subscriber.agweek.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 04:9e:c6:7f:82:72:e6:05:8f:ff:15:ff:51:ba:4d:27 was issued on by Amazon.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=subscriber.agweek.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9e:c6:7f:82:72:e6:05:8f:ff:15:ff:51:ba:4d:27Serial Number (int): 6141320906238283666349605896876346663
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 36:96:d7:88:37:df:6e:09:7d:3a:ad:8c:6a:a7:75:07:3c:85:7f:f8
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 56:23:cd:10:88:a0:44:37:0b:94:0b:b9:c6:1a:74:05:69:6e:7f:3b
Fingerprint (sha256): c4:d3:af:ed:fe:0c:e0:49:58:b2:31:69:87:75:e0:ad:91:44:06:05:59:a6:df:60:ba:9d:55:3d:83:43:4d:76
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate subscriber.agweek.com
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for subscriber.agweek.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
subscriber.agweek.com
subscriber.postbulletin.com
subscriber.pinejournal.com
subscriber.thedickinsonpress.com
subscriber.echopress.com
subscriber.pineandlakes.com
subscriber.superiortelegram.com
subscriber.jamestownsun.com
subscriber.blackduckamerican.com
subscriber.wadenapj.com
subscriber.dl-online.com
subscriber.bemidjipioneer.com
subscriber.wctrib.com
subscriber.dglobe.com
subscriber.inforum.com
subscriber.perhamfocus.com
subscriber.parkrapidsenterprise.com
subscriber.mitchellrepublic.com
subscriber.grandforksherald.com
subscriber.postbulletin.com
subscriber.pinejournal.com
subscriber.thedickinsonpress.com
subscriber.echopress.com
subscriber.pineandlakes.com
subscriber.superiortelegram.com
subscriber.jamestownsun.com
subscriber.blackduckamerican.com
subscriber.wadenapj.com
subscriber.dl-online.com
subscriber.bemidjipioneer.com
subscriber.wctrib.com
subscriber.dglobe.com
subscriber.inforum.com
subscriber.perhamfocus.com
subscriber.parkrapidsenterprise.com
subscriber.mitchellrepublic.com
subscriber.grandforksherald.com
Other certificates including the domain name agweek.com
(limited to 100 certificates)
kalamazooshopping.mlive.com
subscriber.agweek.com
link.agweek.com
subscriber.agweek.com
local.wahpetondailynews.com
local.daily-chronicle.com
local.newstribune.info
www.forumcomm.com
peterborough.mykawartha.com
epaper.agweek.com
local.ftimes.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
local.northjersey.com
www.forumcomm.com
local.cambstimes.co.uk
local.moodycountyenterprise.com
parrysoundnorth.parrysound.com
local.eastlondonadvertiser.co.uk
local.hertfordshirelife.co.uk
local.guymondailyherald.com
local.moorefieldexaminer.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
admin.adforge.com
peterborough.mykawartha.com
web.production.forum-communications.brightspot.cloud
web.production.forum-communications.brightspot.cloud
kawarthalakes.mykawartha.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
origin.web.production.forum-communications.brightspot.cloud
local.thesiuslawnews.com
*.forum.cue.cloud
www.forumcomm.com
kawarthalakes.mykawartha.com
local.calgaryherald.com
web.production.forum-communications.brightspot.cloud
local.yourokmulgee.com
austinmetro.communityimpact.com
local.edp24.co.uk
eastyorkbeach.toronto.com
www.forumcomm.com
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
cms.forumcomm.com
local.hertsad.co.uk
local.insidebiz.com
*.forum.cue.cloud
local.daily-chronicle.com
parrysoundbeacon.parrysound.com
www.forumcomm.com
www.forumcomm.com
www.forumcomm.com
local.cambstimes.co.uk
link.agweek.com
local.spokane.exchange
local.beloitdailynews.com
web.production.forum-communications.brightspot.cloud
subscriber.agweek.com
url6888.agweek.com
matamata-chronicle.origami.neighbourly.co.nz
cms.forumcomm.com
local.wnypapers.com
www.forumcomm.com
farmshow.agweek.com
web.production.forum-communications.brightspot.cloud
www.forumcomm.com
local.brainerddispatch.com
eastyorkbeach.toronto.com
local.yakimaherald.com
local.doverpost.com
web.production.forum-communications.brightspot.cloud
kg.local.kentonline.co.uk
subscriber.agweek.com
parrysoundnorth.parrysound.com
subscriber.agweek.com
link.agweek.com
subscriber.agweek.com
local.wahpetondailynews.com
local.daily-chronicle.com
local.newstribune.info
www.forumcomm.com
peterborough.mykawartha.com
epaper.agweek.com
local.ftimes.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
local.northjersey.com
www.forumcomm.com
local.cambstimes.co.uk
local.moodycountyenterprise.com
parrysoundnorth.parrysound.com
local.eastlondonadvertiser.co.uk
local.hertfordshirelife.co.uk
local.guymondailyherald.com
local.moorefieldexaminer.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
admin.adforge.com
peterborough.mykawartha.com
web.production.forum-communications.brightspot.cloud
web.production.forum-communications.brightspot.cloud
kawarthalakes.mykawartha.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
origin.web.production.forum-communications.brightspot.cloud
local.thesiuslawnews.com
*.forum.cue.cloud
www.forumcomm.com
kawarthalakes.mykawartha.com
local.calgaryherald.com
web.production.forum-communications.brightspot.cloud
local.yourokmulgee.com
austinmetro.communityimpact.com
local.edp24.co.uk
eastyorkbeach.toronto.com
www.forumcomm.com
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
cms.forumcomm.com
local.hertsad.co.uk
local.insidebiz.com
*.forum.cue.cloud
local.daily-chronicle.com
parrysoundbeacon.parrysound.com
www.forumcomm.com
www.forumcomm.com
www.forumcomm.com
local.cambstimes.co.uk
link.agweek.com
local.spokane.exchange
local.beloitdailynews.com
web.production.forum-communications.brightspot.cloud
subscriber.agweek.com
url6888.agweek.com
matamata-chronicle.origami.neighbourly.co.nz
cms.forumcomm.com
local.wnypapers.com
www.forumcomm.com
farmshow.agweek.com
web.production.forum-communications.brightspot.cloud
www.forumcomm.com
local.brainerddispatch.com
eastyorkbeach.toronto.com
local.yakimaherald.com
local.doverpost.com
web.production.forum-communications.brightspot.cloud
kg.local.kentonline.co.uk
subscriber.agweek.com
parrysoundnorth.parrysound.com
Certificate
The complete raw certificate details for subscriber.agweek.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIQBJ7Gf4Jy5gWP/xX/UbpNJzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIyMTIyMTAwMDAwMFoXDTI0MDExOTIzNTk1OVowIDEe MBwGA1UEAxMVc3Vic2NyaWJlci5hZ3dlZWsuY29tMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA1vMWVok89qiBozYQFoquq2f1t3o/MeP8GZjoD0Dyacfz GWM4FXuw5h4HoDX3+RrMOm5JoC1nWFLCu25xgDNE07OCqxo3lrMeODeAb0dcc8OD lr4Kznk8gG5GepEuCILmh90HMxkvHzBqBPbiBLhpdYWPNB/C6dIsLsktCle6J93m iyuuO+Br3pt9CX6kxrWMc/mGhqo6e2ckXYnDiuSzg/KUagT0Q/krepPmQypwSdxI CsqC6yRBQ+yitXD0nuRLewkyU9fHrB8r5Uuf7eQQesAHQP5OVq+Y2oTFeAPhz6KJ HUA2d8hHKvSwDHm4H+RVuP2mbMP5LHglQ7/ahHD5kQIDAQABo4IDlDCCA5AwHwYD VR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFDaW14g3324J fTqtjGqndQc8hX/4MIICMQYDVR0RBIICKDCCAiSCFXN1YnNjcmliZXIuYWd3ZWVr LmNvbYIbc3Vic2NyaWJlci5wb3N0YnVsbGV0aW4uY29tghpzdWJzY3JpYmVyLnBp bmVqb3VybmFsLmNvbYIgc3Vic2NyaWJlci50aGVkaWNraW5zb25wcmVzcy5jb22C GHN1YnNjcmliZXIuZWNob3ByZXNzLmNvbYIbc3Vic2NyaWJlci5waW5lYW5kbGFr ZXMuY29tgh9zdWJzY3JpYmVyLnN1cGVyaW9ydGVsZWdyYW0uY29tghtzdWJzY3Jp YmVyLmphbWVzdG93bnN1bi5jb22CIHN1YnNjcmliZXIuYmxhY2tkdWNrYW1lcmlj YW4uY29tghdzdWJzY3JpYmVyLndhZGVuYXBqLmNvbYIYc3Vic2NyaWJlci5kbC1v bmxpbmUuY29tgh1zdWJzY3JpYmVyLmJlbWlkamlwaW9uZWVyLmNvbYIVc3Vic2Ny aWJlci53Y3RyaWIuY29tghVzdWJzY3JpYmVyLmRnbG9iZS5jb22CFnN1YnNjcmli ZXIuaW5mb3J1bS5jb22CGnN1YnNjcmliZXIucGVyaGFtZm9jdXMuY29tgiNzdWJz Y3JpYmVyLnBhcmtyYXBpZHNlbnRlcnByaXNlLmNvbYIfc3Vic2NyaWJlci5taXRj aGVsbHJlcHVibGljLmNvbYIfc3Vic2NyaWJlci5ncmFuZGZvcmtzaGVyYWxkLmNv bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3Qu Y29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRp MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNv bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20v cjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBAFZaZmaCWGecwyZexmRLrwFAwEtLNKFV8NxKdDSDS5TF u94eh3TmtLAuDZXaMaJjHb7rYxdKMgC4qawefuAy9PgdKZYmyUgGMR/907DnQ+Aq IozXXGTbjIsHFOyrEDlMv7nqarlYsmhD9NMI24DC0msbCat9TPBiie8I3q/Pn8HV aB+XjxZkpWSt30874xI+ot6vRU6t1acBObFkfgd82poCtHut01ZPFEEGDuL0Aroa M7KNh7EgxZSNv3jsoqrbGuDbNw9HJz6uFLY8U47pLr2Y8upY4P6h1B+A5qEuy5Dn oSRvrNT1CBAdUlHiVWQfBdEAWaC+slLaseOTDX5iSmQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vMWVok89qiBozYQFoqu q2f1t3o/MeP8GZjoD0DyacfzGWM4FXuw5h4HoDX3+RrMOm5JoC1nWFLCu25xgDNE 07OCqxo3lrMeODeAb0dcc8ODlr4Kznk8gG5GepEuCILmh90HMxkvHzBqBPbiBLhp dYWPNB/C6dIsLsktCle6J93miyuuO+Br3pt9CX6kxrWMc/mGhqo6e2ckXYnDiuSz g/KUagT0Q/krepPmQypwSdxICsqC6yRBQ+yitXD0nuRLewkyU9fHrB8r5Uuf7eQQ esAHQP5OVq+Y2oTFeAPhz6KJHUA2d8hHKvSwDHm4H+RVuP2mbMP5LHglQ7/ahHD5 kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6141320906238283666349605896876346663 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscriber.agweek.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27134868057270427278535720179440475645268457776703075018842994844999331898966200073975189487585305603205298231499630140880751851121191421681818004130406464230504735765701113194472941104785918493315394888189029210320042109399207951324238563988639921638423481092108890009197134212178136111206780354671651238731327509898758786952287087145075806286423634120989650627119826757928146588230211976025761602361489418190636595385383208373346118556332918308268864639685714722027553629941374821264286581410147199919769647417419508110748616925581718404423067292341961587261987544626919459992367911958533263536348977377085528013201 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3696d78837df6e097d3aad8c6aa775073c857ff8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (552 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.agweek.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.postbulletin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.pinejournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.thedickinsonpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.echopress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.pineandlakes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.superiortelegram.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.jamestownsun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.blackduckamerican.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.wadenapj.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.dl-online.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.bemidjipioneer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.wctrib.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.dglobe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.inforum.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.perhamfocus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.parkrapidsenterprise.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.mitchellrepublic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.grandforksherald.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00565a66668258679cc3265ec6644baf0140c04b4b34a155f0dc4a7434834b94c5bbde1e8774e6b4b02e0d95da31a2631dbeeb63174a3200b8a9ac1e7ee032f4f81d299626c94806311ffdd3b0e743e02a228cd75c64db8c8b0714ecab10394cbfb9ea6ab958b26843f4d308db80c2d26b1b09ab7d4cf06289ef08deafcf9fc1d5681f978f1664a564addf4f3be3123ea2deaf454eadd5a70139b1647e077cda9a02b47badd3564f1441060ee2f402ba1a33b28d87b120c5948dbf78eca2aadb1ae0db370f47273eae14b63c538ee92ebd98f2ea58e0fea1d41f80e6a12ecb90e7a1246facd4f508101d5251e255641f05d10059a0beb252dab1e3930d7e624a64