s3.cn-north-1.amazonaws.com.cn
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 0f:ef:aa:64:95:9f:23:81:92:6f:41:d7:de:76:b9:0a was issued on by Amazon.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=s3.cn-north-1.amazonaws.com.cn
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:ef:aa:64:95:9f:23:81:92:6f:41:d7:de:76:b9:0aSerial Number (int): 21182834864718087448889476986246183178
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: d2:d8:2a:3e:0c:6f:d4:81:86:01:b9:3d:aa:38:de:2e:64:3b:5c:37
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): df:2d:7d:2b:04:89:51:50:0f:8b:92:74:32:d3:77:d3:62:e3:73:00
Fingerprint (sha256): 00:7c:f7:67:6d:da:67:45:60:dd:d3:fc:e6:c8:cb:ea:7f:31:37:f5:9e:f2:ba:2c:0f:5a:4b:95:03:9c:36:e4
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate s3.cn-north-1.amazonaws.com.cn
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for s3.cn-north-1.amazonaws.com.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
s3.cn-north-1.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3.cn-north-1.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3.cn-north-1.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
Certificate
The complete raw certificate details for s3.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIL5zCCCs+gAwIBAgIQD++qZJWfI4GSb0HX3na5CjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxMjAwMDAwMFoXDTI1MDExMDIzNTk1OVowKTEn MCUGA1UEAxMeczMuY24tbm9ydGgtMS5hbWF6b25hd3MuY29tLmNuMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZEqWiAOdu+lYXL40WB07qUoosMrzojJ ttedcoywvLevY4FEQTLe4bzAzS9gd549FyBpTr1kcexPApE7QJksc/n9macCzvKP t8CMU39C5vE3wc2gW4tDg0U6ModPxTurrCaoDTtvDYlXYzV6blvLFUgm80rPIgTV e12vuQQ0wl6YcFUhp83ATS5PyOEBR/wbTwwtALTZxauxf9uh9jUiFk1QMVtR06lS jmjh+6HcV19Dj5erguuYGaqEVmko8Izg8xwUGUTxrEA3WNqhY/3ElTRibmSyeemZ 1wO4RUy2WUyyd24XWz26AXdKcQJPnne9JebqwVSi3NORGV3y9MD84QIDAQABo4II 9jCCCPIwHwYDVR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYE FNLYKj4Mb9SBhgG5Pao43i5kO1w3MIIHkwYDVR0RBIIHijCCB4aCHnMzLmNuLW5v cnRoLTEuYW1hem9uYXdzLmNvbS5jboJMKi5idWNrZXQudnBjZS0wMjgwMmI1YWVk NzVhODdlYy04c2psMmJuNy5zMy5jbi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNv bS5jboJYKi5idWNrZXQudnBjZS0wMjgwMmI1YWVkNzVhODdlYy04c2psMmJuNy1j bi1ub3J0aC0xYi5zMy5jbi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboJY Ki5idWNrZXQudnBjZS0wMjgwMmI1YWVkNzVhODdlYy04c2psMmJuNy1jbi1ub3J0 aC0xYy5zMy5jbi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboIgKi5zMy5j bi1ub3J0aC0xLmFtYXpvbmF3cy5jb20uY26CVmJ1Y2tldC52cGNlLTAyODAyYjVh ZWQ3NWE4N2VjLThzamwyYm43LWNuLW5vcnRoLTFhLnMzLmNuLW5vcnRoLTEudnBj ZS5hbWF6b25hd3MuY29tLmNuglEqLmFjY2Vzc3BvaW50LnZwY2UtMDI4MDJiNWFl ZDc1YTg3ZWMtOHNqbDJibjcuczMuY24tbm9ydGgtMS52cGNlLmFtYXpvbmF3cy5j b20uY26CWSouY29udHJvbC52cGNlLTAyODAyYjVhZWQ3NWE4N2VjLThzamwyYm43 LWNuLW5vcnRoLTFkLnMzLmNuLW5vcnRoLTEudnBjZS5hbWF6b25hd3MuY29tLmNu gl0qLmFjY2Vzc3BvaW50LnZwY2UtMDI4MDJiNWFlZDc1YTg3ZWMtOHNqbDJibjct Y24tbm9ydGgtMWEuczMuY24tbm9ydGgtMS52cGNlLmFtYXpvbmF3cy5jb20uY26C VmJ1Y2tldC52cGNlLTAyODAyYjVhZWQ3NWE4N2VjLThzamwyYm43LWNuLW5vcnRo LTFkLnMzLmNuLW5vcnRoLTEudnBjZS5hbWF6b25hd3MuY29tLmNuglkqLmNvbnRy b2wudnBjZS0wMjgwMmI1YWVkNzVhODdlYy04c2psMmJuNy1jbi1ub3J0aC0xYy5z My5jbi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboJYKi5idWNrZXQudnBj ZS0wMjgwMmI1YWVkNzVhODdlYy04c2psMmJuNy1jbi1ub3J0aC0xYS5zMy5jbi1u b3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboIoKi5zMy1jb250cm9sLmNuLW5v cnRoLTEuYW1hem9uYXdzLmNvbS5jboJYKi5idWNrZXQudnBjZS0wMjgwMmI1YWVk NzVhODdlYy04c2psMmJuNy1jbi1ub3J0aC0xZC5zMy5jbi1ub3J0aC0xLnZwY2Uu YW1hem9uYXdzLmNvbS5jboJdKi5hY2Nlc3Nwb2ludC52cGNlLTAyODAyYjVhZWQ3 NWE4N2VjLThzamwyYm43LWNuLW5vcnRoLTFkLnMzLmNuLW5vcnRoLTEudnBjZS5h bWF6b25hd3MuY29tLmNuglkqLmNvbnRyb2wudnBjZS0wMjgwMmI1YWVkNzVhODdl Yy04c2psMmJuNy1jbi1ub3J0aC0xYi5zMy5jbi1ub3J0aC0xLnZwY2UuYW1hem9u YXdzLmNvbS5jboJWYnVja2V0LnZwY2UtMDI4MDJiNWFlZDc1YTg3ZWMtOHNqbDJi bjctY24tbm9ydGgtMWMuczMuY24tbm9ydGgtMS52cGNlLmFtYXpvbmF3cy5jb20u Y26CLCouczMtYWNjZXNzcG9pbnQuY24tbm9ydGgtMS5hbWF6b25hd3MuY29tLmNu gk0qLmNvbnRyb2wudnBjZS0wMjgwMmI1YWVkNzVhODdlYy04c2psMmJuNy5zMy5j bi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboJdKi5hY2Nlc3Nwb2ludC52 cGNlLTAyODAyYjVhZWQ3NWE4N2VjLThzamwyYm43LWNuLW5vcnRoLTFjLnMzLmNu LW5vcnRoLTEudnBjZS5hbWF6b25hd3MuY29tLmNugkpidWNrZXQudnBjZS0wMjgw MmI1YWVkNzVhODdlYy04c2psMmJuNy5zMy5jbi1ub3J0aC0xLnZwY2UuYW1hem9u YXdzLmNvbS5jboJZKi5jb250cm9sLnZwY2UtMDI4MDJiNWFlZDc1YTg3ZWMtOHNq bDJibjctY24tbm9ydGgtMWEuczMuY24tbm9ydGgtMS52cGNlLmFtYXpvbmF3cy5j b20uY26CVmJ1Y2tldC52cGNlLTAyODAyYjVhZWQ3NWE4N2VjLThzamwyYm43LWNu LW5vcnRoLTFiLnMzLmNuLW5vcnRoLTEudnBjZS5hbWF6b25hd3MuY29tLmNugl0q LmFjY2Vzc3BvaW50LnZwY2UtMDI4MDJiNWFlZDc1YTg3ZWMtOHNqbDJibjctY24t bm9ydGgtMWIuczMuY24tbm9ydGgtMS52cGNlLmFtYXpvbmF3cy5jb20uY24wEwYD VR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy bTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAz LmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCuUg9Bk1fM8sBT5Y/GEl2NyrR9rTmedG3FcNy9LpMotPwWDAt+ VhAOl0z+iouH4qh+BoB6c/SPkny/0Gm5Q37h6ICb8ZLBLk8ldvF2pM9KXhTkRV6m QcRHHqzlgnxBVMSkKvYLLLjQfCCyTuwUWsEH8N7ZuG5zbiujgpvnnG+KwjA44yEs xldjORcu++cO1NB0tuMNle129hl2D6hJDT1A66NwzletBuFiqfQq8CT9oNPA+rUr UFnbMSlg9PnmJwsF1QmJaY99JTyYA1fXPjqyL3NS7/p1UKWJwOca7XsPNda+vFpP knXODoEGAGO//tDIhjmmRjpJaazXSagYQDLL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZEqWiAOdu+lYXL40WB0 7qUoosMrzojJttedcoywvLevY4FEQTLe4bzAzS9gd549FyBpTr1kcexPApE7QJks c/n9macCzvKPt8CMU39C5vE3wc2gW4tDg0U6ModPxTurrCaoDTtvDYlXYzV6blvL FUgm80rPIgTVe12vuQQ0wl6YcFUhp83ATS5PyOEBR/wbTwwtALTZxauxf9uh9jUi Fk1QMVtR06lSjmjh+6HcV19Dj5erguuYGaqEVmko8Izg8xwUGUTxrEA3WNqhY/3E lTRibmSyeemZ1wO4RUy2WUyyd24XWz26AXdKcQJPnne9JebqwVSi3NORGV3y9MD8 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21182834864718087448889476986246183178 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.cn-north-1.amazonaws.com.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20395950844828885980864546459461900924210026909824998817873374915307637277936659268545734898370511650617260963851977771086570405363361355248285469625340181523763638841456502490494627414030396250196041547845016516479490952137974221306467869200582112530797755270198930879793864919033143011050182820973729729310253521839220313884362825287751636819547862908565947238223409658659477793403280754909738536552910692046158775870524137437222639085076772674686093912036719994513926329425060633165604582402981674986435396814904663545414029808537289636377716626588265259069789473788436718328122263529646197303822314123198080285921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d2d82a3e0c6fd4818601b93daa38de2e643b5c37 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1930 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-north-1.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-north-1.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-north-1.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-north-1.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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