s3.eu-west-3.amazonaws.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0e:f0:aa:db:23:89:50:ed:b2:d2:d5:32:2a:6c:54:5d was issued on by Amazon.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=s3.eu-west-3.amazonaws.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0e:f0:aa:db:23:89:50:ed:b2:d2:d5:32:2a:6c:54:5dSerial Number (int): 19858808558635372614479474520161539165
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 4b:f0:40:2d:37:d2:1b:e4:d9:8b:2d:53:08:11:0f:ab:1c:96:22:32
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): b7:ef:e5:91:c7:0d:e6:9e:a8:f6:ec:f4:ec:70:d3:4a:5f:93:5b:d5
Fingerprint (sha256): 00:01:37:e5:20:81:7d:cd:0a:d1:ec:53:7e:d4:e1:19:45:80:20:b7:bb:87:88:4b:fb:fc:75:07:39:36:c1:44
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate s3.eu-west-3.amazonaws.com
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for s3.eu-west-3.amazonaws.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
s3.eu-west-3.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
*.s3-accesspoint.eu-west-3.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.s3.eu-west-3.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.s3-control.eu-west-3.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
*.s3-accesspoint.eu-west-3.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.s3.eu-west-3.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.s3-control.eu-west-3.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
Certificate
The complete raw certificate details for s3.eu-west-3.amazonaws.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKGzCCCQOgAwIBAgIQDvCq2yOJUO2y0tUyKmxUXTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDUyODAwMDAwMFoXDTI0MDYyNTIzNTk1OVowJTEj MCEGA1UEAxMaczMuZXUtd2VzdC0zLmFtYXpvbmF3cy5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDkoum10MJcdjOTdLsqzCuf/9LWdXL3UGh8VU/X cXJjRXxYTuK38eVqeDQ3979+aR3+CwV59J+2RfzdZoMiEye9aSRrhaXD+ySPfj1a Kaosyv6qNhVj5cvGrTIluMBNIBZBjjFncKDAIZRzQVzIgo3nGEqvKYWktM5gqZWN omotTjd1sggBZM/OMEyGyCdNKB6yRZoAk93PD9Fyy8HwJOBlCwqFF1igRL3h0Lv2 OSlzhoIfI/dEHDIqsA3jf9sOQaJbFlESAQRiOJMinwmnWjs8onmjtfqNqDA+4wbR uzBaCaCJPH2i1HAuo/rFgGDCK5+enA26fEmkKjD7GnhbxnPVAgMBAAGjggcuMIIH KjAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUS/BA LTfSG+TZiy1TCBEPqxyWIjIwggXLBgNVHREEggXCMIIFvoIaczMuZXUtd2VzdC0z LmFtYXpvbmF3cy5jb22CUyouYnVja2V0LnZwY2UtMGQ2OWEyNzI1MWU0MGM3Mjgt M3cxY3IyN3ItZXUtd2VzdC0zYi5zMy5ldS13ZXN0LTMudnBjZS5hbWF6b25hd3Mu Y29tgk0qLmFjY2Vzc3BvaW50LnZwY2UtMGQ2OWEyNzI1MWU0MGM3MjgtM3cxY3Iy N3IuczMuZXUtd2VzdC0zLnZwY2UuYW1hem9uYXdzLmNvbYJRYnVja2V0LnZwY2Ut MGQ2OWEyNzI1MWU0MGM3MjgtM3cxY3IyN3ItZXUtd2VzdC0zYy5zMy5ldS13ZXN0 LTMudnBjZS5hbWF6b25hd3MuY29tglQqLmNvbnRyb2wudnBjZS0wZDY5YTI3MjUx ZTQwYzcyOC0zdzFjcjI3ci1ldS13ZXN0LTNhLnMzLmV1LXdlc3QtMy52cGNlLmFt YXpvbmF3cy5jb22CWCouYWNjZXNzcG9pbnQudnBjZS0wZDY5YTI3MjUxZTQwYzcy OC0zdzFjcjI3ci1ldS13ZXN0LTNjLnMzLmV1LXdlc3QtMy52cGNlLmFtYXpvbmF3 cy5jb22CUWJ1Y2tldC52cGNlLTBkNjlhMjcyNTFlNDBjNzI4LTN3MWNyMjdyLWV1 LXdlc3QtM2IuczMuZXUtd2VzdC0zLnZwY2UuYW1hem9uYXdzLmNvbYJJKi5jb250 cm9sLnZwY2UtMGQ2OWEyNzI1MWU0MGM3MjgtM3cxY3IyN3IuczMuZXUtd2VzdC0z LnZwY2UuYW1hem9uYXdzLmNvbYJGYnVja2V0LnZwY2UtMGQ2OWEyNzI1MWU0MGM3 MjgtM3cxY3IyN3IuczMuZXUtd2VzdC0zLnZwY2UuYW1hem9uYXdzLmNvbYIoKi5z My1hY2Nlc3Nwb2ludC5ldS13ZXN0LTMuYW1hem9uYXdzLmNvbYJYKi5hY2Nlc3Nw b2ludC52cGNlLTBkNjlhMjcyNTFlNDBjNzI4LTN3MWNyMjdyLWV1LXdlc3QtM2Iu czMuZXUtd2VzdC0zLnZwY2UuYW1hem9uYXdzLmNvbYIcKi5zMy5ldS13ZXN0LTMu YW1hem9uYXdzLmNvbYJRYnVja2V0LnZwY2UtMGQ2OWEyNzI1MWU0MGM3MjgtM3cx Y3IyN3ItZXUtd2VzdC0zYS5zMy5ldS13ZXN0LTMudnBjZS5hbWF6b25hd3MuY29t glQqLmNvbnRyb2wudnBjZS0wZDY5YTI3MjUxZTQwYzcyOC0zdzFjcjI3ci1ldS13 ZXN0LTNjLnMzLmV1LXdlc3QtMy52cGNlLmFtYXpvbmF3cy5jb22CUyouYnVja2V0 LnZwY2UtMGQ2OWEyNzI1MWU0MGM3MjgtM3cxY3IyN3ItZXUtd2VzdC0zYS5zMy5l dS13ZXN0LTMudnBjZS5hbWF6b25hd3MuY29tgkgqLmJ1Y2tldC52cGNlLTBkNjlh MjcyNTFlNDBjNzI4LTN3MWNyMjdyLnMzLmV1LXdlc3QtMy52cGNlLmFtYXpvbmF3 cy5jb22CUyouYnVja2V0LnZwY2UtMGQ2OWEyNzI1MWU0MGM3MjgtM3cxY3IyN3It ZXUtd2VzdC0zYy5zMy5ldS13ZXN0LTMudnBjZS5hbWF6b25hd3MuY29tglgqLmFj Y2Vzc3BvaW50LnZwY2UtMGQ2OWEyNzI1MWU0MGM3MjgtM3cxY3IyN3ItZXUtd2Vz dC0zYS5zMy5ldS13ZXN0LTMudnBjZS5hbWF6b25hd3MuY29tgiQqLnMzLWNvbnRy b2wuZXUtd2VzdC0zLmFtYXpvbmF3cy5jb22CVCouY29udHJvbC52cGNlLTBkNjlh MjcyNTFlNDBjNzI4LTN3MWNyMjdyLWV1LXdlc3QtM2IuczMuZXUtd2VzdC0zLnZw Y2UuYW1hem9uYXdzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJt MDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAEC ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAy LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5h bWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHW eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAR6uCNc8muNpmGB9fGV55o/ Rpvluzu5Z8jacslwFuEKRemuGq07xy4kw8F1p7+6y+CjvNGa+cqcRCWHnJ3TWp3o cEM+7u6nQiMIVtwymhFKwH8NofDREuEws9CLs+pYWGPR6BCqCPmXoj7D4xF4zyya eurUtxVKppC6vH2GRnihtwV8NkP55rL/zmXdH/BgHmsnHOun5SwDZMeYwArup2Mo kChDFWEn6zauxRirpVuh/YtkOvE51TmeKkuYdR7Mi3UMFgUr6zteOVH3BxP7Tjlk ZKEGJics3Lxed8nzsf887wydUlfFlxs5HD/NlqQuDuJuy7VO2tBEq3ig/Lucf/I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KLptdDCXHYzk3S7Kswr n//S1nVy91BofFVP13FyY0V8WE7it/Hlang0N/e/fmkd/gsFefSftkX83WaDIhMn vWkka4Wlw/skj349WimqLMr+qjYVY+XLxq0yJbjATSAWQY4xZ3CgwCGUc0FcyIKN 5xhKrymFpLTOYKmVjaJqLU43dbIIAWTPzjBMhsgnTSgeskWaAJPdzw/RcsvB8CTg ZQsKhRdYoES94dC79jkpc4aCHyP3RBwyKrAN43/bDkGiWxZREgEEYjiTIp8Jp1o7 PKJ5o7X6jagwPuMG0bswWgmgiTx9otRwLqP6xYBgwiufnpwNunxJpCow+xp4W8Zz 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19858808558635372614479474520161539165 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.eu-west-3.amazonaws.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28862668892447479842140489346700680681489226212195750626835780177180656865190259181878673023701954544966658501622447916688954102003614032368604812588303708342560346811811314669040555789688436267224297038900807564117011096615976426188832373116148743705995779776011962235500531622634259000696033976803287567228171960471050660479350482761232916355060274779002289287638317641752784558272263445012836957631251688148518628416742684220310822833150703182207389496716083088315548946605159208381799968707498113276822152433171485965105443453440836890064983857574090084614255111247473933964390661319299632098851418944319242269653 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4bf0402d37d21be4d98b2d5308110fab1c962232 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1474 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.eu-west-3.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.eu-west-3.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.eu-west-3.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.eu-west-3.amazonaws.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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