbTleA7+kBfvF+9W4johFF+l/UR89+/VlA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvGCe4hUhOglXsrXDc7k 85kbDg+/dwMNOJVAmGSXfeTFfQLEoXkHGD9BeISn21j7wCOKK4iyh3i9uYbsiqU7 Psio+KsX3eIbjfq/XkuMKrsSIEkIUiiXSX79VmpVKi5GcHPO25hgt+Mx7CsxT6vl atU2w3nfuRd1GM/LjQLdLfSeKO1aIjOA+8R+lYm2ecvpaDW7aH9P3XlpQPcuT36m u2G6+q7bWI6SN/HqR6Ye5HY6upgHiERabAv87Q56DJJ1uRx7xRhwtRZXOFbnR0ZI kng5YCDJRLJpPphmOtkJAsxP4ec6EF9GmyJ17Q40VJTkJL+kCMw6s4DFtf1QUeMI pQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1407311881890362046264222883002635971 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'terraform-aws-lambda-7a9d.oss.champtest.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24104370814019235511650507585290754844991146854267678814356708602087278553501335574836529267336865216637714833838411157685029132808225100842502907977297004370865522167548885144113019225215089427618136867749965939181618619741481411414399401900782359714199073627523662632764086631717268833107939317208089359131601557724259561194560445254203795163063112288387558249246072973451433517446667457570871491506836097283456700382597220501941663979388848891587963587485518487999390288804463499862021480882786963536440343340767359215322191420492173571741726147301677285402897932195998197378289210813326085632120166143856746891429 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a915271b73b5b1b6650efc57f69e4edbf1fc74d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terraform-aws-lambda-7a9d.oss.champtest.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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