us.rhapsode.com
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 08:6d:12:9f:a7:88:a2:7e:70:fc:f1:74:03:d7:63:ea was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=us.rhapsode.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:6d:12:9f:a7:88:a2:7e:70:fc:f1:74:03:d7:63:eaSerial Number (int): 11200162056359506600271430927827559402
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a2:fa:d7:18:39:a7:bb:54:d6:c8:16:93:37:a3:f2:69:c0:21:1c:d3
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 40:3b:bf:1f:16:e0:e0:e8:d8:c6:4e:b5:d1:4d:01:04:5b:07:67:9a
Fingerprint (sha256): f1:65:dd:b2:ca:15:fd:33:83:27:93:9f:45:5d:d2:7f:6c:75:48:24:10:3c:9c:db:98:a9:f8:61:85:0b:79:9a
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate us.rhapsode.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for us.rhapsode.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
us.rhapsode.com
cglearning.rhapsode.com
prelaunchknowledgeplus.nejm.org
myknowledgeplus.nejm.org
cglearning.rhapsode.com
prelaunchknowledgeplus.nejm.org
myknowledgeplus.nejm.org
Other certificates including the domain name rhapsode.com
(limited to 100 certificates)
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
ris.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.com
elb.rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
hotfix.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.qa.area9lyceum.com
external-content-qa-eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.dev.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
slow-no-cdn.us.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev.eu.rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
rhapsode.dev.area9lyceum.com
eu.rhapsode.com
us.rhapsode.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
slow-no-cdn.us.rhapsode.com
*.curator.rhapsode.com
rhapsode.dev2.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
br.uat.sg.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
slow-no-cdn.us.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.area9lyceum.com
curator.rhapsode.com
rhapsode.qa.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
hotfix.rhapsode.com
rhapsode.dev.area9lyceum.com
uat.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
eu.rhapsode.com
aitest.rhapsode.com
rhapsode.com
monitoring.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
rhapsode.com
rhapsode.area9lyceum.com
us.rhapsode.com
rhapsode.dev.area9lyceum.com
reports-mks.us.rhapsode.com
eu.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev2.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
ris.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.com
elb.rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
hotfix.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.qa.area9lyceum.com
external-content-qa-eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.dev.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
slow-no-cdn.us.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev.eu.rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
rhapsode.dev.area9lyceum.com
eu.rhapsode.com
us.rhapsode.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
slow-no-cdn.us.rhapsode.com
*.curator.rhapsode.com
rhapsode.dev2.area9lyceum.com
rhapsode.com
rhapsode.com
rhapsode.com
br.uat.sg.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
slow-no-cdn.us.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.area9lyceum.com
curator.rhapsode.com
rhapsode.qa.area9lyceum.com
aitest.rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
rhapsode.com
eu.rhapsode.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
hotfix.rhapsode.com
rhapsode.dev.area9lyceum.com
uat.us.rhapsode.com
dev.eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.com
eu.rhapsode.com
aitest.rhapsode.com
rhapsode.com
monitoring.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
rhapsode.com
rhapsode.area9lyceum.com
us.rhapsode.com
rhapsode.dev.area9lyceum.com
reports-mks.us.rhapsode.com
eu.rhapsode.com
rhapsode.dev.area9lyceum.com
mks.dev2.eu.rhapsode.com
rhapsode.dev.area9lyceum.com
Certificate
The complete raw certificate details for us.rhapsode.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgIQCG0Sn6eIon5w/PF0A9dj6jANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIyMjAwMDAwMFoXDTIzMTAyNjIzNTk1OVowGjEY MBYGA1UEAxMPdXMucmhhcHNvZGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAq274dQdD2popA4bwjDnuV1zOQ1D+PmlfUu8Pn4rhaEPg5ObFZE2U AR5oRaFXJiv9MxyqhsFrBmSHnig2DPDRPYggo/7t3y/pZQ5TgM2X9Fi/CcsFO4W2 dHdIVue3YAUZCLPS5pJrYTMWezdBRdVY2CimMXnarMPmRNpGQOYkX3oGvS88ZzMX zteaBSc8w2RTFIzbMugW64NtY/CZcVrt4gNR1oEWH8zjREMcbpIplIiZhWidoxdC A64xhQ9yCjQMwmKO74gq1Lh0D61UeG1JDvBKmFqM4eso+WUcy1xfUaxY9e5qZ3jn PV2BIlyHHbyn2DSjs+T/nPzY6fYrX3QkgQIDAQABo4IDPTCCAzkwHwYDVR0jBBgw FoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFKL61xg5p7tU1sgWkzej 8mnAIRzTMG4GA1UdEQRnMGWCD3VzLnJoYXBzb2RlLmNvbYIXY2dsZWFybmluZy5y aGFwc29kZS5jb22CH3ByZWxhdW5jaGtub3dsZWRnZXBsdXMubmVqbS5vcmeCGG15 a25vd2xlZGdlcGx1cy5uZWptLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j cmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgG BmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw LnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5y Mm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwggF/ BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs 62nhd31tBr1uAAABhnb/EKUAAAQDAEcwRQIgRD7pk3dwOu687sod6fwOTAnpvRvN y7i5OzopTL8i4ssCIQCChdm0mwT+DdEIIjhfu1yzVriQvDLLZTaGZZR/kjTK9AB2 ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABhnb/EQUAAAQDAEcw RQIhALbRik1gTqa8lrmUVodRcvg8oHKs4Huwm87ib+Ix2A1XAiBgrKm7HGimI0xH EcXAUfy9iP6Brv+bcZH8YQpLsURSvgB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81 xJ4dCYEl7bSZAAABhnb/ENcAAAQDAEgwRgIhANafZ/R8m0op0qk0Hgx2YElnu0qO cOm+hERbjwwZra0iAiEAgwq5ChP7UAP8eL8spA6mKuKV2T/8H+hHmI8dr9S2XFsw DQYJKoZIhvcNAQELBQADggEBAOfmoYNGrabmOhZiTZY8v22T6Ym7C2a6MYAcWKta QeGlH5l2X2sUWpAT2Kc/F64i1N1LSyc8v8PBHEte4LudQPn9pwIpd+P3aP6i1nbO EVv19quZfP/D5SfRpGqRr/ITRmVT+MiEgiuT2q42MQmNSaMzg0cqGNN2dbRiXPum TveXD6TJwKkid1Ml873GSG8d4s7wKAErLj5F2nuYmgQ8YCntItTEZ+rK6LsFBH9k A4v+dZgVWetizc57xt+Nee1IIYmk2R5pBbTsyP2dY1VwotSM8xsmS3K6yiXPHgLA p2LYqshfvCUxfokZWs1nvm71mvx6KOGtmFFRHiShzZnGgaM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq274dQdD2popA4bwjDnu V1zOQ1D+PmlfUu8Pn4rhaEPg5ObFZE2UAR5oRaFXJiv9MxyqhsFrBmSHnig2DPDR PYggo/7t3y/pZQ5TgM2X9Fi/CcsFO4W2dHdIVue3YAUZCLPS5pJrYTMWezdBRdVY 2CimMXnarMPmRNpGQOYkX3oGvS88ZzMXzteaBSc8w2RTFIzbMugW64NtY/CZcVrt 4gNR1oEWH8zjREMcbpIplIiZhWidoxdCA64xhQ9yCjQMwmKO74gq1Lh0D61UeG1J DvBKmFqM4eso+WUcy1xfUaxY9e5qZ3jnPV2BIlyHHbyn2DSjs+T/nPzY6fYrX3Qk gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11200162056359506600271430927827559402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us.rhapsode.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21641471759857651220675715760052399141571619170071556153319115683814207331206783609422717404926321646135115591926892150489666481678717568723502012901211042458467474187536708631310198505679270461616055843151395530202599590494832512069020069224897340171025520638835319550870972134213229754696982925185490286606295311917133076670211009744531417345517545974297554137358585817948811288045674780648157627355272951818307508768657274599667331311421168361486085718688674655660403771475394758655398357824003964189477680665435471205820045132952185472598870507692919908720891478475033647209138002090355047506887416421283983008897 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a2fad71839a7bb54d6c8169337a3f269c0211cd3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.rhapsode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cglearning.rhapsode.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prelaunchknowledgeplus.nejm.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myknowledgeplus.nejm.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018676ff10a500000403004730450220443ee99377703aeebceeca1de9fc0e4c09e9bd1bcdcbb8b93b3a294cbf22e2cb0221008285d9b49b04fe0dd10822385fbb5cb356b890bc32cb65368665947f9234caf4007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018676ff11050000040300473045022100b6d18a4d604ea6bc96b99456875172f83ca072ace07bb09bcee26fe231d80d57022060aca9bb1c68a6234c4711c5c051fcbd88fe81aeff9b7191fc610a4bb14452be007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018676ff10d70000040300483046022100d69f67f47c9b4a29d2a9341e0c76604967bb4a8e70e9be84445b8f0c19adad22022100830ab90a13fb5003fc78bf2ca40ea62ae295d93ffc1fe847988f1dafd4b65c5b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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