wealthversed.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 09:e8:fc:5b:b5:e5:55:4f:af:1e:32:bb:e0:b7:bf:cc was issued on by Amazon.
With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=wealthversed.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:e8:fc:5b:b5:e5:55:4f:af:1e:32:bb:e0:b7:bf:ccSerial Number (int): 13172783266521265546372506662265667532
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 6c:b3:0f:19:ef:43:4b:62:cf:fd:0b:c6:bf:3b:0f:26:e8:be:f4:56
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): ab:4d:28:0b:c1:be:4f:40:05:c7:bb:dc:ba:3e:39:3d:ea:28:d9:38
Fingerprint (sha256): 6c:3e:99:10:cc:2c:64:90:78:c2:2c:0e:1f:54:91:74:c5:84:28:87:9d:cb:47:87:6f:a7:0f:ff:68:c7:f1:ca
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate wealthversed.com
31
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wealthversed.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wealthversed.com
*.smartstuff.howstuffworks.com
sportsbreak.com
www.healthnwell.com
stage.www.activebeat.com
m.sportsbreak.com
www.stuff.com
www.roadwarrior.app
m.walletgenius.com
*.content.carsgenius.com
m.activebeat.com
nation.com
*.keepasking.com
*.nation.com
stage.m.activebeat.com
www.activebeat.com
startpage-cms.com
m.goliath.com
www.walletgenius.com
blog.roadwarrior.app
www.check.in
intelligentintent.net
trivia.sportsbreak.com
*.system1.com
goliath.com
travelversed.com
*.stuffanswered.com
www.travelversed.com
*.check.in
www.sportsbreak.com
*.healthversed.com
*.smartstuff.howstuffworks.com
sportsbreak.com
www.healthnwell.com
stage.www.activebeat.com
m.sportsbreak.com
www.stuff.com
www.roadwarrior.app
m.walletgenius.com
*.content.carsgenius.com
m.activebeat.com
nation.com
*.keepasking.com
*.nation.com
stage.m.activebeat.com
www.activebeat.com
startpage-cms.com
m.goliath.com
www.walletgenius.com
blog.roadwarrior.app
www.check.in
intelligentintent.net
trivia.sportsbreak.com
*.system1.com
goliath.com
travelversed.com
*.stuffanswered.com
www.travelversed.com
*.check.in
www.sportsbreak.com
*.healthversed.com
Other certificates including the domain name wealthversed.com
(limited to 100 certificates)
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
*.reviews.howstuffworks.com
cdn.wealthversed.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
*.reviews.howstuffworks.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
wealthversed.com
assets.wealthversed.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
*.reviews.howstuffworks.com
cdn.wealthversed.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
*.reviews.howstuffworks.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
wealthversed.com
assets.wealthversed.com
wealthversed.com
wealthversed.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
wealthversed.com
carsgenius.com
carsgenius.com
carsgenius.com
carsgenius.com
Certificate
The complete raw certificate details for wealthversed.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIHDCCBwSgAwIBAgIQCej8W7XlVU+vHjK74Le/zDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDkyMTAwMDAwMFoXDTI0MTAxOTIzNTk1OVowGzEZ MBcGA1UEAxMQd2VhbHRodmVyc2VkLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJs6bE/ZFnyJuRxirKLwsyatoi7X0kuoApeiaiTo7b/Pg+KnbpPS 08KpHw+V9jYt6tW5XUD485PYjgb9heb7oJ5XvXZqGGC1I8146aY9uKxza/Z/o0Dt EBlTgiOogVumONeirgYfz5cVSzeXOds4r1+DQZGeBsQlQR8h6oye7pWMVWEBKwb3 74mL3IUW++iVzAh+ZDWCCiMAWV8kuDRGGMLE9AqWzRZmK2V/8Prit4TXu+nwvzjg ri+QSUnGe5SSNkslpuHJXgqrWBH1JjG/822UdclD+B7a+M+cMsGRA0kVvECCtCdy WSYCpY/fZInfaDE+k4zafaLYXsXzNpFAsO8CAwEAAaOCBTkwggU1MB8GA1UdIwQY MBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBRssw8Z70NLYs/9C8a/ Ow8m6L70VjCCAmcGA1UdEQSCAl4wggJaghB3ZWFsdGh2ZXJzZWQuY29tgh4qLnNt YXJ0c3R1ZmYuaG93c3R1ZmZ3b3Jrcy5jb22CD3Nwb3J0c2JyZWFrLmNvbYITd3d3 LmhlYWx0aG53ZWxsLmNvbYIYc3RhZ2Uud3d3LmFjdGl2ZWJlYXQuY29tghFtLnNw b3J0c2JyZWFrLmNvbYINd3d3LnN0dWZmLmNvbYITd3d3LnJvYWR3YXJyaW9yLmFw cIISbS53YWxsZXRnZW5pdXMuY29tghgqLmNvbnRlbnQuY2Fyc2dlbml1cy5jb22C EG0uYWN0aXZlYmVhdC5jb22CCm5hdGlvbi5jb22CECoua2VlcGFza2luZy5jb22C DCoubmF0aW9uLmNvbYIWc3RhZ2UubS5hY3RpdmViZWF0LmNvbYISd3d3LmFjdGl2 ZWJlYXQuY29tghFzdGFydHBhZ2UtY21zLmNvbYINbS5nb2xpYXRoLmNvbYIUd3d3 LndhbGxldGdlbml1cy5jb22CFGJsb2cucm9hZHdhcnJpb3IuYXBwggx3d3cuY2hl Y2suaW6CFWludGVsbGlnZW50aW50ZW50Lm5ldIIWdHJpdmlhLnNwb3J0c2JyZWFr LmNvbYINKi5zeXN0ZW0xLmNvbYILZ29saWF0aC5jb22CEHRyYXZlbHZlcnNlZC5j b22CEyouc3R1ZmZhbnN3ZXJlZC5jb22CFHd3dy50cmF2ZWx2ZXJzZWQuY29tggoq LmNoZWNrLmlughN3d3cuc3BvcnRzYnJlYWsuY29tghIqLmhlYWx0aHZlcnNlZC5j b20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v Y3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29t L3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFs AWoAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYq56Xq5AAAE AwBIMEYCIQDotWMBlQl05MzSg0szt4iz0APiqTpbi2Ll5tt82Sac0gIhAKPwZmxf mGD8iqLDSMKgL7qYAw3YoL5G7FdXMKgMj+QRAHcASLDja9qmRzQP5WoC+p0w6xxS ActW3SyB2bu/qznYhHMAAAGKuel6sQAABAMASDBGAiEA8TB1gKU+lWL7M81Drhzl 9tE6vkzJL7iTswIPOc2h3OoCIQCqfmE0bNspSbi+tt4DuntMeK8Xh5genZknpl1Q gZmpsAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABirnpeoEA AAQDAEcwRQIhANig42y24b3e9bVJaTuV2XRKLy+CJ0+4EmRGHQYzVErfAiAMX1nl AmS/RO+Sq0aRU0lPB57zl0NJWhMFQTXw8/sIMTANBgkqhkiG9w0BAQsFAAOCAQEA GcisXx4b5OlDturOENomfH46gMhQYewCGAyqVxxo+/yx0GVwxxhg6s3/Yl7RZh/u nVWQRP5JeaU54QX0/S22YiS7trkvAYegaApOlvl52uqTP8ZtxKGwu3JLcqKDQUEL dSQxFm8qITediqWdEPiU23PomFJwwZ1RORxzkdHCCVHmptNPSW/OO+X+KdRI/5qF hcbn1w9uKUDD9nJcTQwr3JxYPd7ADMULJ2yAMdAfAJTB/LYj05tUFihZ9Rd4bTAq CzRSF8zGPSLc725TCx3R30UROlgGEh/elawVZIhS5SycnKuGqBlGGot+OmF9h3oS zfaXxPDeq2cSgSpeld+hng== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzpsT9kWfIm5HGKsovCz Jq2iLtfSS6gCl6JqJOjtv8+D4qduk9LTwqkfD5X2Ni3q1bldQPjzk9iOBv2F5vug nle9dmoYYLUjzXjppj24rHNr9n+jQO0QGVOCI6iBW6Y416KuBh/PlxVLN5c52ziv X4NBkZ4GxCVBHyHqjJ7ulYxVYQErBvfviYvchRb76JXMCH5kNYIKIwBZXyS4NEYY wsT0CpbNFmYrZX/w+uK3hNe76fC/OOCuL5BJScZ7lJI2SyWm4cleCqtYEfUmMb/z bZR1yUP4Htr4z5wywZEDSRW8QIK0J3JZJgKlj99kid9oMT6TjNp9othexfM2kUCw 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13172783266521265546372506662265667532 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wealthversed.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19595746770831438267939167230556683353283177694087319918746338516114741555691056481475516453935462314495010727013809804973733686168614719631478836479677377649482161196822039923042163093251839631297541155984203329667504536669567421470307617951253494843952879314103673717352446933912600779034072786286453329901240707160055406522014861696248494535612787481941116402617992220838752256754910103178635922192783407330084750611525453116759912192558286820897385250304181731094825950434323226345210389689557311113147909321655031401416627060068094460620164494760349052110016226303929945954561476611390336307404183692095923466479 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6cb30f19ef434b62cffd0bc6bf3b0f26e8bef456 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthversed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartstuff.howstuffworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbreak.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthnwell.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.www.activebeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.sportsbreak.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuff.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roadwarrior.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.walletgenius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.carsgenius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.activebeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keepasking.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.m.activebeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activebeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startpage-cms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.goliath.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walletgenius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.roadwarrior.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.check.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentintent.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivia.sportsbreak.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.system1.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goliath.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelversed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffanswered.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelversed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.check.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsbreak.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthversed.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean false . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING asn1: syntax error: invalid padding bits in BIT STRING (0 bits) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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