*.lexpress.fr
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0b:aa:22:16:82:03:5b:b7:60:c6:b8:96:13:aa:04:23 was issued on by Amazon.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.lexpress.fr
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:aa:22:16:82:03:5b:b7:60:c6:b8:96:13:aa:04:23Serial Number (int): 15504889804768205941713176779614192675
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 30:df:c8:a4:12:ec:85:37:6f:b3:e4:20:1b:be:bd:5a:fa:d7:0f:30
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 44:63:4e:96:c8:06:75:88:6f:57:58:88:95:76:c3:e4:f3:e0:91:2f
Fingerprint (sha256): c6:6f:5a:a0:bc:7e:e6:14:f7:c2:ae:bd:b5:9f:5a:b8:37:ef:3e:fa:62:67:f6:5e:03:d2:fb:6c:14:e0:7c:4d
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate *.lexpress.fr
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.lexpress.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.lexpress.fr
static.lexpress.fr
moncompte.lexpress.fr
customers-admin.lexpress.fr
production.moncompte.lexpress.fr
api-customer.lexpress.fr
api.moncompte.lexpress.fr
production.flow.lexpress.fr
production.customerhappiness.cloud.ger.systems
static.lexpress.fr
moncompte.lexpress.fr
customers-admin.lexpress.fr
production.moncompte.lexpress.fr
api-customer.lexpress.fr
api.moncompte.lexpress.fr
production.flow.lexpress.fr
production.customerhappiness.cloud.ger.systems
Other certificates including the domain name lexpress.fr
(limited to 100 certificates)
aconsommerdepreference.lexpress.fr
lexpress.fr
applications-mobile.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
contrat.lentreprise.lexpress.fr
tr.news.lentreprise.lexpress.fr
*.lexpress.fr
defigrandesecoles.lexpress.fr
smartphone.lexpress.fr
zm5d.lexpress.fr
contrat.lentreprise.lexpress.fr
*.lexpress.fr
vins.lexpress.fr
api.moncompte.lexpress.fr
guideachat.lexpress.fr
tls.automattic.com
moncompte.lexpress.fr
oauth-admin.staging.abonnement.lexpress.fr
defigrandesecoles.lexpress.fr
bestmarques.lexpress.fr
tr.news.lexpansion.lexpress.fr
staging.abonnement.lexpress.fr
tr.gestion.lexpress.fr
livreblanc.lexpress.fr
event.lexpress.fr
sni.cloudflaressl.com
lexpress.fr
cours-anglais.lexpress.fr
tr.news.lentreprise.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
support.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
production.customerhappiness.cloud.ger.systems
guideachat.lexpress.fr
livreblanc.lexpress.fr
*.lexpress.fr
seanapse-box.com
aconsommerdepreference.lexpress.fr
smartphone.lexpress.fr
staging.webhooks.abonnement.lexpress.fr
aconsommerdepreference.lexpress.fr
abonnement.lexpress.fr
lexpress.web.arc-cdn.net
support.lexpress.fr
*.lexpress.fr
tr.news.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
tr.gestion.lexpress.fr
staging.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.welcome.lexpress.fr
aconsommerdepreference.lexpress.fr
js-pre-boutique.lexpress.fr
lexpress.web.arc-cdn.net
tr.welcome.lexpress.fr
staging.abonnement.lexpress.fr
livreblanc.lexpress.fr
sandbox.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.news.lentreprise.lexpress.fr
abonnement.lexpress.fr
devis.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
energie.votreargent.lexpress.fr
livreblanc.lexpress.fr
infos.lexpress.fr
aconsommerdepreference.lexpress.fr
event.lexpress.fr
livreblanc.lexpress.fr
tr.news.lentreprise.lexpress.fr
livreblanc.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
tr.news.lexpress.fr
tr.welcome.lexpress.fr
boutique.lexpress.fr
*.lexpress.fr
shopping.lexpress.fr
tr.promotion.lexpress.fr
smartphone.lexpress.fr
tr.gestion.lexpress.fr
defigrandesecoles.lexpress.fr
energie.votreargent.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
mock.lexpress.fr
codepromo.lexpress.fr
livreblanc.lexpress.fr
support.lexpress.fr
extranet.lexpress.fr
staging.abonnement.lexpress.fr
energie.votreargent.lexpress.fr
zm5d.lexpress.fr
event.lexpress.fr
lexpress.fr
applications-mobile.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
contrat.lentreprise.lexpress.fr
tr.news.lentreprise.lexpress.fr
*.lexpress.fr
defigrandesecoles.lexpress.fr
smartphone.lexpress.fr
zm5d.lexpress.fr
contrat.lentreprise.lexpress.fr
*.lexpress.fr
vins.lexpress.fr
api.moncompte.lexpress.fr
guideachat.lexpress.fr
tls.automattic.com
moncompte.lexpress.fr
oauth-admin.staging.abonnement.lexpress.fr
defigrandesecoles.lexpress.fr
bestmarques.lexpress.fr
tr.news.lexpansion.lexpress.fr
staging.abonnement.lexpress.fr
tr.gestion.lexpress.fr
livreblanc.lexpress.fr
event.lexpress.fr
sni.cloudflaressl.com
lexpress.fr
cours-anglais.lexpress.fr
tr.news.lentreprise.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
support.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
production.customerhappiness.cloud.ger.systems
guideachat.lexpress.fr
livreblanc.lexpress.fr
*.lexpress.fr
seanapse-box.com
aconsommerdepreference.lexpress.fr
smartphone.lexpress.fr
staging.webhooks.abonnement.lexpress.fr
aconsommerdepreference.lexpress.fr
abonnement.lexpress.fr
lexpress.web.arc-cdn.net
support.lexpress.fr
*.lexpress.fr
tr.news.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
tr.gestion.lexpress.fr
staging.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.welcome.lexpress.fr
aconsommerdepreference.lexpress.fr
js-pre-boutique.lexpress.fr
lexpress.web.arc-cdn.net
tr.welcome.lexpress.fr
staging.abonnement.lexpress.fr
livreblanc.lexpress.fr
sandbox.api.abonnement.lexpress.fr
zm5d.lexpress.fr
tr.news.lentreprise.lexpress.fr
abonnement.lexpress.fr
devis.votreargent.lexpress.fr
tr.news.styles.lexpress.fr
zm5d.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
energie.votreargent.lexpress.fr
livreblanc.lexpress.fr
infos.lexpress.fr
aconsommerdepreference.lexpress.fr
event.lexpress.fr
livreblanc.lexpress.fr
tr.news.lentreprise.lexpress.fr
livreblanc.lexpress.fr
assurance-emprunteur.votreargent.lexpress.fr
tr.news.lexpress.fr
tr.welcome.lexpress.fr
boutique.lexpress.fr
*.lexpress.fr
shopping.lexpress.fr
tr.promotion.lexpress.fr
smartphone.lexpress.fr
tr.gestion.lexpress.fr
defigrandesecoles.lexpress.fr
energie.votreargent.lexpress.fr
aconsommerdepreference.lexpress.fr
*.lexpress.fr
mock.lexpress.fr
codepromo.lexpress.fr
livreblanc.lexpress.fr
support.lexpress.fr
extranet.lexpress.fr
staging.abonnement.lexpress.fr
energie.votreargent.lexpress.fr
zm5d.lexpress.fr
event.lexpress.fr
Certificate
The complete raw certificate details for *.lexpress.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGtzCCBZ+gAwIBAgIQC6oiFoIDW7dgxriWE6oEIzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTEyMzAwMDAwMFoXDTI0MTIyMTIzNTk1OVowGDEW MBQGA1UEAwwNKi5sZXhwcmVzcy5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBALdA3V5VWk8nq6ULF3rlFiR3AwmKeFm3+ZF6lxd6g51x0O2UQDmlXHS+ NAK2hxoXKOi2HpuLeH/aXBo0a9MJivxrMxn6nVEQnnZBllFJvqQyI6fq7fZRHrfN uuThaQckbOK4JVBXNmKAQtDvvsJR0SrwskRO/EQR0TeaKhJ3xXfuc2xi8OQw4oer 9CznAk+qRA21tt1uYOYe0UxZPGFzIPx/zdTjDx3thJ96HvmRbBM1h1t2B4VVfNa3 3s85vXG5oArNxfrubFlkCq/0/ikhoKVK+OqHnd5FSYcoVLZfIhQvrtidEIBCpC8y GP2HGRu88/6NS8EPVfoQneuVt6Lg0u0CAwEAAaOCA9cwggPTMB8GA1UdIwQYMBaA FFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQw38ikEuyFN2+z5CAbvr1a +tcPMDCCAQYGA1UdEQSB/jCB+4INKi5sZXhwcmVzcy5mcoISc3RhdGljLmxleHBy ZXNzLmZyghVtb25jb21wdGUubGV4cHJlc3MuZnKCG2N1c3RvbWVycy1hZG1pbi5s ZXhwcmVzcy5mcoIgcHJvZHVjdGlvbi5tb25jb21wdGUubGV4cHJlc3MuZnKCGGFw aS1jdXN0b21lci5sZXhwcmVzcy5mcoIZYXBpLm1vbmNvbXB0ZS5sZXhwcmVzcy5m coIbcHJvZHVjdGlvbi5mbG93LmxleHByZXNzLmZygi5wcm9kdWN0aW9uLmN1c3Rv bWVyaGFwcGluZXNzLmNsb3VkLmdlci5zeXN0ZW1zMBMGA1UdIAQMMAowCAYGZ4EM AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVz dC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0 cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw Oi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/ BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0T ojKHRny87N7DUUhZRnEftZsAAAGL/L16MwAABAMASDBGAiEA8N8U2DISyBT3bvdI JaIHLSLO8MsSGmVL1LQbrm3k/z4CIQD2aBU46qPb3jJca5kgLH9KQNzG0Kbbml9D hdtTWhP9LAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi/y9 el8AAAQDAEcwRQIhAJl19lfy+jjWm0OjaSoafCWl01ZH+KmTvhCdH+P0TI8qAiAd 5Cl2hKwewWRzFRNZWpCMLk7RhN0Nb8X3EYQck3CSVAB2ANq2v2s/tbYin5vCu1xr 6HCRcWy7UYSFNL2kPTBI1/urAAABi/y9elYAAAQDAEcwRQIhANvL9XyvT8V4qGfZ 2jwbL8qWtZotPWrY1z3jd1l70pLeAiA81DJNsI04YISx/Uewd5CS8TQx1QlUxzCZ ZkI8C5QnojANBgkqhkiG9w0BAQsFAAOCAQEACXTTd0aMCgrVyVmZU/PPV9dlEjDZ VMH6Jxk6vg18FRyuJFoCxKiCXLvqILSaUs4hne0nKqJT4rte/csrtfbpB97+XwKQ dRv5S8mTDJHBru5ODjyF70YyG8j7r5YKJCMk0hTnozsQNERuj425j3jwuvFMLfDx JljoYuQY+0JwpN3J/pFxSdnMeSCokj8SVhub/TwDdJD/w312V+h8MIorMRPNC0C1 W19HmqD9RVlK0KYl3FuSZq3E72e81jxJUrlyWUxVmWH0xvDYVDHpb1iwGv13s2RW mC/Bzegay//Aimul4/GsEBtB/AWjhJMiSvAxfwVydxwO7N+wcBe5mhvN0g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0DdXlVaTyerpQsXeuUW JHcDCYp4Wbf5kXqXF3qDnXHQ7ZRAOaVcdL40AraHGhco6LYem4t4f9pcGjRr0wmK /GszGfqdURCedkGWUUm+pDIjp+rt9lEet8265OFpByRs4rglUFc2YoBC0O++wlHR KvCyRE78RBHRN5oqEnfFd+5zbGLw5DDih6v0LOcCT6pEDbW23W5g5h7RTFk8YXMg /H/N1OMPHe2En3oe+ZFsEzWHW3YHhVV81rfezzm9cbmgCs3F+u5sWWQKr/T+KSGg pUr46oed3kVJhyhUtl8iFC+u2J0QgEKkLzIY/YcZG7zz/o1LwQ9V+hCd65W3ouDS 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15504889804768205941713176779614192675 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lexpress.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23133595794681965811873167296619229503142811649961398122314641904110338126835922242294958291634664234263024125549361602933164289523938160833662362197555862548540740749539856122603089739380127433145266471287086505715288883177732663460492942525479559267207254781466432889112930901587980275210029622247281353683285630553160210433504693086712402686883557854097351712713375799654632551301014769527863493372126511345710628993629677156670830721981657571346468131014605161128922207685228245653470240031414229451666432097162671792410068478503810757696414298464851647581852447871753063852167283989885233617274686298923504554733 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 30dfc8a412ec85376fb3e4201bbebd5afad70f30 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (254 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncompte.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers-admin.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.moncompte.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-customer.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.moncompte.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.flow.lexpress.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.customerhappiness.cloud.ger.systems' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000974d377468c0a0ad5c9599953f3cf57d7651230d954c1fa27193abe0d7c151cae245a02c4a8825cbbea20b49a52ce219ded272aa253e2bb5efdcb2bb5f6e907defe5f0290751bf94bc9930c91c1aeee4e0e3c85ef46321bc8fbaf960a242324d214e7a33b1034446e8f8db98f78f0baf14c2df0f12658e862e418fb4270a4ddc9fe917149d9cc7920a8923f12561b9bfd3c037490ffc37d7657e87c308a2b3113cd0b40b55b5f479aa0fd45594ad0a625dc5b9266adc4ef67bcd63c4952b972594c559961f4c6f0d85431e96f58b01afd77b36456982fc1cde81acbffc08a6ba5e3f1ac101b41fc05a38493224af0317f0572771c0eecdfb07017b99a1bcdd2