cinchhs.io
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 09:af:ce:48:93:5e:c7:45:e6:e8:31:1a:19:ea:93:b8 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cinchhs.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 09:af:ce:48:93:5e:c7:45:e6:e8:31:1a:19:ea:93:b8Serial Number (int): 12875887838722767473442275470881756088
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 50:c5:38:8b:06:f4:cc:2f:4a:13:40:92:69:e8:76:86:47:57:d0:97
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 5f:e8:78:8a:31:11:80:c8:de:73:b2:45:d3:db:76:5f:87:4a:02:d7
Fingerprint (sha256): b3:77:e7:e6:24:b9:15:06:c6:7d:b3:f9:7f:11:a3:61:e7:ef:b4:eb:eb:f1:17:9a:79:e3:7e:8e:9e:27:14:5f
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate cinchhs.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cinchhs.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cinchhs.io
*.cinchhs.io
*.cinchhs.io
Other certificates including the domain name cinchhs.io
(limited to 100 certificates)
status.itsnationwide.com
overturstatus.allegion.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.managementcouncil.org
status.qualyteam.com.br
status.logicpath.com
assist.13layers.com
webstatus.engr.ucdavis.edu
status.metrixlab.com
webstatus.engr.ucdavis.edu
partner-status.verify.interac-id.ca
status.fringesecure.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.madeinleander.com
status.itsnationwide.com
status.zoho.jp
status.blitzrocks.net
webstatus.engr.ucdavis.edu
status.fringesecure.com
status.managementcouncil.org
status.itsnationwide.com
status.zoho.jp
webstatus.engr.ucdavis.edu
status.mscloud.ca
status-salus-na.uleeco.com
status.elmohub.com.au
webstatus.engr.ucdavis.edu
status.startlink.com.br
status.cinchhs.io
webstatus.engr.ucdavis.edu
status.console.macrometa.io
status.mybookingplatform.com
overturstatus.allegion.com
status.madeinleander.com
status.metaserve.cloud
webstatus.engr.ucdavis.edu
status.ahima.app
status.mybookingplatform.com
status.mybookingplatform.com
status.hub.verifiedidentitysolutions.com
status.logicpath.com
status.managementcouncil.org
help.securecpu.net
status.albania10.com.br
status.elmohub.com.au
status.cinchhs.io
webstatus.engr.ucdavis.edu
status.teamtexter.io
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.startlink.com.br
status.startlink.com.br
status-namer-attest.gtil.gt.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.hub.verifiedidentitysolutions.com
status.managementcouncil.org
status.plantdemand.com
status.eicatalyst.com
status.blitzrocks.net
status.fringesecure.com
status.elmohub.com.au
assist.eoncollective.com
cinchhs.io
status.qualyteam.com.br
status.startlink.com.br
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
maintenance.xempus.com
status.zoho.jp
status.albania10.com.br
status.dev.ulaval.ca
status.elmohub.com.au
status.logicpath.com
status-salus-na.uleeco.com
webstatus.engr.ucdavis.edu
primegaming.noc.cloudi.cloud
webstatus.engr.ucdavis.edu
status.tecfiscal.linx.com.br
status.teamtexter.io
status.metrixlab.com
webstatus.engr.ucdavis.edu
status.eicatalyst.com
apimonitoring.carletoninc.com
partner-status.verify.interac-id.ca
status.logicpath.com
webstatus.engr.ucdavis.edu
status.teamtexter.io
status.success.ai
status-namer-attest.gtil.gt.com
status.madeinleander.com
status.hub.verifiedidentitysolutions.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
overturstatus.allegion.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.managementcouncil.org
status.qualyteam.com.br
status.logicpath.com
assist.13layers.com
webstatus.engr.ucdavis.edu
status.metrixlab.com
webstatus.engr.ucdavis.edu
partner-status.verify.interac-id.ca
status.fringesecure.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.madeinleander.com
status.itsnationwide.com
status.zoho.jp
status.blitzrocks.net
webstatus.engr.ucdavis.edu
status.fringesecure.com
status.managementcouncil.org
status.itsnationwide.com
status.zoho.jp
webstatus.engr.ucdavis.edu
status.mscloud.ca
status-salus-na.uleeco.com
status.elmohub.com.au
webstatus.engr.ucdavis.edu
status.startlink.com.br
status.cinchhs.io
webstatus.engr.ucdavis.edu
status.console.macrometa.io
status.mybookingplatform.com
overturstatus.allegion.com
status.madeinleander.com
status.metaserve.cloud
webstatus.engr.ucdavis.edu
status.ahima.app
status.mybookingplatform.com
status.mybookingplatform.com
status.hub.verifiedidentitysolutions.com
status.logicpath.com
status.managementcouncil.org
help.securecpu.net
status.albania10.com.br
status.elmohub.com.au
status.cinchhs.io
webstatus.engr.ucdavis.edu
status.teamtexter.io
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.startlink.com.br
status.startlink.com.br
status-namer-attest.gtil.gt.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
status.hub.verifiedidentitysolutions.com
status.managementcouncil.org
status.plantdemand.com
status.eicatalyst.com
status.blitzrocks.net
status.fringesecure.com
status.elmohub.com.au
assist.eoncollective.com
cinchhs.io
status.qualyteam.com.br
status.startlink.com.br
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
maintenance.xempus.com
status.zoho.jp
status.albania10.com.br
status.dev.ulaval.ca
status.elmohub.com.au
status.logicpath.com
status-salus-na.uleeco.com
webstatus.engr.ucdavis.edu
primegaming.noc.cloudi.cloud
webstatus.engr.ucdavis.edu
status.tecfiscal.linx.com.br
status.teamtexter.io
status.metrixlab.com
webstatus.engr.ucdavis.edu
status.eicatalyst.com
apimonitoring.carletoninc.com
partner-status.verify.interac-id.ca
status.logicpath.com
webstatus.engr.ucdavis.edu
status.teamtexter.io
status.success.ai
status-namer-attest.gtil.gt.com
status.madeinleander.com
status.hub.verifiedidentitysolutions.com
webstatus.engr.ucdavis.edu
webstatus.engr.ucdavis.edu
Certificate
The complete raw certificate details for cinchhs.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIQCa/OSJNex0Xm6DEaGeqTuDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDMxNTAwMDAwMFoXDTI1MDQxMjIzNTk1OVowFTET MBEGA1UEAxMKY2luY2hocy5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPRsMqxJPB2dtu8HaQfUkyaJpYPgzXBsQmEJxjivoAFUeflfH3UkeTG5oVEb rUBypFOvXPXupoywHbROOQcbD8XFz+g7V7uI34Y3NgyvVPBvU7NTINPG76wPP9So DIOY5dS0adLM/b+4y0rwwhrUheNOfCgGWT5R2Em9MPBcX/g8Rb/sJqB+GUQErlnU FDM2kKZ/18oofoPqPJ6Nys9u4NMRKSPDg6ts5B41IajQq19/Ti6oLsMxBz0sxFw6 G4VvyDUV/zqcxNOORJb0mRmvHpMIgPt6mQjKro1Kb3gZDpJ8EU4yQ91e1il1QHv1 OpneA2o/3C2g4aJ6WFYiO/2o04ECAwEAAaOCAu8wggLrMB8GA1UdIwQYMBaAFFXZ GF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBRQxTiLBvTML0oTQJJp6HaGR1fQ lzAjBgNVHREEHDAaggpjaW5jaGhzLmlvggwqLmNpbmNoaHMuaW8wEwYDVR0gBAww CjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFt YXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAM BgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgBOdaMnXJoQ wzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY5AuGByAAAEAwBHMEUCIQDY66dA h8gA7+cW+n4kPBOlvJ5sHiKznyEdhPKGxwR/jAIgMOvUOSd46VDzvjj+nbrMYkWD sIhYVjCQGQwu3dpce9UAdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeO UAAAAY5AuGBoAAAEAwBGMEQCIDfghCH8BHh58ToCZwK689DjooY7dyHWPdgfFGaE kUqRAiBdXzEuhlM5HoOqSqN+txTnQjbYfNKSj/Xt2OFobAOvzAB1AM8RVu7VLnyv 84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjkC4YJIAAAQDAEYwRAIgFXFNG5T6 OF942H2L/lL7m9zFkAdiB8zhNP6POS6SLKYCIFWG3g4EzCkcmi9g6UvYscrQbX/x TFye9rOn5rk9l+9GMA0GCSqGSIb3DQEBCwUAA4IBAQBk9V1NGaeuXdn3NZ5TW7+5 4UeoeT5ICyncfFay7o/T5BiunEI5GiUw3b01kzqoYM12loTSJoKbeztd8rTkqzZi /alu/6OW2bUbR0lA8HxqJGPZbzKENHjea/p1o7n/OMUytS1RKOycN5GWkPkcCkLO rA+XGPhU06+4NhYOsAGRNnp1DT20Lsg9KOmPZzpOiSjJFoYHXhjVAJ/WCpREnscQ imkq2oLfjucask3CwaeOdow4YQDbMbTPVP/I21aT1fDmvH4PnCVpnt6jQ4MjWo2A jaz4bBxE6k778fqLvRShNjkQ154pbZe7IemM52bdYVVgjprbmmgbhPHoO6xVdbpb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GwyrEk8HZ227wdpB9ST Jomlg+DNcGxCYQnGOK+gAVR5+V8fdSR5MbmhURutQHKkU69c9e6mjLAdtE45BxsP xcXP6DtXu4jfhjc2DK9U8G9Ts1Mg08bvrA8/1KgMg5jl1LRp0sz9v7jLSvDCGtSF 4058KAZZPlHYSb0w8Fxf+DxFv+wmoH4ZRASuWdQUMzaQpn/Xyih+g+o8no3Kz27g 0xEpI8ODq2zkHjUhqNCrX39OLqguwzEHPSzEXDobhW/INRX/OpzE045ElvSZGa8e kwiA+3qZCMqujUpveBkOknwRTjJD3V7WKXVAe/U6md4Daj/cLaDhonpYViI7/ajT gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12875887838722767473442275470881756088 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cinchhs.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30855500805156706578958993220679484349657543093681517147192396711188808124938963777425035130704371907097536682680499857099941406620247266785273345923481207117054370449335734783461492248550285752220684293435733566194425365453375109387180338065620024695234209352235219842496124588605297261876574779364776840913769733863534180313350244015864285070366094219193925586349312991367464495374745396127176862742617791494815474207480306845246684146727661008326941188524681846906882802096610710678697819821681945688873864257533356948084435278372920240876923483668864009250833138672503480479585464062727697794980484080803338834817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 50c5388b06f4cc2f4a13409269e876864757d097 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinchhs.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinchhs.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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