api.gettyimages.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 03:cc:45:d9:d2:8a:59:52:78:00:32:bd:28:4f:88:dd was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=api.gettyimages.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cc:45:d9:d2:8a:59:52:78:00:32:bd:28:4f:88:ddSerial Number (int): 5048329290428875653038392364856477917
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 8d:10:98:fb:21:af:28:7a:d8:8e:4d:73:3b:75:82:86:eb:a1:0f:26
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): bf:0d:30:60:05:7f:83:3c:40:6e:f7:82:e0:53:1a:a3:e7:89:4b:67
Fingerprint (sha256): 61:1c:37:a1:fd:65:d2:88:57:cd:66:15:09:18:61:29:e2:96:da:29:ab:3d:dd:8f:7c:cd:d8:c2:23:46:7a:1d
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate api.gettyimages.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.gettyimages.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.gettyimages.com
gateway-api.prod.getty1.net
connect.gettyimages.com
gateway-api.prod.getty1.net
connect.gettyimages.com
Other certificates including the domain name gettyimages.com
(limited to 100 certificates)
api-us-east-1.nd.nudatasecurity.com
*.gettyimages.com
embed.gettyimages.com
labs.gettyimages.com
k3.shared.global.fastly.net
foto.gettyimages.com
www.labs.gettyimages.com
embed-cdn.gettyimages.com
ews.gettyimages.com
embed-cdn.gettyimages.com
k3.shared.global.fastly.net
studio.gettyimages.com
ceros3.map.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
firstdata.gettyimages.com
smetrics.gettyimages.com
brookfield.gettyimages.com
mmpart.gettyimages.com
apply.gettyimages.com
sitemaps.gettyimages.com
labs.gettyimages.com
stories.gettyimages.com
k3.shared.global.fastly.net
workbench.gettyimages.com
api-prod.vizual.ai
mixer.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
workbench.gettyimages.com
services.gettyimages.com
hexion.gettyimages.com
mixer.gettyimages.com
*.dam.gettyimages.com
*.pinterestceros.com
k3.shared.global.fastly.net
view.ceros.com
developers.gettyimages.com
ceros3.map.fastly.net
remotetest.gettyimages.com
k3.shared.global.fastly.net
nd-ga.gettyimages.com
customcontent.gettyimages.com
esp.gettyimages.com
k3.shared.global.fastly.net
ceros.map.fastly.net
k3.shared.global.fastly.net
studioportfolios.gettyimages.com
legacycreative.gettyimages.com
servicestest.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
briefs-middleware.custom-content.usw2.prod-getty.cloud
k3.shared.global.fastly.net
events.gettyimages.com
www.gettyimages.com
licensecompliance.gettyimages.com
labs.gettyimages.com
mm.gettyimages.com
foto.gettyimages.com
communityassignments.gettyimages.com
stg-mm.lower-getty.cloud
k3.shared.global.fastly.net
stg-in.lower-getty.cloud
delivery.stage-gettyimages.com
services.gettyimages.com
copyrightcompliance.gettyimages.com
damhelp.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
ceros3.map.fastly.net
api-us-east-1.nd.nudatasecurity.com
k3.shared.global.fastly.net
communityassignments.gettyimages.com
essilormediamanager.gettyimages.com
mmx.gettyimages.com
view.ceros.com
www.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
mmpart.gettyimages.com
yearinfocus.gettyimages.com
secondary-prod-mm.prod-getty.cloud
affiliates.gettyimages.com
pdn.gettyimages.com
joinus.gettyimages.com
media.gettyimages.com
fashion.gettyimages.com
ceros3.map.fastly.net
unisys.gettyimages.com
ceros3.map.fastly.net
ceros3.map.fastly.net
k3.shared.global.fastly.net
api-us-east-1.nd.nudatasecurity.com
firstpartycookie.gettyimages.com
*.pinterestceros.com
mmx.gettyimages.com
k3.shared.global.fastly.net
*.gettyimages.com
embed.gettyimages.com
labs.gettyimages.com
k3.shared.global.fastly.net
foto.gettyimages.com
www.labs.gettyimages.com
embed-cdn.gettyimages.com
ews.gettyimages.com
embed-cdn.gettyimages.com
k3.shared.global.fastly.net
studio.gettyimages.com
ceros3.map.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
firstdata.gettyimages.com
smetrics.gettyimages.com
brookfield.gettyimages.com
mmpart.gettyimages.com
apply.gettyimages.com
sitemaps.gettyimages.com
labs.gettyimages.com
stories.gettyimages.com
k3.shared.global.fastly.net
workbench.gettyimages.com
api-prod.vizual.ai
mixer.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
workbench.gettyimages.com
services.gettyimages.com
hexion.gettyimages.com
mixer.gettyimages.com
*.dam.gettyimages.com
*.pinterestceros.com
k3.shared.global.fastly.net
view.ceros.com
developers.gettyimages.com
ceros3.map.fastly.net
remotetest.gettyimages.com
k3.shared.global.fastly.net
nd-ga.gettyimages.com
customcontent.gettyimages.com
esp.gettyimages.com
k3.shared.global.fastly.net
ceros.map.fastly.net
k3.shared.global.fastly.net
studioportfolios.gettyimages.com
legacycreative.gettyimages.com
servicestest.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
briefs-middleware.custom-content.usw2.prod-getty.cloud
k3.shared.global.fastly.net
events.gettyimages.com
www.gettyimages.com
licensecompliance.gettyimages.com
labs.gettyimages.com
mm.gettyimages.com
foto.gettyimages.com
communityassignments.gettyimages.com
stg-mm.lower-getty.cloud
k3.shared.global.fastly.net
stg-in.lower-getty.cloud
delivery.stage-gettyimages.com
services.gettyimages.com
copyrightcompliance.gettyimages.com
damhelp.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
ceros3.map.fastly.net
api-us-east-1.nd.nudatasecurity.com
k3.shared.global.fastly.net
communityassignments.gettyimages.com
essilormediamanager.gettyimages.com
mmx.gettyimages.com
view.ceros.com
www.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
mmpart.gettyimages.com
yearinfocus.gettyimages.com
secondary-prod-mm.prod-getty.cloud
affiliates.gettyimages.com
pdn.gettyimages.com
joinus.gettyimages.com
media.gettyimages.com
fashion.gettyimages.com
ceros3.map.fastly.net
unisys.gettyimages.com
ceros3.map.fastly.net
ceros3.map.fastly.net
k3.shared.global.fastly.net
api-us-east-1.nd.nudatasecurity.com
firstpartycookie.gettyimages.com
*.pinterestceros.com
mmx.gettyimages.com
k3.shared.global.fastly.net
Certificate
The complete raw certificate details for api.gettyimages.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIQA8xF2dKKWVJ4ADK9KE+I3TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDExOTAwMDAwMFoXDTI0MDIxNzIzNTk1OVowHjEc MBoGA1UEAxMTYXBpLmdldHR5aW1hZ2VzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAIxXIiF9g7CX66+bEWUUh1AUUANf7Zhy0hKuVNuaGNTUHRzQ 2eK/56vsODZFkU8St20ZRjMhRugWeyYKqrRx36DrWK7Pkia30SIHrtpiRWtN3vj5 BP0602L3XlhrDTpxG88oUiBEJnIhq8U+eQXCu8ao1Kz9k6EJTfdtaQ4DR0rN+4Q1 ahj+nvgfIOsB7SRbZ5GIDxZ4g8eMOKGq0TYLp7TF8mUsSj+dHguPA7CeH9xtya3S YIBM7FfO7s6kxNSzXTXV3ftH+IWLUwtZQKTGMRmG0b/7hCk1ZUnM4b9SUkCwqfCF MNmFZq9LPRi13cDfwDA8RHfDkjdlJvZ6DXr4K70CAwEAAaOCAyIwggMeMB8GA1Ud IwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBSNEJj7Ia8oetiO TXM7dYKG66EPJjBUBgNVHREETTBLghNhcGkuZ2V0dHlpbWFnZXMuY29tghtnYXRl d2F5LWFwaS5wcm9kLmdldHR5MS5uZXSCF2Nvbm5lY3QuZ2V0dHlpbWFnZXMuY29t MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5j b20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29t MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9y Mm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFo AHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGFx5UZMQAABAMA RzBFAiBRjsdB3f8pqD7YENBQ7cskeKqho6cnDf+ltUNljxI13QIhANogPa4CScOE YM5q5p5mVJo50EIuqmgpKEEtEW5Hc2RJAHYAc9meiRtMlnigIH1HneayxhzQUV5x GSqMa4AQesF3crUAAAGFx5UZpQAABAMARzBFAiBkxCbyUGP30/7xN5qh/Z9fLEkq qF7e930B3IJ7PVT+GAIhAPySBi+0Or4o4l06cuT2ZYW5u1bIM0ljT45uZAhjYo/4 AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGFx5UY+QAABAMA RzBFAiEAxQrYysl6YmFj7eZB+wjKA8pRKUqzl72wF0hezuuQc7sCIA+Lt97Bkhsv UdK1HMbHt7uvLH0DljTLnVkhB5vyCDdIMA0GCSqGSIb3DQEBCwUAA4IBAQCPowpC UlLwToBW9YhZkVfWvrxMY7uhnlEU4MY/d3TLaHBT/yLUH6r/UMz2tYD47YssOsFu NP/ixH+VF6SCfRgdyttUYsN6k8STzo//vpBI08OFNOjbFwxRryAc505ZnUzofwiW wm4eB4PaINXVV/qu2sPBdgaAFBM/LBltQbSzCo4Sb8ttaQOwe9xaTbCBJElwRI7D Wv/mK2TWcGrsSoyaZxY6dYNbKJv92mGKIV7HCHQYwWemnvV3iM2158WDUF5gDJCR FpgXux3ePru2oqPrTiw1xKEuCldYFDoflOGie1mrpOtpcgfus+/w1J5+c1GSZJVb wqlSk2vjUeIPAwoQ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFciIX2DsJfrr5sRZRSH UBRQA1/tmHLSEq5U25oY1NQdHNDZ4r/nq+w4NkWRTxK3bRlGMyFG6BZ7JgqqtHHf oOtYrs+SJrfRIgeu2mJFa03e+PkE/TrTYvdeWGsNOnEbzyhSIEQmciGrxT55BcK7 xqjUrP2ToQlN921pDgNHSs37hDVqGP6e+B8g6wHtJFtnkYgPFniDx4w4oarRNgun tMXyZSxKP50eC48DsJ4f3G3JrdJggEzsV87uzqTE1LNdNdXd+0f4hYtTC1lApMYx GYbRv/uEKTVlSczhv1JSQLCp8IUw2YVmr0s9GLXdwN/AMDxEd8OSN2Um9noNevgr vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5048329290428875653038392364856477917 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.gettyimages.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17716329738480182627321879074288737608971895354129260264019763755794395031968233566373361620750120529137538937443057259034583997946114940446895770366497024836287636480440781792522160082958436262577038486169642713719365308092594794840459434408417388586331041529971630226927308542353935247429987350746026479005191237324720997392782346844560946506233669965385524910661073531324457252017982389131809981661642765025377321758457506622362050251634169911277741896724084177191367154387406462107587963380878557866791865522518762908538956943652989710492398454497021808545446565709639093787756355433264294220518831857456645680061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d1098fb21af287ad88e4d733b758286eba10f26 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-api.prod.getty1.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.gettyimages.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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