*.warnermedia.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0a:d5:6e:de:81:48:1f:29:b3:e0:01:47:bb:7b:89:8e was issued on by Amazon.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.warnermedia.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:d5:6e:de:81:48:1f:29:b3:e0:01:47:bb:7b:89:8eSerial Number (int): 14400487882436312952949250567666633102
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b8:88:ed:a3:11:cc:1b:d2:c0:55:ff:47:bb:c3:4d:0c:78:ac:49:85
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 95:e3:f6:50:29:8d:08:ad:1b:df:82:cd:78:6a:f8:b2:85:cb:81:2c
Fingerprint (sha256): 4f:58:a0:9e:3f:6b:e3:45:9f:9e:19:27:c6:4c:1e:50:f7:15:f5:76:07:73:24:2b:5c:12:d0:b0:30:26:8f:f6
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.warnermedia.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.warnermedia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.warnermedia.com
warnermedia.com
warnermediagroup.tech
timewarner.com
*.timewarner.com
*.warnermediaupfront.com
warnermediaupfront.com
*.warnermediagroup.com
warnermediagroup.com
*.warnermediagroup.tech
warnermedia.com
warnermediagroup.tech
timewarner.com
*.timewarner.com
*.warnermediaupfront.com
warnermediaupfront.com
*.warnermediagroup.com
warnermediagroup.com
*.warnermediagroup.tech
Other certificates including the domain name warnermedia.com
(limited to 100 certificates)
portal.dev-b2b.wmedia.tech
api.registration.content.warnermedia.com
catman.warnermedia.com
thv.warnermedia.com
tableau.east.warnermedia.com
partnerhub.qa-b2b.wmedia.tech
brian.warnermedia.com
turner.com
creativeshop-staging.warnermedia.com
briandev.warnermedia.com
neo-dev.wbd.com
wmosccmcmg.warnermedia.com
submitmobile-auth.dope.warnermedia.com
blueprint.prod-ops.wmedia.tech
uar.appsec-nonprod.cso.warnermedia.com
warnermedia.com
lactnfm03.wmad.warnermedia.com
cdn-hbomax.warnermedia.com
sni.cloudflaressl.com
image.20210419.200345.s6.et.yellsatcloud.com
qa.wmswagstore.warnermedia.com
atom-qa.warnermedia.com
*.warnermedia.com
spy-staging.warnermedia.com
tapkit.warnermedia.com
pages.onefifty.warnermedia.com
qaappcentralappservice1.warnermedia.com
catmanqa.warnermedia.com
*.css.cso.warnermedia.com
access.warnermedia.com
smee.appsec-nonprod.cso.warnermedia.com
tenableio.cso.warnermedia.com
qa.grafana.prism.warnermedia.com
testkitshop-staging.warnermedia.com
heimdall-old.appsec.cso.warnermedia.com
screentrack.warnermedia.com
CloudVDI.Warnermedia.com
wmosccmcmg.warnermedia.com
morph-web-app.dev-ops.wmedia.tech
epg.tapkit.warnermedia.com
turner.com
atom-git.reverse-proxy.appsec.cso.warnermedia.com
contentsecurity.warnermedia.com
*.dev.galileo.warnermedia.com
turner.com
qaiamservicesappservice1.warnermedia.com
iamadmindev.warnermedia.com
shazam-dev.warnermedia.com
feast.beta.dap.warnermedia.com
dsb.warnermedia.com
*.warnermedia.com
dev.wmswagstore.warnermedia.com
turner.com
devloginappservice.warnermedia.com
twd-vdi-pri.warnermedia.com
qaappcentralappservice1.warnermedia.com
api.registration.content.warnermedia.com
artemis.appsec-nonprod.cso.warnermedia.com
submitmobile.warnermedia.com
switchboard.cso.warnermedia.com
*.brandcenter.warnermedia.com
image.20210419.200345.s6.et.yellsatcloud.com
*.cso.warnermedia.com
milestone0.cso.warnermedia.com
admin-deliver-portal.dev-b2b.wmedia.tech
*.warnermedia.com
turner.com
catmanqaoffice.warnermedia.com
thv.warnermedia.com
ADMS.WMAD.WarnerMedia.com
admin-deliver-portal.qa-b2b.wmedia.tech
radiantldap.warnermedia.com
*.warnermedia.com
sni.cloudflaressl.com
sni.cloudflaressl.com
prodwestaupappservice1.warnermedia.com
kubeflow.beta.dap.warnermedia.com
thv.warnermedia.com
mstack.prod-ps.wmedia.tech
atom.warnermedia.com
lasso-web-ui.prod-ops.wmedia.tech
contentsecurity.warnermedia.com
dsb-dev.warnermedia.com
batmanapp.wcet-aio.warnermedia.com
msctoscalicensedr.wmad.warnermedia.com
sni.cloudflaressl.com
desktop.timewarner.com
maxdev-airflow.warnermedia.com
github.appsec.cso.warnermedia.com
prodwestiamadminappservice2.warnermedia.com
xytechatlantatest.warnermedia.com
deliver-portal.dev-b2b.wmedia.tech
prodlearning.warnermedia.com
edsapps-dev.warnermedia.com
return-dev.warnermedia.com
spy-dev.wbd.com
concertdatatest.warnermedia.com
ablink.mail.hbomax.com
prodeasticopappservice2.warnermedia.com
dev.thv.warnermedia.com
api.registration.content.warnermedia.com
catman.warnermedia.com
thv.warnermedia.com
tableau.east.warnermedia.com
partnerhub.qa-b2b.wmedia.tech
brian.warnermedia.com
turner.com
creativeshop-staging.warnermedia.com
briandev.warnermedia.com
neo-dev.wbd.com
wmosccmcmg.warnermedia.com
submitmobile-auth.dope.warnermedia.com
blueprint.prod-ops.wmedia.tech
uar.appsec-nonprod.cso.warnermedia.com
warnermedia.com
lactnfm03.wmad.warnermedia.com
cdn-hbomax.warnermedia.com
sni.cloudflaressl.com
image.20210419.200345.s6.et.yellsatcloud.com
qa.wmswagstore.warnermedia.com
atom-qa.warnermedia.com
*.warnermedia.com
spy-staging.warnermedia.com
tapkit.warnermedia.com
pages.onefifty.warnermedia.com
qaappcentralappservice1.warnermedia.com
catmanqa.warnermedia.com
*.css.cso.warnermedia.com
access.warnermedia.com
smee.appsec-nonprod.cso.warnermedia.com
tenableio.cso.warnermedia.com
qa.grafana.prism.warnermedia.com
testkitshop-staging.warnermedia.com
heimdall-old.appsec.cso.warnermedia.com
screentrack.warnermedia.com
CloudVDI.Warnermedia.com
wmosccmcmg.warnermedia.com
morph-web-app.dev-ops.wmedia.tech
epg.tapkit.warnermedia.com
turner.com
atom-git.reverse-proxy.appsec.cso.warnermedia.com
contentsecurity.warnermedia.com
*.dev.galileo.warnermedia.com
turner.com
qaiamservicesappservice1.warnermedia.com
iamadmindev.warnermedia.com
shazam-dev.warnermedia.com
feast.beta.dap.warnermedia.com
dsb.warnermedia.com
*.warnermedia.com
dev.wmswagstore.warnermedia.com
turner.com
devloginappservice.warnermedia.com
twd-vdi-pri.warnermedia.com
qaappcentralappservice1.warnermedia.com
api.registration.content.warnermedia.com
artemis.appsec-nonprod.cso.warnermedia.com
submitmobile.warnermedia.com
switchboard.cso.warnermedia.com
*.brandcenter.warnermedia.com
image.20210419.200345.s6.et.yellsatcloud.com
*.cso.warnermedia.com
milestone0.cso.warnermedia.com
admin-deliver-portal.dev-b2b.wmedia.tech
*.warnermedia.com
turner.com
catmanqaoffice.warnermedia.com
thv.warnermedia.com
ADMS.WMAD.WarnerMedia.com
admin-deliver-portal.qa-b2b.wmedia.tech
radiantldap.warnermedia.com
*.warnermedia.com
sni.cloudflaressl.com
sni.cloudflaressl.com
prodwestaupappservice1.warnermedia.com
kubeflow.beta.dap.warnermedia.com
thv.warnermedia.com
mstack.prod-ps.wmedia.tech
atom.warnermedia.com
lasso-web-ui.prod-ops.wmedia.tech
contentsecurity.warnermedia.com
dsb-dev.warnermedia.com
batmanapp.wcet-aio.warnermedia.com
msctoscalicensedr.wmad.warnermedia.com
sni.cloudflaressl.com
desktop.timewarner.com
maxdev-airflow.warnermedia.com
github.appsec.cso.warnermedia.com
prodwestiamadminappservice2.warnermedia.com
xytechatlantatest.warnermedia.com
deliver-portal.dev-b2b.wmedia.tech
prodlearning.warnermedia.com
edsapps-dev.warnermedia.com
return-dev.warnermedia.com
spy-dev.wbd.com
concertdatatest.warnermedia.com
ablink.mail.hbomax.com
prodeasticopappservice2.warnermedia.com
dev.thv.warnermedia.com
Certificate
The complete raw certificate details for *.warnermedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGlDCCBXygAwIBAgIQCtVu3oFIHymz4AFHu3uJjjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIyMjAwMDAwMFoXDTIzMDgxNjIzNTk1OVowHDEa MBgGA1UEAwwRKi53YXJuZXJtZWRpYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOPSGjh7gGnUS0t73rqxXF9ZaVZAEitNpnmCkgFnkw+Btc2jDA /CQWuvWG+6DNmmuxN0ANyArFwZn3TjvEa5CgpKjhe/MWOFJ7z9DYYERwmzDPEu6B ZCkVTxGemWpkQekkejdD5TBDdYvTE/CdeAoVBhyO76W5Q6rdgFo59Xuo5oGIAFEL 16tvqF2BKAmQLMLizfgOob0hGtbgv/+hz+Z2VAYLLTHuP+P50WU+tXmJBhxWzW3A WMsyOH78RZ+Ij8jJehP/Tt3stiZQJOWVn00YFRDut/Dw5UHFiD22uA7IUn/hWWEB TKGQYCrPt8m7BMvOgXNtWRh578i4wuX61T+fAgMBAAGjggOwMIIDrDAfBgNVHSME GDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUuIjtoxHMG9LAVf9H u8NNDHisSYUwgeEGA1UdEQSB2TCB1oIRKi53YXJuZXJtZWRpYS5jb22CD3dhcm5l cm1lZGlhLmNvbYIVd2FybmVybWVkaWFncm91cC50ZWNogg50aW1ld2FybmVyLmNv bYIQKi50aW1ld2FybmVyLmNvbYIYKi53YXJuZXJtZWRpYXVwZnJvbnQuY29tghZ3 YXJuZXJtZWRpYXVwZnJvbnQuY29tghYqLndhcm5lcm1lZGlhZ3JvdXAuY29tghR3 YXJuZXJtZWRpYWdyb3VwLmNvbYIXKi53YXJuZXJtZWRpYWdyb3VwLnRlY2gwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9y Mm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAx LmNlcjAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwCt 9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYZ6PzfDAAAEAwBIMEYC IQCIUOnHJ9Gd2iUAukY+BqQu5kCXA0ZNvr73DT21fXzUVwIhAMteyNAQuruhyAZR FeeGCAY/Ym963qq2OLO289lBHGs4AHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH 3PADDnk2pZoAAAGGej83/AAABAMARjBEAiADasRUHlmS0x9fratauAMVVkd3bd+I 47m3zG3nYS4VtAIgL8dRBGcMw6K1y5TvqWfQsVnLHHPLeUChd8irJwhL6RgAdgC3 Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYZ6PzekAAAEAwBHMEUC ID9C6aDfJ3nNlkAvSrQhubW9OnOpLze6f4fsi62UnMdjAiEAiIkwMUoOhzactXtP XGcD6o4KnYHoWPn7JV6PUWw0YuUwDQYJKoZIhvcNAQELBQADggEBALVAugIJo4Gl mzZr0b61+tZbEjV2BYethXcANJKv2QLEWmvMOlH0CnsxUIhoo80+84f67ZDnz8z+ n0S3CSNc9D84ozETfuLJ1iTHnONWKtSYLiq1kpqz82V5E2C75G342dhHrqfraZv0 EtTbBtLEl5QCoIUa3B1EcODNYxziJqz1tfiiekJgCjxO8IJTjr7B4oO6YirnTx7N XDpKNRgfEr1VzaBWzKPktQT4Z8J2aWHbhfBPDcoaRZ7l/yPRqWI0Oa02ANyJ+/L4 O6fU6kcHgfMSd91Bdnh3vJ18JLLpxylicXeVX+cZ4NxQPbEqyzR4EbBkLAYdGkc/ AXIZ2v4gZHw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj0ho4e4Bp1EtLe966sV xfWWlWQBIrTaZ5gpIBZ5MPgbXNowwPwkFrr1hvugzZprsTdADcgKxcGZ9047xGuQ oKSo4XvzFjhSe8/Q2GBEcJswzxLugWQpFU8RnplqZEHpJHo3Q+UwQ3WL0xPwnXgK FQYcju+luUOq3YBaOfV7qOaBiABRC9erb6hdgSgJkCzC4s34DqG9IRrW4L//oc/m dlQGCy0x7j/j+dFlPrV5iQYcVs1twFjLMjh+/EWfiI/IyXoT/07d7LYmUCTllZ9N GBUQ7rfw8OVBxYg9trgOyFJ/4VlhAUyhkGAqz7fJuwTLzoFzbVkYee/IuMLl+tU/ nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14400487882436312952949250567666633102 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.warnermedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26035235840618811791984556629103376620219530672311679884340955272982647032030585872543623787858892930256056469360241723301639946789747321094249220167277222173285239691493993073106025846865171635966981450572658433944558522586013871903757401507492133350119686494956139994394795319567269027869993724338844441649208119492650261162423461100546190931358541485275233622414721267794836647310942384544268414635005543303188339121918631540520527891718028961283961923676567218174054187991552913989920102121279130941983884374745175575200043976901845099405374244903576909494356805394228240076363485935289066110634970840990068588447 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b888eda311cc1bd2c055ff47bbc34d0c78ac4985 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermediagroup.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timewarner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timewarner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediaupfront.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermediaupfront.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediagroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warnermediagroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warnermediagroup.tech' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b540ba0209a381a59b366bd1beb5fad65b1235760587ad8577003492afd902c45a6bcc3a51f40a7b31508868a3cd3ef387faed90e7cfccfe9f44b709235cf43f38a331137ee2c9d624c79ce3562ad4982e2ab5929ab3f365791360bbe46df8d9d847aea7eb699bf412d4db06d2c4979402a0851adc1d4470e0cd631ce226acf5b5f8a27a42600a3c4ef082538ebec1e283ba622ae74f1ecd5c3a4a35181f12bd55cda056cca3e4b504f867c2766961db85f04f0dca1a459ee5ff23d1a9623439ad3600dc89fbf2f83ba7d4ea470781f31277dd41767877bc9d7c24b2e9c729627177955fe719e0dc503db12acb347811b0642c061d1a473f017219dafe20647c