jamf.lennox.k12.ca.us
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0a:9e:da:46:f6:59:9e:10:4b:dd:0c:ca:1e:47:0b:00 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=jamf.lennox.k12.ca.us
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:9e:da:46:f6:59:9e:10:4b:dd:0c:ca:1e:47:0b:00Serial Number (int): 14117090049004286805517268142747224832
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 92:bf:0d:4f:9f:44:2b:c0:66:63:e1:97:cf:39:e4:8f:db:fb:89:0c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 1c:94:f3:14:6a:42:ea:c4:65:a2:5e:1c:de:a4:38:3a:0c:b0:9e:a1
Fingerprint (sha256): 5a:a0:f4:22:bc:7d:c9:03:a5:10:04:d1:b1:ea:c3:b8:cb:ce:8a:3b:6f:e6:91:aa:b3:59:d8:e8:db:87:8f:ea
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate jamf.lennox.k12.ca.us
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jamf.lennox.k12.ca.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jamf.lennox.k12.ca.us
Other certificates including the domain name lennox.k12.ca.us
(limited to 100 certificates)
admin.bronxbetterlearning.net
jamf.lennox.k12.ca.us
ehkeys.ossdms.org
2.bronxbetterlearning.net
lennox.k12.ca.us
northprimary.kiskiarea.com
2.bronxbetterlearning.net
komarek94.org
admin.eastprimary.kiskiarea.com
abramfriedmanoc.org
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
www.sanjoseprep.org
2.bronxbetterlearning.net
2.bronxbetterlearning.org
centroculturaljalilgibran.edu.mx
acldtillotsonschool.org
www.grandville.k12.mi.us
stbern.net
www.pilibospreschool.org
*.lennox.k12.ca.us
2.bronxbetterlearning.net
abramfriedmanoc.org
bronxbetterlearning.net
acldtillotsonschool.org
www.grandville.k12.mi.us
2.bronxbetterlearning.net
admin.athletics.deperek12.org
landrum.sbcisd.net
kernhighnetwork.net
jamf.lennox.k12.ca.us
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
2.bronxbetterlearning.net
academyofthecanyons.net
www.unionsquareacademy.org
www.stnorbertschool.org
www.ciudaddelosninoscr.org
mis.edu.mx
www.narbonnehsgauchos.com
lennox.k12.ca.us
sa.snowlineschools.com
admin.icabh.org
admin.bme.snowlineschools.com
ckr01.lennox.k12.ca.us
www.madisonmonterrey.edu.mx
stnorbertschool.org
www.kernhighnetwork.net
acldtillotsonschool.org
barbaravick.org
2.bronxbetterlearning.net
lennox.k12.ca.us
admin.centroculturaljalilgibran.edu.mx
www.corecharter.org
lennox.k12.ca.us
2.bronxbetterlearning.org
admin.stjoseph-school.org
2.bronxbetterlearning.net
academyofthecanyons.net
samuelgompersms.net
acldtillotsonschool.org
www.stbern.net
web.euroamericano.edu.mx
2.bronxbetterlearning.org
www.jaselu.com.mx
admin.dchs.davidson.k12.nc.us
www.grandville.k12.mi.us
lennox.k12.ca.us
mcs.k12.ny.us
2.bronxbetterlearning.net
aak.potsdam.k12.ny.us
academyofthecanyons.net
aacs.net
acldtillotsonschool.org
2.bronxbetterlearning.org
lennox.k12.ca.us
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
2.bronxbetterlearning.org
2.bronxbetterlearning.net
mcs.k12.ny.us
doe.as
admin.semperaltius.edu.mx
*.lennox.k12.ca.us
aak.potsdam.k12.ny.us
lennox.k12.ca.us
lennox.k12.ca.us
stroseschoolwilmington.org
2.bronxbetterlearning.org
bbjh.magnoliaisd.org
acldtillotsonschool.org
sketches.edlio.com
bcsdk12.org
2.bronxbetterlearning.org
academyofthecanyons.net
jamf.lennox.k12.ca.us
ehkeys.ossdms.org
2.bronxbetterlearning.net
lennox.k12.ca.us
northprimary.kiskiarea.com
2.bronxbetterlearning.net
komarek94.org
admin.eastprimary.kiskiarea.com
abramfriedmanoc.org
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
www.sanjoseprep.org
2.bronxbetterlearning.net
2.bronxbetterlearning.org
centroculturaljalilgibran.edu.mx
acldtillotsonschool.org
www.grandville.k12.mi.us
stbern.net
www.pilibospreschool.org
*.lennox.k12.ca.us
2.bronxbetterlearning.net
abramfriedmanoc.org
bronxbetterlearning.net
acldtillotsonschool.org
www.grandville.k12.mi.us
2.bronxbetterlearning.net
admin.athletics.deperek12.org
landrum.sbcisd.net
kernhighnetwork.net
jamf.lennox.k12.ca.us
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
2.bronxbetterlearning.net
academyofthecanyons.net
www.unionsquareacademy.org
www.stnorbertschool.org
www.ciudaddelosninoscr.org
mis.edu.mx
www.narbonnehsgauchos.com
lennox.k12.ca.us
sa.snowlineschools.com
admin.icabh.org
admin.bme.snowlineschools.com
ckr01.lennox.k12.ca.us
www.madisonmonterrey.edu.mx
stnorbertschool.org
www.kernhighnetwork.net
acldtillotsonschool.org
barbaravick.org
2.bronxbetterlearning.net
lennox.k12.ca.us
admin.centroculturaljalilgibran.edu.mx
www.corecharter.org
lennox.k12.ca.us
2.bronxbetterlearning.org
admin.stjoseph-school.org
2.bronxbetterlearning.net
academyofthecanyons.net
samuelgompersms.net
acldtillotsonschool.org
www.stbern.net
web.euroamericano.edu.mx
2.bronxbetterlearning.org
www.jaselu.com.mx
admin.dchs.davidson.k12.nc.us
www.grandville.k12.mi.us
lennox.k12.ca.us
mcs.k12.ny.us
2.bronxbetterlearning.net
aak.potsdam.k12.ny.us
academyofthecanyons.net
aacs.net
acldtillotsonschool.org
2.bronxbetterlearning.org
lennox.k12.ca.us
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
2.bronxbetterlearning.org
2.bronxbetterlearning.net
mcs.k12.ny.us
doe.as
admin.semperaltius.edu.mx
*.lennox.k12.ca.us
aak.potsdam.k12.ny.us
lennox.k12.ca.us
lennox.k12.ca.us
stroseschoolwilmington.org
2.bronxbetterlearning.org
bbjh.magnoliaisd.org
acldtillotsonschool.org
sketches.edlio.com
bcsdk12.org
2.bronxbetterlearning.org
academyofthecanyons.net
Certificate
The complete raw certificate details for jamf.lennox.k12.ca.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEaTCCA1GgAwIBAgIQCp7aRvZZnhBL3QzKHkcLADANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDYwNDAwMDAwMFoXDTI1MDcwMjIzNTk1OVowIDEe MBwGA1UEAxMVamFtZi5sZW5ub3guazEyLmNhLnVzMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAsx2eGN8rGu1+CRuA5s7emZ72awTVH46r/lT41+IJpjPC cPrQVS869jWU+OkZhTcKP4doCFLu2onv1vqm2kfsmWqdixmiQX7BQti2qlAw0pOH +tmQLWgYubRmrQHoSZRKkIBgi27q+1JpMVu93BCSooDb3+keh30tkoRGiMxlm6Qx nMjhGMd8aCn7ozMdqkeSAWzqHka0JDNhLiWyeb9dV370gzL6zygGMv40MDafHpjm iaD7ZXzhIx53VTTE2b+Ym0DohwfMDIbVzzc0qR2XBlaF3YGedPBikgLpElhcSHBG /NsmNP1poLSmu/7HPt7lG9tSjERf1xEePmikQNl5oQIDAQABo4IBgTCCAX0wHwYD VR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFJK/DU+fRCvA ZmPhl8855I/b+4kMMCAGA1UdEQQZMBeCFWphbWYubGVubm94LmsxMi5jYS51czAT BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu cjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJt MDMuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAK3Qcfb31WSODUSq/5hYKU9cltde0Ez923Jqya1Gf6FZGdIB dBMmsdHxKSIpj5y5pn4rbU4vqsOR697tD4SC7gwBhrJMbH2IEnkhuLiYL0CoN3XO ESy8fVrQx8OvTTEALLqe0qZvHaAhjVmNTZFulVuIh5Co40odUWgE2twX9cKD0BYI Pe0YYOJsS22tmRhu25CZ2VGZq7n+HZfDJkkVRv6RQqL94LgZlpViFuPDawVi3wp+ QUxbRqcGh3py/d9NfnTuUxRXaS78VHzeY3Ql6o70RW6TPdk10OV9871OiwMuo0YB 9C0fBDprdMpC+H/g61liJ57Yi4WzhpOqhavkz78= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx2eGN8rGu1+CRuA5s7e mZ72awTVH46r/lT41+IJpjPCcPrQVS869jWU+OkZhTcKP4doCFLu2onv1vqm2kfs mWqdixmiQX7BQti2qlAw0pOH+tmQLWgYubRmrQHoSZRKkIBgi27q+1JpMVu93BCS ooDb3+keh30tkoRGiMxlm6QxnMjhGMd8aCn7ozMdqkeSAWzqHka0JDNhLiWyeb9d V370gzL6zygGMv40MDafHpjmiaD7ZXzhIx53VTTE2b+Ym0DohwfMDIbVzzc0qR2X BlaF3YGedPBikgLpElhcSHBG/NsmNP1poLSmu/7HPt7lG9tSjERf1xEePmikQNl5 oQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14117090049004286805517268142747224832 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jamf.lennox.k12.ca.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22611261555553070427762396592881441788239245808874830716870080509563710500091340131494975103645701089543670494861633543394978052923683651048775995721090381394058087689966689190660109434839775939307965630436519286004745225361761403501728288507566195133074392955841920165987795795509140268998275077724888509226378659071268656007997951141958918847118935561330694146186979236595223328333875087738976739908020742261258012103989155819638785470766605959263560628231632578511952554387066471522334152346208538713319806820868713798332048632150790061635661832374997299570819259458268586321088540408348632814544967886719248071073 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 92bf0d4f9f442bc06663e197cf39e48fdbfb890c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamf.lennox.k12.ca.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00add071f6f7d5648e0d44aaff9858294f5c96d75ed04cfddb726ac9ad467fa15919d201741326b1d1f12922298f9cb9a67e2b6d4e2faac391ebdeed0f8482ee0c0186b24c6c7d88127921b8b8982f40a83775ce112cbc7d5ad0c7c3af4d31002cba9ed2a66f1da0218d598d4d916e955b888790a8e34a1d516804dadc17f5c283d016083ded1860e26c4b6dad99186edb9099d95199abb9fe1d97c326491546fe9142a2fde0b81996956216e3c36b0562df0a7e414c5b46a706877a72fddf4d7e74ee531457692efc547cde637425ea8ef4456e933dd935d0e57df3bd4e8b032ea34601f42d1f043a6b74ca42f87fe0eb5962279ed88b85b38693aa85abe4cfbf