terraform-aws-metabase.oss.champtest.net
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 09:ec:ec:60:b9:2e:50:ef:4c:8b:ee:99:b2:70:eb:f2 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=terraform-aws-metabase.oss.champtest.net
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:ec:ec:60:b9:2e:50:ef:4c:8b:ee:99:b2:70:eb:f2Serial Number (int): 13193228332559244948321259564599143410
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 51:a2:ea:66:79:37:a4:62:ea:44:a2:a4:c0:de:24:50:b0:02:84:97
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): b1:a2:15:98:e3:b4:29:40:29:79:d2:04:07:0b:5b:79:27:71:a3:d1
Fingerprint (sha256): d9:6f:14:85:a9:96:be:7b:54:a4:1e:89:7d:bc:3b:6d:c7:05:3b:ac:db:ea:9b:23:74:e9:b9:fd:78:a4:59:aa
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate terraform-aws-metabase.oss.champtest.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for terraform-aws-metabase.oss.champtest.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
terraform-aws-metabase.oss.champtest.net
Other certificates including the domain name champtest.net
(limited to 100 certificates)
*.oss.champtest.net
*.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
gemini.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-redirect.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
metabase-report-executor.oss.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-alb.oss.champtest.net
*.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-acm.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
terraform-aws-app-7590.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-api-gateway1-atkf1.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-app-4421.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-tihdr.oss.champtest.net
tf-r53-health-check.oss.champtest.net
*.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-app-0481.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app-55ec.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-app-00d4.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-mpxtr.oss.champtest.net
terraform-aws-api-gateway-br577.oss.champtest.net
terraform-aws-lambda-338c.oss.champtest.net
*.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
*.oss.champtest.net
*.oss.champtest.net
terraform-aws-app-a1c3.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
gemini.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
tf-r53-health-check.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
*.oss.champtest.net
terraform-aws-api-gateway2-atkf1.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
gemini.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-lambda-4942.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-app-0f7f.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-api-gateway-xous5.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-redirect.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-core.oss.champtest.net
*.oss.champtest.net
terraform-aws-lambda-0f1b.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-app-b32b.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
*.dtrs-prod-ky.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app-d4d7.oss.champtest.net
*.oss.champtest.net
terraform-aws-alb.oss.champtest.net
*.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
metabase-report-executor.oss.champtest.net
terraform-aws-lambda-3af1.oss.champtest.net
cloud-data.ephemeral.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-cdn.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-lambda-59fc.oss.champtest.net
keycloak-mbp4i.oss.champtest.net
*.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-lambda-apigw.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-alb.oss.champtest.net
*.oss.champtest.net
gemini.oss.champtest.net
terraform-aws-acm.oss.champtest.net
ws-ledger-atrs.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-api-gateway-orhpd.oss.champtest.net
terraform-aws-app-7590.oss.champtest.net
terraform-aws-app.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-api-gateway1-atkf1.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-app-4421.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-api-gateway-tihdr.oss.champtest.net
tf-r53-health-check.oss.champtest.net
*.oss.champtest.net
terraform-aws-core.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-app-0481.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-acm.oss.champtest.net
terraform-aws-redirect.oss.champtest.net
terraform-aws-app-55ec.oss.champtest.net
cade.ephemeral.champtest.net
terraform-aws-acm.oss.champtest.net
keycloak.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-app-00d4.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-api-gateway-mpxtr.oss.champtest.net
terraform-aws-api-gateway-br577.oss.champtest.net
terraform-aws-lambda-338c.oss.champtest.net
*.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
*.oss.champtest.net
*.oss.champtest.net
terraform-aws-app-a1c3.oss.champtest.net
lambda-mono-repo-template.ephemeral.champtest.net
gemini.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
tf-r53-health-check.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-metabase.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
terraform-aws-alb.oss.champtest.net
tf-r53-health-check.oss.champtest.net
keycloak.oss.champtest.net
terraform-aws-keycloak.oss.champtest.net
terraform-aws-alb.oss.champtest.net
terraform-aws-vpn.oss.champtest.net
Certificate
The complete raw certificate details for terraform-aws-metabase.oss.champtest.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEjzCCA3egAwIBAgIQCezsYLkuUO9Mi+6ZsnDr8jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIyMTIwMzAwMDAwMFoXDTI0MDEwMTIzNTk1OVowMzEx MC8GA1UEAxModGVycmFmb3JtLWF3cy1tZXRhYmFzZS5vc3MuY2hhbXB0ZXN0Lm5l dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANs/4DG/EbFTmbVdajSH ltaA/Sq32GXBwXvj6ExL4ciQA/DyTUCn6PLa6mXwmikSQJ6QlNlfwgLBswkgZMdk GbiSI1mJ00pgtgf75jtlBCyJ3xv2uGmTGSw3sJdNjas85aw9WfFKTE2jvO0CRRCm VmP/C6S+pBxZseqNoqRJXBoUXN8OyriE8yjGlQ2s238xdLtvRjkxgV4yIwmfXq9p 6zPF3PDGRlO3E5HROmO68829qzru+fMeVW7eX4bySxzeg4ZKaiOARK/NxWxTKaLu QAhGH4siL83RoRIGgtgka4fpjBJmbLyCWvzMu9p5GQSkPjoypNXLHrY9ICTOx5G8 /JUCAwEAAaOCAZQwggGQMB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664Li MB0GA1UdDgQWBBRRoupmeTekYupEoqTA3iRQsAKElzAzBgNVHREELDAqgih0ZXJy YWZvcm0tYXdzLW1ldGFiYXNlLm9zcy5jaGFtcHRlc3QubmV0MA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw oC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3Js MBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw AYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC hipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYD VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQnF7gdtwwQVlwbe9mx9/skmezakNElWR7ewykrFqxNSjPqLShWB5HqyhcboH umirAF4uKUElZQjCMH7VvMK5F77xKwh/Kga4HxCD+luTBH5SM5SIREX9wUskORco LjLFnAaRfmvhwOrxr9kaeaD9v8e80qgWUg75snwjU+Y8QbU5yaOKFgHU/Ybc+f7b SMX75QwPQfbHCnxzhms//pi41pb3ORefgHixn+sJY22MbZ052Dcq29jzY1WUSiub Qpr56mrnjX/kyUzWIQ4MIJArB0J+3Lntiq4iLSPfuUpGYqE5dHpJEGKsm/LnF/fp 3rGfl4xp3EsKSb1DPUd1dGvGQw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z/gMb8RsVOZtV1qNIeW 1oD9KrfYZcHBe+PoTEvhyJAD8PJNQKfo8trqZfCaKRJAnpCU2V/CAsGzCSBkx2QZ uJIjWYnTSmC2B/vmO2UELInfG/a4aZMZLDewl02NqzzlrD1Z8UpMTaO87QJFEKZW Y/8LpL6kHFmx6o2ipElcGhRc3w7KuITzKMaVDazbfzF0u29GOTGBXjIjCZ9er2nr M8Xc8MZGU7cTkdE6Y7rzzb2rOu758x5Vbt5fhvJLHN6DhkpqI4BEr83FbFMpou5A CEYfiyIvzdGhEgaC2CRrh+mMEmZsvIJa/My72nkZBKQ+OjKk1csetj0gJM7Hkbz8 lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 13193228332559244948321259564599143410 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'terraform-aws-metabase.oss.champtest.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27677687098322014325686346938471383891142333977836946839596854348640794202825086470180814380759482679850285884073567031282434055066362689096067698211140764239731559309123773968933552817050955605706441965121105694256692151552299608056873568755743534150983617699368590454231257030815505772224775749474574481568839450744323741961807637977743691216128452166175541520130248128386664907096977341737273882205844211260393772846279040822412898662892457261480170823029797654279301663448053359054490999199279530886962418082543385660896879483467311684602623692577704617383641882148754857596562687890681167188545447233634724281493 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51a2ea667937a462ea44a2a4c0de2450b0028497 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terraform-aws-metabase.oss.champtest.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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