wavecast.io
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0b:41:44:d1:b2:16:6f:cd:1d:08:98:67:e9:6d:c3:66 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=wavecast.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:41:44:d1:b2:16:6f:cd:1d:08:98:67:e9:6d:c3:66Serial Number (int): 14960403067093308275216912703166464870
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 01:9a:86:8d:96:a6:d3:b5:f3:fd:67:5e:30:3f:cf:a7:9f:87:94:65
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 77:3c:cf:58:dc:55:db:53:d0:63:3a:b2:d6:60:39:cd:bd:c8:3f:27
Fingerprint (sha256): 7a:dd:0e:16:a9:f6:e2:58:34:29:f8:06:38:36:da:48:50:42:a9:2c:ba:3f:68:d1:ce:e2:a4:fb:80:94:c9:4f
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate wavecast.io
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wavecast.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wavecast.io
*.wavecast.io
papillon.io
*.papillon.io
*.wavecast.io
papillon.io
*.papillon.io
Other certificates including the domain name wavecast.io
(limited to 100 certificates)
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
papillon.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
test.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
papillon.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
test.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
wavecast.io
wavecast.io
dns1.wavecast.io
dns1.wavecast.io
dns1.wavecast.io
Certificate
The complete raw certificate details for wavecast.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIQC0FE0bIWb80dCJhn6W3DZjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDkyODAwMDAwMFoXDTI0MTAyNjIzNTk1OVowFjEU MBIGA1UEAxMLd2F2ZWNhc3QuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC91VyCfzt62RKC/myYrm1SzvwOd8QRM67UFi7XjCY7YzOiY98oF1VqE8Xx ts8VTmI1Vj5Feq4Vj8kCwqYILFlayAxjD9TU2h1n7Adu3fsgy+7WkIviEgDYR+oC WZlwpW3I+KIkPPa8zUQV82QDQv6Bvt9BjiU2ICwNlrm26jwj1ZbNGsCvxvWCiVzM TMh5OR0cl5hybzFVgZMwzv2ZvM6sY102DdtXhRDIxaHHuAWulIFBY830zUYfO0Vh U05SYUzvMRnUQ5prPqzX8kFYaJfYM7SCti8xsOkiQO91+Y//qmwiAGPG9f0pAlXD s8Ol7o+ceKxiF/RYAFbkKVQXs2kjAgMBAAGjggMPMIIDCzAfBgNVHSMEGDAWgBSB uA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUAZqGjZam07Xz/WdeMD/Pp5+H lGUwQQYDVR0RBDowOIILd2F2ZWNhc3QuaW+CDSoud2F2ZWNhc3QuaW+CC3BhcGls bG9uLmlvgg0qLnBhcGlsbG9uLmlvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJt MDEuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au cjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIy bTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX4G CisGAQQB1nkCBAIEggFuBIIBagFoAHQA7s3QZNXbGs7FXLedtM0TojKHRny87N7D UUhZRnEftZsAAAGK3IMtcAAABAMARTBDAiBJYwaRAzOrQIpmdOZQBT5TctvJNOi5 7tPcxCLcBLWEsAIfe0iC98z/1iMhGurKiD2yFmRutDpWW971c98B3m4gaQB3AEiw 42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABityDLTAAAAQDAEgwRgIh AM65H6Yv/7srDk3IDzJNrVJyz0ZmKauxrOtmYVwQm//iAiEA6jq4i/TpF9RqzCRb 8Ew9UtmYhliZ/+W5kac0bNAyR3QAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9 pD0wSNf7qwAAAYrcgy0EAAAEAwBIMEYCIQDM7gHE0uUVnZMN+8vQFDJ0l+jlvYRG reBgcKdqAzce6wIhAMk0NUFcgn7xv4Tg2ZlpEQWsW7Q4/0eZof/8Ku1QZvJeMA0G CSqGSIb3DQEBCwUAA4IBAQCzuEFp/A2YD0wySLc66jpuoWiOSMEV71582Fsh/J18 dhBZuF6QgUiLqhjkJ/+2GPqNnXrOERTBJ6vJlE1GLjjL6Gk3pnJbcN8uUcesvhDg rOMzAS5rPU025Meq7oTXIm4nZc+uANZSiRKOjONMtOqkuNzSG+g2PnPDLPn6BlSL ynj3ddoOVKWasMs3F6/n+kyJvcH1kh9Z6fnmFWhQTHd+ExQgXXgHf9gpXeC/slNP YAAI0F6TZkpbn+Q1pTw8jQVs8py7QBHpb6HtgdR+IA2qcn+pl9gL0mN5pNaDjUm9 lt+oLLkvK1okhFZu/XN6Pv2DnTC0CKZ30LAqjOG5HKyf -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdVcgn87etkSgv5smK5t Us78DnfEETOu1BYu14wmO2MzomPfKBdVahPF8bbPFU5iNVY+RXquFY/JAsKmCCxZ WsgMYw/U1NodZ+wHbt37IMvu1pCL4hIA2EfqAlmZcKVtyPiiJDz2vM1EFfNkA0L+ gb7fQY4lNiAsDZa5tuo8I9WWzRrAr8b1golczEzIeTkdHJeYcm8xVYGTMM79mbzO rGNdNg3bV4UQyMWhx7gFrpSBQWPN9M1GHztFYVNOUmFM7zEZ1EOaaz6s1/JBWGiX 2DO0grYvMbDpIkDvdfmP/6psIgBjxvX9KQJVw7PDpe6PnHisYhf0WABW5ClUF7Np IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14960403067093308275216912703166464870 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wavecast.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23964252049591486133074288215519316468459494433114337826121270173376205509869600934078202209495580449691803121827219837815863950366037381139832780036766545337575055310719162231682712576448339407681186053949874893111942504297507004819444147356489814874223961443306394687791485698889978450454758013681466773329574407738326162004715503333875847040650682178135959026125916162352437701003553937149230891102900735707206226788806856000533346472396409990811754700456228682438255605323322752500514835373816280439325516516693440115319231703256177415043020913449662742096216623778037710603882413220585526324051245209355300333859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 019a868d96a6d3b5f3fd675e303fcfa79f879465 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavecast.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wavecast.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papillon.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papillon.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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