s3.us-west-2.amazonaws.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 02:a2:ab:03:05:0c:a5:89:7e:71:50:c3:b1:fa:4d:db was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=s3.us-west-2.amazonaws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:a2:ab:03:05:0c:a5:89:7e:71:50:c3:b1:fa:4d:db
Serial Number (int): 3503076613941899685791927092467355099
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c3:22:25:72:b6:17:06:b6:e1:0f:2b:7a:ee:30:af:5f:f5:51:25:69
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 03:5f:a8:bb:f7:00:34:73:fd:8f:85:34:60:e5:b7:22:8c:48:2c:d6
Fingerprint (sha256): 00:03:7e:3f:c8:4a:91:91:23:13:bf:bd:89:e2:df:00:ca:45:39:77:cb:7f:3b:de:c0:91:a7:b2:eb:ce:04:bd

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate s3.us-west-2.amazonaws.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.us-west-2.amazonaws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.us-west-2.amazonaws.com
*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com
*.control.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com
*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com
*.s3-control.us-west-2.amazonaws.com
*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com
bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com
*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com
*.s3-accesspoint.us-west-2.amazonaws.com
*.s3.us-west-2.amazonaws.com

Other certificates including the domain name amazonaws.com

(limited to 100 certificates)
fd7q5ahpgwxzgzjeydx7ued3dy.ap-south-1.es.amazonaws.com
*.canary-705cb9c9ce.4vp3ak.c1.kafka.ap-southeast-1.amazonaws.com
3wmpdnfzuawkweauyeqwsz3sgq.us-west-2.es.amazonaws.com
phgarilyufhxfvyv6rqey2igyu.us-east-1.es.amazonaws.com
hcmsmyn7brxhvxc6zgbctvjh44.us-east-2.es.amazonaws.com
urnomx4z6o62opvpawsmrldfgi.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.wcpyzy.c4.kafka.eu-west-1.amazonaws.com
s3.ca-central-1.amazonaws.com
s3.af-south-1.amazonaws.com
s3.us-west-2.amazonaws.com
75illtecsvqox63ith2tndwefy.eu-west-3.es.amazonaws.com
xbfwcx4qduhx25yb6chzuw4nni.ca-central-1.es.amazonaws.com
t3s2vk5yto255no6s4m7uc5pde.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanaryt.cbx9rj.c2.kafka.ca-central-1.amazonaws.com
*.canary-f22d3b00119a.oi5ic9.c2.kafka.ap-south-1.amazonaws.com
2unyopxibvxjbcdkcsruu4l45q.ap-south-1.es.amazonaws.com
6fgy56efefwkdeodtkmmwkdswe.us-east-1.es.amazonaws.com
*.canary-780e819e93d7.s22kq9.c1.kafka.us-west-2.amazonaws.com
*.cfnlaunchpadcanaryt.uveli7.c4.kafka.ca-central-1.amazonaws.com
swmuby362d5wtp5s63kelca7ii.eu-west-1.es.amazonaws.com
*.canary7a34ed13e7b2.8yk2jt.c5.kafka.us-west-2.amazonaws.com
*.canary-794dbee21039.jarqga.c3.kafka.eu-north-1.amazonaws.com
fqhhh775oulwnzldm2ritqslkq.ca-central-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.witiix.c4.kafka.us-west-2.amazonaws.com
gi66xkoipe4iyd3xrf4h2fvpua.us-east-1.es.amazonaws.com
tibuxu36xjihnkqggn2ofga7y4.us-east-1.es.amazonaws.com
*.canary627ccb545bde.p1i713.c3.kafka.af-south-1.amazonaws.com
hwfsk72lrrbczq4xfsiky5xdr4.ap-northeast-1.es.amazonaws.com
*.mskcluster3adgsux.xy0lqw.c2.kafka.ap-southeast-2.amazonaws.com
s3.us-east-1.amazonaws.com
canary.s3.us-gov-west-1.vpce.amazonaws.com
epkq25frxidtqwzhpiu5na74ji.eu-west-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.ljisga.c4.kafka.eu-west-1.amazonaws.com
mu4e5dcryibbx.mrap.accesspoint.s3-global.amazonaws.com
q5ijjqpusel73ebpkthu6edvka.ap-northeast-1.es.amazonaws.com
*.cfnlaunchpadcanar.d467s7.c4.kafka.ap-northeast-2.amazonaws.com
yehmxtgn2qc4poy4tsiwars6rq.sa-east-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.0p17bp.c4.kafka.eu-west-2.amazonaws.com
jsfmlpyxlx5qdt3mvq6kb3zlzq.ap-south-1.es.amazonaws.com
canary.s3.ap-southeast-1.vpce.amazonaws.com
s3.eu-west-3.amazonaws.com
yn5tyh5p7kxvgl4j7ebsnumtzi.ap-south-1.es.amazonaws.com
s3.ap-southeast-2.amazonaws.com
*.cfnlaunchpadcanarytes.nt8ifz.c4.kafka.eu-north-1.amazonaws.com
ifcscxtvwwmh2twskdrbegweee.eu-west-1.es-staging.amazonaws.com
7564oq2vskmng3y3oqttk5u7r4.us-east-1.es.amazonaws.com
*.canary95a41d09dc37.4jrpr0.c4.kafka.eu-north-1.amazonaws.com
canary.s3.il-central-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.v6677v.c4.kafka.eu-west-3.amazonaws.com
puqxh6d3qxzzp3nzqp667pf2sq.me-south-1.es.amazonaws.com
*.cfnlaunchpadcanarytest.cbepqo.c4.kafka.sa-east-1.amazonaws.com
*.cfnlaunchpadcanaryt.cdul2k.c4.kafka.ca-central-1.amazonaws.com
*.canary534ab9a795d.glqha6.c1.kafka.ap-northeast-2.amazonaws.com
*.cluster-cxnwqqspunxa.us-west-2.rds.amazonaws.com
canary.s3.us-east-1.vpce.amazonaws.com
*.cfnlaunchpadcanarytest.38r357.c4.kafka.eu-west-3.amazonaws.com
*.cfnlaunchpadcanar.vc86fp.c4.kafka.ap-northeast-1.amazonaws.com
s3.ca-central-1.amazonaws.com
*.replacementcanary-2.sod442.c1.kafka.eu-central-1.amazonaws.com
*.canary-38054043d9f7.poa07p.c2.kafka.ap-south-1.amazonaws.com
*.armupdateconfiga.6zw4yn.c1.kafka-gamma.us-west-2.amazonaws.com
tsf7epmr36d5w77wtdtluqtjc4.us-west-2.es.amazonaws.com
*.canary-47bc0dc98d40.qeyouk.c2.kafka.us-east-2.amazonaws.com
ardi-service-gamma.us-gov-west-1.amazonaws.com
ecs-a-1.us-gov-east-1.amazonaws.com
wayeyh3wow6shqh7dqvotirg3m.eu-west-1.es.amazonaws.com
*.kafkamskcluster.ha9iy3.c2.kafka.eu-west-1.amazonaws.com
*.canary89702d9857b6.ib6dn9.c1.kafka.me-south-1.amazonaws.com
*.canary7410f8f1880.y43lug.c2.kafka.ap-southeast-2.amazonaws.com
*.chrometbcreate17018877.12gtf9.c4.kafka.ap-east-1.amazonaws.com
*.cfnlaunchpadcanarytest.3p5lh7.c4.kafka.eu-west-3.amazonaws.com
*.ckfulidknuxh.us-east-1.redshift.amazonaws.com
*.cfnlaunchpadcanarytes.i4ii6f.c4.kafka.eu-south-1.amazonaws.com
*.cfnlaunchpadcanar.oxna9l.c4.kafka.ap-southeast-2.amazonaws.com
snowball.ap-southeast-2.amazonaws.com
y6kthvz2o2exgb7huojeacokwa.us-east-1.es.amazonaws.com
*.canary-db7a37281f6d.03742e.c4.kafka.eu-west-3.amazonaws.com
clpgted7o6ujv7oq6f452hbvcy.us-gov-west-1.es.amazonaws.com
*.canary3a1737a7b1d2.37xanb.c1.kafka.me-south-1.amazonaws.com
3beolxhz5fv46rccqqzl2rekii.us-west-2.es.amazonaws.com
*.gc-rc-sr-1583945003.r41xxd.c1.kafka.ca-central-1.amazonaws.com
o4plilfaz3tt375be2hjlgkufy.us-east-1.es-nexus.amazonaws.com
llzhr46qwljcelzqvmbyayg73e.us-west-2.es.amazonaws.com
5tyc74sxmxnynh7nelm4tgwdsy.us-east-1.es.amazonaws.com
s3.ap-northeast-2.amazonaws.com
33f3ybh43otnp6anbao4oldtii.us-west-2.es.amazonaws.com
qksouqticst5o7gnye3562zlha.us-east-1.es.amazonaws.com
6blwbm2sbvxdeqtjt2rgwiqz5u.ca-central-1.es.amazonaws.com
*.canaryc3ca7d961964.03tzzb.c3.kafka.us-west-1.amazonaws.com
*.canaryf7fe0b518e7.mm787h.c2.kafka.ap-southeast-4.amazonaws.com
ndn3w3adypi2bzgvcbd7kvyh5m.sa-east-1.es.amazonaws.com
6qboysqk6yo23za3vmtbymaop4.eu-west-1.es.amazonaws.com
canary.s3.ap-south-2.vpce.amazonaws.com
canary.s3.eu-south-1.vpce.amazonaws.com
*.replacementcanary-d.nwv4s1.c2.kafka.eu-central-1.amazonaws.com
bg6gskfoi6i54pe7i2accghmde.eu-south-1.es.amazonaws.com
yrv5npxs45wxbuzh6vmmx5czhi.eu-west-1.es.amazonaws.com
*.canary-0a91a417f712.nfwvus.c4.kafka.eu-west-2.amazonaws.com
6nznveo3kitfemggrairlto7mq.us-east-2.es.amazonaws.com
*.cfnlaunchpadcanarytest.cax14p.c4.kafka.us-west-2.amazonaws.com

Certificate

The complete raw certificate details for s3.us-west-2.amazonaws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr/Ex0NWsZv9kXrw84Zd
OSEoK9LUEyfDljkIaPMo87cNcoccgrRMYv95tJLsNOXuC0D4OgPDTGoeFyHMmevQ
MB0sv0/B0tozglnScisuPbgnw5s6a0WPe65A1kn488/Kw/NYTr+KLwFSem4LRVRR
13FH7mRWKPNEjMQjc40ueYJgvmUIhA64Cuc2N5aMquJHPKyS8sjmMoznqNMNr7s0
qI1kwp7Y1mi3aQgUHzzMwwLAwNAcD3MRlCLRNOTRS6g8EYADIlMdEAwnBwUh77ws
TZK08YO6JRMR62rrQKwZZfXkORyOMjbE2DHdpwIqSf+2TPo1EE+cB3iVRAOq9k9W
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3503076613941899685791927092467355099
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.us-west-2.amazonaws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23069936157259891075059162709110552092762116256372313685928773542913055819904645241887962976709192118616521378165310334557833660533593613014284049193167911551518749885096239808320783194888288328497045281233766515953785130271846881417681090550564521091924250564298701301577791759351735901187321003241885726428729695843391849878142358744436386412468700907392461617339359299766010430995412812030261916136775643844285329743373428833288996040782122543258776412432201397299059069909862955294283029709371242722200927602200180978502906219112083607653456287131015245964856624011791100642788207433805799008417102493300235916877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3222572b61706b6e10f2b7aee30af5ff5512569
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0694766b641ee0404-hdkjw9oh.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2a.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0694766b641ee0404-hdkjw9oh-us-west-2d.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0694766b641ee0404-hdkjw9oh-us-west-2b.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0694766b641ee0404-hdkjw9oh-us-west-2c.s3.us-west-2.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.us-west-2.amazonaws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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