*.cujo-test-mg.hosted.cujo.io
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 09:48:25:63:a3:d7:1f:71:90:c1:af:7a:fa:f5:cd:7d was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.cujo-test-mg.hosted.cujo.io
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:48:25:63:a3:d7:1f:71:90:c1:af:7a:fa:f5:cd:7dSerial Number (int): 12337655679328298609733819004955774333
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f8:08:bc:ef:fd:cc:1d:9c:96:34:c2:1d:3b:f9:6c:cc:02:a1:3a:03
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 7a:04:71:16:8d:16:16:cb:3c:fd:38:ec:7f:4d:93:b9:88:fd:b7:1c
Fingerprint (sha256): b8:55:8b:fc:66:4b:a1:80:56:33:d2:a2:2f:89:97:26:3e:63:6c:23:cf:e0:56:8f:e2:45:85:a8:7a:e9:8f:f3
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.cujo-test-mg.hosted.cujo.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cujo-test-mg.hosted.cujo.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cujo-test-mg.hosted.cujo.io
Other certificates including the domain name cujo.io
(limited to 100 certificates)
*.prd-doh.hosted.cujo.io
device-intel.stg.data-labs.internal.cujo.io
cloud.status.cujo.io
*.cc-stg.internal.cujo.io
cloud.status.cujo.io
*.acc.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo.io
*.cujo-test-v1.hosted.cujo.io
*.cujo.io
cloud.status.cujo.io
*.cujo-gd.hosted.cujo.io
*.cujo.io
cloud.status.cujo.io
*.cujo-perf.hosted.cujo.io
cloud.status.cujo.io
*.cujo.io
*.telus-prod.hosted.cujo.io
*.cujo-cloud-dev.hosted.cujo.io
*.cujo-stage.hosted.cujo.io
cloud.status.cujo.io
*.charter-dev.internal.cujo.io
*.acc.hosted.cujo.io
fingerprint.stage.data-labs.internal.cujo.io
oktest.cujo-dev.hosted.cujo.io
*.cujo-dev.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
tc.labs.cujo.io
*.cujo-test-mg.internal.cujo.io
*.cujo-prod-v1.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo.io
*.acc.internal.cujo.io
cloud.status.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.acc.hosted.cujo.io
*.lens-dev.hosted.cujo.io
*.gda.hosted.cujo.io
*.cujo-stg-v1.internal.cujo.io
*.cujo-test-v1.hosted.cujo.io
*.labs.cujo.io
*.charter-prod.hosted.cujo.io
*.cujo-test-mg.hosted.cujo.io
cloud.status.cujo.io
*.cujo-dev.hosted.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
*.bds-dev.tec.hosted.cujo.io
cloud.status.cujo.io
*.lens-dev.internal.cujo.io
*.webui.lens-dev.hosted.cujo.io
*.acc.hosted.cujo.io
cloud.status.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo-stg-v1.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo-emea.hosted.cujo.io
*.cujo-prod-v1.hosted.cujo.io
*.cujo-prod-v1.internal.cujo.io
*.telus-prod.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
*.labs.cujo.io
*.ew1-cujo-cicd-qa.hosted.cujo.io
*.stage.labs.cujo.io
*.stage.labs.cujo.io
cloud.status.cujo.io
*.cujo-perf.hosted.cujo.io
cloud.status.cujo.io
*.lens-dev.hosted.cujo.io
*.labs.cujo.io
*.charter-prod.hosted.cujo.io
content-control.stg.data-labs.internal.cujo.io
fingerprint.stage.data-labs.internal.cujo.io
*.acc.hosted.cujo.io
*.cujo-stg-v1.hosted.cujo.io
api-router.cujo-dev.hosted.cujo.io
*.labs.cujo.io
tc.labs.cujo.io
*.charter-qa.hosted.cujo.io
*.cujo-test-mg.hosted.cujo.io
*.lens-dev.hosted.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
data-science.stg.data-labs.internal.cujo.io
*.cujo-test-mg.internal.cujo.io
cloud.status.cujo.io
device-intel.stg.data-labs.internal.cujo.io
cloud.status.cujo.io
*.cc-stg.internal.cujo.io
cloud.status.cujo.io
*.acc.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo.io
*.cujo-test-v1.hosted.cujo.io
*.cujo.io
cloud.status.cujo.io
*.cujo-gd.hosted.cujo.io
*.cujo.io
cloud.status.cujo.io
*.cujo-perf.hosted.cujo.io
cloud.status.cujo.io
*.cujo.io
*.telus-prod.hosted.cujo.io
*.cujo-cloud-dev.hosted.cujo.io
*.cujo-stage.hosted.cujo.io
cloud.status.cujo.io
*.charter-dev.internal.cujo.io
*.acc.hosted.cujo.io
fingerprint.stage.data-labs.internal.cujo.io
oktest.cujo-dev.hosted.cujo.io
*.cujo-dev.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
tc.labs.cujo.io
*.cujo-test-mg.internal.cujo.io
*.cujo-prod-v1.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo.io
*.acc.internal.cujo.io
cloud.status.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.acc.hosted.cujo.io
*.lens-dev.hosted.cujo.io
*.gda.hosted.cujo.io
*.cujo-stg-v1.internal.cujo.io
*.cujo-test-v1.hosted.cujo.io
*.labs.cujo.io
*.charter-prod.hosted.cujo.io
*.cujo-test-mg.hosted.cujo.io
cloud.status.cujo.io
*.cujo-dev.hosted.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
*.bds-dev.tec.hosted.cujo.io
cloud.status.cujo.io
*.lens-dev.internal.cujo.io
*.webui.lens-dev.hosted.cujo.io
*.acc.hosted.cujo.io
cloud.status.cujo.io
*.labs.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo-stg-v1.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.cujo-emea.hosted.cujo.io
*.cujo-prod-v1.hosted.cujo.io
*.cujo-prod-v1.internal.cujo.io
*.telus-prod.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
cloud.status.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
*.labs.cujo.io
*.ew1-cujo-cicd-qa.hosted.cujo.io
*.stage.labs.cujo.io
*.stage.labs.cujo.io
cloud.status.cujo.io
*.cujo-perf.hosted.cujo.io
cloud.status.cujo.io
*.lens-dev.hosted.cujo.io
*.labs.cujo.io
*.charter-prod.hosted.cujo.io
content-control.stg.data-labs.internal.cujo.io
fingerprint.stage.data-labs.internal.cujo.io
*.acc.hosted.cujo.io
*.cujo-stg-v1.hosted.cujo.io
api-router.cujo-dev.hosted.cujo.io
*.labs.cujo.io
tc.labs.cujo.io
*.charter-qa.hosted.cujo.io
*.cujo-test-mg.hosted.cujo.io
*.lens-dev.hosted.cujo.io
cloud.status.cujo.io
*.rd-ci.hosted.cujo.io
data-science.stg.data-labs.internal.cujo.io
*.cujo-test-mg.internal.cujo.io
cloud.status.cujo.io
Certificate
The complete raw certificate details for *.cujo-test-mg.hosted.cujo.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEeTCCA2GgAwIBAgIQCUglY6PXH3GQwa96+vXNfTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIyMDAwMDAwMFoXDTI0MDExODIzNTk1OVowKDEm MCQGA1UEAwwdKi5jdWpvLXRlc3QtbWcuaG9zdGVkLmN1am8uaW8wggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32v1VlSbJNYzNqtm++Hje9KUv/gfKpB2j Jqymrqkw0vOiSzkJFJ1yg5gyXzmw7yJO0XhwoWqrN/TPJjAUYd0NC54CGoP90s21 eSLlQejV26judEyhXIbpVeKcpu5IOoL1TFZPWrqfIRspd4nXYGfo71bfssTdcoOo KUaveDShCZljFdj6ANnuM95ORr5duo4+wY+iiA++ibmu4yYzFLGJSuwwljxT4Osp u4XrM0uqFPbnqsI3oIK/0ZarnIePjEphPBR0TO5Hlbr8FHgg4hmMBYDlJAJDsqyo mSa3SSc/fHl/lUnif74FY3Eho0bJETiQB+UGl1f6fvoZjHt276adAgMBAAGjggGJ MIIBhTAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQU +Ai87/3MHZyWNMIdO/lszAKhOgMwKAYDVR0RBCEwH4IdKi5jdWpvLXRlc3QtbWcu aG9zdGVkLmN1am8uaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAx LmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEw dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1h em9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBetjWV0T2PhlmYV8d8z/CehaUQ yA6vXRW4rD3/KXyk/SD8jZhrNwD/a6I86sUbxLE3GkRnVLqycf9lpPlO7NoD+mAJ mH0HhBezBqOHtvI3xn+pTYSuzAJJ0hw6X1RWMYJq3SsodGYIxaGJASrVMpWmoVOM q5GNFdj1giK4MXXf66eGf4EvEoeMgzsaiv0JUpWpyPH523BZmXEF4rIG2UapSNBU JdioTaBLsYa7MscIejZ1CZKpufdaguZDZwEJ3KhTf/lfXVzjMNfaz2Ax9SVkWHgt Tchzma4DFxETOvSVpRkC2n2iQ3lg98ZQZo62OPtIAjmKnQpS1y9/WNa9+DrW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9r9VZUmyTWMzarZvvh4 3vSlL/4HyqQdoyaspq6pMNLzoks5CRSdcoOYMl85sO8iTtF4cKFqqzf0zyYwFGHd DQueAhqD/dLNtXki5UHo1duo7nRMoVyG6VXinKbuSDqC9UxWT1q6nyEbKXeJ12Bn 6O9W37LE3XKDqClGr3g0oQmZYxXY+gDZ7jPeTka+XbqOPsGPoogPvom5ruMmMxSx iUrsMJY8U+DrKbuF6zNLqhT256rCN6CCv9GWq5yHj4xKYTwUdEzuR5W6/BR4IOIZ jAWA5SQCQ7KsqJkmt0knP3x5f5VJ4n++BWNxIaNGyRE4kAflBpdX+n76GYx7du+m nQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12337655679328298609733819004955774333 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cujo-test-mg.hosted.cujo.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23209597598966135030639994331373433577561448688914394644347116750196153206068069146339887837586439481229251271650036828024876424750838730799099501634959266149322320706064873307189802311604434676151888371037960302404877497501512881238379662903107525072839254147566170684491104576960453674288879677969279448960332809313094547192057746038533304817159781508979418548785117202338771054029735428359864997333207640032889137980062452534164496144495708327162034146917814085250866615453359761594227684819569784360749231552921299364922438743623451539367507214650260640088504716164650031180284930376436354843171553434164746233501 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f808bceffdcc1d9c9634c21d3bf96ccc02a13a03 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cujo-test-mg.hosted.cujo.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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