tf-r53-health-check.oss.champtest.net
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0d:89:c3:c7:3f:05:21:53:e5:ab:df:c2:06:60:e4:a2 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=tf-r53-health-check.oss.champtest.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:89:c3:c7:3f:05:21:53:e5:ab:df:c2:06:60:e4:a2Serial Number (int): 17995279470603987780760093181840778402
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a8:ea:d9:1b:30:7b:8c:1d:50:82:9f:a0:34:8f:a4:48:1a:91:89:eb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 35:b1:ec:82:a8:d1:fd:e7:4f:e3:9e:3e:88:c4:9b:40:d8:56:3c:86
Fingerprint (sha256): 4f:c3:13:80:28:7c:17:f8:8a:fc:91:11:dc:58:ea:9d:79:d6:2f:56:11:4f:1f:97:fc:9c:08:f1:7c:4d:3c:3b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate tf-r53-health-check.oss.champtest.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tf-r53-health-check.oss.champtest.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tf-r53-health-check.oss.champtest.net
Other certificates including the domain name champtest.net
(limited to 100 certificates)
*.oss.champtest.net
*.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-api-gateway2-utqep.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak-y1pmu.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-alb.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-api-gateway-rgvk7.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-6yph6.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
terraform-aws-api-gateway-w453f.oss.champtest.net
keycloak-6k58m.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-api-gateway-npx68.oss.champtest.net
keycloak-waj09.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway2-6bom4.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
keycloak-6f0p6.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
keycloak-me1sy.oss.champtest.net
keycloak-rafp4.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-crx4j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-api-gateway-smd7j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
keycloak-c84nr.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-acm.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-8575.oss.champtest.net
metabase-report-executor.oss.champtest.net
cc-cade.ephemeral.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-hr4vv.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-lambda-3db2.oss.champtest.net
*.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
*.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
terraform-aws-api-gateway1-utqep.oss.champtest.net
terraform-aws-lambda-93c8.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
*.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-7451.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-xu5wr.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-api-gateway2-utqep.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak-y1pmu.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-alb.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-api-gateway-rgvk7.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-6yph6.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
terraform-aws-api-gateway-w453f.oss.champtest.net
keycloak-6k58m.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-api-gateway-npx68.oss.champtest.net
keycloak-waj09.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway2-6bom4.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
keycloak-6f0p6.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
keycloak-me1sy.oss.champtest.net
keycloak-rafp4.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-crx4j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-api-gateway-smd7j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
keycloak-c84nr.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-acm.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-8575.oss.champtest.net
metabase-report-executor.oss.champtest.net
cc-cade.ephemeral.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-hr4vv.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-lambda-3db2.oss.champtest.net
*.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
*.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
terraform-aws-api-gateway1-utqep.oss.champtest.net
terraform-aws-lambda-93c8.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
*.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-7451.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-xu5wr.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-core.oss.champtest.net
Certificate
The complete raw certificate details for tf-r53-health-check.oss.champtest.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEiTCCA3GgAwIBAgIQDYnDxz8FIVPlq9/CBmDkojANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNjAwMDAwMFoXDTI1MDEwMzIzNTk1OVowMDEu MCwGA1UEAxMldGYtcjUzLWhlYWx0aC1jaGVjay5vc3MuY2hhbXB0ZXN0Lm5ldDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhpmgn8jaDd5jeFT2ELi8iB /9JghdlE5qBW3QI2dI3g8HpcxP2DZGCF5aQ/lWKejOdmJmfqb9+B1pQD625ZvmXT +Y4655bvC1b/W7RR2y+v+abIXhIbQkzzuYEz8t5kJVYB8wiCrTUYIS1gnCEpErMI XoIph8+BNfPSlVQEfFKu0TzktYmjmCMCmvBuhaaCRfS3imgL8cbgVblszQQY4GX9 g/k1aluQy1qE6GccnJQSBHLAO+3LOInVvJCTpD95jfdM1AgcSYrdJfJTdWsOe3LZ /t1Tw1yJNN/OJLlzXDZ7AfSATWKEQTzZBdsPgi0zJL0T4fOAxRdn1eQd48wOHS0C AwEAAaOCAZEwggGNMB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0G A1UdDgQWBBSo6tkbMHuMHVCCn6A0j6RIGpGJ6zAwBgNVHREEKTAngiV0Zi1yNTMt aGVhbHRoLWNoZWNrLm9zcy5jaGFtcHRlc3QubmV0MBMGA1UdIAQMMAowCAYGZ4EM AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVz dC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/ BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvq7 zZ3CJwB1usacifnAAmIwni8t8IfOmNHq1awJQvm6apkIGPpbFNHBPfR2BbNJ77eD noR/U/C6fqvhxXj+LxTlgfaYf0Dw1efgN2cE4pCvcys8h7uLkceTfSwoEK1qVp5H kjeiO8ABeSXv5aA14r6K7VqfS88p1BzzA5kOAlWvRQ3SJ6oIMGiGeyljLZ6jpgyP pp9HV/DPulsEaM7yBEYmlcpKu9ZD/s9dX3p2ej2xVGq2gxu7gsjkmhXKc7OVy8hC Q3rNs2PQx15aQiPlRlgfHg1/0SUakG5vhkyk4JUUjUrDhX2L07GevxZvrjTzYHQ/ SlBWOpNws6ArJ/TBLQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GmaCfyNoN3mN4VPYQuL yIH/0mCF2UTmoFbdAjZ0jeDwelzE/YNkYIXlpD+VYp6M52YmZ+pv34HWlAPrblm+ ZdP5jjrnlu8LVv9btFHbL6/5psheEhtCTPO5gTPy3mQlVgHzCIKtNRghLWCcISkS swhegimHz4E189KVVAR8Uq7RPOS1iaOYIwKa8G6FpoJF9LeKaAvxxuBVuWzNBBjg Zf2D+TVqW5DLWoToZxyclBIEcsA77cs4idW8kJOkP3mN90zUCBxJit0l8lN1aw57 ctn+3VPDXIk0384kuXNcNnsB9IBNYoRBPNkF2w+CLTMkvRPh84DFF2fV5B3jzA4d LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17995279470603987780760093181840778402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tf-r53-health-check.oss.champtest.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29339360898564151833828980260257813645884964199242738938286315397546830679167440673909332716586885607909666234191148076923395333251727570239071985004186239978670280859631284574922985037550525387656755117080093511076359358270371039937236064085803527945793889668630822822323010554364148056029347407491521517739553399918293285406392547795690026065188960200769409797511602295441884972272535405346483388667022605791298759832936431573553854272371114470459022081366505010505740773778423479301298141349330293989673337315207276136207714513106009666011022550293531308915286801183108998449251663840001690997459295965138943614253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a8ead91b307b8c1d50829fa0348fa4481a9189eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf-r53-health-check.oss.champtest.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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