tf-r53-health-check.oss.champtest.net
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 04:b3:10:4d:6c:a9:3d:5a:08:13:2a:5d:e1:3b:e8:41 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=tf-r53-health-check.oss.champtest.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:b3:10:4d:6c:a9:3d:5a:08:13:2a:5d:e1:3b:e8:41Serial Number (int): 6246663773568548911567381737535957057
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: bf:72:8b:a8:a1:81:e4:47:19:07:82:68:bd:41:98:77:37:25:d6:2f
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): f6:7f:7f:f5:d5:ba:32:85:5b:9d:0a:bb:00:23:de:67:26:91:cd:5b
Fingerprint (sha256): 5e:40:b7:ca:d7:a8:7d:2d:c9:70:47:f2:00:11:82:60:03:72:75:b9:f3:02:47:62:8a:d8:49:2a:67:f9:cf:9e
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate tf-r53-health-check.oss.champtest.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tf-r53-health-check.oss.champtest.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tf-r53-health-check.oss.champtest.net
Other certificates including the domain name champtest.net
(limited to 100 certificates)
*.oss.champtest.net
*.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-api-gateway2-utqep.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak-y1pmu.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-alb.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-alb.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-api-gateway-rgvk7.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-6yph6.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
terraform-aws-api-gateway-w453f.oss.champtest.net
keycloak-6k58m.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-api-gateway-npx68.oss.champtest.net
keycloak-waj09.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway2-6bom4.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
keycloak-6f0p6.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
keycloak-me1sy.oss.champtest.net
keycloak-rafp4.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-crx4j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-api-gateway-smd7j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-alb.oss.champtest.net
keycloak-c84nr.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-acm.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-8575.oss.champtest.net
metabase-report-executor.oss.champtest.net
cc-cade.ephemeral.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-hr4vv.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-lambda-3db2.oss.champtest.net
*.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
*.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
terraform-aws-api-gateway1-utqep.oss.champtest.net
terraform-aws-lambda-93c8.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
*.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-7451.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-xu5wr.oss.champtest.net
*.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-api-gateway2-utqep.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak-y1pmu.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-alb.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-alb.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-api-gateway-rgvk7.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-6yph6.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
terraform-aws-api-gateway-w453f.oss.champtest.net
keycloak-6k58m.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-api-gateway-npx68.oss.champtest.net
keycloak-waj09.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway2-6bom4.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
keycloak-6f0p6.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
keycloak-me1sy.oss.champtest.net
keycloak-rafp4.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-crx4j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-api-gateway-smd7j.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-alb.oss.champtest.net
keycloak-c84nr.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-acm.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-8575.oss.champtest.net
metabase-report-executor.oss.champtest.net
cc-cade.ephemeral.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-api-gateway-hr4vv.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-lambda-3db2.oss.champtest.net
*.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
*.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
terraform-aws-api-gateway1-utqep.oss.champtest.net
terraform-aws-lambda-93c8.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
*.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-7451.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-xu5wr.oss.champtest.net
Certificate
The complete raw certificate details for tf-r53-health-check.oss.champtest.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEiTCCA3GgAwIBAgIQBLMQTWypPVoIEypd4TvoQTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxMjAwMDAwMFoXDTI1MDEwOTIzNTk1OVowMDEu MCwGA1UEAxMldGYtcjUzLWhlYWx0aC1jaGVjay5vc3MuY2hhbXB0ZXN0Lm5ldDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL97EqjJKJoQAAUjRb5RxExX y8kacQM04Kq4ngjAfAtG63/wXsAkdc87H9hKyzY57r50WZ4yF3bSGg2ZlTcFfPT6 HBsyLGWk5jGZfVF0985mo4PgZ69R5QFa69EHkpPNglyz9YwITQpfIl8twdRBtFgG TdGnSfKwkKQrEDpOZoHTi88SUVXqScgsaEWxg0kFz2UW9/qo4n7zKt/G+Q2QUgF8 ODLZkb2EwhttydxeNeYJ2t9RWFO71TYvFm4C6fMM6o3zOVdVu5jMzbQy+Uk37yad v8gBQCZ/0VFdTrHQgH3002QgeLSPjRtPlU+0xIOhviAHQ+tzh8HK5m9QSU2fV20C AwEAAaOCAZEwggGNMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0G A1UdDgQWBBS/couooYHkRxkHgmi9QZh3NyXWLzAwBgNVHREEKTAngiV0Zi1yNTMt aGVhbHRoLWNoZWNrLm9zcy5jaGFtcHRlc3QubmV0MBMGA1UdIAQMMAowCAYGZ4EM AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVz dC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/ BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtYh DixtIrqoeSo/mjZkr86PpldIjvWIrQWxcy3sg+xunhR3XAOTeO6K6S5AShqUMnzI nqfTjKej0jKIdTfm5OMS89ekfeCnHGyVXUk45fgXLDwZjRJ3XtD4yA9Mci7fyVVN 3o9paRatsiRQ+V6GcOQWc4EsGo75W4dtQXlxXm5BdfFU0fcQf/ixWjn/dc36boiO S3QFDgiIgxtitnp7Lb0J3hHprnuZ1G2FTpFKXKo48f6zCjXKtSsyXcHQstv0lVYB z6W7Llqc2fLO4ap/3o8/8nLFE6bHakAfd9kHxi49CfwbOAQHSmsUCxXt5FI4rKMA TgnRMHTCq+O/IK4Mnw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3sSqMkomhAABSNFvlHE TFfLyRpxAzTgqrieCMB8C0brf/BewCR1zzsf2ErLNjnuvnRZnjIXdtIaDZmVNwV8 9PocGzIsZaTmMZl9UXT3zmajg+Bnr1HlAVrr0QeSk82CXLP1jAhNCl8iXy3B1EG0 WAZN0adJ8rCQpCsQOk5mgdOLzxJRVepJyCxoRbGDSQXPZRb3+qjifvMq38b5DZBS AXw4MtmRvYTCG23J3F415gna31FYU7vVNi8WbgLp8wzqjfM5V1W7mMzNtDL5STfv Jp2/yAFAJn/RUV1OsdCAffTTZCB4tI+NG0+VT7TEg6G+IAdD63OHwcrmb1BJTZ9X bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6246663773568548911567381737535957057 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tf-r53-health-check.oss.champtest.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24172205751502254803304732588325337337671111284101469465536653468196575453865911931429592567383055422675650713849026496414604928476108952030984539315590352631891091598580653296937557330149438379049844333015367436698163250753497889339531794532561158186068196235848705988577963593337178739946545792756205539661132757677462037464892214208680230283120600274851268485838078618001179379042149560385887175719334649608289627742894016230597886521213587237691928713480026653842673806973580618067044648877758387136590228820746321650469667377466371850493638477987449695396582357520796176287767385634577286929761037070938834687853 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bf728ba8a181e44719078268bd4198773725d62f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf-r53-health-check.oss.champtest.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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