*.sandbox.psl.charac.co.uk
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 03:52:3f:88:5f:e0:b0:c2:37:2b:6e:42:e5:ce:9a:d9 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.sandbox.psl.charac.co.uk
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:52:3f:88:5f:e0:b0:c2:37:2b:6e:42:e5:ce:9a:d9Serial Number (int): 4414740926262445515203729429531368153
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 1d:3f:36:59:45:51:b9:b9:ce:6a:18:82:ef:93:ec:28:f0:5c:37:26
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 13:fb:6a:8e:81:ed:87:b5:7c:de:88:43:42:93:b6:ee:e4:dc:b0:17
Fingerprint (sha256): 55:c2:d6:82:ac:e0:d8:8b:98:d1:4a:18:85:a9:82:9e:6f:84:7a:c7:1b:8b:96:e4:70:aa:33:66:eb:76:71:12
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.sandbox.psl.charac.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.sandbox.psl.charac.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.sandbox.psl.charac.co.uk
Other certificates including the domain name charac.co.uk
(limited to 100 certificates)
tls.automattic.com
charac.co.uk
callback.topinsure.ie
tls.automattic.com
projects.nybe.be
projects.nybe.be
projects.accountsprojects.uk
www.charac.co.uk
apply.leadingedgeaviation.com
*.sandbox.charac.co.uk
projects.publisherpro.app
*.charac.co.uk
projects.avsolutions.no
bookings.charac.co.uk
tls.automattic.com
booknow.michaelbanks.photo
project.thecodingmachine.com
project.thecodingmachine.com
bookings.charac.co.uk
projects.timberplus.com
projects.qnetix.io
apply.leadingedgeaviation.com
projects.publisherpro.app
*.sandbox.psl.charac.co.uk
notification-consolidation-prd.bullens.charac.co.uk
projects.inspirext.com
projects.lensenergie.nl
im1-cron-prd.bullens.charac.co.uk
tracking-web-prd.bullens.charac.co.uk
projects.publisherpro.app
projects.bridgemaker.co.uk
projects.purple-banana.nl
projekte.jp-networks.de
projects.inspirext.com
charac.co.uk
imworkingonit.thirtynin.com
*.sandbox.psl.charac.co.uk
booknow.michaelbanks.photo
projects.nybe.be
*.charac.co.uk
bookings.routescoaching.com
projects.windcores.de
projects.deyerl-consulting.de
project.thecodingmachine.com
asapp.charac.co.uk
tls.automattic.com
projects.nybe.be
projects.nybe.be
project.thecodingmachine.com
delivery-order-cron-prd.bullens.charac.co.uk
apply.leadingedgeaviation.com
projects.windcores.de
tls.automattic.com
callback.topinsure.ie
projects.qnetix.io
callback.topinsure.ie
tls.automattic.com
project.thecodingmachine.com
support.goatsign.io
tls.automattic.com
notification-hub-prd.bullens.charac.co.uk
project.schwedv.de
bullens-api-prd.bullens.charac.co.uk
delivery-order-api-prd.bullens.charac.co.uk
projects.nybe.be
projects.accountsprojects.uk
tls.automattic.com
project.thecodingmachine.com
*.charac.co.uk
imworkingonit.thirtynin.com
projects.lensenergie.nl
projects.timberplus.com
project.thecodingmachine.com
projects.inspirext.com
projects.inspirext.com
delivery-order-api-prd.bullens.charac.co.uk
*.charac.co.uk
bookings.charac.co.uk
bullens-api-prd.bullens.charac.co.uk
projects.lensenergie.nl
kyc.xstreco.com
projects.nybe.be
notification-consolidation-prd.bullens.charac.co.uk
tls.automattic.com
tls.automattic.com
projects.avsolutions.no
im1-cron-prd.bullens.charac.co.uk
projets.fluditec.fr
bookings.charac.co.uk
projects.tebel.de
main-app-prd.bullens.charac.co.uk
tracking-cron-prd.bullens.charac.co.uk
imworkingonit.thirtynin.com
projects.inspirext.com
projects.publisherpro.app
booknow.michaelbanks.photo
projet.resotel.info
charac.co.uk
callback.topinsure.ie
projects.nybe.be
charac.co.uk
callback.topinsure.ie
tls.automattic.com
projects.nybe.be
projects.nybe.be
projects.accountsprojects.uk
www.charac.co.uk
apply.leadingedgeaviation.com
*.sandbox.charac.co.uk
projects.publisherpro.app
*.charac.co.uk
projects.avsolutions.no
bookings.charac.co.uk
tls.automattic.com
booknow.michaelbanks.photo
project.thecodingmachine.com
project.thecodingmachine.com
bookings.charac.co.uk
projects.timberplus.com
projects.qnetix.io
apply.leadingedgeaviation.com
projects.publisherpro.app
*.sandbox.psl.charac.co.uk
notification-consolidation-prd.bullens.charac.co.uk
projects.inspirext.com
projects.lensenergie.nl
im1-cron-prd.bullens.charac.co.uk
tracking-web-prd.bullens.charac.co.uk
projects.publisherpro.app
projects.bridgemaker.co.uk
projects.purple-banana.nl
projekte.jp-networks.de
projects.inspirext.com
charac.co.uk
imworkingonit.thirtynin.com
*.sandbox.psl.charac.co.uk
booknow.michaelbanks.photo
projects.nybe.be
*.charac.co.uk
bookings.routescoaching.com
projects.windcores.de
projects.deyerl-consulting.de
project.thecodingmachine.com
asapp.charac.co.uk
tls.automattic.com
projects.nybe.be
projects.nybe.be
project.thecodingmachine.com
delivery-order-cron-prd.bullens.charac.co.uk
apply.leadingedgeaviation.com
projects.windcores.de
tls.automattic.com
callback.topinsure.ie
projects.qnetix.io
callback.topinsure.ie
tls.automattic.com
project.thecodingmachine.com
support.goatsign.io
tls.automattic.com
notification-hub-prd.bullens.charac.co.uk
project.schwedv.de
bullens-api-prd.bullens.charac.co.uk
delivery-order-api-prd.bullens.charac.co.uk
projects.nybe.be
projects.accountsprojects.uk
tls.automattic.com
project.thecodingmachine.com
*.charac.co.uk
imworkingonit.thirtynin.com
projects.lensenergie.nl
projects.timberplus.com
project.thecodingmachine.com
projects.inspirext.com
projects.inspirext.com
delivery-order-api-prd.bullens.charac.co.uk
*.charac.co.uk
bookings.charac.co.uk
bullens-api-prd.bullens.charac.co.uk
projects.lensenergie.nl
kyc.xstreco.com
projects.nybe.be
notification-consolidation-prd.bullens.charac.co.uk
tls.automattic.com
tls.automattic.com
projects.avsolutions.no
im1-cron-prd.bullens.charac.co.uk
projets.fluditec.fr
bookings.charac.co.uk
projects.tebel.de
main-app-prd.bullens.charac.co.uk
tracking-cron-prd.bullens.charac.co.uk
imworkingonit.thirtynin.com
projects.inspirext.com
projects.publisherpro.app
booknow.michaelbanks.photo
projet.resotel.info
charac.co.uk
callback.topinsure.ie
projects.nybe.be
Certificate
The complete raw certificate details for *.sandbox.psl.charac.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEczCCA1ugAwIBAgIQA1I/iF/gsMI3K25C5c6a2TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDUyMzAwMDAwMFoXDTI1MDYyMjIzNTk1OVowJTEj MCEGA1UEAwwaKi5zYW5kYm94LnBzbC5jaGFyYWMuY28udWswggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDJnMUWvGak4cIX/5x+Tm1kVUqlofa8WBvDiEMS f4G0PLgn5negKrxTT4/Cmb+UaOLkdWjkua2rWAsnTmOs4WFRF1y/s7OO+yxXYMRR D8z9ZlirQP6K3+dVOcvCuPGTd0mvxKkbMcjODG9lLzS3PnX8JmFgbqQq0Tdwi2ix oYHrzewmutVPU7SN89J7DO371crsRVLUqKQww0kUjxo/azcRV9Kcw1d/DWwgDxgD bOGlmra5UfOa8DrR2VPvZ/t/mxj7UnFTSBRTV0VGUei+QUkPAB11MEJUY3QWkNMZ Y45hIVX4DD+rjxBwvW1DU0Nlnl5y0WlgyY4gC3xSodN1VFY1AgMBAAGjggGGMIIB gjAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUHT82 WUVRubnOahiC75PsKPBcNyYwJQYDVR0RBB4wHIIaKi5zYW5kYm94LnBzbC5jaGFy YWMuY28udWswEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo dHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1 c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8E AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWBT5DUEobYiCQKCqzR7NvYt6IcvX5Ztiq 1mA0+N65NaKBRGJP6/JOro+RXvgq1fwPMxvKveOzwdiP05PvN+jKtqQJAfjoyFTp eKyZAK4V+/TPYF049mwQgEm+jz9xwgPryJDtM5qe/uh1ysk/0mS+fZ2xl8aSgrEy cBj4kbEi7RI8svQVkkC6v58qMJRB0vjO1ExZv55hfoHBFeWgZ/+HvKQI07zWBKsN cs/N7vkH2M8lLiMJ/3bXM+ZSd0OSiQDbTbtE+RJU2uPcrXnvlw1+/a8JfUIE0DV/ gT1FoYIYm4qwJukskMNH16JuQL6B5avnRocwquLjFL1fWsOuXG6K -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZzFFrxmpOHCF/+cfk5t ZFVKpaH2vFgbw4hDEn+BtDy4J+Z3oCq8U0+Pwpm/lGji5HVo5Lmtq1gLJ05jrOFh URdcv7OzjvssV2DEUQ/M/WZYq0D+it/nVTnLwrjxk3dJr8SpGzHIzgxvZS80tz51 /CZhYG6kKtE3cItosaGB683sJrrVT1O0jfPSewzt+9XK7EVS1KikMMNJFI8aP2s3 EVfSnMNXfw1sIA8YA2zhpZq2uVHzmvA60dlT72f7f5sY+1JxU0gUU1dFRlHovkFJ DwAddTBCVGN0FpDTGWOOYSFV+Aw/q48QcL1tQ1NDZZ5ectFpYMmOIAt8UqHTdVRW NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4414740926262445515203729429531368153 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sandbox.psl.charac.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25451205406342964152964200068829308910158537001678449045163106458771052365180573869909807257718881693168539016956283113147951264450259380179097017014062754872361893183309317152314470852634587869340184193126407437445907509090510134604296128558187663313922907610035320692220836250461113664522943259024229357879824943154138185502177025789994059088140104467264874854822807491229052238317637937469383792087486385443568234582625816432160746631860972159238760427013498784705957902800568502572950014603324409700825057840004966206307292280350673359238466436433716171722270556258070635949003212684953224315666109187506927064629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1d3f36594551b9b9ce6a1882ef93ec28f05c3726 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.psl.charac.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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