spendcare.tags.static.paytheory.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 08:79:17:2c:31:93:df:c9:f3:86:74:40:dd:b2:c5:42 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=spendcare.tags.static.paytheory.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 08:79:17:2c:31:93:df:c9:f3:86:74:40:dd:b2:c5:42Serial Number (int): 11262561882965610132131589863532315970
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 08:c7:b0:c0:21:31:1b:ba:96:a2:24:ea:fb:9c:a5:53:7b:8c:bb:20
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 25:ad:82:a2:37:bc:ec:e8:fd:04:3d:fd:62:71:e6:89:ac:c8:d0:d8
Fingerprint (sha256): a6:f6:31:69:4e:b3:b3:a0:86:68:0e:72:cc:4f:d8:1d:87:15:8b:d4:b7:0b:fb:f5:fe:b8:aa:ad:11:24:b6:db
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate spendcare.tags.static.paytheory.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spendcare.tags.static.paytheory.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spendcare.tags.static.paytheory.com
Other certificates including the domain name paytheory.com
(limited to 100 certificates)
carefeed.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
paytheory.com
abel.checkout.paytheory.com
learn.dummy.books.websocket.paytheory.com
learn.dummy.paytheory.com
www.crimportexsas.co
paytheory.com
secure.lib.paytheory.com
www.cycleconnect.com.br
abel.cash.api.paytheory.com
ota.rest.paytheory.com
api.start.paytheory.com
paytheory.com
api.ota.paytheory.com
api.carefeed.paytheory.com
billing.naxs.com.ar
regional.rest.paytheory.com
learn.dummy.html.example.paytheory.com
ota.secure.socket.paytheory.com
demo.paytheory.com
api.tpo.paytheory.com
innocation.co
autode.com.br
regional.rest.paytheory.com
suterapines.cf
*.api.paytheory.com
olektra.ai
satbiogas.com
learn.cash.api.paytheory.com
paytheory.com
app.paytheory.com
odcfinder.com
abel.html.example.paytheory.com
tpo.paytheory.com
www.kubeshield.app
abel.sdk.paytheory.com
abel.secure.socket.paytheory.com
regional.paytheory.com
spendcare.secure.socket.paytheory.com
abel.partner.dashboard.paytheory.com
tags.lib.paytheory.com
like.lhzhang.com
graphdbs.io
nolanclark.co
app.paytheory.com
regional.rest.paytheory.com
paytheory.com
c2.sdk.paytheory.com
app.paytheory.com
paytheory.com
regional.paytheory.com
chmtnel.gazar.am
learn.dummy.tags.static.paytheory.com
tags.api.paytheory.com
concraftpakistan.com
learn.dummy.system.dashboard.paytheory.com
tpo.rest.paytheory.com
tpo.cash.api.paytheory.com
paytheory.com
www.paytheory.com
*.dashboard.paytheory.com
paytheory.com
abel.merchant.dashboard.paytheory.com
regional.rest.paytheory.com
internal.abel.paytheory.com
ota.cash.api.paytheory.com
youtube.dinfree.com
regional.paytheory.com
regional.paytheory.com
abel.system.dashboard.paytheory.com
spendcare.merchant.dashboard.paytheory.com
adm.brokengravity.com
spendcare.cash.api.paytheory.com
spendcare.sdk.paytheory.com
api.c2.paytheory.com
www.medacus.com
ota.paytheory.com
educator.paytheory.com
tpo.secure.socket.paytheory.com
central.ocellisys.com.br
paytheory.com
carpe.rest.paytheory.com
learn.dummy.merchant.dashboard.paytheory.com
abel.html.canary.paytheory.com
carefeed.cash.api.paytheory.com
paytheory.com
paytheory.com
paytheory.com
hobbyglobe.com
paytheory.com
learn.dummy.secure.socket.paytheory.com
spendcare.secure.socket.paytheory.com
abel.developers.paytheory.com
regional.rest.paytheory.com
aron.partner.dashboard.paytheory.com
regional.paytheory.com
owork.com.br
regional.rest.paytheory.com
spendcare.tags.static.paytheory.com
aron.merchant.dashboard.paytheory.com
Certificate
The complete raw certificate details for spendcare.tags.static.paytheory.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhTCCA22gAwIBAgIQCHkXLDGT38nzhnRA3bLFQjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDYwNjAwMDAwMFoXDTI1MDcwNTIzNTk1OVowLjEs MCoGA1UEAxMjc3BlbmRjYXJlLnRhZ3Muc3RhdGljLnBheXRoZW9yeS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnXMe+epEVA8EVL76ozI0cIyv AeGsOeleffQWHtMQQ6MqGh6thwIfM6jawyDkd1lF5fTlAEneGK4D0M0LC33pRnjS xrCgKCcl0WZi1F/+3usMB1mLcQ9W5UBUrG3mUzZxPERVEZoMbhUD7KCA/LP6aG3b yfexxF9ngUcae0knJVElpXkn4XKW/6Kzkt3YtuSp7+wXw9WNUr/U7+UJCuSyzFEb pKzJ0tJ/CRUI5TcvNRVgou4sv4l2dP9ierbTVqJTVJc0q3ea0skucEwMh5gc+/j7 QFnlU01xe+NLaZcbgcUBXUQYrcv8Ly/kjp8O36Z6L2REonTg1adnWL9fJ1G1AgMB AAGjggGPMIIBizAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNV HQ4EFgQUCMewwCExG7qWoiTq+5ylU3uMuyAwLgYDVR0RBCcwJYIjc3BlbmRjYXJl LnRhZ3Muc3RhdGljLnBheXRoZW9yeS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7 BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNv bS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v b2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j cnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA00wM3XeYE TRMxNdOIGHxQvbOMqviJLSZTg3d4GMIaTQhSG9iGUJ75hPfHG/OYtWWhLpe85w2K /0l5Tw9tx/foPVvbcl6zvtoUcE40F+5ST71o5opdFyfUOJQRs1+PZ+jUWqzjZufc CMGv613o6FWvEJ2OzaF7W6IEbSdsLan5JxycRngiyXLHNLSlh6QRqgOt4nGrZoz8 XGbK7Q/gVQsuDK8/m7X0EhQNXr0H8MCIvbI1AnpwZ9cnxHWd8bo/yLs9NIoMWTXu J+vV6cltcrThNMtteHOKo3O3HbMNQbubMByKY2aIB5ALxQKCbTxqE5TYE00HVnKr RGoaST6kDawf -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ1zHvnqRFQPBFS++qMy NHCMrwHhrDnpXn30Fh7TEEOjKhoerYcCHzOo2sMg5HdZReX05QBJ3hiuA9DNCwt9 6UZ40sawoCgnJdFmYtRf/t7rDAdZi3EPVuVAVKxt5lM2cTxEVRGaDG4VA+yggPyz +mht28n3scRfZ4FHGntJJyVRJaV5J+Fylv+is5Ld2Lbkqe/sF8PVjVK/1O/lCQrk ssxRG6SsydLSfwkVCOU3LzUVYKLuLL+JdnT/Ynq201aiU1SXNKt3mtLJLnBMDIeY HPv4+0BZ5VNNcXvjS2mXG4HFAV1EGK3L/C8v5I6fDt+mei9kRKJ04NWnZ1i/XydR tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11262561882965610132131589863532315970 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spendcare.tags.static.paytheory.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25830255549642360258381154014980587228215187977953140637184185590035598944826817194553921748576839290838627370664290333822652547143143166952621860051790005754878678681605522573366077724957314010284380012354430488106050659333838653253279496525073633742601239338114758493586271759606420886751024167998157068066820509705382956289381901678254246334638905295130249311913094286352641740252690994363112571333205658630764235949520717220716687719733782938684874735885968484349299246973131427635254204938858456651911878104391722035642776131112874781085128015769091034288252191331303182393074068687498454773575918590771520295349 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 08c7b0c021311bba96a224eafb9ca5537b8cbb20 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spendcare.tags.static.paytheory.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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