br.uat.sg.rhapsode.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0f:84:47:ce:d8:e3:b7:9d:f0:23:d2:34:ba:bc:4e:cf was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=br.uat.sg.rhapsode.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:84:47:ce:d8:e3:b7:9d:f0:23:d2:34:ba:bc:4e:cfSerial Number (int): 20625259561307727936548921646442630863
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 0a:39:2b:f1:0e:3d:59:50:b7:5c:68:9d:95:3a:e7:60:7a:9d:2c:61
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): a2:d4:13:d2:42:67:36:5b:90:62:92:48:97:49:5a:aa:60:b0:24:e4
Fingerprint (sha256): 72:aa:c3:1b:af:2e:2a:f0:6c:de:04:d7:82:ef:8c:0c:6c:ae:e8:9c:38:6a:45:b2:ce:ae:c0:40:96:e4:4e:53
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate br.uat.sg.rhapsode.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for br.uat.sg.rhapsode.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
br.uat.sg.rhapsode.com
*.br.uat.sg.rhapsode.com
*.br.uat.sg.rhapsode.com
Other certificates including the domain name rhapsode.com
(limited to 100 certificates)
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
ris.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.com
elb.rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
hotfix.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.qa.area9lyceum.com
external-content-qa-eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.dev.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
slow-no-cdn.us.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev.eu.rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
rhapsode.dev.area9lyceum.com
eu.rhapsode.com
us.rhapsode.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
slow-no-cdn.us.rhapsode.com
*.curator.rhapsode.com
rhapsode.dev2.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
br.uat.sg.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
slow-no-cdn.us.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.area9lyceum.com
curator.rhapsode.com
rhapsode.qa.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
hotfix.rhapsode.com
rhapsode.dev.area9lyceum.com
uat.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
eu.rhapsode.com
aitest.rhapsode.com
rhapsode.com
monitoring.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
rhapsode.com
rhapsode.area9lyceum.com
us.rhapsode.com
rhapsode.dev.area9lyceum.com
reports-mks.us.rhapsode.com
eu.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev2.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
ris.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.com
elb.rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
hotfix.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.qa.area9lyceum.com
external-content-qa-eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.dev.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
slow-no-cdn.us.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev.eu.rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
rhapsode.dev.area9lyceum.com
eu.rhapsode.com
us.rhapsode.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
slow-no-cdn.us.rhapsode.com
*.curator.rhapsode.com
rhapsode.dev2.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
br.uat.sg.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
slow-no-cdn.us.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.area9lyceum.com
curator.rhapsode.com
rhapsode.qa.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
hotfix.rhapsode.com
rhapsode.dev.area9lyceum.com
uat.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
eu.rhapsode.com
aitest.rhapsode.com
rhapsode.com
monitoring.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
rhapsode.com
rhapsode.area9lyceum.com
us.rhapsode.com
rhapsode.dev.area9lyceum.com
reports-mks.us.rhapsode.com
eu.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev2.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
Certificate
The complete raw certificate details for br.uat.sg.rhapsode.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgIQD4RHztjjt53wI9I0urxOzzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDQwNTAwMDAwMFoXDTI0MDUwNDIzNTk1OVowITEf MB0GA1UEAxMWYnIudWF0LnNnLnJoYXBzb2RlLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBANY464AMS6GrZTb0ZHJzoiYBLAYBu2FcJoeeytrfdt1f cvhgEUX89vcNOvTpQuwiRM1T2HjOT4z99ZvStZ5FkL3Xa0T5fiS+PtB/9yL9vLqF L6gfo+80U5tyOCXTXEWopW5hW01pInCBWQmJNBamj4B2QKyDTn3dColgLzVdoyUo BPUHpv67LgccvVz6OaS/WjF8VwxkpIokTbrKUq0xaTPngenZFe5TBBocKoOBtr/1 151oMk7sIJiJZVyAD+cKoFNzNTu7b17FSO9FvPXh2yAqfYVg6h9P3tOCou/Vp815 E2yKKAxnXMuIbrGG38GRrEx2Lufp+G/lKoNs+uYHUOUCAwEAAaOCAwcwggMDMB8G A1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBQKOSvxDj1Z ULdcaJ2VOudgep0sYTA7BgNVHREENDAyghZici51YXQuc2cucmhhcHNvZGUuY29t ghgqLmJyLnVhdC5zZy5yaGFwc29kZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw Oi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAww CjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAA MIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQDuzdBk1dsazsVct520zROiModG fLzs3sNRSFlGcR+1mwAAAYdOy9TuAAAEAwBGMEQCIC8wnxgrrIu6lZVE/IQo6aec W7DbPszC/RKseh3xWHLRAiAC05N2lZiieUBK3JYt3kN32r3OEfF+k/sj4qfNLlCo TAB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABh07L1VUAAAQD AEcwRQIhANObsZReFvH/sNWwKIOAh7H/RwX56NjdT+XBAgPIzhkqAiAmynTGHYG/ ZQOklK8yEEh0G7rUoQx6hUsi8HOv9pN3jgB1AEiw42vapkc0D+VqAvqdMOscUgHL Vt0sgdm7v6s52IRzAAABh07L1TsAAAQDAEYwRAIgGlbKPJNZJRW8tiCMO9nuJ6xj xgf6FPa5qtw/SL6azt0CIH2JqVGZH670OpfB0HqpMjCBrnjH6cIVL3dBLyE7Ktuc MA0GCSqGSIb3DQEBCwUAA4IBAQDpNCobaaPfRATO5DdqsaqXlhC/bn6LZHVYv4uM q6/9Xhxg58Aed0E+XLOEWPGoY1Cd+jy3bsNBoF1tdIutjjZ6USNo27epvBn0XGTC 0UrD7FJ0rvrleaQN/Q9eAnbNVS2tS4waqxlZ7l0Hl66TiAOeAMwv7qLl1n3BJ55f Ugc8R3XNcJHeMvi8UeyGlgOYj4/3Z/AHNJSF27ZuULojog2nHUPLtHtv/DzehXjX QG5k8OoFkMycCDo/4sQjlb6jolCVbjhhbHcIu/WbqKD+c0CVEJ4eNkGB+xQoF7rM 21zE8aeE5FiJybZiPakV1vb0iqSN+LDpUNuNCQ04c6JVJrg4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jjrgAxLoatlNvRkcnOi JgEsBgG7YVwmh57K2t923V9y+GARRfz29w069OlC7CJEzVPYeM5PjP31m9K1nkWQ vddrRPl+JL4+0H/3Iv28uoUvqB+j7zRTm3I4JdNcRailbmFbTWkicIFZCYk0FqaP gHZArINOfd0KiWAvNV2jJSgE9Qem/rsuBxy9XPo5pL9aMXxXDGSkiiRNuspSrTFp M+eB6dkV7lMEGhwqg4G2v/XXnWgyTuwgmIllXIAP5wqgU3M1O7tvXsVI70W89eHb ICp9hWDqH0/e04Ki79WnzXkTbIooDGdcy4husYbfwZGsTHYu5+n4b+Uqg2z65gdQ 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20625259561307727936548921646442630863 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'br.uat.sg.rhapsode.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27043065522692858157272445973208822696296597214432293452128082478228143706378658039292804450779181925659611421426134846267112723616679425443746792144942361010950311890548823103670583678602645127481391917907124189436118140468253439329855964031553112786468603249838966851822038020560657437679040842623318725425211461607557900862220499292059927495751886176599098312215873044620324744188479955645181373714303485474133574382330041484122693946582714911205135142006711193178745751536141672986033617687688567276595252683157401717304823426388067565729546466394983761311404030045044409301671669659097421068284088168375592112357 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0a392bf10e3d5950b75c689d953ae7607a9d2c61 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br.uat.sg.rhapsode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.br.uat.sg.rhapsode.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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