s3.cn-northwest-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:d8:28:92:38:1d:f4:df:60:71:24:d3:87:98:e7:6b was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=s3.cn-northwest-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:d8:28:92:38:1d:f4:df:60:71:24:d3:87:98:e7:6b
Serial Number (int): 17073094951925762168777791394201266027
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:64:ad:8b:5a:f7:42:b9:00:66:79:70:aa:80:05:24:9a:5f:4f:23
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): ac:66:5a:46:8c:cc:09:31:93:85:cb:64:91:80:36:6c:4b:5f:50:cb
Fingerprint (sha256): 00:2d:57:ad:c3:0b:ee:88:43:10:82:06:bd:be:bb:e3:b9:e3:61:0f:07:7d:cf:f2:8e:93:9d:14:e5:50:0b:ef

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate s3.cn-northwest-1.amazonaws.com.cn

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.cn-northwest-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.cn-northwest-1.amazonaws.com.cn
*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn
bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.control.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn
bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn
bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.s3-control.cn-northwest-1.amazonaws.com.cn
bucket.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.s3-accesspoint.cn-northwest-1.amazonaws.com.cn
*.control.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.control.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.s3.cn-northwest-1.amazonaws.com.cn
*.control.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
s3.cn-northwest-1.amazonaws.com.cn
*.canary3496f720.utknk1.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary2f55c250.6yywj3.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary97dcd0c61386.gooyfy.c1.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.58m43m.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryc15b02e9.t88y5i.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1670079290cell.lvov73.c2.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.privatelinkcanary0.yc7ect.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary6e808f40ba73.d1i490.c1.kafka.cn-north-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.gtbmcn.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.y34xci.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryf335d056.0x21ts.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary5e3b98ead0b9.p9kn5h.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary979ee1beda56.ozltwf.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.firefoxtbcreat.ik596e.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.on59qh.c2.kafka.cn-north-1.amazonaws.com.cn
3licg3hwbasqh2s3mbaa43e44i.cn-northwest-1.es.amazonaws.com.cn
*.canary862e4293447c.6fmord.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary5da44687.qdje6s.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1702011513.w5u9ni.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.testmskcluster2023.a264cu.c4.kafka.cn-north-1.amazonaws.com.cn
e3s4mcykgdqwskjt4yfnjcvplm.cn-northwest-1.es.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
zp33ldehjurut56qpvvyignwcu.cn-northwest-1.es.amazonaws.com.cn
*.canary57d54d81.adfjg6.c4.kafka.cn-northwest-1.amazonaws.com.cn
plqhkzwvsorvp6jvchirqsebia.cn-northwest-1.es.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2b9a8106.sfhicu.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary704b544ec27a.hx12kg.c3.kafka.cn-north-1.amazonaws.com.cn
*.testmskcluster2023.wwunyz.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.luyjcw.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary102fc44a.ht1r7v.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary125b55277948.jiwgs2.c4.kafka.cn-north-1.amazonaws.com.cn
*.execute-api.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.gccanaryserver.e12zpj.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary9493e9acdbf0.65fkbb.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.j19l71.c3.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canaryf637fadfd1b3.dy1tv6.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.e8axaw.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-b1ddb9f.1oavs3.c1.kafka.cn-northwest-1.amazonaws.com.cn
pzm6mu3qqogtnhe43xvbgg5mqu.cn-north-1.es.amazonaws.com.cn
n6y7v4e7wbikszrkibyepwy7mi.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.4yjciv.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary3da4cb72.70pf9i.c2.kafka.cn-northwest-1.amazonaws.com.cn
skylight-cm.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.gjyh6w.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canarye81769aa.y3s17p.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserver.lzzzoh.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary-ffa9908d722.6td4gt.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary8344e7dd5095.p7p3q4.c3.kafka.cn-north-1.amazonaws.com.cn
*.canarybbb126f0c041.8t96y8.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary5f1bda26d48a.ftpcz9.c2.kafka.cn-north-1.amazonaws.com.cn
*.canaryafa0e54a.ygb5o4.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
codedeploy-signer-cn-northwest-1.amazonaws.com.cn
twgpjwtbei6nsthlfpmzbl5hhy.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary0db4cb1e.oy6vos.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.5wt1zt.c3.kafka.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-15867.xhwv4s.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadca.xj55qc.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.kafkatos3withsasls.4llnmm.c3.kafka.cn-north-1.amazonaws.com.cn
hbn654jgaqpuftcce5yybvs2cy.cn-north-1.es.amazonaws.com.cn
uqoebdj5lch6aehczmdztetoha.cn-north-1.es.amazonaws.com.cn
*.gccanaryserverless.epmd6b.c4.kafka.cn-north-1.amazonaws.com.cn
*.gcsr1702033113.ld4gl7.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary4668d574.oy05yh.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canaryc68700e9.0o7xf6.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryc8c2a5ec.37n898.c3.kafka.cn-northwest-1.amazonaws.com.cn
lrb4qjbh4wegaeyxfz3zuh7zci.cn-north-1.es.amazonaws.com.cn
tqrfxciqkhie6arj7v3xglbvn4.cn-northwest-1.es.amazonaws.com.cn
k2226wmzqdmgdfmmzwgqbqqvce.cn-northwest-1.es.amazonaws.com.cn
*.canary119ddc562fd4.jbrsi0.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary1af0cacf.spzuhv.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserver.2ebxjt.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryef38f1ce.7hlf6n.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.j3a68q.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary7716982ec1b2.darevb.c4.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.ey77of.c2.kafka.cn-northwest-1.amazonaws.com.cn
7q6ct4xfdbbgqsgnrt2qwbsk4m.cn-north-1.es.amazonaws.com.cn
*.canary6ed6e174.1ktht2.c1.kafka.cn-northwest-1.amazonaws.com.cn

Certificate

The complete raw certificate details for s3.cn-northwest-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZO5jUhQkNEonSB78+Dt
8YVyzeYLiGbX3Nx+X4X6EYbBlhzperOGgZILxNFXZVAk9JhR23X55rWuQ+dHPu/x
oGrGTCEW2v2t2IW/zeCPVBRBD1XgzlI/rXhaQG0xw/TzNn6vPY8O+ZMhCSUgQqeq
f825bSk3acN7v6MKyIxvmtR+hwRWlzWxsoE9j9p1ag+4dRjeM3dU2e8x4caXAqYv
PcbqRNUfDqhEdxStVCJu2QqFIH4qeWxkBkdnN7FHCPBy76r1Z6nb1K6zaou6Nct4
VhFXxc1+tU3hLb+4682orttFJozM2S5Dh8cNU4yLPcgWO9nLZitTqquak/wuirUA
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17073094951925762168777791394201266027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24941791898136067472139770590310669275842187703175677866670006067193605251834515693127589278771195270130143230536373623001455051487354510877714184393749208500428160811050325497025835506595844318496720377901582620489231335368848992073695771795101617184952204791063531586396366309106100249455975144410570204449406193152615633722892959948107679616596995689053045492802321306523087161768120133439536092538514616459679487671349449458120155504440384939402856141107601379236685714331438659488074746404844819747168472972130449027024061975399585982979314151090739057451835850352522363764065283008053313715533460208186878656663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0764ad8b5af742b900667970aa8005249a5f4f23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1694 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1a.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1b.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0c3cd7070b5783f11-no6hjjx0-cn-northwest-1c.s3.cn-northwest-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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