*.one14t49ke.od.aws.freewheel.tv
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0b:6d:ff:2a:37:d9:96:07:d9:5f:e3:3a:8d:fa:cd:4d was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.one14t49ke.od.aws.freewheel.tv
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:6d:ff:2a:37:d9:96:07:d9:5f:e3:3a:8d:fa:cd:4dSerial Number (int): 15192643670530848531305467384063249741
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d9:b0:7b:b0:60:a9:a3:18:83:f3:9c:96:3d:5f:43:e6:bb:b0:95:64
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 38:dc:de:d1:d0:d1:fa:ff:c3:6f:6b:ed:21:2d:f0:e0:63:20:f9:c9
Fingerprint (sha256): 5c:02:e2:54:5c:0b:95:90:18:fb:21:f6:4a:58:2d:0b:35:89:94:04:66:ff:cb:32:77:7f:71:7c:11:b8:ab:42
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.one14t49ke.od.aws.freewheel.tv
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.one14t49ke.od.aws.freewheel.tv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.one14t49ke.od.aws.freewheel.tv
Other certificates including the domain name freewheel.tv
(limited to 100 certificates)
cannes.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.listing68.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.stg.freewheel.tv
*.dat1203vuq.od.aws.freewheel.tv
apic.freewheel.tv
*.qk4jdk0daf.modplus.aws.freewheel.tv
*.r7k8hfhm04.od.aws.freewheel.tv
cannes.freewheel.tv
freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.dat06067u5.od.aws.freewheel.tv
*.freewheel.tv
*.listing212.od.aws.freewheel.tv
*.net12rbjih.od.aws.freewheel.tv
*.stg.freewheel.tv
*.chconsumer.od.aws.freewheel.tv
*.listing206.od.aws.freewheel.tv
*.listing210.od.aws.freewheel.tv
*.freewheel.tv
ideas.freewheel.tv
*.freewheel.tv
*.reg221209.od.aws.freewheel.tv
*.ui09yxe0yf.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.freewheel.tv
*.uslinear.od.aws.freewheel.tv
api-docs.freewheel.tv
*.or08ffgq39.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.sup227xgae.od.aws.freewheel.tv
*.sup253wv3d.od.aws.freewheel.tv
*.freewheel.tv
*.stg.freewheel.tv
*.sup06odc8i.od.aws.freewheel.tv
*.reg221205.od.aws.freewheel.tv
*.freewheel.tv
staticui.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.net05hoxvs.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.stg.freewheel.tv
*.sup05zhupo.od.aws.freewheel.tv
staticui.freewheel.tv
*.order67.od.aws.freewheel.tv
*.freewheel.tv
*.fw128069.od.aws.freewheel.tv
*.net144l47o.od.aws.freewheel.tv
*.lin06lrgxj.od.aws.freewheel.tv
*.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.sup11vd2qa.od.aws.freewheel.tv
*.freewheel.tv
*.order239.od.aws.freewheel.tv
*.one127k57u.od.aws.freewheel.tv
*.ui12tmlzma.od.aws.freewheel.tv
*.lin12hphfp.od.aws.freewheel.tv
*.stg.freewheel.tv
*.dat09rton1.od.aws.freewheel.tv
*.ui07aj4ebl.od.aws.freewheel.tv
*.freewheel.tv
*.databook.od.aws.freewheel.tv
*.lin07xn6dt.od.aws.freewheel.tv
*.stg.fwmrm.net
*.stg.freewheel.tv
*.order242.od.aws.freewheel.tv
*.r7k8hfhm04.od.aws.freewheel.tv
api-docs.stg.freewheel.tv
staticui.freewheel.tv
*.m24.od.aws.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.dat265pn74.od.aws.freewheel.tv
*.one14t49ke.od.aws.freewheel.tv
*.ui06qq4qha.od.aws.freewheel.tv
*.sup234spzo.od.aws.freewheel.tv
*.microui.od.aws.freewheel.tv
api-docs.stg.freewheel.tv
*.fakedata.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.gwtest.modplus.aws.freewheel.tv
*.ifmjn4dppt.od.aws.freewheel.tv
*.h4k3na6mwx.od.aws.freewheel.tv
*.dat245tifj.od.aws.freewheel.tv
*.one071dmme.od.aws.freewheel.tv
*.pxpcwj7apf.od.aws.freewheel.tv
*.apeefhnnth.od.aws.freewheel.tv
*.rebase1206.od.aws.freewheel.tv
*.one1388egk.od.aws.freewheel.tv
*.net04vd1a9.od.aws.freewheel.tv
*.ifmjn4dppt.od.aws.freewheel.tv
*.dat05zeeqf.od.aws.freewheel.tv
*.lin04100k4.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.listing68.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.stg.freewheel.tv
*.dat1203vuq.od.aws.freewheel.tv
apic.freewheel.tv
*.qk4jdk0daf.modplus.aws.freewheel.tv
*.r7k8hfhm04.od.aws.freewheel.tv
cannes.freewheel.tv
freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.dat06067u5.od.aws.freewheel.tv
*.freewheel.tv
*.listing212.od.aws.freewheel.tv
*.net12rbjih.od.aws.freewheel.tv
*.stg.freewheel.tv
*.chconsumer.od.aws.freewheel.tv
*.listing206.od.aws.freewheel.tv
*.listing210.od.aws.freewheel.tv
*.freewheel.tv
ideas.freewheel.tv
*.freewheel.tv
*.reg221209.od.aws.freewheel.tv
*.ui09yxe0yf.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.freewheel.tv
*.uslinear.od.aws.freewheel.tv
api-docs.freewheel.tv
*.or08ffgq39.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.sup227xgae.od.aws.freewheel.tv
*.sup253wv3d.od.aws.freewheel.tv
*.freewheel.tv
*.stg.freewheel.tv
*.sup06odc8i.od.aws.freewheel.tv
*.reg221205.od.aws.freewheel.tv
*.freewheel.tv
staticui.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.net05hoxvs.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
*.stg.freewheel.tv
*.sup05zhupo.od.aws.freewheel.tv
staticui.freewheel.tv
*.order67.od.aws.freewheel.tv
*.freewheel.tv
*.fw128069.od.aws.freewheel.tv
*.net144l47o.od.aws.freewheel.tv
*.lin06lrgxj.od.aws.freewheel.tv
*.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.sup11vd2qa.od.aws.freewheel.tv
*.freewheel.tv
*.order239.od.aws.freewheel.tv
*.one127k57u.od.aws.freewheel.tv
*.ui12tmlzma.od.aws.freewheel.tv
*.lin12hphfp.od.aws.freewheel.tv
*.stg.freewheel.tv
*.dat09rton1.od.aws.freewheel.tv
*.ui07aj4ebl.od.aws.freewheel.tv
*.freewheel.tv
*.databook.od.aws.freewheel.tv
*.lin07xn6dt.od.aws.freewheel.tv
*.stg.fwmrm.net
*.stg.freewheel.tv
*.order242.od.aws.freewheel.tv
*.r7k8hfhm04.od.aws.freewheel.tv
api-docs.stg.freewheel.tv
staticui.freewheel.tv
*.m24.od.aws.freewheel.tv
*.hylda.od.aws.freewheel.tv
*.dat265pn74.od.aws.freewheel.tv
*.one14t49ke.od.aws.freewheel.tv
*.ui06qq4qha.od.aws.freewheel.tv
*.sup234spzo.od.aws.freewheel.tv
*.microui.od.aws.freewheel.tv
api-docs.stg.freewheel.tv
*.fakedata.od.aws.freewheel.tv
*.freewheel.tv
*.freewheel.tv
*.gwtest.modplus.aws.freewheel.tv
*.ifmjn4dppt.od.aws.freewheel.tv
*.h4k3na6mwx.od.aws.freewheel.tv
*.dat245tifj.od.aws.freewheel.tv
*.one071dmme.od.aws.freewheel.tv
*.pxpcwj7apf.od.aws.freewheel.tv
*.apeefhnnth.od.aws.freewheel.tv
*.rebase1206.od.aws.freewheel.tv
*.one1388egk.od.aws.freewheel.tv
*.net04vd1a9.od.aws.freewheel.tv
*.ifmjn4dppt.od.aws.freewheel.tv
*.dat05zeeqf.od.aws.freewheel.tv
*.lin04100k4.od.aws.freewheel.tv
nbcu-so-test.freewheel.tv
Certificate
The complete raw certificate details for *.one14t49ke.od.aws.freewheel.tv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfzCCA2egAwIBAgIQC23/KjfZlgfZX+M6jfrNTTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxMzAwMDAwMFoXDTI1MDExMDIzNTk1OVowKzEp MCcGA1UEAwwgKi5vbmUxNHQ0OWtlLm9kLmF3cy5mcmVld2hlZWwudHYwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkHrDmDWE6yX0EYiK+RHlyUqpLIQeb SMtk3q6WBWZTPEAaUagmOyPyvkru87vUPpJWTXDAJLWyZpSbJ/1tL1BlneQOxD4y xDkAtBe3IKB8CUS9MqaC/vttMIGxkEeXJstjkQi8rPR5u/v8MtbEp+4u4/QLcYZ/ CVQ3rxB9NgpJD6vGUW6LFr/L4NJDCupERhpkEZrVO0SmiNDLE4XEUIDOrQ8dPFE2 atYEqkyRPnZTwBy6YVn1hjy59aCZmqoUhAzG28QUzPvKN4WAlqhcZoEKfNqS5OQI BYSaYnoz01UV5YmNFU9yGG20V+TitCHe3m5AJgrL1/WpEMniUxZ9KDN5AgMBAAGj ggGMMIIBiDAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4E FgQU2bB7sGCpoxiD85yWPV9D5ruwlWQwKwYDVR0RBCQwIoIgKi5vbmUxNHQ0OWtl Lm9kLmF3cy5mcmVld2hlZWwudHYwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0w My5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5y Mm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJt MDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisG AQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAv2ZoJAGVkLmfziNma nZ//nMfy407Or7YBlWOhTJITPmW2o8n7R75eqwqMGLjUGqjZAy9r2cAhSzJRHVvz 8zMHrYVrCpIyQKCJksrXBZe+7qW7Trg/vB9SX93sElZJqITtVs6iMZbrd7hhIzCo 8fig40fU+ODFtPi9+zadB78NMYJkzoqMnLqiLQoeokaT91iPE/wq3JCfiGNsEDae 5/oZzUvgofQZ2Wmh0ixGrDU87juo8OPy+IXMe96h9igU41Tfabu9bUfvPiktQ0MF jRCSkT/OE942VDhOrHbBC22yBOf4qHrgkienHHfrvmm8MchD7VBOqJ7PxRUB9ssE hYJA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B6w5g1hOsl9BGIivkR5 clKqSyEHm0jLZN6ulgVmUzxAGlGoJjsj8r5K7vO71D6SVk1wwCS1smaUmyf9bS9Q ZZ3kDsQ+MsQ5ALQXtyCgfAlEvTKmgv77bTCBsZBHlybLY5EIvKz0ebv7/DLWxKfu LuP0C3GGfwlUN68QfTYKSQ+rxlFuixa/y+DSQwrqREYaZBGa1TtEpojQyxOFxFCA zq0PHTxRNmrWBKpMkT52U8AcumFZ9YY8ufWgmZqqFIQMxtvEFMz7yjeFgJaoXGaB CnzakuTkCAWEmmJ6M9NVFeWJjRVPchhttFfk4rQh3t5uQCYKy9f1qRDJ4lMWfSgz eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15192643670530848531305467384063249741 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.one14t49ke.od.aws.freewheel.tv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28797467833512788542518518984389548978663858696070877194839845527127442205641735826941079492710761129693990469305257652813555192554260544992489830630250629868799783024543888677002893415242276197865357092089950667098287094780342232486337792610861053649255867009443990086370343742128992601556257877816913175149614104324999506597231683320629434724533563259004629257788167820827962036757511906844329428324966231201617667466372455036975098977566574526395210148227916812487678295700063244983760187892161791904824874999269711094984123490783088448321892698484290822064559132287117454841365202774283555987825864674965251961721 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d9b07bb060a9a31883f39c963d5f43e6bbb09564 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one14t49ke.od.aws.freewheel.tv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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