ota.paytheory.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 03:e7:de:b7:24:30:9c:b8:55:42:2e:13:34:43:74:cd was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ota.paytheory.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:e7:de:b7:24:30:9c:b8:55:42:2e:13:34:43:74:cdSerial Number (int): 5191621766562272464535547144611001549
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 3c:89:a0:bd:43:ca:e6:b0:28:fa:89:71:6c:82:e2:a2:f4:00:bc:2a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): a8:c3:09:d4:e4:cd:5a:83:4d:93:82:20:3b:2d:87:45:95:9a:4b:b6
Fingerprint (sha256): 83:01:ec:89:a0:31:ee:0f:76:97:ba:73:e7:65:7d:69:55:b8:bc:53:e3:8a:2c:2c:bf:ec:83:0f:67:4b:f8:cb
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate ota.paytheory.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ota.paytheory.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ota.paytheory.com
ota.paytheorylab.com
ota.paytheorystudy.com
ota.paytheorylab.com
ota.paytheorystudy.com
Other certificates including the domain name paytheory.com
(limited to 100 certificates)
carefeed.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
Certificate
The complete raw certificate details for ota.paytheory.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjzCCA3egAwIBAgIQA+fetyQwnLhVQi4TNEN0zTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxMDAwMDAwMFoXDTI1MDEwODIzNTk1OVowHDEa MBgGA1UEAxMRb3RhLnBheXRoZW9yeS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz7H+ClVoEy4GiadISCmSo7lLuwdziG4MQulaVlsNgcretnUMK R3mU4EIbSKqrmvBdaKCvwCtU0ZvLtcolz9/4vOZE7jtBEHQ9jGMRYUmwCyM0G5Fa rWn4MXQ+wsYupLtCleuMrKWA3ESk6g2GHnnYnvUcHOAgPc482wq7lnNULyE0DpP/ dRvJmnraTjV3vBxhS+g2sYWg/qFCstH+y+fRmgXM4J4DlySFQ7VsCalvw8v0pzhI DMP3sS7EsBvCvmzBat9laQ6uwagSNbeKX2cxzLb6/agRjgOUJN4UKb2UodzIXqwD fg32HXciii/P0VZkyJkd1NP/kCzeU5qf7M3dAgMBAAGjggGrMIIBpzAfBgNVHSME GDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUPImgvUPK5rAo+olx bILiovQAvCowSgYDVR0RBEMwQYIRb3RhLnBheXRoZW9yeS5jb22CFG90YS5wYXl0 aGVvcnlsYWIuY29tghZvdGEucGF5dGhlb3J5c3R1ZHkuY29tMBMGA1UdIAQMMAow CAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6 b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw AYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC hipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYD VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtjGb+6K8xRLXZCisDZi7TGhJpwIsKNkQiRmq6aRdvJd3Dl6e9eLhzuJKlIVg HoleR+zdRoWuIUN4YN01N72Q1th2eHH+SuFjAkLS8v+jCdh1vQwXQLGjkTCyp6Ow +TBtDx5ayZrSA0yQVbbpKHONzp2qH617b3nYQBmYgUGNiTVFSRD0KPZJDTPbWorB yMlJLnuQwVVR9I02Gf+/cfJRWANJ9YgyMNUMXSJaXez0yf4fA39/qMdpW9aUn7w5 7mw7ZJLbNv5wyH4sBuj6ap/TJhUOdUFCVOs3wtOmYHNcHDvfVO6u0VWu2fYh8buH rvgn9+Hx/0B8DoSKCW7xNqoUyQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+x/gpVaBMuBomnSEgpk qO5S7sHc4huDELpWlZbDYHK3rZ1DCkd5lOBCG0iqq5rwXWigr8ArVNGby7XKJc/f +LzmRO47QRB0PYxjEWFJsAsjNBuRWq1p+DF0PsLGLqS7QpXrjKylgNxEpOoNhh55 2J71HBzgID3OPNsKu5ZzVC8hNA6T/3UbyZp62k41d7wcYUvoNrGFoP6hQrLR/svn 0ZoFzOCeA5ckhUO1bAmpb8PL9Kc4SAzD97EuxLAbwr5swWrfZWkOrsGoEjW3il9n Mcy2+v2oEY4DlCTeFCm9lKHcyF6sA34N9h13Ioovz9FWZMiZHdTT/5As3lOan+zN 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5191621766562272464535547144611001549 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ota.paytheory.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22713278141821175669268727338031578174998055544174238410088220951357484107190399856823908972160382383751576600266614757742364161250664456212647580807196179594760357543125570595041577607282415058975210465082022611079313170928152696489733015957606718300237266533288079482225612393579520672006997153663484634447036483898289139822064010310197541906236959686578826417168255068579587086540728294029412800078763902885793799938001209096223873515215045842635960104226457121451906431882718081984176640993128503771509345325612905670206937429984410960998801778284835282577460522946552069821615198573433393329368788678870592966109 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3c89a0bd43cae6b028fa89716c82e2a2f400bc2a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ota.paytheory.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ota.paytheorylab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ota.paytheorystudy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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