risk-aggregator.prod.us-east-1.ccm.pki.aws.dev

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:0f:98:49:32:13:ff:74:f8:e9:27:cc:76:b9:20:39 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=risk-aggregator.prod.us-east-1.ccm.pki.aws.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:0f:98:49:32:13:ff:74:f8:e9:27:cc:76:b9:20:39
Serial Number (int): 18690165119280889673133627050261291065
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f9:8a:91:52:e0:5d:84:bc:82:58:01:8c:57:1b:e9:14:b4:45:91:c2
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 13:fb:17:b8:82:3f:50:0c:12:76:79:a2:64:07:2b:b1:bd:ee:98:8a
Fingerprint (sha256): 00:15:e1:fe:22:8b:3c:46:ec:5d:7b:9b:03:90:48:c7:3e:e4:1f:e4:75:a6:4e:a3:eb:19:74:7e:ad:34:16:06

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate risk-aggregator.prod.us-east-1.ccm.pki.aws.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for risk-aggregator.prod.us-east-1.ccm.pki.aws.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

risk-aggregator.prod.us-east-1.ccm.pki.aws.dev

Other certificates including the domain name aws.dev

(limited to 100 certificates)
e1938ecb-61c2-4220-83d7-fac06b31c66f.gamma.forgeapps.ec2.aws.dev
3f3bda49-147a-4343-ad6e-789e1926db80.forgeapps.ec2.aws.dev
9097dea5-a9c1-47be-9781-b8255a52e257.gamma.forgeapps.ec2.aws.dev
7b7949c0-04c9-4575-be3f-594bc681e623.forgeapps.ec2.aws.dev
404492ed-06d3-4238-aefb-cd72fd5d2862.forgeapps.ec2.aws.dev
9e8401a9-6e28-4837-bf69-a9e944f9682d.gamma.forgeapps.ec2.aws.dev
9226255b-9423-467e-a191-bb4b25cf6eaa.forgeapps.ec2.aws.dev
c638f360baec4ad6a53f2556a.gamma.forgeinternaldnsapps.ec2.aws.dev
191b4e4f-1f45-40db-b26c-ccbdefcf3aaa.gamma.forgeapps.ec2.aws.dev
c1eb25ec-6551-46cb-bb8f-adeda1f26e84.gamma.forgeapps.ec2.aws.dev
68f37acc-f8b3-4a5d-b796-3442af2a0e35.forgeapps.ec2.aws.dev
baf840eb-68db-4f93-9225-0278047ab0b2.gamma.forgeapps.ec2.aws.dev
341da0a9-bcdb-499f-b4cd-ac0cf2366925.forgeapps.ec2.aws.dev
5adf299e-3067-4321-9772-1276c6520a02.forgeapps.ec2.aws.dev
12e46d07-a579-4e03-8f5c-f1dd9fd910aa.gamma.forgeapps.ec2.aws.dev
60de9783-dc17-4d46-b177-e02e9dfd3ec8.gamma.forgeapps.ec2.aws.dev
4147faa9-89c3-4588-8333-99b2.shashwpr.devo.forgeapps.ec2.aws.dev
878fc912-ba2b-4636-8af0-cad62504c45d.gamma.forgeapps.ec2.aws.dev
5ce4e00f-028d-4918-ba88-5c28f5c397c5.forgeapps.ec2.aws.dev
7e7611a6-aa84-42bc-bd45-e8d91f6da20c.forgeapps.ec2.aws.dev
d9bcd0ee-d85d-48f2-8ce3-850dda41940e.forgeapps.ec2.aws.dev
02791caf-ccd1-4e28-858a-65aa160ccfce.forgeapps.ec2.aws.dev
3dd4db28-0977-43b0-b20f-53a0725107ad.gamma.forgeapps.ec2.aws.dev
9c095b43-43ab-45e3-ad95-f713cb1fe0e2.forgeapps.ec2.aws.dev
4bcd276f-73ec-4d33-b7d5-16bc16a45549.gamma.forgeapps.ec2.aws.dev
a7cac8c9-6828-4553-8518-c35c856f2d99.gamma.forgeapps.ec2.aws.dev
8e55a904-a09d-4704-820b-10639af4abea.gamma.forgeapps.ec2.aws.dev
50b3224f-df88-4728-8dcf-cc8a1d9901f2.beta.forgeapps.ec2.aws.dev
135f5a12-5773-404e-a73d-7b6974a867f1.gamma.forgeapps.ec2.aws.dev
a89b3567-8ed4-446e-9ab6-f6a602b8f29a.gamma.forgeapps.ec2.aws.dev
e39b8c9a-986d-4c40-8cc4-8c4d2087effe.beta.forgeapps.ec2.aws.dev
bbfdc2ec-81d2-4871-b228-4e0d832ff078.forgeapps.ec2.aws.dev
51d0e4ed-6fa0-43b3-818b-636e4a348a42.forgeapps.ec2.aws.dev
fc6d3465-caf5-468a-bab8-43c3702efdae.gamma.forgeapps.ec2.aws.dev
4a5de79c-62b2-4e2c-bae1-84dadb5daf57.forgeapps.ec2.aws.dev
92714bc5-2362-42aa-b2d4-30e34819e0e7.forgeapps.ec2.aws.dev
791a6da2-0efe-4069-8a5a-0e4276eb8612.forgeapps.ec2.aws.dev
10dc8012-fdf0-42a8-9d39-faaa34fbaa32.gamma.forgeapps.ec2.aws.dev
aa05836c-ae6e-4e2f-96fa-b4592cd1c4b6.gamma.forgeapps.ec2.aws.dev
6840901f-b085-4556-838a-f90b4b6d5986.forgeapps.ec2.aws.dev
3ab2c20c-a686-452d-900a-f7b7bd6ac2fc.forgeapps.ec2.aws.dev
530acc59-ba07-44d9-9819-bc402301a3c6.forgeapps.ec2.aws.dev
*.sjsoo.people.aws.dev
b80de2cf-2cc4-40ad-89a6-628dc4067151.forgeapps.ec2.aws.dev
7a5897c1-4141-4daa-b32a-ca3af1ef488b.forgeapps.ec2.aws.dev
c483f6f2-27f5-4167-94e2-3e78e70aa592.forgeapps.ec2.aws.dev
1df8d2d6-2f48-4d39-bc6b-997102242be5.forgeapps.ec2.aws.dev
157dc117-844a-4c78-bb36-42980ab116c8.forgeapps.ec2.aws.dev
c2d06332-82ee-46cf-a10c-d5f512b2887a.gamma.forgeapps.ec2.aws.dev
56e581f6-45ba-4a56-b3db-14c11214b7ba.forgeapps.ec2.aws.dev
0da8d032-4b37-4cdd-a615-e5aff59feb3e.gamma.forgeapps.ec2.aws.dev
sc.m09.c01.ias.pdx.prod.aoss.searchservices.aws.dev
c4265ed3-452d-48a9-8613-8eea35d7efc9.gamma.forgeapps.ec2.aws.dev
7aa2997a-895c-48fb-b5a9-8020946abd3d.forgeapps.ec2.aws.dev
82039498-f621-4500-bc6b-7ccb285ccc0f.gamma.forgeapps.ec2.aws.dev
ec8656fc-5bba-4f50-b26a-ebf52969500a.forgeapps.ec2.aws.dev
ed5e9eb4-0aec-4af2-aea4-79eb2e3dd291.beta.forgeapps.ec2.aws.dev
8bced0d4-6a4b-444d-b512-942f85f34da5.gamma.forgeapps.ec2.aws.dev
ae38ebc0-ea74-4537-a145-86ed35ee1d49.gamma.forgeapps.ec2.aws.dev
risk-aggregator.prod.us-east-1.ccm.pki.aws.dev
b4552254-d75e-4de8-a19e-c0d06dd6d203.forgeapps.ec2.aws.dev
176c8b7b-6de7-4dd1-b0dd-b19174592cac.forgeapps.ec2.aws.dev
de9a16bd-2856-49a5-bf51-ea562c5478a0.gamma.forgeapps.ec2.aws.dev
6359f555-84e2-42ff-a36a-04a26410c253.forgeapps.ec2.aws.dev
22d8dffa-40d5-4398-9ece-24e11e65d51f.gamma.forgeapps.ec2.aws.dev
c6e774ce-7b6e-4527-95e7-45e4f1790883.forgeapps.ec2.aws.dev
main.tributary-pump.eu-central-1.beta.basin.security.aws.dev
9076353e-1056-4562-a740-0695be78a10a.gamma.forgeapps.ec2.aws.dev
69067f43-d9cb-44dc-a2dc-ce7352fe538f.forgeapps.ec2.aws.dev
755c64f7-b18c-47f0-999c-69752a1cbfc9.forgeapps.ec2.aws.dev
3eb38d15-b7a7-4120-8d25-c9e8935c9cde.forgeapps.ec2.aws.dev
67662da5-5dbc-448e-8110-78f9bc6a56ff.forgeapps.ec2.aws.dev
cfmon1.demos.edge.aws.dev
6a249d5d-9b56-4d23-a2a6-f92c6f459847.gamma.forgeapps.ec2.aws.dev
472b8669-c8ee-4435-94d1-3ab259ad2b2f.gamma.forgeapps.ec2.aws.dev
d33aa0e8-bd94-45c2-a626-a6c92af87eae.forgeapps.ec2.aws.dev
afb1c660-a946-45ab-82f2-733617d46bcc.beta.forgeapps.ec2.aws.dev
1f1441b1-22ff-4a12-b05f-e867feee91c9.forgeapps.ec2.aws.dev
c0b1193f-7cce-4748-90d3-b344e8c5f598.forgeapps.ec2.aws.dev
5683b1db-4c28-4c49-8413-f48141a9564f.forgeapps.ec2.aws.dev
014cbf04-b016-429c-a995-c87740014229.forgeapps.ec2.aws.dev
043ddf02-3196-4221-af14-d74650316252.forgeapps.ec2.aws.dev
53f4485d-35a9-4775-abf4-a59d26160c09.forgeapps.ec2.aws.dev
cc2e94b6-efca-47e5-a65b-e8a0acb5d14e.gamma.forgeapps.ec2.aws.dev
d1ddb3a5-0283-444e-90d7-7c552a794b86.forgeapps.ec2.aws.dev
8212923f-f3de-4b43-9c3f-1561328b2d05.gamma.forgeapps.ec2.aws.dev
21334fe8-eda9-4042-b117-2c35bef72095.forgeapps.ec2.aws.dev
55dc684c-0009-4797-bf6b-9f08d61e6ce2.forgeapps.ec2.aws.dev
357c769f-b5d6-4e2e-a351-ec1643a3b66a.forgeapps.ec2.aws.dev
912f7792-45a0-4187-8380-1c59b1f0a964.gamma.forgeapps.ec2.aws.dev
70a81aca-d863-4970-a44d-4c1b2d7ed9d5.gamma.forgeapps.ec2.aws.dev
6d36bbf8-9999-4cc1-ad68-db5233cfaf84.gamma.forgeapps.ec2.aws.dev
integ.albert.rgbackend.dev.fft.amoneron.people.aws.dev
871d7db5-312d-4c60-989d-d125be798cf4.forgeapps.ec2.aws.dev
7b3ec29d-fd51-431a-9942-bcf109be020b.gamma.forgeapps.ec2.aws.dev
652f70ea-9768-4ac8-847a-e54dd7dc6ef7.gamma.forgeapps.ec2.aws.dev
f4df718a-b57f-44a2-be07-caca611f299e.forgeapps.ec2.aws.dev
6f337975-87ad-4e91-9171-51162e0eb2a6.forgeapps.ec2.aws.dev
5c98628f-abcc-4b78-9554-1eff06424008.gamma.forgeapps.ec2.aws.dev
42d681fa-2745-405c-aeb7-32fe0fe79262.forgeapps.ec2.aws.dev

Certificate

The complete raw certificate details for risk-aggregator.prod.us-east-1.ccm.pki.aws.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdbs+lPLQxlrSosRZFPy
GuEm5X9qvKccHSuoldbZXGKyhB8phLY6C78n4wAGzYJcTLUjF5kMvd75M4y7id4E
ysQmjrg7isB6y7NshHEUOXvyoojdeCs13TBbuS/gnc/0uwMhUYbb73IS4Yb+05NO
O1mg0qV/5wZqnBP182ClrZza2BC0nd3tUcjO3Vkb7AIaXF5KJGXTsCfF9EKZMg1f
utoNOBTRxcII+wvs/NTIDGnpJqCsE5oj8/LpuiuWJW6AlaWgjeTe0PpzfPYmHBex
Q8tlg4y6g3OZGJxFjN9FiO/LV32wFVbFi60k45nRy2bARlTTxDVhIHG0OFqef/FP
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18690165119280889673133627050261291065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'risk-aggregator.prod.us-east-1.ccm.pki.aws.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23965023448708292597118264401418738919562258087001762302892135212175452321007152601664180669490683998569595635957062710304435656274523699454150277911650326596631575167889529917415213950277477609113630548790235674910296568272945146317806828338108246401975377295042695469409448947263110172655170960768908551652602363145838326807577432512373566953111840191559631744153888920061683510906639415932906116544499274926586649783199416035064651729538174677716833946511014091608276001251759082466494062212757942815126077008198156838667457587479834122842009807305830075110947765396215480151935331438053295203747063648964901424903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f98a9152e05d84bc8258018c571be914b44591c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risk-aggregator.prod.us-east-1.ccm.pki.aws.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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