cfmon1.demos.edge.aws.dev

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:c5:f3:77:52:48:ae:72:73:55:95:4f:b9:64:d8:bd was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cfmon1.demos.edge.aws.dev

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c5:f3:77:52:48:ae:72:73:55:95:4f:b9:64:d8:bd
Serial Number (int): 2357048556066940736463613165123721405
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 19:26:49:9b:28:ab:06:ab:9a:73:46:05:bf:04:8c:52:96:bb:ed:3e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 9d:ad:0b:9f:ea:d7:a1:00:35:85:cf:3f:65:94:86:4a:22:e7:d6:60
Fingerprint (sha256): 00:1a:10:39:34:63:bf:c1:20:08:73:2f:de:0c:a1:22:df:c4:34:74:43:2e:75:5e:37:06:77:ef:10:c7:28:4c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate cfmon1.demos.edge.aws.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfmon1.demos.edge.aws.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfmon1.demos.edge.aws.dev

Other certificates including the domain name aws.dev

(limited to 100 certificates)
e1938ecb-61c2-4220-83d7-fac06b31c66f.gamma.forgeapps.ec2.aws.dev
3f3bda49-147a-4343-ad6e-789e1926db80.forgeapps.ec2.aws.dev
9097dea5-a9c1-47be-9781-b8255a52e257.gamma.forgeapps.ec2.aws.dev
7b7949c0-04c9-4575-be3f-594bc681e623.forgeapps.ec2.aws.dev
5af3a252-e210-4adc-acc3-006428754b02.gamma.forgeapps.ec2.aws.dev
404492ed-06d3-4238-aefb-cd72fd5d2862.forgeapps.ec2.aws.dev
9e8401a9-6e28-4837-bf69-a9e944f9682d.gamma.forgeapps.ec2.aws.dev
98bee8d8-a58a-480c-a34c-fd212208b82b.forgeapps.ec2.aws.dev
9226255b-9423-467e-a191-bb4b25cf6eaa.forgeapps.ec2.aws.dev
c638f360baec4ad6a53f2556a.gamma.forgeinternaldnsapps.ec2.aws.dev
10f321ae-ec52-4660-b6ec-40a18368c956.gamma.forgeapps.ec2.aws.dev
191b4e4f-1f45-40db-b26c-ccbdefcf3aaa.gamma.forgeapps.ec2.aws.dev
c1eb25ec-6551-46cb-bb8f-adeda1f26e84.gamma.forgeapps.ec2.aws.dev
68f37acc-f8b3-4a5d-b796-3442af2a0e35.forgeapps.ec2.aws.dev
baf840eb-68db-4f93-9225-0278047ab0b2.gamma.forgeapps.ec2.aws.dev
2996786a-90a0-4ebc-9043-7146ad6755f1.forgeapps.ec2.aws.dev
341da0a9-bcdb-499f-b4cd-ac0cf2366925.forgeapps.ec2.aws.dev
5adf299e-3067-4321-9772-1276c6520a02.forgeapps.ec2.aws.dev
12e46d07-a579-4e03-8f5c-f1dd9fd910aa.gamma.forgeapps.ec2.aws.dev
60de9783-dc17-4d46-b177-e02e9dfd3ec8.gamma.forgeapps.ec2.aws.dev
51373119-8ea0-493d-8c60-fc367bde17d0.gamma.forgeapps.ec2.aws.dev
c1c5bfc9-92f9-44d5-a09f-8122b57312e7.gamma.forgeapps.ec2.aws.dev
4147faa9-89c3-4588-8333-99b2.shashwpr.devo.forgeapps.ec2.aws.dev
878fc912-ba2b-4636-8af0-cad62504c45d.gamma.forgeapps.ec2.aws.dev
5ce4e00f-028d-4918-ba88-5c28f5c397c5.forgeapps.ec2.aws.dev
72a27982-d431-4d1c-832b-fc3e8f584037.forgeapps.ec2.aws.dev
7e7611a6-aa84-42bc-bd45-e8d91f6da20c.forgeapps.ec2.aws.dev
1e801336-ae71-4541-a890-30a0ba055621.forgeapps.ec2.aws.dev
d9bcd0ee-d85d-48f2-8ce3-850dda41940e.forgeapps.ec2.aws.dev
02791caf-ccd1-4e28-858a-65aa160ccfce.forgeapps.ec2.aws.dev
3dd4db28-0977-43b0-b20f-53a0725107ad.gamma.forgeapps.ec2.aws.dev
9c095b43-43ab-45e3-ad95-f713cb1fe0e2.forgeapps.ec2.aws.dev
4bcd276f-73ec-4d33-b7d5-16bc16a45549.gamma.forgeapps.ec2.aws.dev
1c6948f4-05b9-4537-b942-cf0f97528188.forgeapps.ec2.aws.dev
211b1a42110f4395a3da3e855.gamma.forgeinternaldnsapps.ec2.aws.dev
85ed7c4ca54a4e0ab96523ca8.gamma.forgeinternaldnsapps.ec2.aws.dev
e14eca522c9e46f7924c3f976d.devo.forgeinternaldnsapps.ec2.aws.dev
a7cac8c9-6828-4553-8518-c35c856f2d99.gamma.forgeapps.ec2.aws.dev
8e55a904-a09d-4704-820b-10639af4abea.gamma.forgeapps.ec2.aws.dev
50b3224f-df88-4728-8dcf-cc8a1d9901f2.beta.forgeapps.ec2.aws.dev
ef022c50-d283-46b2-ab59-990bf6008e7e.gamma.forgeapps.ec2.aws.dev
1b5a0093-9879-43d4-af35-91e12eefeb9f.gamma.forgeapps.ec2.aws.dev
ec2fc316-99f3-42d3-94e6-3a75f571fba5.gamma.forgeapps.ec2.aws.dev
135f5a12-5773-404e-a73d-7b6974a867f1.gamma.forgeapps.ec2.aws.dev
a89b3567-8ed4-446e-9ab6-f6a602b8f29a.gamma.forgeapps.ec2.aws.dev
e39b8c9a-986d-4c40-8cc4-8c4d2087effe.beta.forgeapps.ec2.aws.dev
934189a9-bdb4-4fa1-a02a-357f9b2887cd.gamma.forgeapps.ec2.aws.dev
bbfdc2ec-81d2-4871-b228-4e0d832ff078.forgeapps.ec2.aws.dev
*.c.prod-us-east-2.armapps.canary.console.amplify.aws.dev
0b4630a3-b596-4b18-9cb8-4279b331d4b1.gamma.forgeapps.ec2.aws.dev
51d0e4ed-6fa0-43b3-818b-636e4a348a42.forgeapps.ec2.aws.dev
fc6d3465-caf5-468a-bab8-43c3702efdae.gamma.forgeapps.ec2.aws.dev
4a5de79c-62b2-4e2c-bae1-84dadb5daf57.forgeapps.ec2.aws.dev
6b29eafb-cca3-47b9-b462-f081dca7dc0f.gamma.forgeapps.ec2.aws.dev
92714bc5-2362-42aa-b2d4-30e34819e0e7.forgeapps.ec2.aws.dev
791a6da2-0efe-4069-8a5a-0e4276eb8612.forgeapps.ec2.aws.dev
10dc8012-fdf0-42a8-9d39-faaa34fbaa32.gamma.forgeapps.ec2.aws.dev
aa05836c-ae6e-4e2f-96fa-b4592cd1c4b6.gamma.forgeapps.ec2.aws.dev
6840901f-b085-4556-838a-f90b4b6d5986.forgeapps.ec2.aws.dev
2d1b1fe0-e274-44ca-8efa-68973671d43a.forgeapps.ec2.aws.dev
3ab2c20c-a686-452d-900a-f7b7bd6ac2fc.forgeapps.ec2.aws.dev
verify-delete-ser.672bfn60.prod.forgeinternaldnsapps.ec2.aws.dev
530acc59-ba07-44d9-9819-bc402301a3c6.forgeapps.ec2.aws.dev
*.sjsoo.people.aws.dev
b80de2cf-2cc4-40ad-89a6-628dc4067151.forgeapps.ec2.aws.dev
8fc2f261-5366-4f9f-a117-e420ab70e860.forgeapps.ec2.aws.dev
7a5897c1-4141-4daa-b32a-ca3af1ef488b.forgeapps.ec2.aws.dev
0041bb5b-3977-4bd0-b36c-2f84d47473ab.forgeapps.ec2.aws.dev
c483f6f2-27f5-4167-94e2-3e78e70aa592.forgeapps.ec2.aws.dev
1df8d2d6-2f48-4d39-bc6b-997102242be5.forgeapps.ec2.aws.dev
9ea77604-6277-4ba4-b0c4-7628c78384ab.forgeapps.ec2.aws.dev
157dc117-844a-4c78-bb36-42980ab116c8.forgeapps.ec2.aws.dev
c2d06332-82ee-46cf-a10c-d5f512b2887a.gamma.forgeapps.ec2.aws.dev
73f5c76a-1a88-42ab-a507-78b984cebacc.gamma.forgeapps.ec2.aws.dev
verify-delete-ser.t3rowcq5.prod.forgeinternaldnsapps.ec2.aws.dev
56e581f6-45ba-4a56-b3db-14c11214b7ba.forgeapps.ec2.aws.dev
783104d4-05bd-401a-8ec5-ad70b50b42d4.gamma.forgeapps.ec2.aws.dev
beta.cpos.billing.aws.dev
*.8f479456.us-east-1.gamma.captcha.waf.aws.dev
0da8d032-4b37-4cdd-a615-e5aff59feb3e.gamma.forgeapps.ec2.aws.dev
sc.m09.c01.ias.pdx.prod.aoss.searchservices.aws.dev
54d6bb21-3193-4497-86d6-bc8badc47cda.gamma.forgeapps.ec2.aws.dev
c4265ed3-452d-48a9-8613-8eea35d7efc9.gamma.forgeapps.ec2.aws.dev
7aa2997a-895c-48fb-b5a9-8020946abd3d.forgeapps.ec2.aws.dev
82039498-f621-4500-bc6b-7ccb285ccc0f.gamma.forgeapps.ec2.aws.dev
ec8656fc-5bba-4f50-b26a-ebf52969500a.forgeapps.ec2.aws.dev
ed5e9eb4-0aec-4af2-aea4-79eb2e3dd291.beta.forgeapps.ec2.aws.dev
8bced0d4-6a4b-444d-b512-942f85f34da5.gamma.forgeapps.ec2.aws.dev
ae38ebc0-ea74-4537-a145-86ed35ee1d49.gamma.forgeapps.ec2.aws.dev
risk-aggregator.prod.us-east-1.ccm.pki.aws.dev
b4552254-d75e-4de8-a19e-c0d06dd6d203.forgeapps.ec2.aws.dev
176c8b7b-6de7-4dd1-b0dd-b19174592cac.forgeapps.ec2.aws.dev
de9a16bd-2856-49a5-bf51-ea562c5478a0.gamma.forgeapps.ec2.aws.dev
6359f555-84e2-42ff-a36a-04a26410c253.forgeapps.ec2.aws.dev
22d8dffa-40d5-4398-9ece-24e11e65d51f.gamma.forgeapps.ec2.aws.dev
c6e774ce-7b6e-4527-95e7-45e4f1790883.forgeapps.ec2.aws.dev
main.tributary-pump.eu-central-1.beta.basin.security.aws.dev
8c1bc097-e5f3-42db-9733-33b770d9d0ce.gamma.forgeapps.ec2.aws.dev
9076353e-1056-4562-a740-0695be78a10a.gamma.forgeapps.ec2.aws.dev
69067f43-d9cb-44dc-a2dc-ce7352fe538f.forgeapps.ec2.aws.dev

Certificate

The complete raw certificate details for cfmon1.demos.edge.aws.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NxtmeC0Pl6rFDrLNh5T
yhfCiKiTofpzRwTiJzNP+1pMNowU3MAwivxHfqJoEubOYC8ENjp69ezlFx7o+o10
AT4fsAEUJGb1DUY/N6AdiS0PzGCLuQuN68tvoJJzP7TIz5Nce8ZGdZ39g8HSKLnv
RsXhfMKZMnpm0Xk6sjbArVhyrBxn+xbQttex7xsPalePffu7diuPRI4KaJlbInkS
NTaa3Cu3Jp0MGu9Zw3Aget0C4Jzl2gfP2YRD1OTFeS3b/XQ4s2y+hXsWUach9w+a
XTTCHC1m6apJFrLlGwvtedO1ggVv6SSpxEVXrVw7RfGZWw49sqA4HlFXqE7MZ66n
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2357048556066940736463613165123721405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfmon1.demos.edge.aws.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28386077474123151881511291620360431380199962579809293580507526781622944602671383424927362909638722132594468828543738827227444991822546514820619692896774566475820813563211947638016454209433172064287495138361596980195434882356042920588645585599950912883072886623662192768200029108399787325979694434677101842975725299318579825186112668506652771691121089384611052455381956712969358458439164814819464768449534343352752466878112863271930859934776378413864679259321757166449249530986714820575084276902652392583428755898410679326631377548725217900887961653089554731341182927453340344236812511024845493166132068769534166607723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1926499b28ab06ab9a734605bf048c5296bbed3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfmon1.demos.edge.aws.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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