api-b5e1a5c4.test2.projectkappa.xyz
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 04:61:a9:ca:4e:38:c8:fa:9e:e1:61:fc:44:e8:d5:86 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=api-b5e1a5c4.test2.projectkappa.xyz
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:61:a9:ca:4e:38:c8:fa:9e:e1:61:fc:44:e8:d5:86Serial Number (int): 5824008533937866493674993781016417670
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ec:91:51:1e:f3:7c:f5:75:e8:37:7e:68:93:ac:82:04:37:bb:8a:e7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 23:5b:d0:9e:9e:c2:b4:9f:68:23:99:07:c7:0d:76:4b:ad:4b:3f:9b
Fingerprint (sha256): 5b:4c:99:31:da:e3:5b:3e:cd:9f:65:63:2b:29:ca:80:04:12:c8:ac:c6:81:4b:a5:ef:40:4f:04:b7:e7:4f:45
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate api-b5e1a5c4.test2.projectkappa.xyz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api-b5e1a5c4.test2.projectkappa.xyz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-b5e1a5c4.test2.projectkappa.xyz
Other certificates including the domain name projectkappa.xyz
(limited to 100 certificates)
email-339137ce.test3.projectkappa.xyz
api-a4116fe1.test2.projectkappa.xyz
api-10eae06e.test3.projectkappa.xyz
email-f935601b.test2.projectkappa.xyz
email-9f07ab5c.test3.projectkappa.xyz
vt-api-b178f3a6.test2.projectkappa.xyz
vt-api-a8fe3641.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-584e0cc0.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-02544e97.test3.projectkappa.xyz
api-fc45ac63.test2.projectkappa.xyz
api-86d7f780.test2.projectkappa.xyz
email-01813519.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-c68403c4.test2.projectkappa.xyz
email-5252ae92.test2.projectkappa.xyz
api-0a2f2edd.test2.projectkappa.xyz
email-a3f312e2.test2.projectkappa.xyz
api-941d4fb1.test2.projectkappa.xyz
api-08b2bd97.test2.projectkappa.xyz
email-cf7b1b74.test2.projectkappa.xyz
vt-api-a2b87c16.test2.projectkappa.xyz
email-04b7baef.test2.projectkappa.xyz
email-f30660ce.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-2530578c.test3.projectkappa.xyz
api-d79fef50.test3.projectkappa.xyz
api-e6f49b67.test3.projectkappa.xyz
api-884ecac7.test2.projectkappa.xyz
vt-api-438742e5.test3.projectkappa.xyz
email-7be941c5.test2.projectkappa.xyz
vt-api-5252ae92.test2.projectkappa.xyz
vt-api-09eb41d2.test2.projectkappa.xyz
vt-api-59936492.test2.projectkappa.xyz
vt-api-dd44ad84.test2.projectkappa.xyz
email-2b6d8474.test3.projectkappa.xyz
alpha.projectkappa.xyz
api-be8b25de.test3.projectkappa.xyz
email-83cfc8a7.test2.projectkappa.xyz
api-a8fe3641.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-a3f312e2.test2.projectkappa.xyz
vt-api-2709631a.test2.projectkappa.xyz
vt-api-6ce65c4a.test2.projectkappa.xyz
email-d94fcf6e.test2.projectkappa.xyz
api-ace404c6.test2.projectkappa.xyz
vt-api-0f669542.test3.projectkappa.xyz
api-0f3802d0.test2.projectkappa.xyz
email-a2b87c16.test2.projectkappa.xyz
api-3d5a66a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-eabbee77.test2.projectkappa.xyz
email-5ef63176.test3.projectkappa.xyz
email-eccb9f2a.test2.projectkappa.xyz
email-b1a05c10.test3.projectkappa.xyz
email-02995b38.test2.projectkappa.xyz
api-9f07ab5c.test3.projectkappa.xyz
email-0a2f2edd.test2.projectkappa.xyz
email-c28a670f.test2.projectkappa.xyz
email-db5c2f25.test3.projectkappa.xyz
email-34524207.test3.projectkappa.xyz
email-f775198b.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-df8aa7b5.test3.projectkappa.xyz
api-04b7baef.test2.projectkappa.xyz
api-fe9c02fb.test3.projectkappa.xyz
api-af321842.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
api-09fb3350.test3.projectkappa.xyz
vt-api-09e7cc69.test2.projectkappa.xyz
api-dc0ccb68.test2.projectkappa.xyz
api-d94fcf6e.test2.projectkappa.xyz
email-3091c79a.test2.projectkappa.xyz
email-6cc25837.test3.projectkappa.xyz
vt-api-faaad55e.test2.projectkappa.xyz
api-51914c1e.test3.projectkappa.xyz
api-f290b54f.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-dc0ccb68.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-ed7fbd23.test2.projectkappa.xyz
email-1e4e782c.test2.projectkappa.xyz
api-5372da92.test3.projectkappa.xyz
vt-api-86d7f780.test2.projectkappa.xyz
api-dd44ad84.test2.projectkappa.xyz
email-a3f312e2.test2.projectkappa.xyz
email-ca4ee977.test2.projectkappa.xyz
api-3f416977.test2.projectkappa.xyz
api-a3f312e2.test2.projectkappa.xyz
api-df1ca797.test2.projectkappa.xyz
api-68d3bd5b.test2.projectkappa.xyz
api-465e3f72.test2.projectkappa.xyz
vt-api-cf7b1b74.test2.projectkappa.xyz
vt-api-e6f49b67.test3.projectkappa.xyz
api-6167a7c5.test2.projectkappa.xyz
email-ca89238a.test3.projectkappa.xyz
api-6167a7c5.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-51914c1e.test3.projectkappa.xyz
api-a4116fe1.test2.projectkappa.xyz
api-10eae06e.test3.projectkappa.xyz
email-f935601b.test2.projectkappa.xyz
email-9f07ab5c.test3.projectkappa.xyz
vt-api-b178f3a6.test2.projectkappa.xyz
vt-api-a8fe3641.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-584e0cc0.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-02544e97.test3.projectkappa.xyz
api-fc45ac63.test2.projectkappa.xyz
api-86d7f780.test2.projectkappa.xyz
email-01813519.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-c68403c4.test2.projectkappa.xyz
email-5252ae92.test2.projectkappa.xyz
api-0a2f2edd.test2.projectkappa.xyz
email-a3f312e2.test2.projectkappa.xyz
api-941d4fb1.test2.projectkappa.xyz
api-08b2bd97.test2.projectkappa.xyz
email-cf7b1b74.test2.projectkappa.xyz
vt-api-a2b87c16.test2.projectkappa.xyz
email-04b7baef.test2.projectkappa.xyz
email-f30660ce.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-2530578c.test3.projectkappa.xyz
api-d79fef50.test3.projectkappa.xyz
api-e6f49b67.test3.projectkappa.xyz
api-884ecac7.test2.projectkappa.xyz
vt-api-438742e5.test3.projectkappa.xyz
email-7be941c5.test2.projectkappa.xyz
vt-api-5252ae92.test2.projectkappa.xyz
vt-api-09eb41d2.test2.projectkappa.xyz
vt-api-59936492.test2.projectkappa.xyz
vt-api-dd44ad84.test2.projectkappa.xyz
email-2b6d8474.test3.projectkappa.xyz
alpha.projectkappa.xyz
api-be8b25de.test3.projectkappa.xyz
email-83cfc8a7.test2.projectkappa.xyz
api-a8fe3641.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-a3f312e2.test2.projectkappa.xyz
vt-api-2709631a.test2.projectkappa.xyz
vt-api-6ce65c4a.test2.projectkappa.xyz
email-d94fcf6e.test2.projectkappa.xyz
api-ace404c6.test2.projectkappa.xyz
vt-api-0f669542.test3.projectkappa.xyz
api-0f3802d0.test2.projectkappa.xyz
email-a2b87c16.test2.projectkappa.xyz
api-3d5a66a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-eabbee77.test2.projectkappa.xyz
email-5ef63176.test3.projectkappa.xyz
email-eccb9f2a.test2.projectkappa.xyz
email-b1a05c10.test3.projectkappa.xyz
email-02995b38.test2.projectkappa.xyz
api-9f07ab5c.test3.projectkappa.xyz
email-0a2f2edd.test2.projectkappa.xyz
email-c28a670f.test2.projectkappa.xyz
email-db5c2f25.test3.projectkappa.xyz
email-34524207.test3.projectkappa.xyz
email-f775198b.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-df8aa7b5.test3.projectkappa.xyz
api-04b7baef.test2.projectkappa.xyz
api-fe9c02fb.test3.projectkappa.xyz
api-af321842.test2.projectkappa.xyz
gerrit.prod.projectkappa.xyz
api-09fb3350.test3.projectkappa.xyz
vt-api-09e7cc69.test2.projectkappa.xyz
api-dc0ccb68.test2.projectkappa.xyz
api-d94fcf6e.test2.projectkappa.xyz
email-3091c79a.test2.projectkappa.xyz
email-6cc25837.test3.projectkappa.xyz
vt-api-faaad55e.test2.projectkappa.xyz
api-51914c1e.test3.projectkappa.xyz
api-f290b54f.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-dc0ccb68.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-ed7fbd23.test2.projectkappa.xyz
email-1e4e782c.test2.projectkappa.xyz
api-5372da92.test3.projectkappa.xyz
vt-api-86d7f780.test2.projectkappa.xyz
api-dd44ad84.test2.projectkappa.xyz
email-a3f312e2.test2.projectkappa.xyz
email-ca4ee977.test2.projectkappa.xyz
api-3f416977.test2.projectkappa.xyz
api-a3f312e2.test2.projectkappa.xyz
api-df1ca797.test2.projectkappa.xyz
api-68d3bd5b.test2.projectkappa.xyz
api-465e3f72.test2.projectkappa.xyz
vt-api-cf7b1b74.test2.projectkappa.xyz
vt-api-e6f49b67.test3.projectkappa.xyz
api-6167a7c5.test2.projectkappa.xyz
email-ca89238a.test3.projectkappa.xyz
api-6167a7c5.test2.projectkappa.xyz
api-73a2f547.test2.projectkappa.xyz
email-51914c1e.test3.projectkappa.xyz
Certificate
The complete raw certificate details for api-b5e1a5c4.test2.projectkappa.xyz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQBGGpyk44yPqe4WH8ROjVhjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNjAwMDAwMFoXDTI1MDEwMzIzNTk1OVowLjEs MCoGA1UEAxMjYXBpLWI1ZTFhNWM0LnRlc3QyLnByb2plY3RrYXBwYS54eXowggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPSKXPBhYbpYGR01Pmx8pYWSf WF1OUzfwl8/x9tr9dqhl72NUmJKfSzAdTijHOKNk6A8DGekvVo7FtHPl7H4Q9rQ0 36dtZdDSKUSWPRtnGIMmYxcwFtFtc2QhKD256f/oP0ke5MCPqo2T5D2Q5INY+Oh9 vbbt9a8QRMDCvHrvcpnb4eoDV8q4Ag3jibvbAqDL0BThbeoBMh1UHGLbgjzLKLAR N6O+7PmzRQYbcDQqhOTHukoFd3uysL3Rd3ZQpkrnYqLvNX84l7LS0QBvhbA115J6 x7sb9v8YO03yvkfuy5+y1eWzlRo9DY0SEFjzB+LD9XoGUG4ylgMLwI9jZrY5AgMB AAGjggGPMIIBizAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNV HQ4EFgQU7JFRHvN89XXoN35ok6yCBDe7iucwLgYDVR0RBCcwJYIjYXBpLWI1ZTFh NWM0LnRlc3QyLnByb2plY3RrYXBwYS54eXowEwYDVR0gBAwwCjAIBgZngQwBAgEw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNv bS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBt2eAgxchV 6jKmMgAw/KT5zkS6g2bTcwb2qaCpmbde8a81NkrVaUxBzlb76lQRzyYxsRh2wUGM tw7iGEA6f3DEU72yZpnJCSM/u62RllSb4TnWgBkeAxJ+Pgu2sCGxC63H6rAmk3kf bb1J0LIySogcdhaIha6F9ABLOELLSXjvt28/X+0h6MPa4eDKkRpFq81Fi754/Zaa 5mlr23yy9GJRniYzaoNbSN4UPKoPLxdrjSa9cl30XlTsXV2SlBfD7oJfX/s6tCdC aY+xUnsu0xua745ykeDvUBae8LbI+swuoZJqwpyDIRDPXw/Tln7Q8ArR+OzPV4b7 QU9LRzokJDia -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT0ilzwYWG6WBkdNT5sf KWFkn1hdTlM38JfP8fba/XaoZe9jVJiSn0swHU4oxzijZOgPAxnpL1aOxbRz5ex+ EPa0NN+nbWXQ0ilElj0bZxiDJmMXMBbRbXNkISg9uen/6D9JHuTAj6qNk+Q9kOSD WPjofb227fWvEETAwrx673KZ2+HqA1fKuAIN44m72wKgy9AU4W3qATIdVBxi24I8 yyiwETejvuz5s0UGG3A0KoTkx7pKBXd7srC90Xd2UKZK52Ki7zV/OJey0tEAb4Ww NdeSese7G/b/GDtN8r5H7sufstXls5UaPQ2NEhBY8wfiw/V6BlBuMpYDC8CPY2a2 OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5824008533937866493674993781016417670 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-b5e1a5c4.test2.projectkappa.xyz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21364420390602893626322771460092954021877202027450851296542515309217167986563199347393652042394914463726628949681651233759772755180316680806694839518977178077715629512090808501214551032404714290496779636978318198287785965730621093912710938609376331024193378924900212656011465137006067742410992756938397427224902049936792679549088776678213405975789699810106765463987827002420880556196593671193008888861374244302816711285814837748748910472948539841464618808063042151915200311928127836908848927725706504412598361697920369384235660772510399788112116633842565288674992744796808818090862814211004229881546875566594837624377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec91511ef37cf575e8377e6893ac820437bb8ae7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-b5e1a5c4.test2.projectkappa.xyz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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