*.int-pay.stayclassy.org
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0c:47:f6:70:e1:70:c8:4e:57:4d:5e:3e:b1:fc:63:06 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.int-pay.stayclassy.org
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:47:f6:70:e1:70:c8:4e:57:4d:5e:3e:b1:fc:63:06Serial Number (int): 16324387442462135965034329950381695750
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c8:2a:e6:c6:95:47:fd:ae:e4:bc:71:83:88:db:63:3f:5c:9a:25:3b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 7d:79:18:d0:80:ea:37:2d:45:34:c0:13:13:46:53:f5:ea:78:92:a6
Fingerprint (sha256): 6f:94:2a:24:0b:e2:79:0f:32:03:44:c2:70:f5:51:af:c1:a9:2c:67:53:fc:4c:13:a5:3b:9f:f6:26:8b:07:d4
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.int-pay.stayclassy.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.int-pay.stayclassy.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.int-pay.stayclassy.org
*.dev-pay.stayclassy.org
*.staging-pay.stayclassy.org
*.dev-pay.stayclassy.org
*.staging-pay.stayclassy.org
Other certificates including the domain name stayclassy.org
(limited to 100 certificates)
ssl2114.cloudflare.com
*.classy-test.org
mask2.stayclassy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
classy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
*.classy.org
sni67969.cloudflaressl.com
mask.stayclassy.org
go.stayclassy.org
go.stayclassy.org
ssl2590.cloudflare.com
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
*.int-pay.stayclassy.org
mask2.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
staging.stayclassy.org
ssl2114.cloudflare.com
ssl2707.cloudflare.com
ssl2590.cloudflare.com
ssl2590.cloudflare.com
*.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.classy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
mask.stayclassy.org
*.classy-test.org
classy.org
ssl2114.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
ssl2590.cloudflare.com
go.stayclassy.org
go.stayclassy.org
ssl2114.cloudflare.com
go.stayclassy.org
classy.org
ssl2590.cloudflare.com
ssl2707.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
mask.stayclassy.org
*.classy.org
*.classy-test.org
classy.org
ssl2590.cloudflare.com
mask.stayclassy.org
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
*.stayclassy.org
ssl2590.cloudflare.com
staging.stayclassy.org
mask2.stayclassy.org
mask2.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
classy.org
ssl2707.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.classy-test.org
mask2.stayclassy.org
*.int-pay.stayclassy.org
ssl2114.cloudflare.com
*.classy-test.org
mask2.stayclassy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
classy.org
mask2.stayclassy.org
ssl2590.cloudflare.com
*.classy.org
sni67969.cloudflaressl.com
mask.stayclassy.org
go.stayclassy.org
go.stayclassy.org
ssl2590.cloudflare.com
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
ssl2590.cloudflare.com
ssl2114.cloudflare.com
*.int-pay.stayclassy.org
mask2.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
staging.stayclassy.org
ssl2114.cloudflare.com
ssl2707.cloudflare.com
ssl2590.cloudflare.com
ssl2590.cloudflare.com
*.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.classy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
mask.stayclassy.org
*.classy-test.org
classy.org
ssl2114.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
ssl2590.cloudflare.com
go.stayclassy.org
go.stayclassy.org
ssl2114.cloudflare.com
go.stayclassy.org
classy.org
ssl2590.cloudflare.com
ssl2707.cloudflare.com
mask.stayclassy.org
mask.stayclassy.org
*.stayclassy.org
mask2.stayclassy.org
*.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
sni67969.cloudflaressl.com
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
mask.stayclassy.org
*.classy.org
*.classy-test.org
classy.org
ssl2590.cloudflare.com
mask.stayclassy.org
*.int-pay.stayclassy.org
ssl2590.cloudflare.com
*.stayclassy.org
ssl2590.cloudflare.com
staging.stayclassy.org
mask2.stayclassy.org
mask2.stayclassy.org
mask.stayclassy.org
mask.stayclassy.org
ssl2114.cloudflare.com
mask2.stayclassy.org
ssl2114.cloudflare.com
classy.org
ssl2707.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
ssl2114.cloudflare.com
sni67969.cloudflaressl.com
*.classy-test.org
mask2.stayclassy.org
*.int-pay.stayclassy.org
ssl2114.cloudflare.com
Certificate
The complete raw certificate details for *.int-pay.stayclassy.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEpzCCA4+gAwIBAgIQDEf2cOFwyE5XTV4+sfxjBjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDYwODAwMDAwMFoXDTI0MDcwNjIzNTk1OVowIzEh MB8GA1UEAwwYKi5pbnQtcGF5LnN0YXljbGFzc3kub3JnMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAutg1GjZ7LatlsMMzwzQHzCvxyjIgDd9auGFPyyv2 Wm3UMs6zQam7+sXiFVp3AhrNLfzQwd9g81uU1GcLwW/Kl12NTszXW0wV2tvmT6SD S+AWv5R7tPdIx/PtaWi0w/506HbRLaJ629tr37PnXvQTaNV66VfuH33QCKra/xBE fKrU0QDRn+Vq/b4Jki1w6SW7U28GzV1NM+j1rSoylUEiDYs+qIEk01Gjo2IEGzt9 9TDUMVyH19glUZw8ITztKTafhtVHx8tmg8XPvFJ+5l0lf+V/dYwpB5xNNAkxyq4y jiwthYG0XLZ19bRqhHQkorqNJ27dU87dUVFibDK94I/T8QIDAQABo4IBvDCCAbgw HwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFMgq5saV R/2u5Lxxg4jbYz9cmiU7MFsGA1UdEQRUMFKCGCouaW50LXBheS5zdGF5Y2xhc3N5 Lm9yZ4IYKi5kZXYtcGF5LnN0YXljbGFzc3kub3JnghwqLnN0YWdpbmctcGF5LnN0 YXljbGFzc3kub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5h bWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUG CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1h em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpv bnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRgQq4Jbvu9Ez0Tm1kDEzCjIKOIG bsEY614G4MdlSU3PgCvTI18SAZ49pkxE7SESJVD8s/7OZ1WDVNyssTVxrkRBHe0n eTLOMsaKc7LVHHSkEVUqal80LNedI0hnlw+cfmaSltjdgIRy13Jl0iZ4TuVDoCw5 OYn6/fIssUgGqXnbVpE83/Uaf2xL4IEdJ9mF0qCSCmDG2owLo15nR+GLFWs9PXfK QALHGH9rbJmH1LPrQlUco2+vaqK7RykCk3TqSPFDrE2/5wk/vIIxSD241HqZRLAe DDLI7e3bP51rUFXh0dtIGvc6s2ptY7umq+BrByTn/dXZQHo1Q7efvPHxlw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutg1GjZ7LatlsMMzwzQH zCvxyjIgDd9auGFPyyv2Wm3UMs6zQam7+sXiFVp3AhrNLfzQwd9g81uU1GcLwW/K l12NTszXW0wV2tvmT6SDS+AWv5R7tPdIx/PtaWi0w/506HbRLaJ629tr37PnXvQT aNV66VfuH33QCKra/xBEfKrU0QDRn+Vq/b4Jki1w6SW7U28GzV1NM+j1rSoylUEi DYs+qIEk01Gjo2IEGzt99TDUMVyH19glUZw8ITztKTafhtVHx8tmg8XPvFJ+5l0l f+V/dYwpB5xNNAkxyq4yjiwthYG0XLZ19bRqhHQkorqNJ27dU87dUVFibDK94I/T 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16324387442462135965034329950381695750 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.int-pay.stayclassy.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23586940581651811991345149829757421282597824419256032964057606687247691910522298833738004848672497578607642293280289365719522331380599676340154716018643622280956707949754580721019143844295694929635438811218367807410639665489232252266614178745212112469569000136957271810573958374565779692594952220160370062068729074407042621568916649241929008802389931216989779252892998680685513273735142469122117176793691799300692198715484852881669302091116477510998425437764708622951603009773433661022414997055554733617702755384441612798768106422093411360142337290763954845924295896576181768986947528545658425682490061859819311059953 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c82ae6c69547fdaee4bc718388db633f5c9a253b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int-pay.stayclassy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-pay.stayclassy.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging-pay.stayclassy.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00811810ab825bbeef44cf44e6d640c4cc28c828e2066ec118eb5e06e0c765494dcf802bd3235f12019e3da64c44ed21122550fcb3fece67558354dcacb13571ae44411ded277932ce32c68a73b2d51c74a411552a6a5f342cd79d234867970f9c7e669296d8dd808472d77265d226784ee543a02c393989fafdf22cb14806a979db56913cdff51a7f6c4be0811d27d985d2a0920a60c6da8c0ba35e6747e18b156b3d3d77ca4002c7187f6b6c9987d4b3eb42551ca36faf6aa2bb4729029374ea48f143ac4dbfe7093fbc8231483db8d47a9944b01e0c32c8ededdb3f9d6b5055e1d1db481af73ab36a6d63bba6abe06b0724e7fdd5d9407a3543b79fbcf1f197