api.wh.geniussports.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 06:d8:62:5a:7b:cc:ef:d0:c7:95:22:ad:1c:46:98:aa was issued on by Amazon.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=api.wh.geniussports.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 06:d8:62:5a:7b:cc:ef:d0:c7:95:22:ad:1c:46:98:aaSerial Number (int): 9098898941143211724797799911932729514
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: d6:00:d0:cd:2b:d6:a6:00:07:b6:47:19:68:e7:81:6b:a8:57:bb:9e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 9e:20:13:8a:56:62:15:ce:6b:fe:e3:ee:1d:03:25:e7:32:29:45:44
Fingerprint (sha256): 6c:e8:d1:32:3b:a3:c4:e7:56:f1:2e:fd:e7:92:aa:f1:55:21:fd:b7:24:ae:67:ab:1b:4f:50:25:79:04:f1:0f
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate api.wh.geniussports.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.wh.geniussports.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.wh.geniussports.com
api.wh.sportingpulseinternational.com
api.test.wh.sportingpulseinternational.com
api.uat.wh.geniussports.com
api.test.wh.geniussports.com
api.uat.wh.sportingpulseinternational.com
api.wh.sportingpulseinternational.com
api.test.wh.sportingpulseinternational.com
api.uat.wh.geniussports.com
api.test.wh.geniussports.com
api.uat.wh.sportingpulseinternational.com
Other certificates including the domain name geniussports.com
(limited to 100 certificates)
rabbit.geniusbet-7143.integration.geniussports.com
*.uat.webdev.geniussports.com
*.ci.opap.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
support.sixsq.com
*.contentgraph-211883.perf.dev.aws.geniussports.com
*.ci.spt.geniussports.com
graylog-core.dev.aws.geniussports.com
*.ls.prod.aws.geniussports.com
support.wh.sportingpulseinternational.com
graylog-core.dev.aws.geniussports.com
eu-status.swrve.com
*.opap.uat.webdev.geniussports.com
*.ci.geniuslive.app.geniussports.com
fdus-35a.freshdesk.com
ci.media.api.geniussports.com
*.eu.f2p.media.geniussports.com
chronograf.tick.test.prod.aws.geniussports.com
prodwh-phpmyadmin.wh.geniussports.com
*.algotrading.ci.aws.geniussports.com
etp.status.akamai.com
*.tick.templates.prod.aws.geniussports.com
*.ci.sportsbook.app.geniussports.com
www.geniussports.com
design.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
*.granularityconfigurator.otr.api.geniussports.com
support.wh.geniussports.com
*.uat.baseball.geniussports.com
competitions.geniussports.com
*.production.riskmanagement.app.geniussports.com
*.contentgraph-196169.perf.dev.aws.geniussports.com
fdus-35a.freshdesk.com
qa-jenkins.prod.aws.geniussports.com
*.uat.webdev.geniussports.com
*.gen.baseball.geniussports.com
etp.status.akamai.com
*.perf.prod.aws.geniussports.com
widget.wh.sportingpulseinternational.com
fdus-40.freshdesk.com
*.ci.webdev.geniussports.com
eu-status.swrve.com
*.uat.matchviewer.geniussports.com
*.geniussports.com
graylog-spt.spt.geniussports.com
www2.geniussports.com
*.h.logging.ci.riskmanagement.geniussports.com
smpp.ci.geniussports.com
se-prod-reports-api.wh.geniussports.com
*.contentgraph-211853.perf.dev.aws.geniussports.com
*.ci.aws.geniussports.com
fdus-40.freshdesk.com
graylog-core.dev.aws.geniussports.com
smpp.test.geniussports.com
eu-status.swrve.com
graylog-integration-cixl.ci.aws.geniussports.com
prodwh-ecs-cluster.wh.geniussports.com
support.sixsq.com
*.contentgraph-209475.perf.dev.aws.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
fdus-40.freshdesk.com
*.uat.f2p.media.geniussports.com
eu-status.swrve.com
api.statistics.americanfootball.geniussports.com
betting.geniussports.com
*.uat.feed-monitor-controller.app.geniussports.com
graylog-spt.spt.geniussports.com
api.geniussports.com
eu-status.swrve.com
prod-re-phpmyadmin.wh.geniussports.com
eu-status.swrve.com
algotrading-graylog.ci.aws.geniussports.com
eu-status.swrve.com
fdus-35a.freshdesk.com
*.perf.prod.aws.geniussports.com
*.contentgraph-211929.perf.dev.aws.geniussports.com
*.da.gss-production.i.geniussports.com
*.contentgraph-191126.perf.dev.aws.geniussports.com
graylog-integration-cixl.ci.aws.geniussports.com
eu-status.swrve.com
uat.venuematches.matchmaker.api.geniussports.com
etp.status.akamai.com
graylog-otf.ci.aws.geniussports.com
*.ci.aws.geniussports.com
footballsupport.geniussports.com
*.ci.geniussports.com
eu-status.swrve.com
*.video-platform.ci.aws.geniussports.com
support.sixsq.com
*.volleyball.geniussports.com
*.sb3.prod.aws.geniussports.com
*.dev.aws.geniussports.com
*.dcd-uat.i.geniussports.com
competitions.geniussports.com
prodwh-phpmyadmin.wh.geniussports.com
ci.baseball-resulting.srt.geniussports.com
*.api.matchviewer.geniussports.com
etp.status.akamai.com
eu-status.swrve.com
*.sb1-external.production.sportsbook.app.geniussports.com
*.uat.webdev.geniussports.com
*.ci.opap.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
support.sixsq.com
*.contentgraph-211883.perf.dev.aws.geniussports.com
*.ci.spt.geniussports.com
graylog-core.dev.aws.geniussports.com
*.ls.prod.aws.geniussports.com
support.wh.sportingpulseinternational.com
graylog-core.dev.aws.geniussports.com
eu-status.swrve.com
*.opap.uat.webdev.geniussports.com
*.ci.geniuslive.app.geniussports.com
fdus-35a.freshdesk.com
ci.media.api.geniussports.com
*.eu.f2p.media.geniussports.com
chronograf.tick.test.prod.aws.geniussports.com
prodwh-phpmyadmin.wh.geniussports.com
*.algotrading.ci.aws.geniussports.com
etp.status.akamai.com
*.tick.templates.prod.aws.geniussports.com
*.ci.sportsbook.app.geniussports.com
www.geniussports.com
design.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
*.granularityconfigurator.otr.api.geniussports.com
support.wh.geniussports.com
*.uat.baseball.geniussports.com
competitions.geniussports.com
*.production.riskmanagement.app.geniussports.com
*.contentgraph-196169.perf.dev.aws.geniussports.com
fdus-35a.freshdesk.com
qa-jenkins.prod.aws.geniussports.com
*.uat.webdev.geniussports.com
*.gen.baseball.geniussports.com
etp.status.akamai.com
*.perf.prod.aws.geniussports.com
widget.wh.sportingpulseinternational.com
fdus-40.freshdesk.com
*.ci.webdev.geniussports.com
eu-status.swrve.com
*.uat.matchviewer.geniussports.com
*.geniussports.com
graylog-spt.spt.geniussports.com
www2.geniussports.com
*.h.logging.ci.riskmanagement.geniussports.com
smpp.ci.geniussports.com
se-prod-reports-api.wh.geniussports.com
*.contentgraph-211853.perf.dev.aws.geniussports.com
*.ci.aws.geniussports.com
fdus-40.freshdesk.com
graylog-core.dev.aws.geniussports.com
smpp.test.geniussports.com
eu-status.swrve.com
graylog-integration-cixl.ci.aws.geniussports.com
prodwh-ecs-cluster.wh.geniussports.com
support.sixsq.com
*.contentgraph-209475.perf.dev.aws.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
fdus-40.freshdesk.com
*.uat.f2p.media.geniussports.com
eu-status.swrve.com
api.statistics.americanfootball.geniussports.com
betting.geniussports.com
*.uat.feed-monitor-controller.app.geniussports.com
graylog-spt.spt.geniussports.com
api.geniussports.com
eu-status.swrve.com
prod-re-phpmyadmin.wh.geniussports.com
eu-status.swrve.com
algotrading-graylog.ci.aws.geniussports.com
eu-status.swrve.com
fdus-35a.freshdesk.com
*.perf.prod.aws.geniussports.com
*.contentgraph-211929.perf.dev.aws.geniussports.com
*.da.gss-production.i.geniussports.com
*.contentgraph-191126.perf.dev.aws.geniussports.com
graylog-integration-cixl.ci.aws.geniussports.com
eu-status.swrve.com
uat.venuematches.matchmaker.api.geniussports.com
etp.status.akamai.com
graylog-otf.ci.aws.geniussports.com
*.ci.aws.geniussports.com
footballsupport.geniussports.com
*.ci.geniussports.com
eu-status.swrve.com
*.video-platform.ci.aws.geniussports.com
support.sixsq.com
*.volleyball.geniussports.com
*.sb3.prod.aws.geniussports.com
*.dev.aws.geniussports.com
*.dcd-uat.i.geniussports.com
competitions.geniussports.com
prodwh-phpmyadmin.wh.geniussports.com
ci.baseball-resulting.srt.geniussports.com
*.api.matchviewer.geniussports.com
etp.status.akamai.com
eu-status.swrve.com
*.sb1-external.production.sportsbook.app.geniussports.com
Certificate
The complete raw certificate details for api.wh.geniussports.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIQBthiWnvM79DHlSKtHEaYqjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwMzAwMDAwMFoXDTI1MDEwMTIzNTk1OVowIjEg MB4GA1UEAxMXYXBpLndoLmdlbml1c3Nwb3J0cy5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDQnmgvD5WVKhCaGs6ewIDc2EN9+0m+1Ouruanv6cKl Mjnu5KG8EssqovNJth1jXsPune31cSgNQapMAt5TY3ESW+XOuFZ9nwPU6Hf92gSQ lMbSEqYd6qXpShhlO/XF4aZWBDv0EScauVXdjjgONV3yfHJncCsCvXAcXIwJ1MB7 lZvL/fqhOkt35/hwK3nGPNT8yNR3yRx1aM/nCRUFbXgt4eOZlsnlh6McOlRyaXa3 6V06SCXu8Xbala1EoQvDeGTA3/tWG/rKvJJslihB+khtT0wAunvJq1PU4Djm3Vv3 qKJFQVVwI5/24o1jrKbFh8qEvRQxRn+WdwbwK4vx7PeJAgMBAAGjggI/MIICOzAf BgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU1gDQzSvW pgAHtkcZaOeBa6hXu54wgd0GA1UdEQSB1TCB0oIXYXBpLndoLmdlbml1c3Nwb3J0 cy5jb22CJWFwaS53aC5zcG9ydGluZ3B1bHNlaW50ZXJuYXRpb25hbC5jb22CKmFw aS50ZXN0LndoLnNwb3J0aW5ncHVsc2VpbnRlcm5hdGlvbmFsLmNvbYIbYXBpLnVh dC53aC5nZW5pdXNzcG9ydHMuY29tghxhcGkudGVzdC53aC5nZW5pdXNzcG9ydHMu Y29tgilhcGkudWF0LndoLnNwb3J0aW5ncHVsc2VpbnRlcm5hdGlvbmFsLmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu cjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJt MDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQELBQADggEBAGGxVuOCkMibRLWKsTDTI+BIlbXfn9SxsstgX+rnw5BpD3Qk yGTfw/KeMo8NuQZVrckHdRhEnvV5pmrOWkqs5XsDUTfCx1BxigXShhpJ5DxJ/0xg 6aEezx+YmZ6DLjtxqTeD3bZ7MTjJIKjRBy1y8P+PjouP4RhJ9zhl9H/gq1dLaMF0 hv+8b0I9xU4Nn6mfM3FdEcKUgB8RIqZraDohNMIjVSxfMwsKkQSsHC60Ba977iXh vPWX6s9Axv1tX4yLo+19QlPjWxzP4teZ/15vb+W49+a7DhoJ3tsOayb/yPq/bLyl 1EQxHT2WW3qmkiVj9gSOZa6LremcCIy8vEdF1X8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J5oLw+VlSoQmhrOnsCA 3NhDfftJvtTrq7mp7+nCpTI57uShvBLLKqLzSbYdY17D7p3t9XEoDUGqTALeU2Nx ElvlzrhWfZ8D1Oh3/doEkJTG0hKmHeql6UoYZTv1xeGmVgQ79BEnGrlV3Y44DjVd 8nxyZ3ArAr1wHFyMCdTAe5Wby/36oTpLd+f4cCt5xjzU/MjUd8kcdWjP5wkVBW14 LeHjmZbJ5YejHDpUcml2t+ldOkgl7vF22pWtRKELw3hkwN/7Vhv6yrySbJYoQfpI bU9MALp7yatT1OA45t1b96iiRUFVcCOf9uKNY6ymxYfKhL0UMUZ/lncG8CuL8ez3 iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9098898941143211724797799911932729514 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.wh.geniussports.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26335680820232164026427703022881477926203116100204808605373134654871186628121392317784997100764341576114612446788802696134092641292754628319311475678049567612798356442181226846641278049827113401071187613346194885636173266465206897318936348780615156000039598490155761257010411945092240420026971808663398249615987173252104298113922518479228503875049202596076546116456493512864455615083913595247035745186783877758690425018169037833617565544727451755734109561295898522478157157951662040887545674792797435404916266085135470283910921385917213048737605303762999202277543956427012728452674403377628221233580926760800586889097 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d600d0cd2bd6a60007b6471968e7816ba857bb9e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (213 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.wh.geniussports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.wh.sportingpulseinternational.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.test.wh.sportingpulseinternational.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.uat.wh.geniussports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.test.wh.geniussports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.uat.wh.sportingpulseinternational.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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