s3.us-east-1.amazonaws.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:6e:1c:c1:06:b5:48:a1:64:1f:56:38:32:1d:05:97 was issued on by Amazon.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=s3.us-east-1.amazonaws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:6e:1c:c1:06:b5:48:a1:64:1f:56:38:32:1d:05:97
Serial Number (int): 13864015812868325887770911978129524119
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 85:29:91:c4:8c:c5:6e:37:f3:20:1f:6d:6b:dc:00:18:1e:11:c9:1a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 93:b4:b4:d5:4b:cc:0a:c3:46:b7:fc:99:6a:14:45:cb:6a:a6:eb:23
Fingerprint (sha256): 00:00:fc:8c:19:22:14:96:e8:c8:06:84:a6:d7:45:f8:74:03:ee:d3:94:4b:4c:6b:c3:62:82:c5:09:c8:7c:34

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate s3.us-east-1.amazonaws.com

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.us-east-1.amazonaws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.us-east-1.amazonaws.com
*.s3-control.us-east-1.amazonaws.com
*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com
*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com
*.s3.us-east-1.amazonaws.com
*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com
*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com
bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com
*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com
*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com
*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com
*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com
bucket.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com
*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com
bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com
*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com
*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com
bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com
*.s3-accesspoint.us-east-1.amazonaws.com
*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com
*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com
*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com
bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com
*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com
*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com
bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com
bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com
*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com
*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com
*.control.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com
*.bucket.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com
*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com

Other certificates including the domain name s3.us-east-1.amazonaws.com

(limited to 100 certificates)
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com
s3.us-east-1.amazonaws.com

Certificate

The complete raw certificate details for s3.us-east-1.amazonaws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWO/euRezPgDfl3SBZXv
tw17J/a93H6pce5g86Nsb8lvPnXjAn7nJBnigCArhR8mTyLzDMkHDbHImC0DJWyY
Re8XxLiCu4p6JNFomBQpLgeOKlGkvL+0xBaylwUBi98hTJi9tom7aunQ7wgyl4Wa
ecsSBQiHwK/rWRBAVXI1/GlHkgjvzbkQ+Iv/LhaCcGQrBuTXzyo+2DHyJ7OajKS2
n6xzFqOQARGJ1nMejoFveJoawQm2whPl1TfsC8VTH7bHCebpZrlHslBFVXX1AHc0
5sATnYAnq7dwcmPH2bnZxXDbLMx+ALnvmIVgwCa+tG0BaKdSaKNT3Bi886ijpkqM
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13864015812868325887770911978129524119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.us-east-1.amazonaws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22898320755583407970544680674194217989861288166620083065884358974705456548915137785196088326796456265688582293174571517274467450962788079730088362689981307669511429545257891658228739215145179508255559012090159926101034742838504540012249029528878460363930823099240832548592142019593823291642980378563182392556308965330503922980842034084504745034250124037292815594182209781193348745071239261254589910171723992467682135172313527880402711703039198567029565862018512791441073899813865253509674099851709070961387689673392847090199669380986472255967431370322446033246646295132799107236307267421914285187268589434083234974821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							852991c48cc56e37f3201f6d6bdc00181e11c91a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2506 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.us-east-1.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.us-east-1.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.us-east-1.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.us-east-1.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1e.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f04d0df16b1359de-ncygdauy-us-east-1b.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1f.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f04d0df16b1359de-ncygdauy-us-east-1c.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1a.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f04d0df16b1359de-ncygdauy.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f04d0df16b1359de-ncygdauy-us-east-1d.s3.us-east-1.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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