s3.af-south-1.amazonaws.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:e6:58:93:10:03:40:8b:a5:a1:ba:15:14:cd:16:67 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3.af-south-1.amazonaws.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e6:58:93:10:03:40:8b:a5:a1:ba:15:14:cd:16:67
Serial Number (int): 2525252776788628913408474802331391591
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 43:eb:2a:99:82:61:b2:7f:d7:ec:f9:c1:dd:40:97:2f:71:c1:4b:9a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): a7:75:95:4f:9c:a8:fb:f4:48:46:1d:35:44:b3:8e:2a:41:1a:f9:01
Fingerprint (sha256): 00:00:56:9e:7e:2a:ca:8e:57:4e:9c:18:00:e1:5b:ad:ec:1b:ac:1b:15:90:04:7f:d1:0f:5d:c3:c1:b0:7c:da

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate s3.af-south-1.amazonaws.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.af-south-1.amazonaws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.af-south-1.amazonaws.com
bucket.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com
*.s3-control.af-south-1.amazonaws.com
*.bucket.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com
*.s3.af-south-1.amazonaws.com
*.accesspoint.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com
*.control.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com
*.bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com
*.control.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com
*.bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com
*.control.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com
*.bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com
*.control.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com
*.accesspoint.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com
*.accesspoint.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com
bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com
*.accesspoint.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com
bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com
bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com
*.s3-accesspoint.af-south-1.amazonaws.com

Other certificates including the domain name amazonaws.com

(limited to 100 certificates)
fd7q5ahpgwxzgzjeydx7ued3dy.ap-south-1.es.amazonaws.com
*.canary-705cb9c9ce.4vp3ak.c1.kafka.ap-southeast-1.amazonaws.com
3wmpdnfzuawkweauyeqwsz3sgq.us-west-2.es.amazonaws.com
phgarilyufhxfvyv6rqey2igyu.us-east-1.es.amazonaws.com
hcmsmyn7brxhvxc6zgbctvjh44.us-east-2.es.amazonaws.com
urnomx4z6o62opvpawsmrldfgi.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.wcpyzy.c4.kafka.eu-west-1.amazonaws.com
s3.ca-central-1.amazonaws.com
s3.af-south-1.amazonaws.com
s3.us-west-2.amazonaws.com
75illtecsvqox63ith2tndwefy.eu-west-3.es.amazonaws.com
xbfwcx4qduhx25yb6chzuw4nni.ca-central-1.es.amazonaws.com
t3s2vk5yto255no6s4m7uc5pde.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanaryt.cbx9rj.c2.kafka.ca-central-1.amazonaws.com
*.canary-f22d3b00119a.oi5ic9.c2.kafka.ap-south-1.amazonaws.com
2unyopxibvxjbcdkcsruu4l45q.ap-south-1.es.amazonaws.com
6fgy56efefwkdeodtkmmwkdswe.us-east-1.es.amazonaws.com
*.canary-780e819e93d7.s22kq9.c1.kafka.us-west-2.amazonaws.com
*.cfnlaunchpadcanaryt.uveli7.c4.kafka.ca-central-1.amazonaws.com
swmuby362d5wtp5s63kelca7ii.eu-west-1.es.amazonaws.com
*.canary7a34ed13e7b2.8yk2jt.c5.kafka.us-west-2.amazonaws.com
*.canary-794dbee21039.jarqga.c3.kafka.eu-north-1.amazonaws.com
fqhhh775oulwnzldm2ritqslkq.ca-central-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.witiix.c4.kafka.us-west-2.amazonaws.com
gi66xkoipe4iyd3xrf4h2fvpua.us-east-1.es.amazonaws.com
tibuxu36xjihnkqggn2ofga7y4.us-east-1.es.amazonaws.com
*.canary627ccb545bde.p1i713.c3.kafka.af-south-1.amazonaws.com
hwfsk72lrrbczq4xfsiky5xdr4.ap-northeast-1.es.amazonaws.com
*.mskcluster3adgsux.xy0lqw.c2.kafka.ap-southeast-2.amazonaws.com
s3.us-east-1.amazonaws.com
canary.s3.us-gov-west-1.vpce.amazonaws.com
epkq25frxidtqwzhpiu5na74ji.eu-west-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.ljisga.c4.kafka.eu-west-1.amazonaws.com
mu4e5dcryibbx.mrap.accesspoint.s3-global.amazonaws.com
q5ijjqpusel73ebpkthu6edvka.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanar.d467s7.c4.kafka.ap-northeast-2.amazonaws.com
yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.0p17bp.c4.kafka.eu-west-2.amazonaws.com
jsfmlpyxlx5qdt3mvq6kb3zlzq.ap-south-1.es.amazonaws.com
canary.s3.ap-southeast-1.vpce.amazonaws.com
s3.eu-west-3.amazonaws.com
yn5tyh5p7kxvgl4j7ebsnumtzi.ap-south-1.es.amazonaws.com
s3.ap-southeast-2.amazonaws.com
*.cfnlaunchpadcanarytes.nt8ifz.c4.kafka.eu-north-1.amazonaws.com
ifcscxtvwwmh2twskdrbegweee.eu-west-1.es-staging.amazonaws.com
7564oq2vskmng3y3oqttk5u7r4.us-east-1.es.amazonaws.com
*.canary95a41d09dc37.4jrpr0.c4.kafka.eu-north-1.amazonaws.com
canary.s3.il-central-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.v6677v.c4.kafka.eu-west-3.amazonaws.com
puqxh6d3qxzzp3nzqp667pf2sq.me-south-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.cbepqo.c4.kafka.sa-east-1.amazonaws.com
*.cfnlaunchpadcanaryt.cdul2k.c4.kafka.ca-central-1.amazonaws.com
*.canary534ab9a795d.glqha6.c1.kafka.ap-northeast-2.amazonaws.com
*.cluster-cxnwqqspunxa.us-west-2.rds.amazonaws.com
canary.s3.us-east-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.38r357.c4.kafka.eu-west-3.amazonaws.com
*.cfnlaunchpadcanar.vc86fp.c4.kafka.ap-northeast-1.amazonaws.com
s3.ca-central-1.amazonaws.com
*.replacementcanary-2.sod442.c1.kafka.eu-central-1.amazonaws.com
*.canary-38054043d9f7.poa07p.c2.kafka.ap-south-1.amazonaws.com
*.armupdateconfiga.6zw4yn.c1.kafka-gamma.us-west-2.amazonaws.com
tsf7epmr36d5w77wtdtluqtjc4.us-west-2.es.amazonaws.com
*.canary-47bc0dc98d40.qeyouk.c2.kafka.us-east-2.amazonaws.com
ardi-service-gamma.us-gov-west-1.amazonaws.com
ecs-a-1.us-gov-east-1.amazonaws.com
wayeyh3wow6shqh7dqvotirg3m.eu-west-1.es.amazonaws.com
*.kafkamskcluster.ha9iy3.c2.kafka.eu-west-1.amazonaws.com
*.canary89702d9857b6.ib6dn9.c1.kafka.me-south-1.amazonaws.com
*.canary7410f8f1880.y43lug.c2.kafka.ap-southeast-2.amazonaws.com
*.chrometbcreate17018877.12gtf9.c4.kafka.ap-east-1.amazonaws.com
*.cfnlaunchpadcanarytest.3p5lh7.c4.kafka.eu-west-3.amazonaws.com
*.ckfulidknuxh.us-east-1.redshift.amazonaws.com
*.cfnlaunchpadcanarytes.i4ii6f.c4.kafka.eu-south-1.amazonaws.com
*.cfnlaunchpadcanar.oxna9l.c4.kafka.ap-southeast-2.amazonaws.com
snowball.ap-southeast-2.amazonaws.com
y6kthvz2o2exgb7huojeacokwa.us-east-1.es.amazonaws.com
*.canary-db7a37281f6d.03742e.c4.kafka.eu-west-3.amazonaws.com
clpgted7o6ujv7oq6f452hbvcy.us-gov-west-1.es.amazonaws.com
*.canary3a1737a7b1d2.37xanb.c1.kafka.me-south-1.amazonaws.com
3beolxhz5fv46rccqqzl2rekii.us-west-2.es.amazonaws.com
*.gc-rc-sr-1583945003.r41xxd.c1.kafka.ca-central-1.amazonaws.com
o4plilfaz3tt375be2hjlgkufy.us-east-1.es-nexus.amazonaws.com
llzhr46qwljcelzqvmbyayg73e.us-west-2.es.amazonaws.com
5tyc74sxmxnynh7nelm4tgwdsy.us-east-1.es.amazonaws.com
s3.ap-northeast-2.amazonaws.com
33f3ybh43otnp6anbao4oldtii.us-west-2.es.amazonaws.com
qksouqticst5o7gnye3562zlha.us-east-1.es.amazonaws.com
6blwbm2sbvxdeqtjt2rgwiqz5u.ca-central-1.es.amazonaws.com
*.canaryc3ca7d961964.03tzzb.c3.kafka.us-west-1.amazonaws.com
*.canaryf7fe0b518e7.mm787h.c2.kafka.ap-southeast-4.amazonaws.com
ndn3w3adypi2bzgvcbd7kvyh5m.sa-east-1.es.amazonaws.com
6qboysqk6yo23za3vmtbymaop4.eu-west-1.es.amazonaws.com
canary.s3.ap-south-2.vpce.amazonaws.com
canary.s3.eu-south-1.vpce.amazonaws.com
*.replacementcanary-d.nwv4s1.c2.kafka.eu-central-1.amazonaws.com
bg6gskfoi6i54pe7i2accghmde.eu-south-1.es.amazonaws.com
yrv5npxs45wxbuzh6vmmx5czhi.eu-west-1.es.amazonaws.com
*.canary-0a91a417f712.nfwvus.c4.kafka.eu-west-2.amazonaws.com
6nznveo3kitfemggrairlto7mq.us-east-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.cax14p.c4.kafka.us-west-2.amazonaws.com

Certificate

The complete raw certificate details for s3.af-south-1.amazonaws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKPDCCCSSgAwIBAgIQAeZYkxADQIuloboVFM0WZzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIwNTAwMDAwMFoXDTI0MDEwMzIzNTk1OVowJjEk
MCIGA1UEAxMbczMuYWYtc291dGgtMS5hbWF6b25hd3MuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXfTzKZeobCVkxIBKfjtjXvrMFmab29Mb0G8
VXiLlLFy2wrMot6rUWJrPRdWYziI5UMMUOmS2s7YUZK+K23Ttm4trvIkEEs9heeP
gQFBQZ0Xdezw5eNM39gcVR446PCJokAlIPTSMr1kfV/BKZ1hnLqZk8/JCtrzkmoc
W1zjDPxi/17VW8mgaC52kyqMEuZ04ra7HzMbqwuK4l5hbWZmudAvlvc6l8yMbkD/
UYSyPUIVeqoUTR0c6nFgr0JndQgiLkIV/AFUqeX7j5nzdBWJk13eynI3UTa7YkC3
sVgxrVx97uZJWgEyS9ybnjQ5hb2Ka0neCUFQwVRVazQ1pZMRJQIDAQABo4IHTjCC
B0owHwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFEPr
KpmCYbJ/1+z5wd1Aly9xwUuaMIIF6wYDVR0RBIIF4jCCBd6CG3MzLmFmLXNvdXRo
LTEuYW1hem9uYXdzLmNvbYJHYnVja2V0LnZwY2UtMDEzZTI4M2E0NWY2NjIwMGIt
ZWEzOTQ5ZmQuczMuYWYtc291dGgtMS52cGNlLmFtYXpvbmF3cy5jb22CJSouczMt
Y29udHJvbC5hZi1zb3V0aC0xLmFtYXpvbmF3cy5jb22CSSouYnVja2V0LnZwY2Ut
MDEzZTI4M2E0NWY2NjIwMGItZWEzOTQ5ZmQuczMuYWYtc291dGgtMS52cGNlLmFt
YXpvbmF3cy5jb22CHSouczMuYWYtc291dGgtMS5hbWF6b25hd3MuY29tgk4qLmFj
Y2Vzc3BvaW50LnZwY2UtMDEzZTI4M2E0NWY2NjIwMGItZWEzOTQ5ZmQuczMuYWYt
c291dGgtMS52cGNlLmFtYXpvbmF3cy5jb22CSiouY29udHJvbC52cGNlLTAxM2Uy
ODNhNDVmNjYyMDBiLWVhMzk0OWZkLnMzLmFmLXNvdXRoLTEudnBjZS5hbWF6b25h
d3MuY29tglUqLmJ1Y2tldC52cGNlLTAxM2UyODNhNDVmNjYyMDBiLWVhMzk0OWZk
LWFmLXNvdXRoLTFiLnMzLmFmLXNvdXRoLTEudnBjZS5hbWF6b25hd3MuY29tglYq
LmNvbnRyb2wudnBjZS0wMTNlMjgzYTQ1ZjY2MjAwYi1lYTM5NDlmZC1hZi1zb3V0
aC0xYS5zMy5hZi1zb3V0aC0xLnZwY2UuYW1hem9uYXdzLmNvbYJVKi5idWNrZXQu
dnBjZS0wMTNlMjgzYTQ1ZjY2MjAwYi1lYTM5NDlmZC1hZi1zb3V0aC0xYS5zMy5h
Zi1zb3V0aC0xLnZwY2UuYW1hem9uYXdzLmNvbYJWKi5jb250cm9sLnZwY2UtMDEz
ZTI4M2E0NWY2NjIwMGItZWEzOTQ5ZmQtYWYtc291dGgtMWIuczMuYWYtc291dGgt
MS52cGNlLmFtYXpvbmF3cy5jb22CVSouYnVja2V0LnZwY2UtMDEzZTI4M2E0NWY2
NjIwMGItZWEzOTQ5ZmQtYWYtc291dGgtMWMuczMuYWYtc291dGgtMS52cGNlLmFt
YXpvbmF3cy5jb22CViouY29udHJvbC52cGNlLTAxM2UyODNhNDVmNjYyMDBiLWVh
Mzk0OWZkLWFmLXNvdXRoLTFjLnMzLmFmLXNvdXRoLTEudnBjZS5hbWF6b25hd3Mu
Y29tgloqLmFjY2Vzc3BvaW50LnZwY2UtMDEzZTI4M2E0NWY2NjIwMGItZWEzOTQ5
ZmQtYWYtc291dGgtMWIuczMuYWYtc291dGgtMS52cGNlLmFtYXpvbmF3cy5jb22C
WiouYWNjZXNzcG9pbnQudnBjZS0wMTNlMjgzYTQ1ZjY2MjAwYi1lYTM5NDlmZC1h
Zi1zb3V0aC0xYS5zMy5hZi1zb3V0aC0xLnZwY2UuYW1hem9uYXdzLmNvbYJTYnVj
a2V0LnZwY2UtMDEzZTI4M2E0NWY2NjIwMGItZWEzOTQ5ZmQtYWYtc291dGgtMWEu
czMuYWYtc291dGgtMS52cGNlLmFtYXpvbmF3cy5jb22CWiouYWNjZXNzcG9pbnQu
dnBjZS0wMTNlMjgzYTQ1ZjY2MjAwYi1lYTM5NDlmZC1hZi1zb3V0aC0xYy5zMy5h
Zi1zb3V0aC0xLnZwY2UuYW1hem9uYXdzLmNvbYJTYnVja2V0LnZwY2UtMDEzZTI4
M2E0NWY2NjIwMGItZWEzOTQ5ZmQtYWYtc291dGgtMWIuczMuYWYtc291dGgtMS52
cGNlLmFtYXpvbmF3cy5jb22CU2J1Y2tldC52cGNlLTAxM2UyODNhNDVmNjYyMDBi
LWVhMzk0OWZkLWFmLXNvdXRoLTFjLnMzLmFmLXNvdXRoLTEudnBjZS5hbWF6b25h
d3MuY29tgikqLnMzLWFjY2Vzc3BvaW50LmFmLXNvdXRoLTEuYW1hem9uYXdzLmNv
bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3Qu
Y29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRp
MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNv
bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20v
cjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBAMPnp7XRAKkbe6iv96nA4rzn71fnatImqG8jnv/+tu7H
cYLbeWZ8aJBtluMDBge0fC65y5nxkTrUuGKQbxsnApa9gfp44iTAwivgXSweGnGP
FWxaeL6VRfPzMIQ8qyu+Vmz/rfCZxL4lpcM0XBr67Qlh6c/L7haWyl9YsxMLgKje
QnbwmRA2PvfHDuAbIKNNITfiGlZJjnZNIRU1IvO3m9uJacu5URBrzRK61jYvmcyY
JSGONZYY6IrO2mtCpO+0DN7H9bPkv+a4i6X1XUOANfWORMaSy7FZ3H+mvTZSRwzO
4gB9DPGjbSfNOSufl/frOKCBi8Q5z/9C/5uaD+NZed8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXfTzKZeobCVkxIBKfjt
jXvrMFmab29Mb0G8VXiLlLFy2wrMot6rUWJrPRdWYziI5UMMUOmS2s7YUZK+K23T
tm4trvIkEEs9heePgQFBQZ0Xdezw5eNM39gcVR446PCJokAlIPTSMr1kfV/BKZ1h
nLqZk8/JCtrzkmocW1zjDPxi/17VW8mgaC52kyqMEuZ04ra7HzMbqwuK4l5hbWZm
udAvlvc6l8yMbkD/UYSyPUIVeqoUTR0c6nFgr0JndQgiLkIV/AFUqeX7j5nzdBWJ
k13eynI3UTa7YkC3sVgxrVx97uZJWgEyS9ybnjQ5hb2Ka0neCUFQwVRVazQ1pZMR
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2525252776788628913408474802331391591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.af-south-1.amazonaws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18868596504295939243877104435968714568173935265668431241777616375535623527883409790504417176169230215204389715473025891066645799138627583212598766683924553493815537777999136916284444377181098842558955723668453519552333773325705325166434471585448883908709181803772454786798043855715862631493729339661587160097525169979553546341305402772705374860668308863108741818965656674061360990613214568223703831058853494431946062489192134457609724262352801539169670555259069944759285345403894042439252802627420715740180675256515439781221161955539583853070575978676170799158650445127918918649840623476229580209489428646527316988197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43eb2a998261b27fd7ecf9c1dd40972f71c14b9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1506 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.af-south-1.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.af-south-1.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.af-south-1.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-013e283a45f66200b-ea3949fd.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1a.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1b.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-013e283a45f66200b-ea3949fd-af-south-1c.s3.af-south-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.af-south-1.amazonaws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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