*.stellantis.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:7b:8e:36:1a:a4:70:85:8d:cb:bd:db:e8:44:63:f5 was issued on by Amazon.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.stellantis.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:7b:8e:36:1a:a4:70:85:8d:cb:bd:db:e8:44:63:f5Serial Number (int): 20579956839103421657793070620697977845
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d9:73:2a:08:34:bc:63:c9:93:92:7d:d2:f7:4b:0e:5f:97:42:6d:83
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 36:a5:ff:0e:cf:a8:14:99:e8:e8:b5:0a:2b:a6:74:63:4b:65:9d:11
Fingerprint (sha256): 5f:96:a5:55:d0:fd:87:2b:29:0b:10:f5:c1:47:8d:da:55:dc:4c:cc:df:69:02:b3:6c:b0:7a:8b:51:b2:d6:e9
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.stellantis.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.stellantis.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.stellantis.com
*.lojacitroen.com.br
*.fcalatam.com
*.fcalatam.com.br
*.faasa-non-prod.fcalatam.com.ar
*.fcagroup.com.br
*.lojapeugeot.com.br
*.lojacitroen.com.br
*.fcalatam.com
*.fcalatam.com.br
*.faasa-non-prod.fcalatam.com.ar
*.fcagroup.com.br
*.lojapeugeot.com.br
Other certificates including the domain name stellantis.com
(limited to 100 certificates)
staging1.fcagroup.com
stage.digitalme.stellantis.com
diabase.stellantis.com
test.k2.extra.stellantis.com
dash.stellantis.com
oms-ui-stage.stellantis.com
isba.stellantis.com
www.fcagroup.com
be.idhub.test.stellantis.com
aemdevms4-connectivity.alfaromeo.com
alpha.nea.wrt.stellantis.com
aemstagems4-connect.alfaromeo.com
be.idhub.stellantis.com
incubator.stellantis.com
workbench.stellantis.com
secure5s.scene7.com
linkentry.fiat.com
git.stellantis.com
vpn-mobile-preprod.stellantis.com
*.stellantis.com
aemstagems4-connect.alfaromeo.com
oms-ui-dev.stellantis.com
commercial-needs.stellantis.com
admin3-medialibrary.stellantis.com
abarth.pt
audiencemanager.stellantis.com
www.stellantis.com
prod.sfp.stellantis.com
comconnect.stellantis.com
imc.test.com-activities.stellantis.com
teamcity.stellantis.com
itdealersupport.stellantis.com
dpromo.abarth.it
login-stage.sapcdc.stellantis.com
san-16-s51.tlsprovisioning.exacttarget.com
management.diagboxcloud.stellantis.com
uat3.alfaromeousa.com
nea.wrt.test.stellantis.com
*.test.as.ivdp.dash.stellantis.com
itdealersupport.pre.stellantis.com
abarth.pt
spu-dev.stellantis.com
idpm.stellantis.com
abarth.pt
cloud.web.stellantis.com
www.fiat.com
nocache.media.stellantis.com
isba.staging.stellantis.com
staging1.fcagroup.com
aemstagems4-connect.alfaromeo.com
oms-ui-stage2.stellantis.com
aftersales-solutions-test.stellantis.com
thehub.stellantis.com
ppr.ppw.stellantis.com
carcomp.stellantis.com
email.lumapps.thehub.stellantis.com
privacyportal.stellantis.com
docma.stellantis.com
targethub.test.stellantis.com
cars-tms.stellantis.com
secure5s.scene7.com
click.web.stellantis.com
secure5s.scene7.com
fed.docmacert.stellantis.com
san-7-s10.tlsprovisioning.exacttarget.com
uat3.alfaromeousa.com
abarth.pt
*.stellantis.com
abarth.pt
dashboards.stellantis.com
admin2-medialibrary.stellantis.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
email.lumapps.thehub.stellantis.com
abarth.pt
secure5s.scene7.com
diagboxcloud.stellantis.com
my.des.stellantis.com
admin.idhub.test.stellantis.com
carconfigurator.fcagroup.it
cloud.iap-crm.stellantis.com
www.fiat.com
integration-diagcloud.stellantis.com
www.fiat.com
*.stellantis.com
test.ccl-event.stellantis.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
digitalme.stellantis.com
edoc-partners.stellantis.com
mcstaging.stellantis.com
autodiscover.external.stellantis.com
api.ccl-event.stellantis.com
careers.stellantis.com
stellantis.com
stage1-www.opel.de
oms-ui-stage3.stellantis.com
alpha.nea.wrt.test.stellantis.com
askstella.stellantis.com
oms-ui-stage2.stellantis.com
stage.digitalme.stellantis.com
diabase.stellantis.com
test.k2.extra.stellantis.com
dash.stellantis.com
oms-ui-stage.stellantis.com
isba.stellantis.com
www.fcagroup.com
be.idhub.test.stellantis.com
aemdevms4-connectivity.alfaromeo.com
alpha.nea.wrt.stellantis.com
aemstagems4-connect.alfaromeo.com
be.idhub.stellantis.com
incubator.stellantis.com
workbench.stellantis.com
secure5s.scene7.com
linkentry.fiat.com
git.stellantis.com
vpn-mobile-preprod.stellantis.com
*.stellantis.com
aemstagems4-connect.alfaromeo.com
oms-ui-dev.stellantis.com
commercial-needs.stellantis.com
admin3-medialibrary.stellantis.com
abarth.pt
audiencemanager.stellantis.com
www.stellantis.com
prod.sfp.stellantis.com
comconnect.stellantis.com
imc.test.com-activities.stellantis.com
teamcity.stellantis.com
itdealersupport.stellantis.com
dpromo.abarth.it
login-stage.sapcdc.stellantis.com
san-16-s51.tlsprovisioning.exacttarget.com
management.diagboxcloud.stellantis.com
uat3.alfaromeousa.com
nea.wrt.test.stellantis.com
*.test.as.ivdp.dash.stellantis.com
itdealersupport.pre.stellantis.com
abarth.pt
spu-dev.stellantis.com
idpm.stellantis.com
abarth.pt
cloud.web.stellantis.com
www.fiat.com
nocache.media.stellantis.com
isba.staging.stellantis.com
staging1.fcagroup.com
aemstagems4-connect.alfaromeo.com
oms-ui-stage2.stellantis.com
aftersales-solutions-test.stellantis.com
thehub.stellantis.com
ppr.ppw.stellantis.com
carcomp.stellantis.com
email.lumapps.thehub.stellantis.com
privacyportal.stellantis.com
docma.stellantis.com
targethub.test.stellantis.com
cars-tms.stellantis.com
secure5s.scene7.com
click.web.stellantis.com
secure5s.scene7.com
fed.docmacert.stellantis.com
san-7-s10.tlsprovisioning.exacttarget.com
uat3.alfaromeousa.com
abarth.pt
*.stellantis.com
abarth.pt
dashboards.stellantis.com
admin2-medialibrary.stellantis.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
email.lumapps.thehub.stellantis.com
abarth.pt
secure5s.scene7.com
diagboxcloud.stellantis.com
my.des.stellantis.com
admin.idhub.test.stellantis.com
carconfigurator.fcagroup.it
cloud.iap-crm.stellantis.com
www.fiat.com
integration-diagcloud.stellantis.com
www.fiat.com
*.stellantis.com
test.ccl-event.stellantis.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
digitalme.stellantis.com
edoc-partners.stellantis.com
mcstaging.stellantis.com
autodiscover.external.stellantis.com
api.ccl-event.stellantis.com
careers.stellantis.com
stellantis.com
stage1-www.opel.de
oms-ui-stage3.stellantis.com
alpha.nea.wrt.test.stellantis.com
askstella.stellantis.com
oms-ui-stage2.stellantis.com
Certificate
The complete raw certificate details for *.stellantis.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIQD3uONhqkcIWNy73b6ERj9TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDEyODAwMDAwMFoXDTI1MDIyNjIzNTk1OVowGzEZ MBcGA1UEAwwQKi5zdGVsbGFudGlzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANgydGnPoQ7kIoAobqr+NLqnYQIcRbWU+T8N85hk9Q2w5moAArzN nCRHMJuM2h/uZGNUZDT6nHowuUHlrhEEcGUvORpeYTelnv0YbYGQEjPBULC03hBc mPKVGhPpS6/8RURfCTVXa1VomYhfWL5TCr7jxjsNStR3uVesBJLT3tBelMCPohOL 9y7YZTXCqfwQ/x003WYt+DcOpGXVAKZHiQRlv4mdoQD2wE/0G64j7bZrYS3AVoZS lTeaiF236RZwGLa0t6snbDhxJo8AL9svuYhCmYH0p//kfAVMNOHjZh+VBM2ojrx1 NE3bMmGW43knTuVDOAjDVgwzccIQci0uV3kCAwEAAaOCA24wggNqMB8GA1UdIwQY MBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBTZcyoINLxjyZOSfdL3 Sw5fl0JtgzCBoQYDVR0RBIGZMIGWghAqLnN0ZWxsYW50aXMuY29tghQqLmxvamFj aXRyb2VuLmNvbS5icoIOKi5mY2FsYXRhbS5jb22CESouZmNhbGF0YW0uY29tLmJy giAqLmZhYXNhLW5vbi1wcm9kLmZjYWxhdGFtLmNvbS5hcoIRKi5mY2Fncm91cC5j b20uYnKCFCoubG9qYXBldWdlb3QuY29tLmJyMBMGA1UdIAQMMAowCAYGZ4EMAQIB MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5j b20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDov L29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8v Y3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIw ADCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHYATnWjJ1yaEMM4W2zU3z9S6x3w 4I4bjWnAsfpksWKaOd8AAAGNTj3i2QAABAMARzBFAiEAuCeCr7f0t2qECJ1y/1Ek bcTzYYQZURdz3gmfQsDGRSwCIHZRpgdepahhqET7u9tO9IiHG7uc7DRwhSpNVmPr Od/WAHUAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNTj3iuQAA BAMARjBEAiASw1FORRSf5HOkTQ6vXtL8koK2h42eDI99/5VNOIhFxAIgG2mxz9uN zxWWSbs3nukfkNGvri0HHIfkmYgy64jl+DsAdQDm0jFjQHeMwRBBBtdxuc7B0kD2 loSG+7qHMh39HjeOUAAAAY1OPeLnAAAEAwBGMEQCIDiHuFRsWFk8C4m2lrg/o9bj h0R7XWyoOHLNk/euOHORAiBaur77J9MgzvFGAk/2ajeBKY0SKHUgObxT7vvEcSiv VTANBgkqhkiG9w0BAQsFAAOCAQEAR4CHyJ82gxEan/F79TpN39EV13FqkHEdk+yL eVwpJLs4xpxARXjJ7igXCdUiIoDwTTo41BGt1FCAJQ3ojxc25iUSsrU4r+07EZiP ZSomtNOnEkw9k+ylWrymOcdiVfz2TLByydKKCrEn3eJNf3fKfCMxN1O1t5A/cmLq s71mHgn4uLQb6kNkRLzy8z7DnSrzxNdz5rZrDyP/b+vuCCsqnJyKxDRHPdJggo2A SLPFGpGa5suxNB6neaAco9bCKdQi9VB/WY9wqFdrEnjKnUR42ag/661Ru1LttnCi ZuvDJND/j5AzKpKOHpLaOngA9r2JPU21J94D+nBcxvS3XxOumQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DJ0ac+hDuQigChuqv40 uqdhAhxFtZT5Pw3zmGT1DbDmagACvM2cJEcwm4zaH+5kY1RkNPqcejC5QeWuEQRw ZS85Gl5hN6We/RhtgZASM8FQsLTeEFyY8pUaE+lLr/xFRF8JNVdrVWiZiF9YvlMK vuPGOw1K1He5V6wEktPe0F6UwI+iE4v3LthlNcKp/BD/HTTdZi34Nw6kZdUApkeJ BGW/iZ2hAPbAT/QbriPttmthLcBWhlKVN5qIXbfpFnAYtrS3qydsOHEmjwAv2y+5 iEKZgfSn/+R8BUw04eNmH5UEzaiOvHU0TdsyYZbjeSdO5UM4CMNWDDNxwhByLS5X eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20579956839103421657793070620697977845 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stellantis.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27292354032036272393054145794901447676125549803272121878356598196777073036046269533480278686606044539807051493575504968436179873540304282561770708298046064233956670106842744439879951858230994194550832357603286818350788590435071806766861496277218461487129179708586786811538153016452037854630363396697829451396690940000410476225286770252244132683961865584449617215561398973781685880279353765828265826234974205307801060262434341765377350749428852404175836311776279693827500559898979061404123737870676644289575767615557875794720334682117610910790912986658307403228882650330955774408345029114338536976620119906150131849081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d9732a0834bc63c993927dd2f74b0e5f97426d83 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellantis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojacitroen.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcalatam.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcalatam.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faasa-non-prod.fcalatam.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcagroup.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojapeugeot.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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