us2.crashplan.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0e:46:91:56:2f:94:ba:a3:ec:96:53:47:a9:f2:90:3a was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=us2.crashplan.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:46:91:56:2f:94:ba:a3:ec:96:53:47:a9:f2:90:3aSerial Number (int): 18975600498826363740534125106490937402
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a3:4c:13:69:48:e5:cf:44:91:58:63:89:25:8d:a3:b9:81:5c:8e:6b
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 3d:2d:7c:ed:d1:30:c7:1c:ab:2c:ea:ec:0d:83:0a:d0:94:f6:63:d0
Fingerprint (sha256): 87:02:22:dc:6f:1c:84:86:1d:ae:1b:e1:c9:54:79:1a:8d:4e:7c:70:65:6f:90:b9:99:3c:54:0d:e7:1a:41:2c
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate us2.crashplan.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for us2.crashplan.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
us2.crashplan.com
*.us2.crashplan.com
*.us2.crashplan.com
Other certificates including the domain name crashplan.com
(limited to 100 certificates)
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
beta2-status.netsuite.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
beta2-status.netsuite.com
beta2-status.netsuite.com
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
*.crashplan.com
us-east-1.core.crashplan.com
ecomm-apps-status.rokt.com
customerstatus.eye-share.com
salesloft.crashplan.com
*.crashplan.com
customerstatus.eye-share.com
ecomm-apps-status.rokt.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
beta2-status.netsuite.com
*.crashplan.com
www2.crashplan.com
customerstatus.eye-share.com
us5.crashplan.com
cdn.crashplan.com
support.code42.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
customerstatus.eye-share.com
*.crashplan.com
*.crashplan.com
beta2-status.netsuite.com
*.crashplan.com
ecomm-apps-status.rokt.com
go.crashplan.com
www.crashplan.com
beta2-status.netsuite.com
us2.code42.com
go.crashplan.com
beta2-status.netsuite.com
us1.crashplan.com
www.crashplan.com
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
bte-support.crashplan.com
beta2-status.netsuite.com
us1.crashplan.com
beta2-status.netsuite.com
support.crashplan.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
backup.crashplan.com
customerstatus.eye-share.com
customerstatus.eye-share.com
*.crashplan.com
helpdesk.crashplan.com
beta2-status.netsuite.com
customerstatus.eye-share.com
web-iosda.crashplan.com
beta2-status.netsuite.com
customerstatus.eye-share.com
web-uws.crashplan.com
store.crashplan.com
*.eu5.cpg.crashplan.com
*.crashplan.com
beta2-status.netsuite.com
us2.crashplan.com
mail.crashplan.com
adobe.crashplan.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
exchange.code42.com
*.crashplan.com
go.crashplan.com
customerstatus.eye-share.com
maine.crashplan.com
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
cdn.crashplan.com
customerstatus.eye-share.com
nccloud.crashplan.com
helpdesk.crashplan.com
customerstatus.eye-share.com
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
beta2-status.netsuite.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
beta2-status.netsuite.com
beta2-status.netsuite.com
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
*.crashplan.com
us-east-1.core.crashplan.com
ecomm-apps-status.rokt.com
customerstatus.eye-share.com
salesloft.crashplan.com
*.crashplan.com
customerstatus.eye-share.com
ecomm-apps-status.rokt.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
beta2-status.netsuite.com
*.crashplan.com
www2.crashplan.com
customerstatus.eye-share.com
us5.crashplan.com
cdn.crashplan.com
support.code42.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
customerstatus.eye-share.com
*.crashplan.com
*.crashplan.com
beta2-status.netsuite.com
*.crashplan.com
ecomm-apps-status.rokt.com
go.crashplan.com
www.crashplan.com
beta2-status.netsuite.com
us2.code42.com
go.crashplan.com
beta2-status.netsuite.com
us1.crashplan.com
www.crashplan.com
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
customerstatus.eye-share.com
bte-support.crashplan.com
beta2-status.netsuite.com
us1.crashplan.com
beta2-status.netsuite.com
support.crashplan.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
backup.crashplan.com
customerstatus.eye-share.com
customerstatus.eye-share.com
*.crashplan.com
helpdesk.crashplan.com
beta2-status.netsuite.com
customerstatus.eye-share.com
web-iosda.crashplan.com
beta2-status.netsuite.com
customerstatus.eye-share.com
web-uws.crashplan.com
store.crashplan.com
*.eu5.cpg.crashplan.com
*.crashplan.com
beta2-status.netsuite.com
us2.crashplan.com
mail.crashplan.com
adobe.crashplan.com
beta2-status.netsuite.com
beta2-status.netsuite.com
beta2-status.netsuite.com
exchange.code42.com
*.crashplan.com
go.crashplan.com
customerstatus.eye-share.com
maine.crashplan.com
customerstatus.eye-share.com
beta2-status.netsuite.com
customerstatus.eye-share.com
customerstatus.eye-share.com
cdn.crashplan.com
customerstatus.eye-share.com
nccloud.crashplan.com
helpdesk.crashplan.com
customerstatus.eye-share.com
customerstatus.eye-share.com
Certificate
The complete raw certificate details for us2.crashplan.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIQDkaRVi+UuqPsllNHqfKQOjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDExMTAwMDAwMFoXDTI1MDIwOTIzNTk1OVowHDEa MBgGA1UEAxMRdXMyLmNyYXNocGxhbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdehJgS7QhhxK4BhH3smES5g1+i1BWlOD+q9WrYQBOYGxiyEbY i73hveaM6J5gMYTlFXp9i8YeGF71nuZJLiXMBB7KWg1phi9QKKra0m3dXdytvoKd MWfrIMLW6nj/FVcwhuPFo650ZbmQUhHXi+JXCEv4LYejHeV0Orp0HHOAlZrtpSDN JnH2sa5mkdD0UE+k8mOhgyJcOiULKm4/FzeRiLyC85vcCg0FVOdHmO+2b/eGOMsn 5rw+kpEJlB1JgtbOwxkFIXV2TWOljyl/9qIeN4RjX7uSxfiq7PWr7eiym+xAA1qd gSv3TGsNSRKy/LFeoCLv8HQCa1cfjQKZgpuxAgMBAAGjggL+MIIC+jAfBgNVHSME GDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUo0wTaUjlz0SRWGOJ JY2juYFcjmswMQYDVR0RBCowKIIRdXMyLmNyYXNocGxhbi5jb22CEyoudXMyLmNy YXNocGxhbi5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs hipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9u dHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIE AgSCAW0EggFpAWcAdwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAA AYz27AylAAAEAwBIMEYCIQCVYhGbw3j26pSjPRfbiuztTVQivSY2ramruajREODb OQIhAJGgNo4TtwwhC3n+hYBmzJ7M6ffGvHF1sLjPcpDjR4dOAHUAfVkeEuF4Knsc YWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGM9uwM4AAABAMARjBEAiBj5COSgVHV h7UdjhnFUF8wMoN6pgH2KmcsGn+9R3dqEQIgOgmBpfP8Op3JeUQyBn3xe8XMfJL9 ussUStkwXJdDsJ4AdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAA AYz27A0GAAAEAwBGMEQCIGuAm4WWQ6QQknhT1Ddb5CW8IhmiAeefbPSLmc7w+QKB AiBMCoJE0F8Mkyft3dPhGqce5jGIN+Cr07r6gsAeyuamuDANBgkqhkiG9w0BAQsF AAOCAQEANRMMB45kzG0oQw/g/ZMatGw0UItJsAAj53AGdGmvTrfP29dRWkSWLI7M zPgBX26gANthIh6k53OiXolZSIhHMqqx+9vFitWGwXQjviHwM3B6epXPJKEo4si+ WUdgdbJwYcQ6D62kZBh7cWVxWgjPLIOLk6OA+KYtn/ttOQF82Ij9kqiWhEyT+H4c evaBzTl/+5KyqLK9ffR5uErkBHbqv0waO2azl2OS826SmSQipxwhHcrjyetQ6Q5u aqlks03STLMX3AZfUH+AasgA16r7O4sggBWBatAvkyR8NT2ZbOWCMQA/rNEsioSK DRNQ2HnItVOd7mmAMrfafq1/8QGbBA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XoSYEu0IYcSuAYR97Jh EuYNfotQVpTg/qvVq2EATmBsYshG2Iu94b3mjOieYDGE5RV6fYvGHhhe9Z7mSS4l zAQeyloNaYYvUCiq2tJt3V3crb6CnTFn6yDC1up4/xVXMIbjxaOudGW5kFIR14vi VwhL+C2Hox3ldDq6dBxzgJWa7aUgzSZx9rGuZpHQ9FBPpPJjoYMiXDolCypuPxc3 kYi8gvOb3AoNBVTnR5jvtm/3hjjLJ+a8PpKRCZQdSYLWzsMZBSF1dk1jpY8pf/ai HjeEY1+7ksX4quz1q+3ospvsQANanYEr90xrDUkSsvyxXqAi7/B0AmtXH40CmYKb sQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18975600498826363740534125106490937402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us2.crashplan.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27958861236661817837857874915139685960541710298115472555569433679082849013898168586719730081025381012789495929399164092145272244147525737624267883756371380702072650747014807995458301837992947148933342774907970948947505697703554926042628751658287263123354382088774967038108968896295770773862139544256936859215243735166100001569265151655950097275857132100700766477745925335021467613493596523188273455060298478687721345394438424227365962783892623475937070648394552455046157491778201745095042695527189073632079341428447055134518195335966733254024412272540142940200286299494061494030562307454409641572137762227529510460337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a34c136948e5cf4491586389258da3b9815c8e6b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us2.crashplan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us2.crashplan.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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