*.kgmedia.id
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 02:1f:b3:2c:34:c4:02:29:0a:3f:e6:c2:be:3c:e8:d9 was issued on by Amazon.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.kgmedia.id
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:1f:b3:2c:34:c4:02:29:0a:3f:e6:c2:be:3c:e8:d9Serial Number (int): 2823051247872795852071246421995350233
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: e3:a7:05:7b:c1:46:46:ab:4b:2d:fe:e8:8d:e1:9f:cd:2d:90:1a:38
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 63:9d:35:54:b8:f2:15:75:05:b6:42:50:77:6d:92:24:a1:d9:df:84
Fingerprint (sha256): a6:42:59:d8:a9:df:a4:69:77:fa:35:8e:86:2b:0a:60:e8:81:2a:cc:a3:b2:1f:ca:0b:d5:03:af:77:7e:c3:95
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.kgmedia.id
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kgmedia.id
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kgmedia.id
*.gridstore.id
*.tribunjualbeli.com
*.parapuan.co
*.rumahpemilu.id
*.kompasiana.com
*.tribunnewswiki.com
*.kgnow.com
*.motorplus-online.com
*.bolasport.com
*.grid.id
*.kitabangkit.id
*.moview.id
*.gridoto.com
*.kompas.tv
*.kompas.com
*.sonora.id
*.ohbegitu.id
*.tribunnews.com
*.pasangiklan.com
*.temu.id
*.gridstore.id
*.tribunjualbeli.com
*.parapuan.co
*.rumahpemilu.id
*.kompasiana.com
*.tribunnewswiki.com
*.kgnow.com
*.motorplus-online.com
*.bolasport.com
*.grid.id
*.kitabangkit.id
*.moview.id
*.gridoto.com
*.kompas.tv
*.kompas.com
*.sonora.id
*.ohbegitu.id
*.tribunnews.com
*.pasangiklan.com
*.temu.id
Other certificates including the domain name kgmedia.id
(limited to 100 certificates)
mail2.kompas.com
ads.kgmedia.id
www.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
*.kgmedia.id
mail2.kompas.com
*.kgmedia.id
kgmedia.id
www.kgmedia.id
kgmedia.id
*.kgmedia.id
www.kgmedia.id
mail2.kompas.com
mail2.kompas.com
kgmedia.id
kgmedia.id
*.kgmedia.id
*.kgmedia.id
ads.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
apps.kgmedia.id
www.kgmedia.id
www.kgmedia.id
ads.kgmedia.id
mail2.kompas.com
www.kgmedia.id
*.kgmedia.id
ads.kgmedia.id
www.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
*.kgmedia.id
mail2.kompas.com
*.kgmedia.id
kgmedia.id
www.kgmedia.id
kgmedia.id
*.kgmedia.id
www.kgmedia.id
mail2.kompas.com
mail2.kompas.com
kgmedia.id
kgmedia.id
*.kgmedia.id
*.kgmedia.id
ads.kgmedia.id
www.kgmedia.id
kgmedia.id
www.kgmedia.id
apps.kgmedia.id
www.kgmedia.id
www.kgmedia.id
ads.kgmedia.id
mail2.kompas.com
www.kgmedia.id
*.kgmedia.id
Certificate
The complete raw certificate details for *.kgmedia.id in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIQAh+zLDTEAikKP+bCvjzo2TANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDQxODAwMDAwMFoXDTI0MDUxNjIzNTk1OVowFzEV MBMGA1UEAwwMKi5rZ21lZGlhLmlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsouNxZ8czfK549dwPcRFt2O6QnShuXgoFOJm9arnBTEhq2ITuPM0GtQb 95o8N4e4b/KidhsHWUlaodREbO82Z8Q00fxTOlVUnV4LRxEm/ogNptov4IeZ6Baz zZR9v4Vd/nCIrZci/zhyquZ8unoXadBcVfmDse0KxwAUSlv/wNRSaCmJwif9wLAa tdxhHZN1wZ7/rBnvyL9NNiqhwN3qUgicRXwWDhLhy1NJu2u9JYZBoat+QiNklT1b Euge83LfjIYyLMiXq6ejgxSpGyq+WlyvbdCo0L+JwnWbOjKZknvsDhf2Dmk4G5S7 UTIXVsw60+0aJP6dcdcU25WjpE+yQQIDAQABo4IEMjCCBC4wHwYDVR0jBBgwFoAU gbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFOOnBXvBRkarSy3+6I3hn80t kBo4MIIBYAYDVR0RBIIBVzCCAVOCDCoua2dtZWRpYS5pZIIOKi5ncmlkc3RvcmUu aWSCFCoudHJpYnVuanVhbGJlbGkuY29tgg0qLnBhcmFwdWFuLmNvghAqLnJ1bWFo cGVtaWx1LmlkghAqLmtvbXBhc2lhbmEuY29tghQqLnRyaWJ1bm5ld3N3aWtpLmNv bYILKi5rZ25vdy5jb22CFioubW90b3JwbHVzLW9ubGluZS5jb22CDyouYm9sYXNw b3J0LmNvbYIJKi5ncmlkLmlkghAqLmtpdGFiYW5na2l0LmlkggsqLm1vdmlldy5p ZIINKi5ncmlkb3RvLmNvbYILKi5rb21wYXMudHaCDCoua29tcGFzLmNvbYILKi5z b25vcmEuaWSCDSoub2hiZWdpdHUuaWSCECoudHJpYnVubmV3cy5jb22CESoucGFz YW5naWtsYW4uY29tggkqLnRlbXUuaWQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v Y3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAI BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu cjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIB gAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuync aEIKn+ZnTFo6dAAAAYeURucMAAAEAwBHMEUCIGDcl8eTEyL/Jr1NWxm/ZtslaRmi nef46SvOGDqLKVOhAiEAtSSQ82fMbs/ZtkSIBjQFfDKZP8ZzrscRgtSBJWtxDOIA dwBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAAAYeURub5AAAEAwBI MEYCIQCiqERqQOJtK7kvPCQIocx4QJ64+hdUIMvy+ZmRiDE2xAIhALaAyOZyn+Mc hvdvdwB7f+emFpJsSbJox//bGWrohzZhAHcASLDja9qmRzQP5WoC+p0w6xxSActW 3SyB2bu/qznYhHMAAAGHlEbm4AAABAMASDBGAiEA329HSeY5jjWxGwWJjNlx7gDQ tsexQ7D/RfQBuD/Y050CIQCTPvbtK1eSp5voBQ0f4dTavSGtXI2J3twsw9PfJx9D RTANBgkqhkiG9w0BAQsFAAOCAQEAA14pOdaffkJS/2rCqKLL9WHUywwxFLNWTZ1O IVm9sl1oDyTX+VU90NVCXkizGuLqMbOibFSxAY363zLTwvtjtY8wEC7xJ8hxaldp rD1F0tY8sDK0/+UK+GZ5wTr7tN3E/a1ll3KB3umOtY9fKMc6JDu96Xji09xPJXjP fYowuO8ufBNOxcfWVoMFy0xL5tw8A3o2Ne+QpNmaQ/vRVi/m4UK13BIJxRi61J+q mTBLw8Gt/YieEdebrVp3QWPAdwSVxa8yXzptICQx14raWtB2vnXg3OBCZ+XXXuNS hROixwqXTi97vslLn1Llcgf8rF1k12J4qs3PoZaM8LnfoRkdyQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsouNxZ8czfK549dwPcRF t2O6QnShuXgoFOJm9arnBTEhq2ITuPM0GtQb95o8N4e4b/KidhsHWUlaodREbO82 Z8Q00fxTOlVUnV4LRxEm/ogNptov4IeZ6BazzZR9v4Vd/nCIrZci/zhyquZ8unoX adBcVfmDse0KxwAUSlv/wNRSaCmJwif9wLAatdxhHZN1wZ7/rBnvyL9NNiqhwN3q UgicRXwWDhLhy1NJu2u9JYZBoat+QiNklT1bEuge83LfjIYyLMiXq6ejgxSpGyq+ WlyvbdCo0L+JwnWbOjKZknvsDhf2Dmk4G5S7UTIXVsw60+0aJP6dcdcU25WjpE+y QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2823051247872795852071246421995350233 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kgmedia.id' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22539234825946388589437551168287158187135056341538420250065397817828825403080993541059982996686267486254254183372069406729978104930579589650786610962219043096979626943906427656292351856953762360920051679167561682135158452389171440550372658047266676448496826020635115512313155048435891218250403227249382324503996616198196971686285641011328373641182934220949344827124047700613343171260162095214244997967980654233933310888094605825277578229620240609947499451215382638286519348006586230642991624815032818347835105516676391764932367452324411039179629545550875131911909656200588050330457157475963066315323126172015295181377 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e3a7057bc14646ab4b2dfee88de19fcd2d901a38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgmedia.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gridstore.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunjualbeli.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parapuan.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumahpemilu.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompasiana.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunnewswiki.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgnow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorplus-online.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolasport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grid.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitabangkit.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moview.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gridoto.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompas.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kompas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonora.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohbegitu.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribunnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasangiklan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temu.id' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00035e2939d69f7e4252ff6ac2a8a2cbf561d4cb0c3114b3564d9d4e2159bdb25d680f24d7f9553dd0d5425e48b31ae2ea31b3a26c54b1018dfadf32d3c2fb63b58f30102ef127c8716a5769ac3d45d2d63cb032b4ffe50af86679c13afbb4ddc4fdad65977281dee98eb58f5f28c73a243bbde978e2d3dc4f2578cf7d8a30b8ef2e7c134ec5c7d6568305cb4c4be6dc3c037a3635ef90a4d99a43fbd1562fe6e142b5dc1209c518bad49faa99304bc3c1adfd889e11d79bad5a774163c0770495c5af325f3a6d202431d78ada5ad076be75e0dce04267e5d75ee3528513a2c70a974e2f7bbec94b9f52e57207fcac5d64d76278aacdcfa1968cf0b9dfa1191dc9