2626c1-rolb.bus02.sit.rolb.ife.ninja

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:6e:5e:db:08:33:27:54:54:7e:ba:47:fc:8c:00:fb was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=2626c1-rolb.bus02.sit.rolb.ife.ninja

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6e:5e:db:08:33:27:54:54:7e:ba:47:fc:8c:00:fb
Serial Number (int): 5889988537586549434942316175149498619
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2d:b6:6c:4d:6d:9f:bc:4e:4b:70:da:71:8b:d2:98:82:d7:ea:59:48
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): be:8f:dd:48:50:47:c2:28:8b:07:cd:ba:4a:86:6d:21:4d:8d:de:d5
Fingerprint (sha256): 00:c2:02:3e:40:ec:e0:88:6b:4f:73:ac:61:dd:70:0e:d8:d0:33:68:c9:e2:db:cc:dd:cf:de:e4:0b:72:8d:cf

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate 2626c1-rolb.bus02.sit.rolb.ife.ninja

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 2626c1-rolb.bus02.sit.rolb.ife.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2626c1-rolb.bus02.sit.rolb.ife.ninja
www.bus02.sit.rolb.ife.ninja
r1.bus02.sit.rolb.ife.ninja
release1.bus02.sit.rolb.ife.ninja

Other certificates including the domain name ife.ninja

(limited to 100 certificates)
1385c5-rolb.cpi05.sit.rolb.ife.ninja
dss-r1.bmbdss.sit.dss.ife.ninja
r0.wth02.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit11.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
752c4-rolb.int01.sit.rolb.ife.ninja
1175c1-rolb.cml01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
2626c1-rolb.bus02.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit01.ife.ninja
2616c1-rolb.cpi02.sit.rolb.ife.ninja
tba-oat-green-eu-west-2.tbaoat01.ife.ninja
2613c1-rolb.cpi03.sit.rolb.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
bmb.tbadev01.ife.ninja
tba-sit-yellow-eu-west-2.tbasit02.ife.ninja
tba-sit-green-eu-west-2.tbasit06.ife.ninja
tba-sit-yellow-eu-west-2.tbasit05.ife.ninja
r0.cpi03.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit05.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
2682c1-rolb.int04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit02.ife.ninja
1174c2-rolb.wth03.sit.rolb.ife.ninja
release0.rtb01.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
2476c2-rolb.int06.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit13.ife.ninja
dss-r5.rolbdss.sit.dss.ife.ninja
tba-sit-green-eu-west-2.tbasit05.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
1174c4-rolb.cml01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit07.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
federated.sso.tiaa-sit.us.ife.ninja
dss-r3.rolbdss.sit.dss.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
1175c1-rolb.cml01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit06.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit12.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
release10.rtb01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit02.ife.ninja
930c6-rolb.wth03.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit06.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
1587c3-rolb.int06.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
742c4-rolb.cpi01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit08.ife.ninja
dss-r0.bmbdss.sit.dss.ife.ninja
tba-vpt-red-eu-west-2.tbavpt03.ife.ninja
1378c3-rolb.int08.sit.rolb.ife.ninja
754c4-rolb.int05.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
dss-r0.rolbemm.sit.dss.ife.ninja
tba-sit-red-eu-west-2.tbasit9.ife.ninja
tba-sit-green-eu-west-2.tbasit03.ife.ninja
740c3-rolb.cpi02.sit.rolb.ife.ninja
1174c5-rolb.rtb01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-green-eu-west-2.tbavpt01.ife.ninja
tba-sit-red-eu-west-2.tbasit04.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-sit-pink-eu-west-2.tbasit02.ife.ninja
tba-sit-yellow-eu-west-2.tbasit11.ife.ninja
740c1-rolb.cpi01.sit.rolb.ife.ninja
www.signingsoftware-uat.ife.ninja
tba-sit-red-eu-west-2.tbasit05.ife.ninja
bank.wth01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit02.ife.ninja
tba-sit-green-eu-west-2.tbasit03.ife.ninja
tba-sit-yellow-eu-west-2.tbasit01.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
1172c4-rolb.wth03.sit.rolb.ife.ninja
mybarclays-vpt-f.int06.vpt.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit08.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-sit-red-eu-west-2.tbasit02.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit04.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-sit-blue-eu-west-2.tbasit12.ife.ninja
federate.tiaa.awsoatln.ife.ninja
dss-r0.rolbdss.oat.dss.ife.ninja
744c2-rolb.int10.sit.rolb.ife.ninja

Certificate

The complete raw certificate details for 2626c1-rolb.bus02.sit.rolb.ife.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIQBG5e2wgzJ1RUfrpH/IwA+zANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDYwODAwMDAwMFoXDTI0MDcwNjIzNTk1OVowLzEt
MCsGA1UEAxMkMjYyNmMxLXJvbGIuYnVzMDIuc2l0LnJvbGIuaWZlLm5pbmphMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHiq6ruQ3aNqXhuemdy7R0L+
zBbwAYGauyyVUIbaR1//bjPH2HPWiQt4JUyp7AB3pfnxFcA5MfIh2PWctsVYrqxn
e17/w0ENThIv1mOJwwgrhfgc1J67yZ4E6dwcRR08BF993RqPSzUGxIm9LTDU5yEo
6D+l/mBGd9BoVNlPAyy/LLdnxOfcjw5uvMqhNQuo20+QbPmQ35Zm7vpgXQJ9XY4S
5bT4A07RqzrD0QZ6vzi+k4/hMa7MbfULrICWEu8Va/KHlOnaUh5kQ9lhbvpZ/7lQ
AUFIyvGodGKOYlXxcBdsN896nSixqvLO5tQnK1WQAXgTBIZjjH03sRiaTqFWMwID
AQABo4IB8TCCAe0wHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYD
VR0OBBYEFC22bE1tn7xOS3DacYvSmILX6llIMIGPBgNVHREEgYcwgYSCJDI2MjZj
MS1yb2xiLmJ1czAyLnNpdC5yb2xiLmlmZS5uaW5qYYIcd3d3LmJ1czAyLnNpdC5y
b2xiLmlmZS5uaW5qYYIbcjEuYnVzMDIuc2l0LnJvbGIuaWZlLm5pbmphgiFyZWxl
YXNlMS5idXMwMi5zaXQucm9sYi5pZmUubmluamEwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo
dHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0g
BAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRw
Oi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6
Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8E
AjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAr04Fr
kgPHl/xh4Wew7w9uL9z4LDpt3pyY01rkyoGzoqqGF9BA6HlZdXzianWTewUlMoH3
Gnq04KTn6G3Pm6NdYsh11i3MERYYBbunigy26s1pk1tdqygXkNHmwHpl+VzoQIfy
+pOQCMcSPAlLNeDfy2ATwFG3sp04tomKDZQutjqCasebv6ouS9cjGGdo24rDt2us
zG7tQNdZD4bYmBnsgiBodA8QfXl5keBKglzry8IcSDCy3N7LI1JH1PVEUauO/cBg
IHiPBchLjC9NDn17403tcpUncLbCBSlMb8d2WqUcIk9JFPkCfJ7xNqQOhXXEluB7
A2E4+sARGtyjpXz6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHiq6ruQ3aNqXhuemdy7
R0L+zBbwAYGauyyVUIbaR1//bjPH2HPWiQt4JUyp7AB3pfnxFcA5MfIh2PWctsVY
rqxne17/w0ENThIv1mOJwwgrhfgc1J67yZ4E6dwcRR08BF993RqPSzUGxIm9LTDU
5yEo6D+l/mBGd9BoVNlPAyy/LLdnxOfcjw5uvMqhNQuo20+QbPmQ35Zm7vpgXQJ9
XY4S5bT4A07RqzrD0QZ6vzi+k4/hMa7MbfULrICWEu8Va/KHlOnaUh5kQ9lhbvpZ
/7lQAUFIyvGodGKOYlXxcBdsN896nSixqvLO5tQnK1WQAXgTBIZjjH03sRiaTqFW
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5889988537586549434942316175149498619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2626c1-rolb.bus02.sit.rolb.ife.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22782398326986862068646098725620367989297670770530432042612042109378344396307787990913434258718708615623380313026831208206213730298374473006752947648336690548191523039364099950780420658170871287828335100096017406828922727674272617411112097552877943512210802465265425014360400870477769766944981137089215164512695959226153259244965688980885977703902167645841074084259440265567205210680453803508927799463817613765837037947718326884446234970487081154591281153897528441763576863008098293530677591889532031498984106486420678481766249190993854789006951908603375409021540950672223781581497837422714427824057925965895096686131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2db66c4d6d9fbc4e4b70da718bd29882d7ea5948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2626c1-rolb.bus02.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bus02.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r1.bus02.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release1.bus02.sit.rolb.ife.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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