wp-mktg.prod.getty1.net
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 02:ea:5c:dc:ce:b3:9f:9b:6f:3b:2c:e0:d4:0f:22:b2 was issued on by Amazon.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=wp-mktg.prod.getty1.net
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:ea:5c:dc:ce:b3:9f:9b:6f:3b:2c:e0:d4:0f:22:b2Serial Number (int): 3875336932317333971156283772510347954
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: ba:17:fa:e8:fd:79:1b:6c:4f:1c:1a:cd:54:bc:d4:bd:38:2a:5a:33
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): ca:83:03:88:fd:51:86:20:a2:80:a9:55:91:10:35:68:5e:11:fb:45
Fingerprint (sha256): a6:2c:cd:dd:b8:ab:8e:34:9c:f0:da:d6:c0:7a:89:4e:12:d5:71:18:71:e4:31:f8:b2:6b:dc:fe:2b:fc:97:11
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate wp-mktg.prod.getty1.net
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wp-mktg.prod.getty1.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wp-mktg.prod.getty1.net
wherewestand.gettyimages.com
www.gettyimagesaffiliates.com
marketing.gettyimages.com
istockcontenthub.prod.getty1.net
company.gettyimages.com
affiliates.gettyimages.com
marketing.istockphoto.com
wherewestand.gettyimages.com
www.gettyimagesaffiliates.com
marketing.gettyimages.com
istockcontenthub.prod.getty1.net
company.gettyimages.com
affiliates.gettyimages.com
marketing.istockphoto.com
Other certificates including the domain name getty1.net
(limited to 100 certificates)
embed-cdn.gettyimages.com
embed-cdn.gettyimages.com
stage-gateway-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wireimage-origin-stage.nonprod.getty1.net
api.gettyimages.com
developer-portal.prod.getty1.net
origin-api.sandbox.getty1.net
wp-mktg.prod.getty1.net
istockcontenthub.lower.getty1.net
wildcard.lower.getty1.net
wp-mktg.prod.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
thinkstock-origin-production.prod.getty1.net
jake.sandbox.getty1.net
wildcard.prod.getty1.net
api.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
accountmanagement.sandbox.getty1.net
unisporkal.sandbox.getty1.net
developer-portal.prod.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
api.gettyimages.com
wp-istock-inspector.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wildcard.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
wildcard.sandbox.getty1.net
wireimage-origin-production.prod.getty1.net
accountmanagement.sandbox.getty1.net
api.gettyimages.com
wp-mktg.prod.getty1.net
api.gettyimages.com
wildcard.sandbox.getty1.net
origin-api.gettyimages.com
wildcard.prod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.nonprod.getty1.net
wildcard.prod.getty1.net
embed.gettyimages.com
origin-api.gettyimages.com
wildcard.sandbox.getty1.net
musiccontrib-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
wildcard.lower.getty1.net
developer-portal.prod.getty1.net
wp-istock-inspector.prod.getty1.net
api.gettyimages.com
wp-mktg.sandbox.getty1.net
thinkstock-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
origin-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
developer-portal.prod.getty1.net
jake.sandbox.getty1.net
wp-istock-inspector.prod.getty1.net
wp-mktg.prod.getty1.net
api.sandbox.getty1.net
wildcard.prod.getty1.net
wp-mktg.sandbox.getty1.net
wildcard.sandbox.getty1.net
embed.gettyimages.com
entmon-splunk-hec-firehose.shared.getty1.net
wp-mktg.prod.getty1.net
embed-test-cdn.lower.getty1.net
entmon-splunk-hec-firehose.shared.getty1.net
embed.gettyimages.com
*.nonprod.getty1.net
embed-test-cdn.lower.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
developer-portal.prod.getty1.net
api.gettyimages.com
entmon-splunk-hec-firehose.nonprod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
wp-mktg.prod.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
stage-gateway-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wireimage-origin-stage.nonprod.getty1.net
api.gettyimages.com
developer-portal.prod.getty1.net
origin-api.sandbox.getty1.net
wp-mktg.prod.getty1.net
istockcontenthub.lower.getty1.net
wildcard.lower.getty1.net
wp-mktg.prod.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
thinkstock-origin-production.prod.getty1.net
jake.sandbox.getty1.net
wildcard.prod.getty1.net
api.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
accountmanagement.sandbox.getty1.net
unisporkal.sandbox.getty1.net
developer-portal.prod.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
api.gettyimages.com
wp-istock-inspector.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wildcard.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
wildcard.sandbox.getty1.net
wireimage-origin-production.prod.getty1.net
accountmanagement.sandbox.getty1.net
api.gettyimages.com
wp-mktg.prod.getty1.net
api.gettyimages.com
wildcard.sandbox.getty1.net
origin-api.gettyimages.com
wildcard.prod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.nonprod.getty1.net
wildcard.prod.getty1.net
embed.gettyimages.com
origin-api.gettyimages.com
wildcard.sandbox.getty1.net
musiccontrib-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
wildcard.lower.getty1.net
developer-portal.prod.getty1.net
wp-istock-inspector.prod.getty1.net
api.gettyimages.com
wp-mktg.sandbox.getty1.net
thinkstock-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
origin-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
developer-portal.prod.getty1.net
jake.sandbox.getty1.net
wp-istock-inspector.prod.getty1.net
wp-mktg.prod.getty1.net
api.sandbox.getty1.net
wildcard.prod.getty1.net
wp-mktg.sandbox.getty1.net
wildcard.sandbox.getty1.net
embed.gettyimages.com
entmon-splunk-hec-firehose.shared.getty1.net
wp-mktg.prod.getty1.net
embed-test-cdn.lower.getty1.net
entmon-splunk-hec-firehose.shared.getty1.net
embed.gettyimages.com
*.nonprod.getty1.net
embed-test-cdn.lower.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
developer-portal.prod.getty1.net
api.gettyimages.com
entmon-splunk-hec-firehose.nonprod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
wp-mktg.prod.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
gateway-api.prod.getty1.net
Certificate
The complete raw certificate details for wp-mktg.prod.getty1.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIQAupc3M6zn5tvOyzg1A8isjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDUyMzAwMDAwMFoXDTI0MDYyMDIzNTk1OVowIjEg MB4GA1UEAxMXd3AtbWt0Zy5wcm9kLmdldHR5MS5uZXQwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDCrbjOw3I4VEDQ+tKiHDhFdDZI2mijJ2aXn+rMtire Wyvaxwu1ucWbYDAqbJxMFNtMpGLhmAYULt7cs2PTOTkw6GxgRWKdKV6n4CC1a6WC WayOKytl0zrgGDIv4/9Y20oGvZ3yIXqvtKSObH0+ULvkFwTz/pjkZOKGRJEFGpW3 8uj01x6qf4PGKBF0bb5hjvCSxprSIM9WsCWY/cj+2gvgHO0anFnzQcOLIDFnuSvh wfSxsTdF7ftZeJ89WJeKk7VaJgvwLKEFnmBSx6afVJ02ECz/BeCCasRlZ497hzvs pBBDcT/D16bFH6c1shywGSMHcK3MNQX9mufHehrBurNpAgMBAAGjggO9MIIDuTAf BgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUuhf66P15 G2xPHBrNVLzUvTgqWjMwge4GA1UdEQSB5jCB44IXd3AtbWt0Zy5wcm9kLmdldHR5 MS5uZXSCHHdoZXJld2VzdGFuZC5nZXR0eWltYWdlcy5jb22CHXd3dy5nZXR0eWlt YWdlc2FmZmlsaWF0ZXMuY29tghltYXJrZXRpbmcuZ2V0dHlpbWFnZXMuY29tgiBp c3RvY2tjb250ZW50aHViLnByb2QuZ2V0dHkxLm5ldIIXY29tcGFueS5nZXR0eWlt YWdlcy5jb22CGmFmZmlsaWF0ZXMuZ2V0dHlpbWFnZXMuY29tghltYXJrZXRpbmcu aXN0b2NrcGhvdG8uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w MS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIB MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEu YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFt YXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB 1nkCBAIEggFuBIIBagFoAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa OnQAAAGIRmg39QAABAMASDBGAiEAxnncI7CWyBnf+fDuhdblx9Irp2UKpS8oUpAZ XbLFLnACIQCf2yxkYQGFgIbCGLeOjvzewUkmm7Q+lHILHJSlcg/THwB2AEiw42va pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiEZoN+cAAAQDAEcwRQIgRhhu 8nJEmTiQs/F1p7S5Ix2U39Y90FKN+UHhBswjdoECIQCRWjCQJdZedxgs4Hlkhh/i bhUfNz8tfZ+6fbiBlLTbMAB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI 1/urAAABiEZoN7EAAAQDAEYwRAIgXbMr5CTQ8l4YxNkJWz31F8LFKVQEfNBOPtKv OHUkNL4CIBR80nWxEuH4q35dZmJA30EfGptkKeuhRKgRKxgDXUTzMA0GCSqGSIb3 DQEBCwUAA4IBAQBReFBoVMfkzlQ6GcTTUYft4YUGOX49MVqdXE1+Y8D8SbBaRMPl LTwHdGWgx49BaKejv24THkhGAdqkanEk39Rzpor5MCv3nE5AwNziaA7V+tQOQ2bX tceFP79y573k3qbV7hVhLG4RMBTIIfDLwMKwp+u6fhD4hKW/faAcOW5e4u8agoUK kAEx+t9aRqDf7Q+uTDAkxBtyqILNVe9FyMf7Vxlas0siIG8gcvtQN9yt2HLBtwx4 /pJgN/ztYxu3abVKrsvqwJdbv/UmcjnPSsKG/4iY+CyyWS7JzMi6f1Ve4WtM+b4r Ca4HRCr2dzaK0WpNqAXY8DoXMBHoKdFt4KLz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq24zsNyOFRA0PrSohw4 RXQ2SNpooydml5/qzLYq3lsr2scLtbnFm2AwKmycTBTbTKRi4ZgGFC7e3LNj0zk5 MOhsYEVinSlep+AgtWulglmsjisrZdM64BgyL+P/WNtKBr2d8iF6r7Skjmx9PlC7 5BcE8/6Y5GTihkSRBRqVt/Lo9Nceqn+DxigRdG2+YY7wksaa0iDPVrAlmP3I/toL 4BztGpxZ80HDiyAxZ7kr4cH0sbE3Re37WXifPViXipO1WiYL8CyhBZ5gUsemn1Sd NhAs/wXggmrEZWePe4c77KQQQ3E/w9emxR+nNbIcsBkjB3CtzDUF/Zrnx3oawbqz aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3875336932317333971156283772510347954 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wp-mktg.prod.getty1.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24575896627546743837059885739208136898803049417559752252616926146593986993218185083819701163566950429231247181492490101711886387162117232273212717414090676784599342954513889753989191547104524502143069238987858490711861949174153049914920669822429692868266546824290250047143506879861183374225588196823154405347315455323909468496199289621563425093613170158560218475201492718631254394580182073951380351019887338331155743964464586625691425955106437876848231234940683311715300519338224392883464330200092558635933460686395200281824724628740713243407749788639104449235051602868694128788987746366922156841967060527633793725289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba17fae8fd791b6c4f1c1acd54bcd4bd382a5a33 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-mktg.prod.getty1.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wherewestand.gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettyimagesaffiliates.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istockcontenthub.prod.getty1.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'company.gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.gettyimages.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.istockphoto.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 016800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000188466837f50000040300483046022100c679dc23b096c819dff9f0ee85d6e5c7d22ba7650aa52f285290195db2c52e700221009fdb2c646101858086c218b78e8efcdec149269bb43e94720b1c94a5720fd31f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000188466837e70000040300473045022046186ef27244993890b3f175a7b4b9231d94dfd63dd0528df941e106cc237681022100915a309025d65e77182ce07964861fe26e151f373f2d7d9fba7db88194b4db30007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188466837b1000004030046304402205db32be424d0f25e18c4d9095b3df517c2c52954047cd04e3ed2af38752434be0220147cd275b112e1f8ab7e5d666240df411f1a9b6429eba144a8112b18035d44f3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005178506854c7e4ce543a19c4d35187ede18506397e3d315a9d5c4d7e63c0fc49b05a44c3e52d3c077465a0c78f4168a7a3bf6e131e484601daa46a7124dfd473a68af9302bf79c4e40c0dce2680ed5fad40e4366d7b5c7853fbf72e7bde4dea6d5ee15612c6e113014c821f0cbc0c2b0a7ebba7e10f884a5bf7da01c396e5ee2ef1a82850a900131fadf5a46a0dfed0fae4c3024c41b72a882cd55ef45c8c7fb57195ab34b22206f2072fb5037dcadd872c1b70c78fe926037fced631bb769b54aaecbeac0975bbff5267239cf4ac286ff8898f82cb2592ec9ccc8ba7f555ee16b4cf9be2b09ae07442af677368ad16a4da805d8f03a173011e829d16de0a2f3