s3.us-west-2.amazonaws.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:cf:6d:47:02:c5:8c:5b:6c:67:50:36:35:57:b6:a1 was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3.us-west-2.amazonaws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:cf:6d:47:02:c5:8c:5b:6c:67:50:36:35:57:b6:a1
Serial Number (int): 15698529812054911689771254610459604641
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 28:de:13:de:e4:66:a9:4d:48:43:94:9c:1a:73:7c:f5:09:7e:af:ca
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ea:2a:1d:e0:af:f1:37:6c:2c:d6:5c:f8:6e:68:82:7f:d9:25:d1:9e
Fingerprint (sha256): 00:00:65:82:19:8c:d8:56:81:9e:48:10:c6:b2:54:b3:af:b9:e4:57:6c:9b:9d:af:a2:31:5e:77:aa:5b:10:72

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate s3.us-west-2.amazonaws.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.us-west-2.amazonaws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.us-west-2.amazonaws.com
bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com
*.s3-control.us-west-2.amazonaws.com
*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com
*.s3-accesspoint.us-west-2.amazonaws.com
*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com
*.s3.us-west-2.amazonaws.com

Other certificates including the domain name amazonaws.com

(limited to 100 certificates)
*.canary-705cb9c9ce.4vp3ak.c1.kafka.ap-southeast-1.amazonaws.com
hcmsmyn7brxhvxc6zgbctvjh44.us-east-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.wcpyzy.c4.kafka.eu-west-1.amazonaws.com
s3.ca-central-1.amazonaws.com
s3.af-south-1.amazonaws.com
s3.us-west-2.amazonaws.com
xbfwcx4qduhx25yb6chzuw4nni.ca-central-1.es.amazonaws.com
t3s2vk5yto255no6s4m7uc5pde.ap-northeast-1.es.amazonaws.com
*.canary-f22d3b00119a.oi5ic9.c2.kafka.ap-south-1.amazonaws.com
6fgy56efefwkdeodtkmmwkdswe.us-east-1.es.amazonaws.com
*.canary-780e819e93d7.s22kq9.c1.kafka.us-west-2.amazonaws.com
*.cfnlaunchpadcanaryt.uveli7.c4.kafka.ca-central-1.amazonaws.com
*.canary7a34ed13e7b2.8yk2jt.c5.kafka.us-west-2.amazonaws.com
*.canary-794dbee21039.jarqga.c3.kafka.eu-north-1.amazonaws.com
*.cfnlaunchpadcanarytest.witiix.c4.kafka.us-west-2.amazonaws.com
gi66xkoipe4iyd3xrf4h2fvpua.us-east-1.es.amazonaws.com
tibuxu36xjihnkqggn2ofga7y4.us-east-1.es.amazonaws.com
*.canary627ccb545bde.p1i713.c3.kafka.af-south-1.amazonaws.com
s3.us-east-1.amazonaws.com
canary.s3.us-gov-west-1.vpce.amazonaws.com
epkq25frxidtqwzhpiu5na74ji.eu-west-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.ljisga.c4.kafka.eu-west-1.amazonaws.com
mu4e5dcryibbx.mrap.accesspoint.s3-global.amazonaws.com
q5ijjqpusel73ebpkthu6edvka.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanar.d467s7.c4.kafka.ap-northeast-2.amazonaws.com
yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com
canary.s3.ap-southeast-1.vpce.amazonaws.com
yn5tyh5p7kxvgl4j7ebsnumtzi.ap-south-1.es.amazonaws.com
s3.ap-southeast-2.amazonaws.com
*.cfnlaunchpadcanarytes.nt8ifz.c4.kafka.eu-north-1.amazonaws.com
7564oq2vskmng3y3oqttk5u7r4.us-east-1.es.amazonaws.com
*.canary95a41d09dc37.4jrpr0.c4.kafka.eu-north-1.amazonaws.com
canary.s3.il-central-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.v6677v.c4.kafka.eu-west-3.amazonaws.com
puqxh6d3qxzzp3nzqp667pf2sq.me-south-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.cbepqo.c4.kafka.sa-east-1.amazonaws.com
*.cfnlaunchpadcanaryt.cdul2k.c4.kafka.ca-central-1.amazonaws.com
*.cluster-cxnwqqspunxa.us-west-2.rds.amazonaws.com
canary.s3.us-east-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.38r357.c4.kafka.eu-west-3.amazonaws.com
*.cfnlaunchpadcanar.vc86fp.c4.kafka.ap-northeast-1.amazonaws.com
*.replacementcanary-2.sod442.c1.kafka.eu-central-1.amazonaws.com
*.canary-38054043d9f7.poa07p.c2.kafka.ap-south-1.amazonaws.com
*.armupdateconfiga.6zw4yn.c1.kafka-gamma.us-west-2.amazonaws.com
tsf7epmr36d5w77wtdtluqtjc4.us-west-2.es.amazonaws.com
*.canary-47bc0dc98d40.qeyouk.c2.kafka.us-east-2.amazonaws.com
ardi-service-gamma.us-gov-west-1.amazonaws.com
ecs-a-1.us-gov-east-1.amazonaws.com
*.kafkamskcluster.ha9iy3.c2.kafka.eu-west-1.amazonaws.com
*.chrometbcreate17018877.12gtf9.c4.kafka.ap-east-1.amazonaws.com
*.cfnlaunchpadcanarytest.3p5lh7.c4.kafka.eu-west-3.amazonaws.com
*.ckfulidknuxh.us-east-1.redshift.amazonaws.com
*.cfnlaunchpadcanarytes.i4ii6f.c4.kafka.eu-south-1.amazonaws.com
*.cfnlaunchpadcanar.oxna9l.c4.kafka.ap-southeast-2.amazonaws.com
snowball.ap-southeast-2.amazonaws.com
*.canary-db7a37281f6d.03742e.c4.kafka.eu-west-3.amazonaws.com
clpgted7o6ujv7oq6f452hbvcy.us-gov-west-1.es.amazonaws.com
*.canary3a1737a7b1d2.37xanb.c1.kafka.me-south-1.amazonaws.com
3beolxhz5fv46rccqqzl2rekii.us-west-2.es.amazonaws.com
*.gc-rc-sr-1583945003.r41xxd.c1.kafka.ca-central-1.amazonaws.com
o4plilfaz3tt375be2hjlgkufy.us-east-1.es-nexus.amazonaws.com
llzhr46qwljcelzqvmbyayg73e.us-west-2.es.amazonaws.com
s3.ap-northeast-2.amazonaws.com
6blwbm2sbvxdeqtjt2rgwiqz5u.ca-central-1.es.amazonaws.com
*.canaryf7fe0b518e7.mm787h.c2.kafka.ap-southeast-4.amazonaws.com
ndn3w3adypi2bzgvcbd7kvyh5m.sa-east-1.es.amazonaws.com
6qboysqk6yo23za3vmtbymaop4.eu-west-1.es.amazonaws.com
canary.s3.ap-south-2.vpce.amazonaws.com
canary.s3.eu-south-1.vpce.amazonaws.com
*.replacementcanary-d.nwv4s1.c2.kafka.eu-central-1.amazonaws.com
*.canary-0a91a417f712.nfwvus.c4.kafka.eu-west-2.amazonaws.com
6nznveo3kitfemggrairlto7mq.us-east-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.cax14p.c4.kafka.us-west-2.amazonaws.com
*.canary-c69e4350d57b.i043gg.c2.kafka.sa-east-1.amazonaws.com
bah6y7swgv45v7l7djflpxwwwq.ca-central-1.es.amazonaws.com
iot.ap-east-1.amazonaws.com
*.canaryd48d12394505.14l3pv.c1.kafka.ap-east-1.amazonaws.com
pto6jrl6qhbeqe6oe4x362mpxa.ap-southeast-2.es.amazonaws.com
tepmvrsdf3xydheyylxyrecgm4.ca-central-1.es.amazonaws.com
*.cfnlaunchpadcanar.c1pxt0.c4.kafka.ap-southeast-1.amazonaws.com
sy55psllz7gqa6zuvhaqgej5si.ap-south-1.es.amazonaws.com
cwkfpqeuisv5f3k2bhefmwmmyi.us-west-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.riht0e.c4.kafka.us-east-2.amazonaws.com
*.canary-bacec8bf1.ec5hab.c2.kafka-gamma.us-west-2.amazonaws.com
*.cfnlaunchpadcanarytest.w4edt4.c3.kafka.ap-east-1.amazonaws.com
s3.us-west-2.amazonaws.com
canary.s3.us-gov-west-1.vpce.amazonaws.com
2nvh4kntwlmkqojlnkyp4n5ay4.us-east-1.es.amazonaws.com
*.cfnlaunchpadcanarytes.xk5az5.c4.kafka.ap-south-1.amazonaws.com
*.cfnlaunchpadcanaryt.7gcrhr.c4.kafka.eu-central-1.amazonaws.com
mduu39hksjzns.mrap.accesspoint.s3-global.amazonaws.com
ru5ziep6jdrjlypmzfjrxvmp5i.us-east-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.b3tq5v.c4.kafka.sa-east-1.amazonaws.com
6kuummyzaevnqebemhdxspah7m.us-east-2.es.amazonaws.com
obuwh4h6cn2kpbgsdiivq35ism.me-south-1.es.amazonaws.com
*.canary-713dda14bc6c.kechxe.c1.kafka.us-east-2.amazonaws.com
*.canarye07e1d49f933.9d9goy.c2.kafka.ap-east-1.amazonaws.com
*.cfnlaunchpadcanar.vp1b7t.c4.kafka.ap-southeast-1.amazonaws.com
hij7u3gvqhtjlu6i6rtf2vs5fq.ca-central-1.es.amazonaws.com
cseualrgtz6nsjvu4ovkz36mlu.ap-northeast-1.es.amazonaws.com

Certificate

The complete raw certificate details for s3.us-west-2.amazonaws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt4b7HACS5AOnT1i0a8u
jM4Zem4invoHtwO0IY6cC+maPJpN1gemCfEL4T5D1o8hkYNogOseyf1NL1kGfPeT
IurV6nBwlsgWnOk6yfBLaa3sYn+Zu91jLq+Kd+K+iCSVE7i4ZOqaPuRHiWHBrdwo
7kmvpvoe7UZ7vS4Vxw2i/ncfyAQhF+0oWFGmexxr4unZZlZv1N1IXb1JXuz/2jZN
cRBwYDLCMowKGw4Ug8sxWNbPV6F3LWZ2wbnTbEiDrv23mvgNywZ6qBiW75f2WFqU
sDa3K5OMUQCKAW7UnOmtP7glkN8srh68cbBbJ1k0XEgGuUnqFrL9Mzf+SOX6aWPh
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15698529812054911689771254610459604641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.us-west-2.amazonaws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21065084692080560981486987164647899324948671854518785194057751488238995569834614838346554699847381849967036918173317257716955052582167232764786003085959783590233516565365130523143134555392297014939420249277223817950245388163284843659700287735374260262200895976157977962790625438860499394552638006486415701652417308192742952505182155484176529929758761178411584663669774605971587649575192579153729332360634462568078166462338505763599985531546968217762772355445681238092233790706018385594211061719757754222339429148488869911356765366264358603192882966186168259141132226794422974884535550621705269745922866841250666111313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28de13dee466a94d4843949c1a737cf5097eafca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-067aaa873ada1b6ab-mx4vdwxc.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-067aaa873ada1b6ab-mx4vdwxc-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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