*.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:22:f1:c1:27:b3:cb:5e:a8:db:8b:4f:78:74:00:1e was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:22:f1:c1:27:b3:cb:5e:a8:db:8b:4f:78:74:00:1e
Serial Number (int): 12144493419291545792394541020185100318
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:46:6c:13:b6:59:8a:d1:ae:d4:55:72:45:c0:c1:93:40:2b:3e:aa
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): d5:ca:5a:dc:5e:74:83:36:52:82:3a:da:bf:75:a2:86:6d:3e:78:d6
Fingerprint (sha256): 00:c3:43:e0:7b:4d:12:12:70:d5:75:37:3a:93:3e:97:31:8f:cf:af:cf:b6:35:28:d0:ea:94:7c:98:a1:a3:41

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn
*.iam2.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn
*.tls2.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn
*.iam.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn
*.scram2.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn
*.scram.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn
*.tls.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
s3.cn-northwest-1.amazonaws.com.cn
*.canary3496f720.utknk1.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary2f55c250.6yywj3.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary97dcd0c61386.gooyfy.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary1f8805e087c3.tu6a4r.c1.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.58m43m.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryc15b02e9.t88y5i.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1670079290cell.lvov73.c2.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
*.canarydc0870343556.cdq0tp.c2.kafka.cn-north-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.privatelinkcanary0.yc7ect.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary6e808f40ba73.d1i490.c1.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.viojmz.c4.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.gtbmcn.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.y34xci.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryf335d056.0x21ts.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary5e3b98ead0b9.p9kn5h.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary979ee1beda56.ozltwf.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.firefoxtbcreat.ik596e.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.on59qh.c2.kafka.cn-north-1.amazonaws.com.cn
lrzaa5a42vhrigxno2r3eughse.cn-northwest-1.es.amazonaws.com.cn
3licg3hwbasqh2s3mbaa43e44i.cn-northwest-1.es.amazonaws.com.cn
*.canary862e4293447c.6fmord.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary5da44687.qdje6s.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1702011513.w5u9ni.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.testmskcluster2023.a264cu.c4.kafka.cn-north-1.amazonaws.com.cn
e3s4mcykgdqwskjt4yfnjcvplm.cn-northwest-1.es.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
zp33ldehjurut56qpvvyignwcu.cn-northwest-1.es.amazonaws.com.cn
*.canary57d54d81.adfjg6.c4.kafka.cn-northwest-1.amazonaws.com.cn
plqhkzwvsorvp6jvchirqsebia.cn-northwest-1.es.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2b9a8106.sfhicu.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary704b544ec27a.hx12kg.c3.kafka.cn-north-1.amazonaws.com.cn
*.testmskcluster2023.wwunyz.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.luyjcw.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary102fc44a.ht1r7v.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary125b55277948.jiwgs2.c4.kafka.cn-north-1.amazonaws.com.cn
*.execute-api.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.gccanaryserver.e12zpj.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary9493e9acdbf0.65fkbb.c2.kafka.cn-north-1.amazonaws.com.cn
j7kfriwwuf7bdefxyldbbxn3xi.cn-north-1.es.amazonaws.com.cn
*.gccanaryserverless.j19l71.c3.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canaryf637fadfd1b3.dy1tv6.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.e8axaw.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-b1ddb9f.1oavs3.c1.kafka.cn-northwest-1.amazonaws.com.cn
pzm6mu3qqogtnhe43xvbgg5mqu.cn-north-1.es.amazonaws.com.cn
n6y7v4e7wbikszrkibyepwy7mi.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.4yjciv.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary3da4cb72.70pf9i.c2.kafka.cn-northwest-1.amazonaws.com.cn
skylight-cm.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.gjyh6w.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canarye81769aa.y3s17p.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserver.lzzzoh.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary-ffa9908d722.6td4gt.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary8344e7dd5095.p7p3q4.c3.kafka.cn-north-1.amazonaws.com.cn
*.canarybbb126f0c041.8t96y8.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary5f1bda26d48a.ftpcz9.c2.kafka.cn-north-1.amazonaws.com.cn
*.canaryafa0e54a.ygb5o4.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
codedeploy-signer-cn-northwest-1.amazonaws.com.cn
twgpjwtbei6nsthlfpmzbl5hhy.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary0db4cb1e.oy6vos.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.5wt1zt.c3.kafka.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-15867.xhwv4s.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadca.xj55qc.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.kafkatos3withsasls.4llnmm.c3.kafka.cn-north-1.amazonaws.com.cn
hbn654jgaqpuftcce5yybvs2cy.cn-north-1.es.amazonaws.com.cn
uqoebdj5lch6aehczmdztetoha.cn-north-1.es.amazonaws.com.cn
*.gccanaryserverless.epmd6b.c4.kafka.cn-north-1.amazonaws.com.cn
*.gcsr1702033113.ld4gl7.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary4668d574.oy05yh.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canaryc68700e9.0o7xf6.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryc8c2a5ec.37n898.c3.kafka.cn-northwest-1.amazonaws.com.cn
lrb4qjbh4wegaeyxfz3zuh7zci.cn-north-1.es.amazonaws.com.cn
*.canary08a3ac708a5c.c8m005.c1.kafka.cn-north-1.amazonaws.com.cn
tqrfxciqkhie6arj7v3xglbvn4.cn-northwest-1.es.amazonaws.com.cn
k2226wmzqdmgdfmmzwgqbqqvce.cn-northwest-1.es.amazonaws.com.cn
*.canary119ddc562fd4.jbrsi0.c2.kafka.cn-north-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canary1af0cacf.spzuhv.c1.kafka.cn-northwest-1.amazonaws.com.cn

Certificate

The complete raw certificate details for *.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoXNyIdZQ7Xiiexl1mJ1
E5oiAIHzyxpJJSaXJpSoHFqA72OXH8GjTFiNpi534afslYC54C+uB7qh+SThs6/3
otkZOCuOiEfIKOdoZ65dbMAc8DrpO3BblXSe1pV4GDoY5/n4fhBWoWWDrRUd55uB
ZjshdQF3eBpGRI9jxPU7r8NEeM9Mitc+tHJEe0QbX7wAk1fF+0bcEykk/Zlj1Alv
PNgUuii+q09MRVBgR9EMVYZdGyNYuVnmBEXn3XlxJZ6mn+DeN8irBPaq73N5aorN
3Uy2tg2qcwXqvQssfSPnls23LOQjRBsW6dU+Zvo9BYwXh40QoxqnMOnI/rPPuNC8
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12144493419291545792394541020185100318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26071071956192779504321338375859300790869669225414077851141968940906377247125174783726348330362417923345341410813961653619149158054712381221187482424958368683967207870362983205434086831056888423393103450021617601224178466250491125141335935155854520984543023889408662001439637555889814334308405283051635061878205233280335718927784443073206982890147816658499355619836407680851066907276621365257958268530089479021592334283335901476036153243360376708575216439232507090129244189922715502422006439257984629403226019197861685875139302252886379240102148173085025910194927142203989028861526906206216656645707089375497943038977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc466c13b6598ad1aed4557245c0c193402b3eaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam2.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls2.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram2.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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