intouch-a-crm-crm-nightly-new.cc.capillarytech.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0e:9b:c2:68:dc:e9:a4:ff:a6:26:4b:60:8d:c9:92:6a was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=intouch-a-crm-crm-nightly-new.cc.capillarytech.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:9b:c2:68:dc:e9:a4:ff:a6:26:4b:60:8d:c9:92:6aSerial Number (int): 19417941049622891471290273942662124138
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ab:7e:16:58:cc:79:76:7a:74:b9:51:3f:52:f0:6a:73:0c:28:b3:1d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): a0:e7:38:47:55:bf:9d:19:b9:26:e4:e8:77:76:7e:c2:13:1e:7b:51
Fingerprint (sha256): 5b:39:1b:ef:79:38:1f:51:a7:ae:08:6a:f9:e8:f5:50:c4:98:6b:b6:ab:1e:5c:5c:45:26:f5:84:ac:27:ea:3b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate intouch-a-crm-crm-nightly-new.cc.capillarytech.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for intouch-a-crm-crm-nightly-new.cc.capillarytech.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
intouch-a-crm-crm-nightly-new.cc.capillarytech.com
*.intouch-a-crm-crm-nightly-new.cc.capillarytech.com
*.intouch-a-crm-crm-nightly-new.cc.capillarytech.com
Other certificates including the domain name capillarytech.com
(limited to 100 certificates)
vulcan-uat.global.dev.intouch.capillarytech.com
fdus-56.freshdesk.com
support.doctricks.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
support.nature.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
sni.cloudflaressl.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
*.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
dev.rewardsplus.capillarytech.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
*.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
fdus-56.freshdesk.com
support.nature.com
capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fsus-24.freshservice.com
*.capillarytech.com
helpdesk.appareluae.com
apac2.api.capillarytech.com
dev.rewardsplus.capillarytech.com
capillarytech.com
apac2-lms.capillarytech.com
marketing.capillarytech.com
support.doctricks.com
sgcrm.cctools.capillarytech.com
apac2.api.capillarytech.com
status.capillarytech.com
helpdesk.appareluae.com
tools-a-crm-tatacrm.cc.capillarytech.com
getdemo.capillarytech.com
status.qtplatform.com
tools-a-crm-crm-nightly-new.cc.capillarytech.com
support.doctricks.com
status.qtplatform.com
apac.api.capillarytech.com
eu.intouch.capillarytech.com
glue-a-crm-uscrm.cc.capillarytech.com
assist.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
capillarytech.com
getdemo.capillarytech.com
support.nature.com
glue-jsvt-crm-crm-nightly-new.cc.capillarytech.com
fsus-24.freshservice.com
getdemo.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
survey.capillarytech.com
mapp-crm-nightly-new.api.capillarytech.com
support.nature.com
support.nature.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fdus-56.freshdesk.com
solutions-a-crm-uscrm.cc.capillarytech.com
capillarytech.com
intouch-a-crm-crm-nightly-new.cc.capillarytech.com
getdemo.capillarytech.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
tms1-ota-status.bbpos.com
nsadmin-a-crm-uscrm.cc.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
ecom-assist.capillarytech.com
eu.intouch.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
eu.intouch.capillarytech.com
intouch-a-crm-uscrm.cc.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
support.doctricks.com
*.capillarytech.com
fdus-56.freshdesk.com
fdus-56.freshdesk.com
support.doctricks.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
support.nature.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
sni.cloudflaressl.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
*.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
dev.rewardsplus.capillarytech.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
*.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
fdus-56.freshdesk.com
support.nature.com
capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fsus-24.freshservice.com
*.capillarytech.com
helpdesk.appareluae.com
apac2.api.capillarytech.com
dev.rewardsplus.capillarytech.com
capillarytech.com
apac2-lms.capillarytech.com
marketing.capillarytech.com
support.doctricks.com
sgcrm.cctools.capillarytech.com
apac2.api.capillarytech.com
status.capillarytech.com
helpdesk.appareluae.com
tools-a-crm-tatacrm.cc.capillarytech.com
getdemo.capillarytech.com
status.qtplatform.com
tools-a-crm-crm-nightly-new.cc.capillarytech.com
support.doctricks.com
status.qtplatform.com
apac.api.capillarytech.com
eu.intouch.capillarytech.com
glue-a-crm-uscrm.cc.capillarytech.com
assist.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
capillarytech.com
getdemo.capillarytech.com
support.nature.com
glue-jsvt-crm-crm-nightly-new.cc.capillarytech.com
fsus-24.freshservice.com
getdemo.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
survey.capillarytech.com
mapp-crm-nightly-new.api.capillarytech.com
support.nature.com
support.nature.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fdus-56.freshdesk.com
solutions-a-crm-uscrm.cc.capillarytech.com
capillarytech.com
intouch-a-crm-crm-nightly-new.cc.capillarytech.com
getdemo.capillarytech.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
tms1-ota-status.bbpos.com
nsadmin-a-crm-uscrm.cc.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
ecom-assist.capillarytech.com
eu.intouch.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
eu.intouch.capillarytech.com
intouch-a-crm-uscrm.cc.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
support.doctricks.com
*.capillarytech.com
fdus-56.freshdesk.com
Certificate
The complete raw certificate details for intouch-a-crm-crm-nightly-new.cc.capillarytech.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIQDpvCaNzppP+mJktgjcmSajANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDUyMzAwMDAwMFoXDTI1MDYyMTIzNTk1OVowPTE7 MDkGA1UEAxMyaW50b3VjaC1hLWNybS1jcm0tbmlnaHRseS1uZXcuY2MuY2FwaWxs YXJ5dGVjaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChrjVR y3v2r4jrxQEPGc+rrKzp1XFbQ22FjOq4+V3cQq/VyL3L6OcOXq8N1pevKSx4Xcxl Qer04Nyfb6U+2dV1/Dp6CYqotHZ8F/AED3dR0E3qQXJ/gsCutzO1l1/B4XTPngWi P7aWYS/RoEYu62h4HorZreeRrRg9wxjku9JnPQOniepFnY9L0xLngvO/wSPvAmud Pyl5/UevoC1gxpTOCjd66o8iXoKbCArd8f0amrR4tDrVm6FV0JMYxk+Pj68y+rAZ jhZHThOfE6CATX3VO+KVdjeZWrmbzvGdFy+r+9hp3itJ4RJoQDUfv4xYTA9xvjre 2LPv2JtTGA/MiGiHAgMBAAGjggHUMIIB0DAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0 cc7L6Zz5euuC4jAdBgNVHQ4EFgQUq34WWMx5dnp0uVE/UvBqcwwosx0wcwYDVR0R BGwwaoIyaW50b3VjaC1hLWNybS1jcm0tbmlnaHRseS1uZXcuY2MuY2FwaWxsYXJ5 dGVjaC5jb22CNCouaW50b3VjaC1hLWNybS1jcm0tbmlnaHRseS1uZXcuY2MuY2Fw aWxsYXJ5dGVjaC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg LqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmww dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1h em9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCAHBNxWwc9Sz0GkxGBb9A3uW9t Qxtan+DY1ZgSzaIjgpCHGqnl7xxoyH4UkiZg/Kys4U8uj0knrWm+uWS5oMIR5NhL bUblXtbm2NbzZiIYGpoWaPahvKlRCqtMId4FX7ZfZUz9JLFV/0A4eH/bU/r4NNGw CWwB8sKG/oj2rAQj3EzNsBxgc+5BFKincAY9UCIobx4jwOWoa1DxJ1gcQxH5xL5W 3w6AtcdBo9ppU1WTXUvThc/9f79M44hqdBGzwFK9ZdrJFGIJZBPfwDYb9/uUCDzC 8bsZl93j7GgFsiqLTWwCoFE1vAo6MbJIkQR0lGmR9Ag9IA+YEsncAvoloPpd -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa41Uct79q+I68UBDxnP q6ys6dVxW0NthYzquPld3EKv1ci9y+jnDl6vDdaXrykseF3MZUHq9ODcn2+lPtnV dfw6egmKqLR2fBfwBA93UdBN6kFyf4LArrcztZdfweF0z54Foj+2lmEv0aBGLuto eB6K2a3nka0YPcMY5LvSZz0Dp4nqRZ2PS9MS54Lzv8Ej7wJrnT8pef1Hr6AtYMaU zgo3euqPIl6CmwgK3fH9Gpq0eLQ61ZuhVdCTGMZPj4+vMvqwGY4WR04TnxOggE19 1TvilXY3mVq5m87xnRcvq/vYad4rSeESaEA1H7+MWEwPcb463tiz79ibUxgPzIho hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19417941049622891471290273942662124138 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intouch-a-crm-crm-nightly-new.cc.capillarytech.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20410272403812785169635262501936857413262474734517084201957643713035490033178441562339602038108894383553450780301692768334137788012618770465925927044965073511821474901075681919545075343978604868263920762459701710977481095950630615243010359107704529801743551931561605232216203695506383330146584125722626918518671422497877314330055948978235069165356564374105986928868927771881680058980673126628420179669586038877900352628682382095976467493586588962246562623097700031569165889818053264803132588772767634460726767071712236136713389076878504411231613692030933282893470373571835173078096301466123104694956584281345733716103 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ab7e1658cc79767a74b9513f52f06a730c28b31d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intouch-a-crm-crm-nightly-new.cc.capillarytech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intouch-a-crm-crm-nightly-new.cc.capillarytech.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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