forms.public-prod.aktiacloud.fi
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 09:dd:63:4f:49:3f:c2:b6:ce:40:2a:f6:b9:6f:5c:b9 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=forms.public-prod.aktiacloud.fi
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:dd:63:4f:49:3f:c2:b6:ce:40:2a:f6:b9:6f:5c:b9Serial Number (int): 13112563808045527459155079689839533241
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 35:0e:bf:14:bb:23:23:a2:98:08:90:eb:5a:89:b2:d4:d4:81:8a:bb
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 58:04:fb:07:38:0e:05:b2:16:80:64:0d:dc:6d:1b:dd:03:35:db:fe
Fingerprint (sha256): 8b:5b:98:4f:e7:29:2a:11:48:6c:ec:43:13:e2:78:94:7c:a5:99:c4:f1:96:d4:6b:15:89:ca:a4:34:ec:89:e8
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate forms.public-prod.aktiacloud.fi
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for forms.public-prod.aktiacloud.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
forms.public-prod.aktiacloud.fi
forms.www.aktia.fi
forms.www.aktia.fi
Other certificates including the domain name aktiacloud.fi
(limited to 100 certificates)
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
*.systest.portfolio.aktiacloud.fi
sysforms.public-sys.aktiacloud.fi
sysmisc.public-sys.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
*.prod.portfolio.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
authgw.authentication-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
mgw.mobile.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
*.systest.portfolio.aktiacloud.fi
sysforms.public-sys.aktiacloud.fi
sysmisc.public-sys.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
*.prod.portfolio.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
authgw.authentication-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
mgw.mobile.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
Certificate
The complete raw certificate details for forms.public-prod.aktiacloud.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIQCd1jT0k/wrbOQCr2uW9cuTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDQwMjAwMDAwMFoXDTI1MDUwMjIzNTk1OVowKjEo MCYGA1UEAxMfZm9ybXMucHVibGljLXByb2QuYWt0aWFjbG91ZC5maTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOGly5Fkkp3sgwVYXtvyU6sXlfmKQWa3 etUcHruclX/6lvVaCG41oNPMiBr/hr5wLjjVcTqo5G4cynUX9bEdGd3bwipRRtfh RHnSfwB9kmi0Q+CPYQZX4c2uV22JFTKpgfDkYNDV5ibY5rubSeunl0Rc9NQWmHFB 8brpJOVcjazPYwXutF4l1EWL0KJeFGzyhiw+msnH9aPdeE1Bm1mEbdGpfHC8K7j0 cCo/x5Lw6OHWrR4HFN0/dBUJhv0HgLSJNeISI/osc5NGw3VcwLEEb4RUkvoJHCiq eUtXfDRTGSyRfdC1vddqQ1CO2yQu8LVoO4na3VwhFyuBB8yQU4V10xcCAwEAAaOC AwswggMHMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQW BBQ1Dr8UuyMjopgIkOtaibLU1IGKuzA+BgNVHREENzA1gh9mb3Jtcy5wdWJsaWMt cHJvZC5ha3RpYWNsb3VkLmZpghJmb3Jtcy53d3cuYWt0aWEuZmkwEwYDVR0gBAww CjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFt YXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAM BgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDPEVbu1S58 r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAY6cLv8uAAAEAwBGMEQCIEd4/eEw UWU1Hi2Y51Q5A2um4M9SXAHMgobDNUkWtHDUAiAzPSQq+Om94+UaOge4Gr1vJFXG IEk7uHkKUEHJLFmMQAB3AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4 AAABjpwu/zIAAAQDAEgwRgIhAIs7wXi6vPXNnw23zwvWBPoH0U58m17HSGarpiGl KmaqAiEAseiXfRAtQZiPprSQ1L6KmaUCmTiWWyLfAJycvJGlLgwAdQDm0jFjQHeM wRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY6cLv89AAAEAwBGMEQCICyszGGw naox1RbRoRolYzFeE2NL6lN/FmhvSVgrhylmAiBShFiN/yk/j+/Ms+kgz5WnrYJ6 TADtguxEdsousO8c6TANBgkqhkiG9w0BAQsFAAOCAQEAob5rFebg2DqkEBo+SfOS +NS/8zb9EGoBaoNlXbZf7UTnmPgsegoMWEPqsCcFdJtbC981MI7iJlc5iCcL7k8u wUJnhNj1pdT9yrHBoKpuCJabrXFAXkh62o/pzqAG183cXuxuVN0kbjAIhKyPzMZx 6NJCj5TmCE0hLvpSU4+ydE3w40iTnPUuyFaONd4f2CGHwhNOpXaAF+ZcFegN+L68 35FCYB4IlkiARcCNs5yDQBsk53epRMh9VgVHLPt138Ir+jZZmT3NbJCLXOUn7mfb cXOwW1GBoAprm/s5Rq0u0n904absrvTCf1SYy6kQaRMmEz7PYVlJq4IZLN6qQvhd lg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aXLkWSSneyDBVhe2/JT qxeV+YpBZrd61Rweu5yVf/qW9VoIbjWg08yIGv+GvnAuONVxOqjkbhzKdRf1sR0Z 3dvCKlFG1+FEedJ/AH2SaLRD4I9hBlfhza5XbYkVMqmB8ORg0NXmJtjmu5tJ66eX RFz01BaYcUHxuukk5VyNrM9jBe60XiXURYvQol4UbPKGLD6aycf1o914TUGbWYRt 0al8cLwruPRwKj/HkvDo4datHgcU3T90FQmG/QeAtIk14hIj+ixzk0bDdVzAsQRv hFSS+gkcKKp5S1d8NFMZLJF90LW912pDUI7bJC7wtWg7idrdXCEXK4EHzJBThXXT FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13112563808045527459155079689839533241 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forms.public-prod.aktiacloud.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28485375271317763337389232773384390796984501684127270040544813200182883888493106628035725621791696817902513932066270480876721568714614126852793438622563349231571810045807842673009923418757181783475840646720780395461476358960041836635618370067108292716947974850739075836365808723527742381882684190478653121360860643982150434042527531061005067068744722026616377077520554584680916070049780383056755106275897991350862326177398271258143914999472144345400532939551457447748306867047349216259326635651136078083715253323431937608658484859737816465267925724837835184754932339779379996698555670099829254764446326556455509283607 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 350ebf14bb2323a2980890eb5a89b2d4d4818abb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.public-prod.aktiacloud.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.www.aktia.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018e9c2eff2e000004030046304402204778fde1305165351e2d98e75439036ba6e0cf525c01cc8286c3354916b470d40220333d242af8e9bde3e51a3a07b81abd6f2455c620493bb8790a5041c92c598c400077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e9c2eff3200000403004830460221008b3bc178babcf5cd9f0db7cf0bd604fa07d14e7c9b5ec74866aba621a52a66aa022100b1e8977d102d41988fa6b490d4be8a99a5029938965b22df009c9cbc91a52e0c007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e9c2eff3d000004030046304402202caccc61b09daa31d516d1a11a2563315e13634bea537f16686f49582b87296602205284588dff293f8fefccb3e920cf95a7ad827a4c00ed82ec4476ca2eb0ef1ce9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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