s3.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:ef:aa:64:95:9f:23:81:92:6f:41:d7:de:76:b9:0a was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=s3.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:ef:aa:64:95:9f:23:81:92:6f:41:d7:de:76:b9:0a
Serial Number (int): 21182834864718087448889476986246183178
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d2:d8:2a:3e:0c:6f:d4:81:86:01:b9:3d:aa:38:de:2e:64:3b:5c:37
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): df:2d:7d:2b:04:89:51:50:0f:8b:92:74:32:d3:77:d3:62:e3:73:00
Fingerprint (sha256): 00:7c:f7:67:6d:da:67:45:60:dd:d3:fc:e6:c8:cb:ea:7f:31:37:f5:9e:f2:ba:2c:0f:5a:4b:95:03:9c:36:e4

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate s3.cn-north-1.amazonaws.com.cn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.cn-north-1.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3.cn-north-1.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn

Certificate

The complete raw certificate details for s3.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZEqWiAOdu+lYXL40WB0
7qUoosMrzojJttedcoywvLevY4FEQTLe4bzAzS9gd549FyBpTr1kcexPApE7QJks
c/n9macCzvKPt8CMU39C5vE3wc2gW4tDg0U6ModPxTurrCaoDTtvDYlXYzV6blvL
FUgm80rPIgTVe12vuQQ0wl6YcFUhp83ATS5PyOEBR/wbTwwtALTZxauxf9uh9jUi
Fk1QMVtR06lSjmjh+6HcV19Dj5erguuYGaqEVmko8Izg8xwUGUTxrEA3WNqhY/3E
lTRibmSyeemZ1wO4RUy2WUyyd24XWz26AXdKcQJPnne9JebqwVSi3NORGV3y9MD8
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21182834864718087448889476986246183178
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20395950844828885980864546459461900924210026909824998817873374915307637277936659268545734898370511650617260963851977771086570405363361355248285469625340181523763638841456502490494627414030396250196041547845016516479490952137974221306467869200582112530797755270198930879793864919033143011050182820973729729310253521839220313884362825287751636819547862908565947238223409658659477793403280754909738536552910692046158775870524137437222639085076772674686093912036719994513926329425060633165604582402981674986435396814904663545414029808537289636377716626588265259069789473788436718328122263529646197303822314123198080285921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2d82a3e0c6fd4818601b93daa38de2e643b5c37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1930 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1c.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-02802b5aed75a87ec-8sjl2bn7-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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