*.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:58:9f:74:0c:9e:11:50:98:2e:93:f4:ee:cd:92:86 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:58:9f:74:0c:9e:11:50:98:2e:93:f4:ee:cd:92:86
Serial Number (int): 4447840208404556884573525059780317830
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 45:53:2c:bb:d8:8c:63:e3:c8:04:80:57:11:99:83:38:4f:af:8c:53
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): de:09:e6:3e:21:52:44:e4:c0:6d:15:9d:90:55:79:f6:40:d2:11:52
Fingerprint (sha256): 00:7a:47:0e:f4:4d:f5:00:d5:c6:45:12:af:fe:13:53:1b:3b:eb:b0:d0:ac:ba:da:91:20:a6:24:76:4b:1b:72

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.tls2.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.scram2.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.iam.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.tls.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.scram.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.iam2.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
s3.cn-northwest-1.amazonaws.com.cn
*.canary3496f720.utknk1.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary2f55c250.6yywj3.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary97dcd0c61386.gooyfy.c1.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.58m43m.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1670079290cell.lvov73.c2.kafka.cn-north-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.privatelinkcanary0.yc7ect.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary6e808f40ba73.d1i490.c1.kafka.cn-north-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canaryf335d056.0x21ts.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary5e3b98ead0b9.p9kn5h.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary979ee1beda56.ozltwf.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.firefoxtbcreat.ik596e.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary862e4293447c.6fmord.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.gcsr1702011513.w5u9ni.c1.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
zp33ldehjurut56qpvvyignwcu.cn-northwest-1.es.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2b9a8106.sfhicu.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadca.luyjcw.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary102fc44a.ht1r7v.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary125b55277948.jiwgs2.c4.kafka.cn-north-1.amazonaws.com.cn
*.execute-api.cn-north-1.amazonaws.com.cn
*.canary9493e9acdbf0.65fkbb.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.j19l71.c3.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary-b1ddb9f.1oavs3.c1.kafka.cn-northwest-1.amazonaws.com.cn
pzm6mu3qqogtnhe43xvbgg5mqu.cn-north-1.es.amazonaws.com.cn
n6y7v4e7wbikszrkibyepwy7mi.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.4yjciv.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary3da4cb72.70pf9i.c2.kafka.cn-northwest-1.amazonaws.com.cn
skylight-cm.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canarye81769aa.y3s17p.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary-ffa9908d722.6td4gt.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary8344e7dd5095.p7p3q4.c3.kafka.cn-north-1.amazonaws.com.cn
*.canarybbb126f0c041.8t96y8.c1.kafka.cn-north-1.amazonaws.com.cn
*.canaryafa0e54a.ygb5o4.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
codedeploy-signer-cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.cfnlaunchpadcanary.5wt1zt.c3.kafka.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-15867.xhwv4s.c1.kafka.cn-northwest-1.amazonaws.com.cn
hbn654jgaqpuftcce5yybvs2cy.cn-north-1.es.amazonaws.com.cn
uqoebdj5lch6aehczmdztetoha.cn-north-1.es.amazonaws.com.cn
*.gcsr1702033113.ld4gl7.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary4668d574.oy05yh.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
lrb4qjbh4wegaeyxfz3zuh7zci.cn-north-1.es.amazonaws.com.cn
tqrfxciqkhie6arj7v3xglbvn4.cn-northwest-1.es.amazonaws.com.cn
*.canary1af0cacf.spzuhv.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary7716982ec1b2.darevb.c4.kafka.cn-north-1.amazonaws.com.cn
7q6ct4xfdbbgqsgnrt2qwbsk4m.cn-north-1.es.amazonaws.com.cn
*.canary4295856f.432mey.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary17b1d34638e3.rsf8dr.c4.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.cbo97l.c3.kafka.cn-northwest-1.amazonaws.com.cn
epiw22th55yg6svmdqamw7nktu.cn-north-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.bqj341.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary14c23cb5.wt916c.c2.kafka.cn-northwest-1.amazonaws.com.cn
kms.cn-north-1.amazonaws.com.cn
*.canaryd3951b25.9fkqtm.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-781c9418bc1.mms28h.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-be1769827af.ejwa6m.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2c669bf2.jecmya.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canarycc433adb.ktcjtq.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.sik4mk.c3.kafka.cn-north-1.amazonaws.com.cn
cloudtrail-corvidae-id.cn-northwest-1.amazonaws.com.cn
*.gccanaryserver.p980l2.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-a6e8f5c.xwhdqa.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.0ziqyv.c3.kafka.cn-north-1.amazonaws.com.cn
expt7hswbbfpgj3zei5envhnzm.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
fxmtjhlhftna4ogayvwxjfvev4.cn-north-1.es.amazonaws.com.cn
r5cdyfzibtsx6zkuj6pn3hinx4.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
ehq4von7tc44pxdatg5tx75deq.cn-north-1.es.amazonaws.com.cn
*.canarycbadf0a25a6f.c13t3q.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary28af34e5.hizkp9.c2.kafka.cn-northwest-1.amazonaws.com.cn
izb3kgcjkhcfne33ynpyocpk4e.cn-north-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.8056tt.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.idsfmo.c4.kafka.cn-northwest-1.amazonaws.com.cn
mwn6c4bqklrvipxyq5y6nmxvva.cn-northwest-1.es.amazonaws.com.cn
lare7de7o63jxm4ymboycp5wz4.cn-north-1.es.amazonaws.com.cn
aws-im-gamma-fe.cn-northwest-1.amazonaws.com.cn
cun6gihl4xbmwlsegn46trey7u.cn-northwest-1.es.amazonaws.com.cn
*.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canary243e2408.p08fo4.c1.kafka.cn-northwest-1.amazonaws.com.cn

Certificate

The complete raw certificate details for *.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIQA1ifdAyeEVCYLpP07s2ShjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIwNTAwMDAwMFoXDTI1MDEwMjIzNTk1OVowSzFJ
MEcGA1UEAwxAKi5jYW5hcnlhZTJiZDgyMi5uejI3M20uYzIua2Fma2EuY24tbm9y
dGh3ZXN0LTEuYW1hem9uYXdzLmNvbS5jbjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJj9nL2i0Y8dR7Y2FhWbdVuihctuVRYbyRPHfcoYY2R/TsOOmtyX
k2et9Bk+CNwN/0yGGCshKwbkKP7Uggm8txG9dUxLY4iod5z8f29YHXDcxf/66VXU
tHdkTTcajhq0wnIFUm8pmLOtu5SZHpTzktgnhsu/2vf06nC+tBbqXe5xJ2xsvwbu
bkAV89SO14aJzC46s7QAt6RWFi4hW0m6bMdsDnsNrVvaueVb+18CS1YjnQK2SmMj
7tWMph20U8/FrlkdPtcFqW6oAqkhzmZw+Lldlu6XBRGzXoTGIi+qNCW7JQNV334J
VhhezXa5VDENecY4UP4k2OkWpVZb79jjuIMCAwEAAaOCA10wggNZMB8GA1UdIwQY
MBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBRFUyy72Ixj48gEgFcR
mYM4T6+MUzCCAfoGA1UdEQSCAfEwggHtgkAqLmNhbmFyeWFlMmJkODIyLm56Mjcz
bS5jMi5rYWZrYS5jbi1ub3J0aHdlc3QtMS5hbWF6b25hd3MuY29tLmNugkUqLnRs
czIuY2FuYXJ5YWUyYmQ4MjIubnoyNzNtLmMyLmthZmthLmNuLW5vcnRod2VzdC0x
LmFtYXpvbmF3cy5jb20uY26CRyouc2NyYW0yLmNhbmFyeWFlMmJkODIyLm56Mjcz
bS5jMi5rYWZrYS5jbi1ub3J0aHdlc3QtMS5hbWF6b25hd3MuY29tLmNugkQqLmlh
bS5jYW5hcnlhZTJiZDgyMi5uejI3M20uYzIua2Fma2EuY24tbm9ydGh3ZXN0LTEu
YW1hem9uYXdzLmNvbS5jboJEKi50bHMuY2FuYXJ5YWUyYmQ4MjIubnoyNzNtLmMy
LmthZmthLmNuLW5vcnRod2VzdC0xLmFtYXpvbmF3cy5jb20uY26CRiouc2NyYW0u
Y2FuYXJ5YWUyYmQ4MjIubnoyNzNtLmMyLmthZmthLmNuLW5vcnRod2VzdC0xLmFt
YXpvbmF3cy5jb20uY26CRSouaWFtMi5jYW5hcnlhZTJiZDgyMi5uejI3M20uYzIu
a2Fma2EuY24tbm9ydGh3ZXN0LTEuYW1hem9uYXdzLmNvbS5jbjATBgNVHSAEDDAK
MAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1h
em9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH
MAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw
AoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwG
A1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAFgCXUjM7YB4sN7VYkUW+b69Cqft6IOk8pX3JRlF+Dx++j8R9j74aDIZ+1lj
08zHQwtBPSuycVY8Du2r1z5Mc4KWFQeQ1teZPNugSgm/Q6FJyr8y2nx/Obu2JUbW
yPkkKFfAEBOOKlHLs2yaaHjacGw71xDMJxrtZtpVYPO/OOxtQZ3goZW00cbLs2pQ
E/tszyDcuGYWPETBZtqkHp/myaLJMbr2gtEI/HjCFKWFxMmwtRIGkeIfo0j8J5j9
in33GCRDtiEjibbxe+2DySHdZ42p/QrbugxLWZdCExfGtAw83w+ZNFmNCipFFpPS
psU8utmWLHu2OpBs6h23V4Xjyn4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP2cvaLRjx1HtjYWFZt1
W6KFy25VFhvJE8d9yhhjZH9Ow46a3JeTZ630GT4I3A3/TIYYKyErBuQo/tSCCby3
Eb11TEtjiKh3nPx/b1gdcNzF//rpVdS0d2RNNxqOGrTCcgVSbymYs627lJkelPOS
2CeGy7/a9/TqcL60Fupd7nEnbGy/Bu5uQBXz1I7XhonMLjqztAC3pFYWLiFbSbps
x2wOew2tW9q55Vv7XwJLViOdArZKYyPu1YymHbRTz8WuWR0+1wWpbqgCqSHOZnD4
uV2W7pcFEbNehMYiL6o0JbslA1XffglWGF7NdrlUMQ15xjhQ/iTY6RalVlvv2OO4
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4447840208404556884573525059780317830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19313283225577883486567246461149974274457041686855380461144443442814346955336499418065868853373411268515150029104795407209633276399763758663318527741446656229915385117097328721987113845360468565614844111469977271012371216434960451414110742151919108703953508492173293516137128057005445209213529281534048196179583411274612732484449853439065232921404862351067392525202280608539765670973664888211608211814972329332250314569627961823882392260282048604977888799563540604839406629622213849061266265116666141360433743678313301455753021407922497537716687201514485410530833012886220051143216798062685998243353016773194973165699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45532cbbd88c63e3c8048057119983384faf8c53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls2.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram2.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam2.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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