*.stage.twilio.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0b:e9:5c:cd:e2:b4:c6:c9:c7:9e:30:e8:0f:b3:cc:b1 was issued on by Amazon.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.stage.twilio.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:e9:5c:cd:e2:b4:c6:c9:c7:9e:30:e8:0f:b3:cc:b1Serial Number (int): 15833195415291698435155466953161952433
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 3e:1b:0a:31:fb:98:ee:8a:02:1a:32:fa:2d:ae:c2:58:38:a6:ff:c9
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): e0:18:e0:29:3e:5e:fd:24:59:a8:f4:b7:16:8b:1e:18:35:07:8a:ee
Fingerprint (sha256): a3:62:9d:d1:bc:32:39:ee:9e:98:2e:8e:73:43:3f:d1:d2:92:de:ca:3a:9f:b3:19:ce:1c:09:21:81:46:0c:11
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.stage.twilio.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.stage.twilio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.stage.twilio.com
*.internal.stage.twilio.com
*.internal.stage-us1.twilio.com
*.stage-us1.twilio.com
*.stage-au1.twilio.com
*.stage.twilio.org
*.internal.stage-au1.twilio.com
*.internal.stage.twilio.com
*.internal.stage-us1.twilio.com
*.stage-us1.twilio.com
*.stage-au1.twilio.com
*.stage.twilio.org
*.internal.stage-au1.twilio.com
Other certificates including the domain name twilio.com
(limited to 100 certificates)
*.stage-in1.twilio.com
statuspage.io
*.dev-us2.twilio.com
statuspage.io
payments.callback.prod.twilio.com
statuspage.io
rainbow.stage.twilio.com
www.temporal-apig.dev.twilio.com
statuspage.io
eventgw.twilio.com
incapsula.com
gateway1-mv1.corp.twilio.com
flex-v2.stage.twilio.com
security.twilio.com
realtime-wormhole.us1.twilio.com
support.twilio.com
thiscertisfortestingonly.twilio.com
chickentreat.craveable.support
cds.twilio.com
boxconfig.outside.twilio.com
*.br1.twilio.com
*.vss.stage.twilio.com
statuspage.io
dashboard.waas.corp.twilio.com
ct-spam-labs.us1.twilio.com
*.twilio.com
understand.stage-us1.eak.twilio.com
8f876c29f4e5ddcd1ba13f3b40e889bbc3822cd2.console.dev.twilio.com
chickentreat.craveable.support
*.stage-us1.twilio.com
chickentreat.craveable.support
*.turn.dev.twilio.com
*.stage.twilio.com
incapsula.com
internal.status.twilio.com
wireless.us1.eak.twilio.com
mqtt-sync.stage-us1.twilio.com
*.ie1.twilio.com
incapsula.com
rtd-notify-log.dev-us1.eak.twilio.com
wiki.hq.twilio.com
platform-slackapp.corp.twilio.com
*.de1.twilio.com
statuspage.io
build.twilio.com
incapsula.com
headsup.twilio.com
webhooks.twilio.com
chickentreat.craveable.support
tsock.twilio.com
pf-voice.dev-us1.eak.twilio.com
*.vss.twilio.com
*.dev.twilio.com
postflight-sms.us1.eak.twilio.com
*.stage-us2.twilio.com
statuspage.io
statuspage.io
*.turn.dev.twilio.com
*.dev-us2.twilio.com
statuspage.io
statuspage.io
doers.twilio.com
akamaisecure4.qualtrics.com
video.us1.eak.twilio.com
support.twilio.com
aproposalfrom.freeman.com
assets.cdn.prod.twilio.com
statuspage.io
*.code.hq.twilio.com
*.help.dev.twilio.com
chunderm.gll.dev.twilio.com
go.twilio.com
*.br1.twilio.com
5271ba7d4eb049ae104fa6533b878d7de1b133d9.console.dev.twilio.com
*.stage.twilio.com
signal.twilio.com
console.ie1.twilio.com
statuspage.io
networktest.twilio.com
partnerportal.kornferry.com
incapsula.com
sales.twilio.com
jp.twilio.com
aproposalfrom.freeman.com
statuspage.io
*.stage-au1.twilio.com
ecs.stage-us1.twilio.com
statuspage.io
*.vss.twilio.com
chunderw-vpc-gll-stage-us2-ix.stage.twilio.com
statuspage.io
statuspage.io
mqtt-sync.us1.twilio.com
*.stage-us2.twilio.com
*.stage-us1.twilio.com
support.twilio.com
console.ireland.stage-ie1.twilio.com
rtd-kibana-6.us1.eak.twilio.com
landria.corp.twilio.com
akamaisecure4.qualtrics.com
statuspage.io
*.dev-us2.twilio.com
statuspage.io
payments.callback.prod.twilio.com
statuspage.io
rainbow.stage.twilio.com
www.temporal-apig.dev.twilio.com
statuspage.io
eventgw.twilio.com
incapsula.com
gateway1-mv1.corp.twilio.com
flex-v2.stage.twilio.com
security.twilio.com
realtime-wormhole.us1.twilio.com
support.twilio.com
thiscertisfortestingonly.twilio.com
chickentreat.craveable.support
cds.twilio.com
boxconfig.outside.twilio.com
*.br1.twilio.com
*.vss.stage.twilio.com
statuspage.io
dashboard.waas.corp.twilio.com
ct-spam-labs.us1.twilio.com
*.twilio.com
understand.stage-us1.eak.twilio.com
8f876c29f4e5ddcd1ba13f3b40e889bbc3822cd2.console.dev.twilio.com
chickentreat.craveable.support
*.stage-us1.twilio.com
chickentreat.craveable.support
*.turn.dev.twilio.com
*.stage.twilio.com
incapsula.com
internal.status.twilio.com
wireless.us1.eak.twilio.com
mqtt-sync.stage-us1.twilio.com
*.ie1.twilio.com
incapsula.com
rtd-notify-log.dev-us1.eak.twilio.com
wiki.hq.twilio.com
platform-slackapp.corp.twilio.com
*.de1.twilio.com
statuspage.io
build.twilio.com
incapsula.com
headsup.twilio.com
webhooks.twilio.com
chickentreat.craveable.support
tsock.twilio.com
pf-voice.dev-us1.eak.twilio.com
*.vss.twilio.com
*.dev.twilio.com
postflight-sms.us1.eak.twilio.com
*.stage-us2.twilio.com
statuspage.io
statuspage.io
*.turn.dev.twilio.com
*.dev-us2.twilio.com
statuspage.io
statuspage.io
doers.twilio.com
akamaisecure4.qualtrics.com
video.us1.eak.twilio.com
support.twilio.com
aproposalfrom.freeman.com
assets.cdn.prod.twilio.com
statuspage.io
*.code.hq.twilio.com
*.help.dev.twilio.com
chunderm.gll.dev.twilio.com
go.twilio.com
*.br1.twilio.com
5271ba7d4eb049ae104fa6533b878d7de1b133d9.console.dev.twilio.com
*.stage.twilio.com
signal.twilio.com
console.ie1.twilio.com
statuspage.io
networktest.twilio.com
partnerportal.kornferry.com
incapsula.com
sales.twilio.com
jp.twilio.com
aproposalfrom.freeman.com
statuspage.io
*.stage-au1.twilio.com
ecs.stage-us1.twilio.com
statuspage.io
*.vss.twilio.com
chunderw-vpc-gll-stage-us2-ix.stage.twilio.com
statuspage.io
statuspage.io
mqtt-sync.us1.twilio.com
*.stage-us2.twilio.com
*.stage-us1.twilio.com
support.twilio.com
console.ireland.stage-ie1.twilio.com
rtd-kibana-6.us1.eak.twilio.com
landria.corp.twilio.com
akamaisecure4.qualtrics.com
Certificate
The complete raw certificate details for *.stage.twilio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIQC+lczeK0xsnHnjDoD7PMsTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDIwNjAwMDAwMFoXDTI1MDMwNjIzNTk1OVowHTEb MBkGA1UEAwwSKi5zdGFnZS50d2lsaW8uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsbTxtiClvhNmD2zxggTce7E5sJ/gD0Cb8reCThxf85VvdITv 4vrfALxGb8yLaGzsdpbGBVC4me2CVMl1xiKWLkqCQgyq4liHWuwUMXXdz0Fj/cYX GNsuHxxzheLJ7SH5/clbaKd3nK67Zve+9KGNDiD9B7wMhBW8ftFf8gnUTO42e76A vQldnmh4PPYn006gIgmxaZBg3BxPaO4XKPaEW0rxBmbpvaiOaL1pqnM7IL9tnxNO 4v3MvS8Jq7481aHa1Y55fVzW+J+iEiZE38V9QZefA4+Jc4D1tYUkWWd+JKmJqrph BicoQ54OIdpZoadPZIAuM41p0YCs0GYtem0xVwIDAQABo4IDkjCCA44wHwYDVR0j BBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFD4bCjH7mO6KAhoy +i2uwlg4pv/JMIHCBgNVHREEgbowgbeCEiouc3RhZ2UudHdpbGlvLmNvbYIbKi5p bnRlcm5hbC5zdGFnZS50d2lsaW8uY29tgh8qLmludGVybmFsLnN0YWdlLXVzMS50 d2lsaW8uY29tghYqLnN0YWdlLXVzMS50d2lsaW8uY29tghYqLnN0YWdlLWF1MS50 d2lsaW8uY29tghIqLnN0YWdlLnR3aWxpby5vcmeCHyouaW50ZXJuYWwuc3RhZ2Ut YXUxLnR3aWxpby5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg LqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmww dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1h em9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHW eQIEAgSCAW8EggFrAWkAdwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo5 3wAAAY2AAEcLAAAEAwBIMEYCIQDQXHG27fVzKifyvk1xeuc6VNFbExK78ZAmDzg6 Rt06mAIhAI+Z2suKZqcn3QMARkdq3OwyIHhaNubC76rO0a9PyUzlAHYAfVkeEuF4 KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGNgABHQAAABAMARzBFAiB8NCAx xZ4nzqOLL9ltOyWG60HMeYoy1F9Hj7MAjYfZCgIhAMD+yj1bVmmC1aFApQJ6Rgpn 1nJBHI18rns79YAQkSqbAHYA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43 jlAAAAGNgABHbwAABAMARzBFAiAPNl+dxCeD8a/DLbDw3xTEIFz5M7JzVsmOUsfD mHEHegIhANLxHcLfl2OvkoNucEgs5RFk2Y0LIf8wKlUpxFW2ZSngMA0GCSqGSIb3 DQEBCwUAA4IBAQCYpC2mS0Nq5GT0Vtl6DQgmxt7O9xJ+ySCntHZzcHLX3rM4JaXz NDNR+GPv8psOY7bl9bnLUU0up1+kxI4Pcz/Rf4f4s/6mmvCkwf3OGr+43XeUynNE kf+iHPzn9N5QmtnLWhokBxF1I4zvIEOTs0B6jfI9Lc231vjk51BUCN3pLL5Pt8wi QL+Bnr/jOPviy4vI5APdOt9r08jtDmazFnv5jGukpHH64wp9raocRgFhre4D1QS6 9sgkXDf4N1PhYHNJm/TnYvoOTSjNTmI4Ypmiw+Yv+tGLT5dRNf7YNk/6AxA++dLB lEESCdQjTID8JJG5w7NW2pqnYno4EnJjR9nF -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbTxtiClvhNmD2zxggTc e7E5sJ/gD0Cb8reCThxf85VvdITv4vrfALxGb8yLaGzsdpbGBVC4me2CVMl1xiKW LkqCQgyq4liHWuwUMXXdz0Fj/cYXGNsuHxxzheLJ7SH5/clbaKd3nK67Zve+9KGN DiD9B7wMhBW8ftFf8gnUTO42e76AvQldnmh4PPYn006gIgmxaZBg3BxPaO4XKPaE W0rxBmbpvaiOaL1pqnM7IL9tnxNO4v3MvS8Jq7481aHa1Y55fVzW+J+iEiZE38V9 QZefA4+Jc4D1tYUkWWd+JKmJqrphBicoQ54OIdpZoadPZIAuM41p0YCs0GYtem0x VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15833195415291698435155466953161952433 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stage.twilio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433406882293838644097466653146080404704089202686013901916585745167340643719556023831234814911401767994907491393184976993689253097475486513229816386420513682178843435963952743777545827525503194445190604983343757015067762616222428462084432296862223986063859922650676442587164943628762404092059710024051244902784857102616746596320756373287265050764463648664332128039826302019796552353222890451313345715183102741981841383778548491402420248812432201330848276143251586794099728738351739078981005739783427001682857694274170000690614336425714749875427550574794791033713892208438945592221826668844578110011257019408203985239 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3e1b0a31fb98ee8a021a32fa2daec25838a6ffc9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.stage.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.stage-us1.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-us1.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage-au1.twilio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.twilio.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.stage-au1.twilio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 01690077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d8000470b0000040300483046022100d05c71b6edf5732a27f2be4d717ae73a54d15b1312bbf190260f383a46dd3a980221008f99dacb8a66a727dd030046476adcec3220785a36e6c2efaaced1af4fc94ce50076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d80004740000004030047304502207c342031c59e27cea38b2fd96d3b2586eb41cc798a32d45f478fb3008d87d90a022100c0feca3d5b566982d5a140a5027a460a67d672411c8d7cae7b3bf58010912a9b007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d8000476f000004030047304502200f365f9dc42783f1afc32db0f0df14c4205cf933b27356c98e52c7c39871077a022100d2f11dc2df9763af92836e70482ce51164d98d0b21ff302a5529c455b66529e0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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