*.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:04:17:ce:bc:c2:3d:bf:ff:b8:ea:ed:af:d0:5c:20 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:04:17:ce:bc:c2:3d:bf:ff:b8:ea:ed:af:d0:5c:20
Serial Number (int): 14642760015908580900857714994232450080
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8c:d3:f1:88:10:ee:61:02:c4:9d:0b:14:35:3c:02:db:7b:98:5c:f2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b0:ae:6d:83:49:d9:bd:76:d1:82:1b:a1:e8:92:3d:c6:f2:dc:db:22
Fingerprint (sha256): 00:03:9d:74:d7:2c:07:0d:d5:f3:eb:87:c9:8d:fc:02:38:4e:9c:4a:d3:db:70:6a:23:dc:dc:38:83:28:55:fa

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
*.tls2.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
*.iam2.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
*.scram.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
*.tls.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
*.scram2.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
*.iam.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
s3.cn-northwest-1.amazonaws.com.cn
*.canary3496f720.utknk1.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary2f55c250.6yywj3.c3.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary97dcd0c61386.gooyfy.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary1f8805e087c3.tu6a4r.c1.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.58m43m.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.chrometbcreate1703.5awsyh.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary1435d203.akst80.c4.kafka.cn-northwest-1.amazonaws.com.cn
xnnqhxxbhbkngeq47r66snxgom.cn-north-1.es.amazonaws.com.cn
oixtqojaaezwrajvftk22eou2a.cn-north-1.es.amazonaws.com.cn
*.canaryc15b02e9.t88y5i.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.privatelinkcan.tug0hx.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1670079290cell.lvov73.c2.kafka.cn-north-1.amazonaws.com.cn
abfvgdrqnxej4cdwib3leslsli.cn-north-1.es.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canarydc0870343556.cdq0tp.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary63f394b8d86d.ycius9.c2.kafka.cn-north-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
*.crossaccountplcana.e2nooy.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.privatelinkcanary0.yc7ect.c2.kafka.cn-north-1.amazonaws.com.cn
3oqjxm3v6abfqofsvceu252dhq.cn-northwest-1.es.amazonaws.com.cn
*.canary6e808f40ba73.d1i490.c1.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.viojmz.c4.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canary91431378.29adbf.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.gtbmcn.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
pu6msc3skx4xf3f3ugsephy42m.cn-northwest-1.es.amazonaws.com.cn
*.kafkatos3withs.xyuei8.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary113cbf75.nxxp2r.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.kafkatos3withsasls.cg17o4.c3.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.y34xci.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryf335d056.0x21ts.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary5e3b98ead0b9.p9kn5h.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary3798f5fd6a8a.osvwjs.c2.kafka.cn-north-1.amazonaws.com.cn
*.testmskcluster2023.cazo8h.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.b090ce.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canarydac7370c.kzmcqq.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary979ee1beda56.ozltwf.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary863b7f14.tq5129.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.firefoxtbcreat.ik596e.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.zsh5cr.c3.kafka.cn-north-1.amazonaws.com.cn
*.canaryc8f71fae.39zivb.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.on59qh.c2.kafka.cn-north-1.amazonaws.com.cn
lrzaa5a42vhrigxno2r3eughse.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
nuithftiwwp2qkselfzchnyqt4.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
3licg3hwbasqh2s3mbaa43e44i.cn-northwest-1.es.amazonaws.com.cn
*.canary862e4293447c.6fmord.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary5da44687.qdje6s.c1.kafka.cn-northwest-1.amazonaws.com.cn
lklzik6phoiqqnfjjl4ozb4m7e.cn-northwest-1.es.amazonaws.com.cn
*.gcsr1702011513.w5u9ni.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1686507279cell.0hev4r.c1.kafka.cn-north-1.amazonaws.com.cn
*.testmskcluster2023.a264cu.c4.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
e3s4mcykgdqwskjt4yfnjcvplm.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
zp33ldehjurut56qpvvyignwcu.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.gccanaryserverless.nmd5kv.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary57d54d81.adfjg6.c4.kafka.cn-northwest-1.amazonaws.com.cn
plqhkzwvsorvp6jvchirqsebia.cn-northwest-1.es.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary585a67e44339.hwmtxa.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary2b9a8106.sfhicu.c4.kafka.cn-northwest-1.amazonaws.com.cn
jc4rvosh5vnnes2pabacahvbli.cn-northwest-1.es.amazonaws.com.cn
*.canary5fc6bdd5.5wd2pd.c1.kafka.cn-northwest-1.amazonaws.com.cn
4tic3t7yfpelpk42gr3s4k2fc4.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary704b544ec27a.hx12kg.c3.kafka.cn-north-1.amazonaws.com.cn
*.canaryfabf5ba8.7qy9lg.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.testmskcluster2023.wwunyz.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.luyjcw.c2.kafka.cn-northwest-1.amazonaws.com.cn
aprqoszpo23njrp2gjiblqginu.cn-northwest-1.es.amazonaws.com.cn
*.canary102fc44a.ht1r7v.c2.kafka.cn-northwest-1.amazonaws.com.cn
hdxrqop5oozqbdquillvdwbege.cn-northwest-1.es.amazonaws.com.cn
*.canary125b55277948.jiwgs2.c4.kafka.cn-north-1.amazonaws.com.cn
*.execute-api.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn

Certificate

The complete raw certificate details for *.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxDClus/OIoVMGMPUCoX
gXGCFSQoyZDMue+XyS05evBiSiGnsrjZHTlfEYSo+zbJDCI5ljjxQ7/gq3vVaIEY
8HeMkLIxqA94aZjdLUjfp5v2MdnkJeJh9j+fUy9s7i/DaC8chrenuHnq5n9ckcUB
XTfkKl3ep4wKkXHXqeO/xWVTXLzb6YVUyZcrxowUj+bk63TGJwBnN1Of4vgeR7Rn
2UsSuCRxzJT0RUZzSCeQdQPUIH4c4oc061xLKpf3iEoDTOGVvD50JZk3GAAQQFm7
ED/9k5tteVSIMTALjO673sHgp41T55qW/XFf6N+IdoH9elrSjhLVXU/nSwv726+e
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14642760015908580900857714994232450080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23614827749557566973045886465118226024227408437430381076093408436492466329925757571959355437802568855280538754020183495053508966146611678815591509980853062460936426577956847649681661428607255863959146583594570171191407829703796157614711797906960808289182356992447552639929292226484788359624002411411322077645583601582269394329024590652392977855538709999945494295696739259228401656365180126773193544650636258437300898988230876987038020671438046366691453555269597467511160831638966644501673121301981446151852259100645795688915571920905043039148305002062240972876681995921806052138526092230423975433813775334001798520321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cd3f18810ee6102c49d0b14353c02db7b985cf2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls2.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam2.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram2.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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