*.wrd-aws.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 09:d6:10:da:23:5f:f8:f8:df:a1:93:ff:fb:82:5f:a2 was issued on by Amazon.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.wrd-aws.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:d6:10:da:23:5f:f8:f8:df:a1:93:ff:fb:82:5f:a2Serial Number (int): 13074545291031781539397241103878086562
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9d:40:e2:56:f1:69:75:6f:7d:12:36:7b:06:c3:73:09:50:cb:00:8a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 81:11:60:60:a1:98:84:52:6e:72:df:79:bf:26:14:19:94:13:c1:d1
Fingerprint (sha256): 5a:5f:83:b4:8c:88:e6:f4:b0:8d:93:92:f5:94:5c:ea:d2:f3:11:b0:b7:c3:33:7c:42:68:58:31:d8:c5:69:c5
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.wrd-aws.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.wrd-aws.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.wrd-aws.com
de.business.renault.ch
renew.auto
fr.business.renault.ch
www.myr-de.renault.ch
it.business.renault.ch
*.renew.auto
www.business.renault.ch
www.myr-it.renault.ch
renault.ch
*.renault.ch
www.myr-fr.renault.ch
de.business.renault.ch
renew.auto
fr.business.renault.ch
www.myr-de.renault.ch
it.business.renault.ch
*.renew.auto
www.business.renault.ch
www.myr-it.renault.ch
renault.ch
*.renault.ch
www.myr-fr.renault.ch
Other certificates including the domain name wrd-aws.com
(limited to 100 certificates)
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
ren-it-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.public-alb-k8sone-dev-1-euw1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
static-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.internal.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
ren-it-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.public-alb-k8sone-dev-1-euw1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
static-wrd-prod-1.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.internal.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
*.wrd-aws.com
Certificate
The complete raw certificate details for *.wrd-aws.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgIQCdYQ2iNf+PjfoZP/+4JfojANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTEyMTAwMDAwMFoXDTI0MTIxOTIzNTk1OVowGDEW MBQGA1UEAwwNKi53cmQtYXdzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAJ9oK9A051LYt20l3TZrwjdxqaPvORiQ6GN5nATR3msTWQXQnZru8998 KjC2fra1yT46guBW+4ZUJ5RMHgkDc3hZkk5GtUATxx44dJCNyOlep9DHktYNQZYl PKowDiasPhjZhFFjZThTcEp4HI0WhD4PMYgJbb5uQFGb8RsQo8n5vgmltrFrQnhT uYkoynreovZfr4gvClRt4+/bFebU6YpoquzWEm59B81eMhvFdiZAoPlyDXmkq7AP bLtFCmtPHparzDmm7lbH+k3iClFCkSdo6k3z7ZFsn2ooKFJZCMejf3gqMrgKpxcD 6agnDFofwB40JyZb8O3M5DKsPTHctvcCAwEAAaOCA8QwggPAMB8GA1UdIwQYMBaA FFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBSdQOJW8Wl1b30SNnsGw3MJ UMsAijCB9AYDVR0RBIHsMIHpgg0qLndyZC1hd3MuY29tghZkZS5idXNpbmVzcy5y ZW5hdWx0LmNoggpyZW5ldy5hdXRvghZmci5idXNpbmVzcy5yZW5hdWx0LmNoghV3 d3cubXlyLWRlLnJlbmF1bHQuY2iCFml0LmJ1c2luZXNzLnJlbmF1bHQuY2iCDCou cmVuZXcuYXV0b4IXd3d3LmJ1c2luZXNzLnJlbmF1bHQuY2iCFXd3dy5teXItaXQu cmVuYXVsdC5jaIIKcmVuYXVsdC5jaIIMKi5yZW5hdWx0LmNoghV3d3cubXlyLWZy LnJlbmF1bHQuY2gwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9u dHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIE AgSCAW8EggFrAWkAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA AYvygdo1AAAEAwBHMEUCIB+6CAlTDJJwOJVWwOktOePcXdTJnL4AapEYReD7JoE1 AiEAyHJhG4hxjFSMM2XXWDwyw2gQOSI5g2wVKDJ2NPJEHwYAdgBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYvygdn7AAAEAwBHMEUCIQCWydPaY0Kz q56pJvHiVwcmplYVgeqhLd0trox9DFQFEQIgXdi6aVAL9bs9hu4fu6xHGIb2+gWx 3S6UVdoANR7VPY8AdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA AYvygdnbAAAEAwBIMEYCIQD4jt6bUHsdY13YZw/Gh3dR1z2hc0SCUOTbSq52Lvsc OQIhAMtqwP95c2glt/+cUbJ65mpOpAadd7qy38Nkc+PlKtQcMA0GCSqGSIb3DQEB CwUAA4IBAQAfwX8FcVqv+YtjC1Fa7SCFgvQqNbmloB77tFGVe6XR9solfSXYbExa R78c19LfYRk6+fKn45uKewY+tZA3Wj5qLyLs0FMkGh7fySwLFm25OeYj2+/rt6oz +xFoB2ONPwb/0pL+VaE0RM+Uf+wAjmHDUBoejk8B8bVoJD4T8rKRxmG8U0icT4j6 6ddyFlczjvtEmarnsGqO3eMrXYA5shlfRnE6LDBXSEnPsUNNKO5jpAv4mT2vYjvf GEfsUZ21FzaH9sCdu7x1VgnRUubVkMNiPIje29pGKGFTTwJ9J29rHofDCEdRx3SB ZsxwQtNU5bw62VTyiuOC9PffZafZ31TC -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2gr0DTnUti3bSXdNmvC N3Gpo+85GJDoY3mcBNHeaxNZBdCdmu7z33wqMLZ+trXJPjqC4Fb7hlQnlEweCQNz eFmSTka1QBPHHjh0kI3I6V6n0MeS1g1BliU8qjAOJqw+GNmEUWNlOFNwSngcjRaE Pg8xiAltvm5AUZvxGxCjyfm+CaW2sWtCeFO5iSjKet6i9l+viC8KVG3j79sV5tTp imiq7NYSbn0HzV4yG8V2JkCg+XINeaSrsA9su0UKa08elqvMOabuVsf6TeIKUUKR J2jqTfPtkWyfaigoUlkIx6N/eCoyuAqnFwPpqCcMWh/AHjQnJlvw7czkMqw9Mdy2 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13074545291031781539397241103878086562 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wrd-aws.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20123259196101396957873167270103596264037337816381141632352545627111087063913178775767348223461152924039660717554752458862329808967350576161075563112096272521116961303364926119483671143837302479530701153043207963546008472078561379312769695507112625647851918554231000836726092363278736766603812652715354277754782306527065369918173032076063125048658325694481610397242902861222709664608084140589897072174672514700953213456812332579062007966027067139617864626705882492129166925480839695853335475894828265769242751891135183226406312725454198825972005014394682482691716273244733149642996821986403752310101251468522329782007 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9d40e256f169756f7d12367b06c3730950cb008a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (236 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrd-aws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.business.renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renew.auto' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.business.renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-de.renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.business.renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renew.auto' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-it.renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renault.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr-fr.renault.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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