*.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:93:59:14:fe:1a:cc:54:9e:9c:ab:50:51:9c:d1:e8 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:93:59:14:fe:1a:cc:54:9e:9c:ab:50:51:9c:d1:e8
Serial Number (int): 14057354393713343164036370469119381992
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:90:36:67:89:85:d0:8f:c1:b2:f4:53:6b:a3:c2:f8:a1:db:93:2f
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 02:5f:14:ea:aa:61:a1:76:8c:2f:40:87:e2:c4:67:10:6d:93:e9:66
Fingerprint (sha256): 00:ef:e3:49:b6:32:bd:ef:57:5e:ab:1d:14:31:a5:2a:c0:be:cb:c0:5c:4b:f0:38:95:26:66:8b:68:2c:3d:b2

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn
*.iam2.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn
*.iam.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn
*.tls2.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn
*.scram.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn
*.tls.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn
*.scram2.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
s3.cn-northwest-1.amazonaws.com.cn
*.canary3496f720.utknk1.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary2f55c250.6yywj3.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary97dcd0c61386.gooyfy.c1.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.58m43m.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1670079290cell.lvov73.c2.kafka.cn-north-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.privatelinkcanary0.yc7ect.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary6e808f40ba73.d1i490.c1.kafka.cn-north-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canaryf335d056.0x21ts.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary5e3b98ead0b9.p9kn5h.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary979ee1beda56.ozltwf.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.firefoxtbcreat.ik596e.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary862e4293447c.6fmord.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.gcsr1702011513.w5u9ni.c1.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
zp33ldehjurut56qpvvyignwcu.cn-northwest-1.es.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2b9a8106.sfhicu.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.testmskcluster2023.wwunyz.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.luyjcw.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary102fc44a.ht1r7v.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary125b55277948.jiwgs2.c4.kafka.cn-north-1.amazonaws.com.cn
*.execute-api.cn-north-1.amazonaws.com.cn
*.canary9493e9acdbf0.65fkbb.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.j19l71.c3.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary-b1ddb9f.1oavs3.c1.kafka.cn-northwest-1.amazonaws.com.cn
pzm6mu3qqogtnhe43xvbgg5mqu.cn-north-1.es.amazonaws.com.cn
n6y7v4e7wbikszrkibyepwy7mi.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.4yjciv.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary3da4cb72.70pf9i.c2.kafka.cn-northwest-1.amazonaws.com.cn
skylight-cm.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canarye81769aa.y3s17p.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary-ffa9908d722.6td4gt.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary8344e7dd5095.p7p3q4.c3.kafka.cn-north-1.amazonaws.com.cn
*.canarybbb126f0c041.8t96y8.c1.kafka.cn-north-1.amazonaws.com.cn
*.canaryafa0e54a.ygb5o4.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
codedeploy-signer-cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.cfnlaunchpadcanary.5wt1zt.c3.kafka.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-15867.xhwv4s.c1.kafka.cn-northwest-1.amazonaws.com.cn
hbn654jgaqpuftcce5yybvs2cy.cn-north-1.es.amazonaws.com.cn
uqoebdj5lch6aehczmdztetoha.cn-north-1.es.amazonaws.com.cn
*.gcsr1702033113.ld4gl7.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary4668d574.oy05yh.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canaryc8c2a5ec.37n898.c3.kafka.cn-northwest-1.amazonaws.com.cn
lrb4qjbh4wegaeyxfz3zuh7zci.cn-north-1.es.amazonaws.com.cn
tqrfxciqkhie6arj7v3xglbvn4.cn-northwest-1.es.amazonaws.com.cn
k2226wmzqdmgdfmmzwgqbqqvce.cn-northwest-1.es.amazonaws.com.cn
*.canary1af0cacf.spzuhv.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary7716982ec1b2.darevb.c4.kafka.cn-north-1.amazonaws.com.cn
7q6ct4xfdbbgqsgnrt2qwbsk4m.cn-north-1.es.amazonaws.com.cn
*.canary4295856f.432mey.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary17b1d34638e3.rsf8dr.c4.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.cbo97l.c3.kafka.cn-northwest-1.amazonaws.com.cn
epiw22th55yg6svmdqamw7nktu.cn-north-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.bqj341.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary14c23cb5.wt916c.c2.kafka.cn-northwest-1.amazonaws.com.cn
kms.cn-north-1.amazonaws.com.cn
*.canaryd3951b25.9fkqtm.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-781c9418bc1.mms28h.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-be1769827af.ejwa6m.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2c669bf2.jecmya.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canarycc433adb.ktcjtq.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.sik4mk.c3.kafka.cn-north-1.amazonaws.com.cn
cloudtrail-corvidae-id.cn-northwest-1.amazonaws.com.cn
*.gccanaryserver.p980l2.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-a6e8f5c.xwhdqa.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.0ziqyv.c3.kafka.cn-north-1.amazonaws.com.cn
expt7hswbbfpgj3zei5envhnzm.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
fxmtjhlhftna4ogayvwxjfvev4.cn-north-1.es.amazonaws.com.cn
r5cdyfzibtsx6zkuj6pn3hinx4.cn-north-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
ehq4von7tc44pxdatg5tx75deq.cn-north-1.es.amazonaws.com.cn
*.canarycbadf0a25a6f.c13t3q.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary28af34e5.hizkp9.c2.kafka.cn-northwest-1.amazonaws.com.cn
izb3kgcjkhcfne33ynpyocpk4e.cn-north-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.8056tt.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.idsfmo.c4.kafka.cn-northwest-1.amazonaws.com.cn
mwn6c4bqklrvipxyq5y6nmxvva.cn-northwest-1.es.amazonaws.com.cn
lare7de7o63jxm4ymboycp5wz4.cn-north-1.es.amazonaws.com.cn
aws-im-gamma-fe.cn-northwest-1.amazonaws.com.cn
cun6gihl4xbmwlsegn46trey7u.cn-northwest-1.es.amazonaws.com.cn

Certificate

The complete raw certificate details for *.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIQCpNZFP4azFSenKtQUZzR6DANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIwNTAwMDAwMFoXDTI1MDEwMjIzNTk1OVowSzFJ
MEcGA1UEAwxAKi5jYW5hcnliYjA2ZmVhY2Q2ODIud2FoMmtyLmMyLmthZmthLmNu
LW5vcnRoLTEuYW1hem9uYXdzLmNvbS5jbjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhBJbnmgBpfOYIYgVHG6R5BGBrrVBw5wvnDgqxgunbiIkvQZVZm
X4Hl8sabTfNMxwX7b8XKO5Wkglsu9joZtWOn2ZMrtBl/JPp1ghbhlW8sRyg8Q/vM
h/VDLje4H2s/9DUvXGu2MXxXH7hywDBFYH205QF5Sgy3XyVJHV2cwIhzcdbMkQAH
s9nsfMJt2bZfAHphDOTjcn8Q/E4t+Qx4JZLfa53AZg/5YmeGjz80I1VFhfBnfZlg
CCV36kh28n/GUboM4UQuPA5jsOMnlH1FFgyenJxA6MnlGaCxOfiemtr/Dj9FjH8B
DACI09gyE/Hu3wHwwewMKqivDz7DbZvgkaUCAwEAAaOCA10wggNZMB8GA1UdIwQY
MBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBTNkDZniYXQj8Gy9FNr
o8L4oduTLzCCAfoGA1UdEQSCAfEwggHtgkAqLmNhbmFyeWJiMDZmZWFjZDY4Mi53
YWgya3IuYzIua2Fma2EuY24tbm9ydGgtMS5hbWF6b25hd3MuY29tLmNugkUqLmlh
bTIuY2FuYXJ5YmIwNmZlYWNkNjgyLndhaDJrci5jMi5rYWZrYS5jbi1ub3J0aC0x
LmFtYXpvbmF3cy5jb20uY26CRCouaWFtLmNhbmFyeWJiMDZmZWFjZDY4Mi53YWgy
a3IuYzIua2Fma2EuY24tbm9ydGgtMS5hbWF6b25hd3MuY29tLmNugkUqLnRsczIu
Y2FuYXJ5YmIwNmZlYWNkNjgyLndhaDJrci5jMi5rYWZrYS5jbi1ub3J0aC0xLmFt
YXpvbmF3cy5jb20uY26CRiouc2NyYW0uY2FuYXJ5YmIwNmZlYWNkNjgyLndhaDJr
ci5jMi5rYWZrYS5jbi1ub3J0aC0xLmFtYXpvbmF3cy5jb20uY26CRCoudGxzLmNh
bmFyeWJiMDZmZWFjZDY4Mi53YWgya3IuYzIua2Fma2EuY24tbm9ydGgtMS5hbWF6
b25hd3MuY29tLmNugkcqLnNjcmFtMi5jYW5hcnliYjA2ZmVhY2Q2ODIud2FoMmty
LmMyLmthZmthLmNuLW5vcnRoLTEuYW1hem9uYXdzLmNvbS5jbjATBgNVHSAEDDAK
MAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1h
em9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH
MAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw
AoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwG
A1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBABkcbId3O5VBxhazmLmEP9OJBJjMNOHmSyY9XLdevKBGoUMfint7jFJmd04p
UUzXx0kDNJdeX/SwiYEdYbNoPstFhDqxhifzoz/tMUHFGm5PEZQr147K5q1wdXvu
V52vxaqtVkH0HN9oL+gt8fep8xVPAtAfqGv7SVlE8mSRtJypZdDzdT/v7hP3t36x
FSJbGWXjA73T9nzlp/QJtlr399R/lcUQ+8U9+SFC5HYM8zQZCkAlNNu9A8/vUjLS
OYyJf6VLEmgufSeH59Z5l5hszmkYI++2DmkP84jU25YmA+yEg/+Z+K/KKzvpI4ee
QIMONIeMWDD9//C88zEPCzJw98k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEElueaAGl85ghiBUcbp
HkEYGutUHDnC+cOCrGC6duIiS9BlVmZfgeXyxptN80zHBftvxco7laSCWy72Ohm1
Y6fZkyu0GX8k+nWCFuGVbyxHKDxD+8yH9UMuN7gfaz/0NS9ca7YxfFcfuHLAMEVg
fbTlAXlKDLdfJUkdXZzAiHNx1syRAAez2ex8wm3Ztl8AemEM5ONyfxD8Ti35DHgl
kt9rncBmD/liZ4aPPzQjVUWF8Gd9mWAIJXfqSHbyf8ZRugzhRC48DmOw4yeUfUUW
DJ6cnEDoyeUZoLE5+J6a2v8OP0WMfwEMAIjT2DIT8e7fAfDB7AwqqK8PPsNtm+CR
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14057354393713343164036370469119381992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25279786357634621383061306516905249802260797902144042055377158230100309279726530854508795730523105267649680660205798246967218454783294518263340981801538477356112256263987090147730060734480510246893584686523137971143184925443268244361475818903698428318343794264708469176395118555254164258982269127151274241460555288771229410502406047294906247595721460997698527270049650161922391116148933719859689321420193313720525208970046321306800753299793765272142438408494384460210467258511713325154040520746680539733115435611746699488042064145044352210693583425430670607293068498706189064514432341021411599700011840869467051561381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd9036678985d08fc1b2f4536ba3c2f8a1db932f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam2.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls2.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram2.canarybb06feacd682.wah2kr.c2.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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