s3.ap-southeast-2.amazonaws.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:5c:95:be:7c:86:ee:94:e3:ec:77:da:3c:83:fd:d2 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=s3.ap-southeast-2.amazonaws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:5c:95:be:7c:86:ee:94:e3:ec:77:da:3c:83:fd:d2
Serial Number (int): 8456096456615785135804787373935689170
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 31:b7:4c:50:3e:12:fe:75:d4:3b:e1:7c:a7:d0:e1:7a:f2:2c:6b:72
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 27:0b:1b:24:87:74:2f:a7:e2:31:41:07:ac:86:fb:f6:c5:3d:f4:48
Fingerprint (sha256): 00:01:42:af:ed:29:20:e5:3b:92:90:f9:a0:bb:5e:64:c5:79:88:f9:ba:88:82:d2:cd:19:79:82:d0:1a:76:62

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate s3.ap-southeast-2.amazonaws.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.ap-southeast-2.amazonaws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.ap-southeast-2.amazonaws.com
*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com
*.bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com
*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com
*.bucket.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com
bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com
*.control.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com
*.control.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com
*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com
bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com
*.bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com
*.control.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com
*.control.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com
*.bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com
bucket.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com
bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com
*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com
*.s3-control.ap-southeast-2.amazonaws.com
*.s3-accesspoint.ap-southeast-2.amazonaws.com
*.s3.ap-southeast-2.amazonaws.com

Other certificates including the domain name amazonaws.com

(limited to 100 certificates)
*.canary-705cb9c9ce.4vp3ak.c1.kafka.ap-southeast-1.amazonaws.com
3wmpdnfzuawkweauyeqwsz3sgq.us-west-2.es.amazonaws.com
phgarilyufhxfvyv6rqey2igyu.us-east-1.es.amazonaws.com
hcmsmyn7brxhvxc6zgbctvjh44.us-east-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.wcpyzy.c4.kafka.eu-west-1.amazonaws.com
s3.ca-central-1.amazonaws.com
s3.af-south-1.amazonaws.com
s3.us-west-2.amazonaws.com
75illtecsvqox63ith2tndwefy.eu-west-3.es.amazonaws.com
xbfwcx4qduhx25yb6chzuw4nni.ca-central-1.es.amazonaws.com
t3s2vk5yto255no6s4m7uc5pde.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanaryt.cbx9rj.c2.kafka.ca-central-1.amazonaws.com
*.canary-f22d3b00119a.oi5ic9.c2.kafka.ap-south-1.amazonaws.com
2unyopxibvxjbcdkcsruu4l45q.ap-south-1.es.amazonaws.com
6fgy56efefwkdeodtkmmwkdswe.us-east-1.es.amazonaws.com
*.canary-780e819e93d7.s22kq9.c1.kafka.us-west-2.amazonaws.com
*.cfnlaunchpadcanaryt.uveli7.c4.kafka.ca-central-1.amazonaws.com
swmuby362d5wtp5s63kelca7ii.eu-west-1.es.amazonaws.com
*.canary7a34ed13e7b2.8yk2jt.c5.kafka.us-west-2.amazonaws.com
*.canary-794dbee21039.jarqga.c3.kafka.eu-north-1.amazonaws.com
fqhhh775oulwnzldm2ritqslkq.ca-central-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.witiix.c4.kafka.us-west-2.amazonaws.com
gi66xkoipe4iyd3xrf4h2fvpua.us-east-1.es.amazonaws.com
tibuxu36xjihnkqggn2ofga7y4.us-east-1.es.amazonaws.com
*.canary627ccb545bde.p1i713.c3.kafka.af-south-1.amazonaws.com
*.mskcluster3adgsux.xy0lqw.c2.kafka.ap-southeast-2.amazonaws.com
s3.us-east-1.amazonaws.com
canary.s3.us-gov-west-1.vpce.amazonaws.com
epkq25frxidtqwzhpiu5na74ji.eu-west-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.ljisga.c4.kafka.eu-west-1.amazonaws.com
mu4e5dcryibbx.mrap.accesspoint.s3-global.amazonaws.com
q5ijjqpusel73ebpkthu6edvka.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanar.d467s7.c4.kafka.ap-northeast-2.amazonaws.com
yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com
jsfmlpyxlx5qdt3mvq6kb3zlzq.ap-south-1.es.amazonaws.com
canary.s3.ap-southeast-1.vpce.amazonaws.com
yn5tyh5p7kxvgl4j7ebsnumtzi.ap-south-1.es.amazonaws.com
s3.ap-southeast-2.amazonaws.com
*.cfnlaunchpadcanarytes.nt8ifz.c4.kafka.eu-north-1.amazonaws.com
ifcscxtvwwmh2twskdrbegweee.eu-west-1.es-staging.amazonaws.com
7564oq2vskmng3y3oqttk5u7r4.us-east-1.es.amazonaws.com
*.canary95a41d09dc37.4jrpr0.c4.kafka.eu-north-1.amazonaws.com
canary.s3.il-central-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.v6677v.c4.kafka.eu-west-3.amazonaws.com
puqxh6d3qxzzp3nzqp667pf2sq.me-south-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.cbepqo.c4.kafka.sa-east-1.amazonaws.com
*.cfnlaunchpadcanaryt.cdul2k.c4.kafka.ca-central-1.amazonaws.com
*.cluster-cxnwqqspunxa.us-west-2.rds.amazonaws.com
canary.s3.us-east-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.38r357.c4.kafka.eu-west-3.amazonaws.com
*.cfnlaunchpadcanar.vc86fp.c4.kafka.ap-northeast-1.amazonaws.com
s3.ca-central-1.amazonaws.com
*.replacementcanary-2.sod442.c1.kafka.eu-central-1.amazonaws.com
*.canary-38054043d9f7.poa07p.c2.kafka.ap-south-1.amazonaws.com
*.armupdateconfiga.6zw4yn.c1.kafka-gamma.us-west-2.amazonaws.com
tsf7epmr36d5w77wtdtluqtjc4.us-west-2.es.amazonaws.com
*.canary-47bc0dc98d40.qeyouk.c2.kafka.us-east-2.amazonaws.com
ardi-service-gamma.us-gov-west-1.amazonaws.com
ecs-a-1.us-gov-east-1.amazonaws.com
wayeyh3wow6shqh7dqvotirg3m.eu-west-1.es.amazonaws.com
*.kafkamskcluster.ha9iy3.c2.kafka.eu-west-1.amazonaws.com
*.canary89702d9857b6.ib6dn9.c1.kafka.me-south-1.amazonaws.com
*.chrometbcreate17018877.12gtf9.c4.kafka.ap-east-1.amazonaws.com
*.cfnlaunchpadcanarytest.3p5lh7.c4.kafka.eu-west-3.amazonaws.com
*.ckfulidknuxh.us-east-1.redshift.amazonaws.com
*.cfnlaunchpadcanarytes.i4ii6f.c4.kafka.eu-south-1.amazonaws.com
*.cfnlaunchpadcanar.oxna9l.c4.kafka.ap-southeast-2.amazonaws.com
snowball.ap-southeast-2.amazonaws.com
*.canary-db7a37281f6d.03742e.c4.kafka.eu-west-3.amazonaws.com
clpgted7o6ujv7oq6f452hbvcy.us-gov-west-1.es.amazonaws.com
*.canary3a1737a7b1d2.37xanb.c1.kafka.me-south-1.amazonaws.com
3beolxhz5fv46rccqqzl2rekii.us-west-2.es.amazonaws.com
*.gc-rc-sr-1583945003.r41xxd.c1.kafka.ca-central-1.amazonaws.com
o4plilfaz3tt375be2hjlgkufy.us-east-1.es-nexus.amazonaws.com
llzhr46qwljcelzqvmbyayg73e.us-west-2.es.amazonaws.com
5tyc74sxmxnynh7nelm4tgwdsy.us-east-1.es.amazonaws.com
s3.ap-northeast-2.amazonaws.com
33f3ybh43otnp6anbao4oldtii.us-west-2.es.amazonaws.com
qksouqticst5o7gnye3562zlha.us-east-1.es.amazonaws.com
6blwbm2sbvxdeqtjt2rgwiqz5u.ca-central-1.es.amazonaws.com
*.canaryc3ca7d961964.03tzzb.c3.kafka.us-west-1.amazonaws.com
*.canaryf7fe0b518e7.mm787h.c2.kafka.ap-southeast-4.amazonaws.com
ndn3w3adypi2bzgvcbd7kvyh5m.sa-east-1.es.amazonaws.com
6qboysqk6yo23za3vmtbymaop4.eu-west-1.es.amazonaws.com
canary.s3.ap-south-2.vpce.amazonaws.com
canary.s3.eu-south-1.vpce.amazonaws.com
*.replacementcanary-d.nwv4s1.c2.kafka.eu-central-1.amazonaws.com
*.canary-0a91a417f712.nfwvus.c4.kafka.eu-west-2.amazonaws.com
6nznveo3kitfemggrairlto7mq.us-east-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.cax14p.c4.kafka.us-west-2.amazonaws.com
*.canary-c69e4350d57b.i043gg.c2.kafka.sa-east-1.amazonaws.com
ixalv7isxfe35e4awntug55ee4.eu-west-1.es.amazonaws.com
bah6y7swgv45v7l7djflpxwwwq.ca-central-1.es.amazonaws.com
iot.ap-east-1.amazonaws.com
*.canaryd48d12394505.14l3pv.c1.kafka.ap-east-1.amazonaws.com
*.canary13c83cc5c1bf.m3kvi5.c3.kafka.ap-south-1.amazonaws.com
pto6jrl6qhbeqe6oe4x362mpxa.ap-southeast-2.es.amazonaws.com
tepmvrsdf3xydheyylxyrecgm4.ca-central-1.es.amazonaws.com
*.cfnlaunchpadcanar.c1pxt0.c4.kafka.ap-southeast-1.amazonaws.com
sy55psllz7gqa6zuvhaqgej5si.ap-south-1.es.amazonaws.com

Certificate

The complete raw certificate details for s3.ap-southeast-2.amazonaws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vqSGx6kmh3yNeVcHG5/
VfLOmwKtOxd5zWKjOqdSMEmq5H7vvR0olX8pV3NoWBczBlBwzZtOvRFupGMOM8zh
Xk9hrUUVBhMVCsa/qoB0Zc6Pf8R9yDNb62oaCTgYTJThXXu/chKDxr8g3Q7F8oLl
LxDLUdTxhg6//jKfaBTNG34mqq7y3Z2GpJ0oG5LbmDV6CxQ1G38ljYLfS2iRzHDx
TcDaWfY8R67kVmxEDSXZkCy25N5JaoiWX2oLfp1zA99VlDcdzXc1MCBqxX94iGCG
nVpwntWq8550Ygw65sMsB9Vy1vpcqklSD9m7tJz1ymuat65cQxtMXKZ61fVmPgVP
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8456096456615785135804787373935689170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.ap-southeast-2.amazonaws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31178184051978406657917345462003599646055302974194296105621207792480148096144775332799528489892899515179629422613946606918593777121998327421744926794544334811053483894672631106717993634973748160787430725256473916785944409533692509588286481262060512171571260623374644261293454671441383718262296953174401698154908641733117127980507975803058659864797267200338412195312180672527199002582708580173050012991527302129531518329423605968759638971680968066156675611725677236779007488272181033982994324124391496861932320032331781216508008420279655670789855029430999995887233529343825342991995752254502658578583843737534072180687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31b74c503e12fe75d43be17ca7d0e17af22c6b72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.ap-southeast-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2c.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2b.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0a18a7f98e5447c02-hohkb40d.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0a18a7f98e5447c02-hohkb40d-ap-southeast-2a.s3.ap-southeast-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.ap-southeast-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.ap-southeast-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.ap-southeast-2.amazonaws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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