*.health.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 06:b5:6e:92:8b:9f:aa:5b:90:5d:3b:7b:bc:de:3f:98 was issued on by Amazon.
With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.health.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:b5:6e:92:8b:9f:aa:5b:90:5d:3b:7b:bc:de:3f:98Serial Number (int): 8917416381683867866370810308038901656
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 24:0b:70:6c:30:08:20:64:c1:4f:de:6c:26:a7:99:b5:93:0a:7c:ea
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 39:77:19:8b:b2:e6:74:6c:ad:ff:04:b1:ad:b9:92:eb:27:20:b8:58
Fingerprint (sha256): a2:43:9f:81:96:bf:85:d8:ae:9d:38:1d:9e:a0:3b:e2:6d:7a:f3:c5:ff:ce:0a:bb:f1:1b:33:ab:d7:ec:f9:c1
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.health.com
23
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.health.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.health.com
*.dailypaws.com
*.shape.com
*.allrecipes.com
*.woodmagazine.com
*.ew.com
*.parenting.com
*.allpeoplequilt.com
*.people.com
*.mywedding.com
*.southernliving.com
*.realsimple.com
*.midwestliving.com
*.peopleenespanol.com
*.instyle.com
*.myrecipes.com
*.eatingwell.com
*.foodandwine.com
*.cookinglight.com
*.agriculture.com
*.bhg.com
*.parents.com
*.marthastewart.com
*.dailypaws.com
*.shape.com
*.allrecipes.com
*.woodmagazine.com
*.ew.com
*.parenting.com
*.allpeoplequilt.com
*.people.com
*.mywedding.com
*.southernliving.com
*.realsimple.com
*.midwestliving.com
*.peopleenespanol.com
*.instyle.com
*.myrecipes.com
*.eatingwell.com
*.foodandwine.com
*.cookinglight.com
*.agriculture.com
*.bhg.com
*.parents.com
*.marthastewart.com
Other certificates including the domain name health.com
(limited to 100 certificates)
*.allyou.com
office.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
qa-subscription.ecommerce.timeinc.com
accounts.bhg.com
*.secure.meredith.com
secure.meredith.com
www.timeinclistrental.com
qa-subscription.ecommerce.timeinc.com
qa-subscription.ecommerce.timeinc.com
smetrics.health.com
*.health.com
sli.dailypaws.com
sli.dailypaws.com
office.timeinc.com
sli.health.com
qa-subscription.ecommerce.timeinc.com
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
subscription.timeinc.com
app.dreader.timeinc.net
www.meredith.com
health.com
specialoffers.meredith.com
*.meredithperformancemarketing.com
smetrics.health.com
qa-profiles-uat.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
sli.dailypaws.com
www.timeinclistrental.com
rails.timeinc.net
sli.dailypaws.com
xid.coastalliving.com
*.meredithperformancemarketing.com
xid.coastalliving.com
prod-dcms.www.timeinc.net
xid.coastalliving.com
sli.dailypaws.com
*.health.com
www.reference.dcms-sa.timeinc.net
news.health.com
secure.meredith.com
*.health.com
pages.email.coastalliving.com
accounts.bhg.com
office.timeinc.com
xid.coastalliving.com
subscription.timeinc.com
accounts.bhg.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
health.com
www.timeinclistrental.com
health.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
www.meredith.com
dev-dcms.www.timeinc.net
subscription.timeinc.com
qa-profiles.timeinc.net
secure.meredith.com
accounts.bhg.com
www.timeinclistrental.com
recipes-admin.health.com
amp.health.com
health.com
secure.meredith.com
*.allyou.com
subscription-assets.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
www.reference.dcms-sa.timeinc.net
*.health.com
a-ue1.dotdash.com
smetrics.health.com
health.com
sli.dailypaws.com
dev-app.dreader.timeinc.net
rails.timeinc.net
rails.timeinc.net
subscription.timeinc.com
*.health.com
sli.dailypaws.com
*.health.com
pages.email.time.com
*.health.com
www.timeinclistrental.com
subscription.timeinc.com
links.allrecipes.com
sli.dailypaws.com
*.health.com
office.timeinc.com
smetrics.health.com
www.timeinclistrental.com
pages.email.coastalliving.com
subscription.timeinc.com
secure.meredith.com
subscription.timeinc.com
subscription.timeinc.com
office.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
qa-subscription.ecommerce.timeinc.com
accounts.bhg.com
*.secure.meredith.com
secure.meredith.com
www.timeinclistrental.com
qa-subscription.ecommerce.timeinc.com
qa-subscription.ecommerce.timeinc.com
smetrics.health.com
*.health.com
sli.dailypaws.com
sli.dailypaws.com
office.timeinc.com
sli.health.com
qa-subscription.ecommerce.timeinc.com
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
subscription.timeinc.com
app.dreader.timeinc.net
www.meredith.com
health.com
specialoffers.meredith.com
*.meredithperformancemarketing.com
smetrics.health.com
qa-profiles-uat.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
sli.dailypaws.com
www.timeinclistrental.com
rails.timeinc.net
sli.dailypaws.com
xid.coastalliving.com
*.meredithperformancemarketing.com
xid.coastalliving.com
prod-dcms.www.timeinc.net
xid.coastalliving.com
sli.dailypaws.com
*.health.com
www.reference.dcms-sa.timeinc.net
news.health.com
secure.meredith.com
*.health.com
pages.email.coastalliving.com
accounts.bhg.com
office.timeinc.com
xid.coastalliving.com
subscription.timeinc.com
accounts.bhg.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
health.com
www.timeinclistrental.com
health.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
www.meredith.com
dev-dcms.www.timeinc.net
subscription.timeinc.com
qa-profiles.timeinc.net
secure.meredith.com
accounts.bhg.com
www.timeinclistrental.com
recipes-admin.health.com
amp.health.com
health.com
secure.meredith.com
*.allyou.com
subscription-assets.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
www.reference.dcms-sa.timeinc.net
*.health.com
a-ue1.dotdash.com
smetrics.health.com
health.com
sli.dailypaws.com
dev-app.dreader.timeinc.net
rails.timeinc.net
rails.timeinc.net
subscription.timeinc.com
*.health.com
sli.dailypaws.com
*.health.com
pages.email.time.com
*.health.com
www.timeinclistrental.com
subscription.timeinc.com
links.allrecipes.com
sli.dailypaws.com
*.health.com
office.timeinc.com
smetrics.health.com
www.timeinclistrental.com
pages.email.coastalliving.com
subscription.timeinc.com
secure.meredith.com
subscription.timeinc.com
subscription.timeinc.com
Certificate
The complete raw certificate details for *.health.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIQBrVukoufqluQXTt7vN4/mDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDQwMzAwMDAwMFoXDTI0MDUwMTIzNTk1OVowFzEV MBMGA1UEAwwMKi5oZWFsdGguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAo628+AggBETNUExU8Wqu0vN4oxH3LHCsnSmKCq24kh4unvCHjmi5CLY4 1lYL1gTjBamGphBBJ4IVpwbDaNIJsiEnzHsST6OlhSsZAvXBO7y8OkfDy86iwNHr GchdlRxy0J4tY2FkhoS8Lmu4PwZfiibhA917f48FaefQtdsuYJp2xMWvAbe1c4a7 2QnQtiR5f3fWwsqI0nBTpmecRKozW6be6l2SANCKtelRqvEDo1Q8bqlJR9aX/sar jt87b2JD8svJDtYQLs/dUf3uCPUGuSRq2XfSBPuTQmEMtptG6OPegbM4cYE3coHG 28A1k0nm6DbV3aBLWGDixkzNDE17RQIDAQABo4IEbDCCBGgwHwYDVR0jBBgwFoAU wDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFCQLcGwwCCBkwU/ebCanmbWT CnzqMIIBngYDVR0RBIIBlTCCAZGCDCouaGVhbHRoLmNvbYIPKi5kYWlseXBhd3Mu Y29tggsqLnNoYXBlLmNvbYIQKi5hbGxyZWNpcGVzLmNvbYISKi53b29kbWFnYXpp bmUuY29tgggqLmV3LmNvbYIPKi5wYXJlbnRpbmcuY29tghQqLmFsbHBlb3BsZXF1 aWx0LmNvbYIMKi5wZW9wbGUuY29tgg8qLm15d2VkZGluZy5jb22CFCouc291dGhl cm5saXZpbmcuY29tghAqLnJlYWxzaW1wbGUuY29tghMqLm1pZHdlc3RsaXZpbmcu Y29tghUqLnBlb3BsZWVuZXNwYW5vbC5jb22CDSouaW5zdHlsZS5jb22CDyoubXly ZWNpcGVzLmNvbYIQKi5lYXRpbmd3ZWxsLmNvbYIRKi5mb29kYW5kd2luZS5jb22C EiouY29va2luZ2xpZ2h0LmNvbYIRKi5hZ3JpY3VsdHVyZS5jb22CCSouYmhnLmNv bYINKi5wYXJlbnRzLmNvbYITKi5tYXJ0aGFzdGV3YXJ0LmNvbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNy bDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH MAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw AoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwG A1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABh0je8W0AAAQDAEYwRAIgLN2cPHnv 5PaZZVsOyb0Gb7Pse2jiXQ64O/hwefA8aPECIAwSB8oePhx89wfC0FSeVZlO9O7T H/iGnjl4GgmlAPkNAHUAc9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUA AAGHSN7xkAAABAMARjBEAiB8LxzekAHpL+BRoHpW317OsK6nGrJc5DhMbFiCs1Ih 8wIgVaNA5DCWY0QyiZ1nA173ZQsJpC9AMtXaD6iI0VuCCx8AdgBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYdI3vFXAAAEAwBHMEUCIQDwLAAlUsvB 0DYfuxAGXw3rOsgWPXfNPoXXvHbq40vOKAIgFKJNeSb1zQloiKz2a1YK+qMWx3NK puawID+q6UK0fAgwDQYJKoZIhvcNAQELBQADggEBAFDEVxbSRGOyIpDdPV/TDp5x Nt9FyGPpdZNRCgVaKk8sTQET4uow8X3XAPhB6R63nLGE33j200TdXWxaVkHSDsN8 3W5kgMv3kFvK5C1j1mDIjtp3widVWdl2HXchHbOdbeUjJYUrFunr/3sTyhD8WzVp i3ftBOo7u/iXety2SjZEd3U62x5wdZ2EYwwVWVwUnbZFk0y20Rh8luz818hwycxX SnflELvElQU3GdNbVXXg/HPV1F20Nby9kQ27R0vIrPTCDMeSoIK8emv3SSnhO4yU XsQdFqZzPlgt75hv/KQJKgYBOeUzAkNODakqnck2K06QMYrkLf6DYjNmF//ajq8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo628+AggBETNUExU8Wqu 0vN4oxH3LHCsnSmKCq24kh4unvCHjmi5CLY41lYL1gTjBamGphBBJ4IVpwbDaNIJ siEnzHsST6OlhSsZAvXBO7y8OkfDy86iwNHrGchdlRxy0J4tY2FkhoS8Lmu4PwZf iibhA917f48FaefQtdsuYJp2xMWvAbe1c4a72QnQtiR5f3fWwsqI0nBTpmecRKoz W6be6l2SANCKtelRqvEDo1Q8bqlJR9aX/sarjt87b2JD8svJDtYQLs/dUf3uCPUG uSRq2XfSBPuTQmEMtptG6OPegbM4cYE3coHG28A1k0nm6DbV3aBLWGDixkzNDE17 RQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8917416381683867866370810308038901656 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.health.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20662517189092177231758823283803803890339763402288085345623834432626267122231727688883993374047019608237053406877605006887517610774440455949115460620320130474241572713519728777297178946977838290417142726904937094647159624192234264855373565192248890350735954159348462807131148467798973973104200526537075017626971227169738745638973905923163624044809973441500903197432628258028507385883362559413872612467086867924696078054567022051483860193163983733916467607727997765468466862426239202565854206512923217542217574472743526729250260547368080175894788829868142292184120633438897340855949545282414518777381848658482664667973 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 240b706c30082064c14fde6c26a799b5930a7cea . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (405 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailypaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shape.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allrecipes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmagazine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ew.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parenting.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allpeoplequilt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.people.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywedding.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realsimple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwestliving.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleenespanol.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instyle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrecipes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatingwell.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodandwine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookinglight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agriculture.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parents.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marthastewart.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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