yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:93:e6:30:53:36:d8:bf:98:2a:80:f9:ca:f4:49:80 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:93:e6:30:53:36:d8:bf:98:2a:80:f9:ca:f4:49:80
Serial Number (int): 8743304395828316842586504334591412608
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8f:02:a7:a9:2c:95:f1:ce:f3:c0:f5:2c:09:c3:e1:40:42:31:b4:a7
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 13:96:67:18:25:52:d2:13:e0:23:1c:c4:2f:36:9e:a2:e7:ce:42:a3
Fingerprint (sha256): 00:01:12:97:22:1c:ef:f6:b8:a5:69:f6:cd:d6:77:86:68:9c:31:93:1a:21:db:38:97:71:3c:47:2b:3d:eb:e7

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com
*.sa-east-1.es.amazonaws.com

Other certificates including the domain name amazonaws.com

(limited to 100 certificates)
fd7q5ahpgwxzgzjeydx7ued3dy.ap-south-1.es.amazonaws.com
*.canary-705cb9c9ce.4vp3ak.c1.kafka.ap-southeast-1.amazonaws.com
3wmpdnfzuawkweauyeqwsz3sgq.us-west-2.es.amazonaws.com
phgarilyufhxfvyv6rqey2igyu.us-east-1.es.amazonaws.com
hcmsmyn7brxhvxc6zgbctvjh44.us-east-2.es.amazonaws.com
urnomx4z6o62opvpawsmrldfgi.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.wcpyzy.c4.kafka.eu-west-1.amazonaws.com
s3.ca-central-1.amazonaws.com
s3.af-south-1.amazonaws.com
s3.us-west-2.amazonaws.com
75illtecsvqox63ith2tndwefy.eu-west-3.es.amazonaws.com
xbfwcx4qduhx25yb6chzuw4nni.ca-central-1.es.amazonaws.com
t3s2vk5yto255no6s4m7uc5pde.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanaryt.cbx9rj.c2.kafka.ca-central-1.amazonaws.com
*.canary-f22d3b00119a.oi5ic9.c2.kafka.ap-south-1.amazonaws.com
2unyopxibvxjbcdkcsruu4l45q.ap-south-1.es.amazonaws.com
6fgy56efefwkdeodtkmmwkdswe.us-east-1.es.amazonaws.com
*.canary-780e819e93d7.s22kq9.c1.kafka.us-west-2.amazonaws.com
*.cfnlaunchpadcanaryt.uveli7.c4.kafka.ca-central-1.amazonaws.com
swmuby362d5wtp5s63kelca7ii.eu-west-1.es.amazonaws.com
*.canary7a34ed13e7b2.8yk2jt.c5.kafka.us-west-2.amazonaws.com
*.canary-794dbee21039.jarqga.c3.kafka.eu-north-1.amazonaws.com
fqhhh775oulwnzldm2ritqslkq.ca-central-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.witiix.c4.kafka.us-west-2.amazonaws.com
gi66xkoipe4iyd3xrf4h2fvpua.us-east-1.es.amazonaws.com
tibuxu36xjihnkqggn2ofga7y4.us-east-1.es.amazonaws.com
*.canary627ccb545bde.p1i713.c3.kafka.af-south-1.amazonaws.com
hwfsk72lrrbczq4xfsiky5xdr4.ap-northeast-1.es.amazonaws.com
*.mskcluster3adgsux.xy0lqw.c2.kafka.ap-southeast-2.amazonaws.com
s3.us-east-1.amazonaws.com
canary.s3.us-gov-west-1.vpce.amazonaws.com
epkq25frxidtqwzhpiu5na74ji.eu-west-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.ljisga.c4.kafka.eu-west-1.amazonaws.com
mu4e5dcryibbx.mrap.accesspoint.s3-global.amazonaws.com
q5ijjqpusel73ebpkthu6edvka.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanar.d467s7.c4.kafka.ap-northeast-2.amazonaws.com
yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.0p17bp.c4.kafka.eu-west-2.amazonaws.com
jsfmlpyxlx5qdt3mvq6kb3zlzq.ap-south-1.es.amazonaws.com
canary.s3.ap-southeast-1.vpce.amazonaws.com
s3.eu-west-3.amazonaws.com
yn5tyh5p7kxvgl4j7ebsnumtzi.ap-south-1.es.amazonaws.com
s3.ap-southeast-2.amazonaws.com
*.cfnlaunchpadcanarytes.nt8ifz.c4.kafka.eu-north-1.amazonaws.com
ifcscxtvwwmh2twskdrbegweee.eu-west-1.es-staging.amazonaws.com
7564oq2vskmng3y3oqttk5u7r4.us-east-1.es.amazonaws.com
*.canary95a41d09dc37.4jrpr0.c4.kafka.eu-north-1.amazonaws.com
canary.s3.il-central-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.v6677v.c4.kafka.eu-west-3.amazonaws.com
puqxh6d3qxzzp3nzqp667pf2sq.me-south-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.cbepqo.c4.kafka.sa-east-1.amazonaws.com
*.cfnlaunchpadcanaryt.cdul2k.c4.kafka.ca-central-1.amazonaws.com
*.canary534ab9a795d.glqha6.c1.kafka.ap-northeast-2.amazonaws.com
*.cluster-cxnwqqspunxa.us-west-2.rds.amazonaws.com
canary.s3.us-east-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.38r357.c4.kafka.eu-west-3.amazonaws.com
*.cfnlaunchpadcanar.vc86fp.c4.kafka.ap-northeast-1.amazonaws.com
s3.ca-central-1.amazonaws.com
*.replacementcanary-2.sod442.c1.kafka.eu-central-1.amazonaws.com
*.canary-38054043d9f7.poa07p.c2.kafka.ap-south-1.amazonaws.com
*.armupdateconfiga.6zw4yn.c1.kafka-gamma.us-west-2.amazonaws.com
tsf7epmr36d5w77wtdtluqtjc4.us-west-2.es.amazonaws.com
*.canary-47bc0dc98d40.qeyouk.c2.kafka.us-east-2.amazonaws.com
ardi-service-gamma.us-gov-west-1.amazonaws.com
ecs-a-1.us-gov-east-1.amazonaws.com
wayeyh3wow6shqh7dqvotirg3m.eu-west-1.es.amazonaws.com
*.kafkamskcluster.ha9iy3.c2.kafka.eu-west-1.amazonaws.com
*.canary89702d9857b6.ib6dn9.c1.kafka.me-south-1.amazonaws.com
*.canary7410f8f1880.y43lug.c2.kafka.ap-southeast-2.amazonaws.com
*.chrometbcreate17018877.12gtf9.c4.kafka.ap-east-1.amazonaws.com
*.cfnlaunchpadcanarytest.3p5lh7.c4.kafka.eu-west-3.amazonaws.com
*.ckfulidknuxh.us-east-1.redshift.amazonaws.com
*.cfnlaunchpadcanarytes.i4ii6f.c4.kafka.eu-south-1.amazonaws.com
*.cfnlaunchpadcanar.oxna9l.c4.kafka.ap-southeast-2.amazonaws.com
snowball.ap-southeast-2.amazonaws.com
y6kthvz2o2exgb7huojeacokwa.us-east-1.es.amazonaws.com
*.canary-db7a37281f6d.03742e.c4.kafka.eu-west-3.amazonaws.com
clpgted7o6ujv7oq6f452hbvcy.us-gov-west-1.es.amazonaws.com
*.canary3a1737a7b1d2.37xanb.c1.kafka.me-south-1.amazonaws.com
3beolxhz5fv46rccqqzl2rekii.us-west-2.es.amazonaws.com
*.gc-rc-sr-1583945003.r41xxd.c1.kafka.ca-central-1.amazonaws.com
o4plilfaz3tt375be2hjlgkufy.us-east-1.es-nexus.amazonaws.com
llzhr46qwljcelzqvmbyayg73e.us-west-2.es.amazonaws.com
5tyc74sxmxnynh7nelm4tgwdsy.us-east-1.es.amazonaws.com
s3.ap-northeast-2.amazonaws.com
33f3ybh43otnp6anbao4oldtii.us-west-2.es.amazonaws.com
qksouqticst5o7gnye3562zlha.us-east-1.es.amazonaws.com
6blwbm2sbvxdeqtjt2rgwiqz5u.ca-central-1.es.amazonaws.com
*.canaryc3ca7d961964.03tzzb.c3.kafka.us-west-1.amazonaws.com
*.canaryf7fe0b518e7.mm787h.c2.kafka.ap-southeast-4.amazonaws.com
ndn3w3adypi2bzgvcbd7kvyh5m.sa-east-1.es.amazonaws.com
6qboysqk6yo23za3vmtbymaop4.eu-west-1.es.amazonaws.com
canary.s3.ap-south-2.vpce.amazonaws.com
canary.s3.eu-south-1.vpce.amazonaws.com
*.replacementcanary-d.nwv4s1.c2.kafka.eu-central-1.amazonaws.com
bg6gskfoi6i54pe7i2accghmde.eu-south-1.es.amazonaws.com
yrv5npxs45wxbuzh6vmmx5czhi.eu-west-1.es.amazonaws.com
*.canary-0a91a417f712.nfwvus.c4.kafka.eu-west-2.amazonaws.com
6nznveo3kitfemggrairlto7mq.us-east-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.cax14p.c4.kafka.us-west-2.amazonaws.com

Certificate

The complete raw certificate details for yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZCWYz2vLwoOhXXv6ksq
q037Dt+H+KYWTf14tRto/4APEaxmV+hJnkaUUpZSr42+BFZH0Bwdka5Vxqw6CHJB
zLYWzkILUY7dngvWZ2RISt9StHOe+qXXFearlgmaY+unmi3DyNzpqt8E5TqarIkL
5i3SNWrtvOwEU3jzGx788zYja6b/UN3lmZCizWFlCMh+48KzLpd1YcjguzNDqvQx
+IPI/1vUFWyV6LEVXNtXTFkSuFmcv0T6qZ7SJZg3xKCOA0F5DDFsYLUx+vnjcc3R
aVkMK/b+QT3NtPQzAv2vC0BXEXB9Yo9yG86vdaXTq1C/R+rm8Zsfk5gPCQVlwcGw
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8743304395828316842586504334591412608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22920431928677658708694539146469266610728572963880491306198615267486490903029220727977148321244513378241527797398495511935715923540793066517368584386881473457385527655193229915844506465289175125762981294409559692888319427907675841992120547345549620613427741467457238778071042299170933619971494317318314031130154963533578334475569743673343689896694512347698702637306031291666530460074171115884016493708598165726588937882371464772460513169512320656790597834496126991246847175446637175525733895404755364136408193007123339819232293165900791212033044542135356511663400457727566307827319580776391173891507586810615290769469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f02a7a92c95f1cef3c0f52c09c3e1404231b4a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sa-east-1.es.amazonaws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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