*.test.obs.ikarem.io
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0c:c9:ad:60:aa:9b:4f:eb:82:5e:9b:2e:88:61:29:4a was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.test.obs.ikarem.io
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0c:c9:ad:60:aa:9b:4f:eb:82:5e:9b:2e:88:61:29:4aSerial Number (int): 16997904133549736519540116066138138954
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9f:44:cb:7f:a6:98:7b:45:55:f2:4e:ed:77:7f:0d:0f:43:f8:e3:71
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 8b:ca:5a:a2:0d:40:fb:36:a2:28:f8:a5:a9:c1:f5:7f:11:3d:a2:4f
Fingerprint (sha256): bc:12:16:d0:a4:60:83:9a:97:39:e1:df:a3:86:b5:a3:bf:ad:cf:ba:f4:26:c9:f2:bb:e5:dc:4b:d1:74:95:0b
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate *.test.obs.ikarem.io
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.test.obs.ikarem.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.test.obs.ikarem.io
Other certificates including the domain name ikarem.io
(limited to 100 certificates)
sdg442.oob.ikarem.io
fra242.oob.ikarem.io
dal432.oob.ikarem.io
dal654.oob.ikarem.io
syd198.oob.ikarem.io
sin160.oob.ikarem.io
dal653.oob.ikarem.io
*.likai.dev.ikarem.io
ingress.dse-integration.usw.staging.k8s.ikarem.io
sdg567.oob.ikarem.io
sdg558.oob.ikarem.io
sdg474.oob.ikarem.io
fra221.oob.ikarem.io
sdg485.oob.ikarem.io
*.pdinh.dev.ikarem.io
dal584.oob.ikarem.io
sdg548.oob.ikarem.io
sdg526.oob.ikarem.io
sdg488.oob.ikarem.io
sf001.oob.ikarem.io
sdg625.oob.ikarem.io
*.tripp.dev.ikarem.io
dal580.oob.ikarem.io
nginx.dxl-gatherer.usw.sandbox.meraki.com.k8s.ikarem.io
*.cgurell.dev.ikarem.io
dal528.oob.ikarem.io
*.emil1337.dev.ikarem.io
sdg565.oob.ikarem.io
dal1000.oob.ikarem.io
dal631.oob.ikarem.io
radius.test.ikarem.io
nginx.dxl-gatherer.aps.meraki.com.k8s.ikarem.io
10-3-10-219.device1.jscoles-testing.ikarem.io
sin177.oob.ikarem.io
*.cynthia.dev.ikarem.io
fra220.oob.ikarem.io
syd127.oob.ikarem.io
ios.meraki.dev.ikarem.io
dal567.oob.ikarem.io
dal467.oob.ikarem.io
dal630.oob.ikarem.io
*.sin.prod.openstackv1.ikarem.io
main.medusatest.ikarem.io
*.ataleikis.dev.ikarem.io
dal690.oob.ikarem.io
sdg744.oob.ikarem.io
main.medusatest.ikarem.io
*.ofaizyar.dev.ikarem.io
sdg572.oob.ikarem.io
*.bochen.dev.ikarem.io
nginx.dxl-gatherer.euc.meraki.com.k8s.ikarem.io
mun156.oob.ikarem.io
*.tommy.dev.ikarem.io
*.cbossy.dev.ikarem.io
dal663.oob.ikarem.io
datawarehouse.ikarem.io
dal419.oob.ikarem.io
*.xavier.dev.ikarem.io
fra263.oob.ikarem.io
dal523.oob.ikarem.io
mun321.oob.ikarem.io
artifactory.exp.ikarem.io
sdg451.oob.ikarem.io
*.arielww.dev.ikarem.io
fra234.oob.ikarem.io
dal846.oob.ikarem.io
sin168.oob.ikarem.io
*.kmisne01.dev.ikarem.io
dal685.oob.ikarem.io
*.naichuan.dev.ikarem.io
fra233.oob.ikarem.io
sdg549.oob.ikarem.io
*.gandalf.dev.ikarem.io
dal440.oob.ikarem.io
syd132.oob.ikarem.io
mun383.oob.ikarem.io
fra254.oob.ikarem.io
artifactory.int.ikarem.io
fra252.oob.ikarem.io
sin169.oob.ikarem.io
sin147.oob.ikarem.io
*.mhamda.dev.ikarem.io
artifactory.exp.ikarem.io
dal567.oob.ikarem.io
sdg447.oob.ikarem.io
nginx.dxl-gatherer.usw.staging.k8s.ikarem.io
sin162.oob.ikarem.io
sdg617.oob.ikarem.io
dal506.oob.ikarem.io
*.sunli.dev.ikarem.io
nginx.dxl-gatherer.use.staging.k8s.ikarem.io
dal438.oob.ikarem.io
sdg606.oob.ikarem.io
nginx.dxl-gatherer.euw.production.k8s.ikarem.io
fra246.oob.ikarem.io
*.mjvillen.dev.ikarem.io
sdg498.oob.ikarem.io
sin151.oob.ikarem.io
*.nrozario.dev.ikarem.io
sdg422.oob.ikarem.io
fra242.oob.ikarem.io
dal432.oob.ikarem.io
dal654.oob.ikarem.io
syd198.oob.ikarem.io
sin160.oob.ikarem.io
dal653.oob.ikarem.io
*.likai.dev.ikarem.io
ingress.dse-integration.usw.staging.k8s.ikarem.io
sdg567.oob.ikarem.io
sdg558.oob.ikarem.io
sdg474.oob.ikarem.io
fra221.oob.ikarem.io
sdg485.oob.ikarem.io
*.pdinh.dev.ikarem.io
dal584.oob.ikarem.io
sdg548.oob.ikarem.io
sdg526.oob.ikarem.io
sdg488.oob.ikarem.io
sf001.oob.ikarem.io
sdg625.oob.ikarem.io
*.tripp.dev.ikarem.io
dal580.oob.ikarem.io
nginx.dxl-gatherer.usw.sandbox.meraki.com.k8s.ikarem.io
*.cgurell.dev.ikarem.io
dal528.oob.ikarem.io
*.emil1337.dev.ikarem.io
sdg565.oob.ikarem.io
dal1000.oob.ikarem.io
dal631.oob.ikarem.io
radius.test.ikarem.io
nginx.dxl-gatherer.aps.meraki.com.k8s.ikarem.io
10-3-10-219.device1.jscoles-testing.ikarem.io
sin177.oob.ikarem.io
*.cynthia.dev.ikarem.io
fra220.oob.ikarem.io
syd127.oob.ikarem.io
ios.meraki.dev.ikarem.io
dal567.oob.ikarem.io
dal467.oob.ikarem.io
dal630.oob.ikarem.io
*.sin.prod.openstackv1.ikarem.io
main.medusatest.ikarem.io
*.ataleikis.dev.ikarem.io
dal690.oob.ikarem.io
sdg744.oob.ikarem.io
main.medusatest.ikarem.io
*.ofaizyar.dev.ikarem.io
sdg572.oob.ikarem.io
*.bochen.dev.ikarem.io
nginx.dxl-gatherer.euc.meraki.com.k8s.ikarem.io
mun156.oob.ikarem.io
*.tommy.dev.ikarem.io
*.cbossy.dev.ikarem.io
dal663.oob.ikarem.io
datawarehouse.ikarem.io
dal419.oob.ikarem.io
*.xavier.dev.ikarem.io
fra263.oob.ikarem.io
dal523.oob.ikarem.io
mun321.oob.ikarem.io
artifactory.exp.ikarem.io
sdg451.oob.ikarem.io
*.arielww.dev.ikarem.io
fra234.oob.ikarem.io
dal846.oob.ikarem.io
sin168.oob.ikarem.io
*.kmisne01.dev.ikarem.io
dal685.oob.ikarem.io
*.naichuan.dev.ikarem.io
fra233.oob.ikarem.io
sdg549.oob.ikarem.io
*.gandalf.dev.ikarem.io
dal440.oob.ikarem.io
syd132.oob.ikarem.io
mun383.oob.ikarem.io
fra254.oob.ikarem.io
artifactory.int.ikarem.io
fra252.oob.ikarem.io
sin169.oob.ikarem.io
sin147.oob.ikarem.io
*.mhamda.dev.ikarem.io
artifactory.exp.ikarem.io
dal567.oob.ikarem.io
sdg447.oob.ikarem.io
nginx.dxl-gatherer.usw.staging.k8s.ikarem.io
sin162.oob.ikarem.io
sdg617.oob.ikarem.io
dal506.oob.ikarem.io
*.sunli.dev.ikarem.io
nginx.dxl-gatherer.use.staging.k8s.ikarem.io
dal438.oob.ikarem.io
sdg606.oob.ikarem.io
nginx.dxl-gatherer.euw.production.k8s.ikarem.io
fra246.oob.ikarem.io
*.mjvillen.dev.ikarem.io
sdg498.oob.ikarem.io
sin151.oob.ikarem.io
*.nrozario.dev.ikarem.io
sdg422.oob.ikarem.io
Certificate
The complete raw certificate details for *.test.obs.ikarem.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEZzCCA0+gAwIBAgIQDMmtYKqbT+uCXpsuiGEpSjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIwMjAwMDAwMFoXDTI0MDEwMTIzNTk1OVowHzEd MBsGA1UEAwwUKi50ZXN0Lm9icy5pa2FyZW0uaW8wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqxJjGyDfNPAZh2u0zTqxOo4oKvYn7aRyaUPRikt1ugZbU DkehlDKic9+Yk3vgPPmyBWaC/Y8mdclC3zH7vkPhQNZZh3ovzEZW88ePDtG7nOzF RytQGa4a1/ekzuqHWm3FOJuux+jd4HvI2HEFDijLzUcvgNeuTlzvvcKOOXrslCoJ Llw+i2MKW70zHjv/BfRPAMREF1gYXZViruCZ6wKNhPF1Ux4SnYstoDCd3v3Ja277 0T+vfoGNWsbTSw2jvisqUbna2R9XzfyR0vtgrxK33v7IrngPxpftnzywRe26i1Tp uWZ+sqL0Ya21pkEpbyqlJ4R8Y50xiILKM4+HK2GZAgMBAAGjggGAMIIBfDAfBgNV HSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUn0TLf6aYe0VV 8k7td38ND0P443EwHwYDVR0RBBgwFoIUKi50ZXN0Lm9icy5pa2FyZW0uaW8wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9y Mm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAx LmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCVjXFZP9DEGAH2ASfmerbjbjoZ/H88AbgDDb0F6M1HytHZ/kJI AkNiPQ/px/bg625nwrjPr8xCfF/91rELjSYzA31VQhnRng2N8dMPjAcNdQ39gkLb IFhA9R6yRns9XMWT+BcrDM+jdt5SDYfVFvlY0PwszD8jWI5KCd5uaVct+MwXTzTS FQbj15Vcgas+qF/Zoj15ihvogPE+yipbd5bR+zYT7xo1DftoWuRUXDiccgBMTenB 3JGwoX8nskeRfPudQU9PVbMMS0S0fGloOS9P8D5jRUyBSye2GjlxXukPnNjExLtm RMBp3qDJ2Pjm2tTgcLw8xA5GQYH7N6BZgi4e -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsSYxsg3zTwGYdrtM06s TqOKCr2J+2kcmlD0YpLdboGW1A5HoZQyonPfmJN74Dz5sgVmgv2PJnXJQt8x+75D 4UDWWYd6L8xGVvPHjw7Ru5zsxUcrUBmuGtf3pM7qh1ptxTibrsfo3eB7yNhxBQ4o y81HL4DXrk5c773Cjjl67JQqCS5cPotjClu9Mx47/wX0TwDERBdYGF2VYq7gmesC jYTxdVMeEp2LLaAwnd79yWtu+9E/r36BjVrG00sNo74rKlG52tkfV838kdL7YK8S t97+yK54D8aX7Z88sEXtuotU6blmfrKi9GGttaZBKW8qpSeEfGOdMYiCyjOPhyth mQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16997904133549736519540116066138138954 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.obs.ikarem.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21557457331220923467497474783490770722462023914297108996342162240717584148485255437083690589938024459151464651373677709539435595545750778725803402175872953576202073413151685530753415977776296149806982208884582143276686195665082960012696534681082114744063155388744179030683752392183063420494683825298314774156921303554809488001429224843751174180521805136441697138943184503465293976027484253876822731269949650858540548271254290148514971500514408033401287616448727144436232812581339576854112059432274674096503984782443034749019454484300206783721007971141015001433030003461126725662217352135979155705197924632938343522713 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9f44cb7fa6987b4555f24eed777f0d0f43f8e371 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.obs.ikarem.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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