*.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:fc:be:31:29:e8:e5:94:5e:2d:2a:f0:0d:c3:22:00 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:fc:be:31:29:e8:e5:94:5e:2d:2a:f0:0d:c3:22:00
Serial Number (int): 15933824314959948532319224067489210880
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:89:ca:73:10:2d:e4:c5:30:c5:ec:84:d0:30:2e:c3:81:19:77:71
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): bb:49:7b:33:bb:74:ca:bb:b8:93:56:f0:54:02:33:72:1a:a4:ca:a9
Fingerprint (sha256): 00:f1:40:5e:32:37:ab:8f:ad:5e:a8:77:e0:e4:0b:4a:1c:6d:fe:47:30:34:f6:32:f9:f5:0d:b8:6b:bb:11:3d

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.scram2.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.scram.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.iam2.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.tls.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.tls2.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.iam.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
*.canary3496f720.utknk1.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary2f55c250.6yywj3.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadca.58m43m.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1670079290cell.lvov73.c2.kafka.cn-north-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
*.privatelinkcanary0.yc7ect.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary6e808f40ba73.d1i490.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary5e3b98ead0b9.p9kn5h.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary862e4293447c.6fmord.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.gcsr1702011513.w5u9ni.c1.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
zp33ldehjurut56qpvvyignwcu.cn-northwest-1.es.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary125b55277948.jiwgs2.c4.kafka.cn-north-1.amazonaws.com.cn
*.execute-api.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.j19l71.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary-b1ddb9f.1oavs3.c1.kafka.cn-northwest-1.amazonaws.com.cn
pzm6mu3qqogtnhe43xvbgg5mqu.cn-north-1.es.amazonaws.com.cn
n6y7v4e7wbikszrkibyepwy7mi.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.4yjciv.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary3da4cb72.70pf9i.c2.kafka.cn-northwest-1.amazonaws.com.cn
skylight-cm.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canarye81769aa.y3s17p.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-ffa9908d722.6td4gt.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary8344e7dd5095.p7p3q4.c3.kafka.cn-north-1.amazonaws.com.cn
*.canarybbb126f0c041.8t96y8.c1.kafka.cn-north-1.amazonaws.com.cn
codedeploy-signer-cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.gc-rc-sr-15867.xhwv4s.c1.kafka.cn-northwest-1.amazonaws.com.cn
hbn654jgaqpuftcce5yybvs2cy.cn-north-1.es.amazonaws.com.cn
*.canary4668d574.oy05yh.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
lrb4qjbh4wegaeyxfz3zuh7zci.cn-north-1.es.amazonaws.com.cn
*.canary1af0cacf.spzuhv.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary7716982ec1b2.darevb.c4.kafka.cn-north-1.amazonaws.com.cn
7q6ct4xfdbbgqsgnrt2qwbsk4m.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.cbo97l.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.bqj341.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary14c23cb5.wt916c.c2.kafka.cn-northwest-1.amazonaws.com.cn
kms.cn-north-1.amazonaws.com.cn
*.canary-781c9418bc1.mms28h.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-be1769827af.ejwa6m.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2c669bf2.jecmya.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canarycc433adb.ktcjtq.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.sik4mk.c3.kafka.cn-north-1.amazonaws.com.cn
cloudtrail-corvidae-id.cn-northwest-1.amazonaws.com.cn
*.gccanaryserver.p980l2.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-a6e8f5c.xwhdqa.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.0ziqyv.c3.kafka.cn-north-1.amazonaws.com.cn
r5cdyfzibtsx6zkuj6pn3hinx4.cn-north-1.es.amazonaws.com.cn
ehq4von7tc44pxdatg5tx75deq.cn-north-1.es.amazonaws.com.cn
*.canary28af34e5.hizkp9.c2.kafka.cn-northwest-1.amazonaws.com.cn
izb3kgcjkhcfne33ynpyocpk4e.cn-north-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.8056tt.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.idsfmo.c4.kafka.cn-northwest-1.amazonaws.com.cn
mwn6c4bqklrvipxyq5y6nmxvva.cn-northwest-1.es.amazonaws.com.cn
aws-im-gamma-fe.cn-northwest-1.amazonaws.com.cn
cun6gihl4xbmwlsegn46trey7u.cn-northwest-1.es.amazonaws.com.cn
*.canaryae2bd822.nz273m.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-897e1c59c48.59luxe.c1.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary-ea2d61c.n0xazh.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserver.vsdvg8.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.crossaccountplcana.dcm2k2.c2.kafka.cn-north-1.amazonaws.com.cn
2ncbskvz5oce4ufmty5c7ayw2y.cn-northwest-1.es.amazonaws.com.cn
*.cfnlaunchpadca.cvm3vy.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-18fc302.4q7y91.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary1f832b8e.labzz5.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary-58058c5226d.heavcu.c3.kafka.cn-north-1.amazonaws.com.cn
xf4syloebgztxd5cvcxhayf53y.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canaryd30ea50e.7btdh5.c2.kafka.cn-northwest-1.amazonaws.com.cn
ecs.cn-northwest-1.amazonaws.com.cn
website-gamma.marketplace.cn-northwest-1.amazonaws.com.cn
*.canarycad0b920.3yw2g3.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-f58f349.2u0pow.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.demo-cluster-1.dn0f3c.c2.kafka.cn-northwest-1.amazonaws.com.cn
imeh3sh63ibez7bmwvdvughley.cn-northwest-1.es.amazonaws.com.cn
*.canary-b737b5b3428.m6pydk.c3.kafka.cn-north-1.amazonaws.com.cn
datasync.cn-northwest-1.amazonaws.com.cn
*.canary-e0f3ce0.gte0fk.c2.kafka.cn-northwest-1.amazonaws.com.cn
mjmfcbesnhozdnnauiczwmmh4q.cn-northwest-1.es.amazonaws.com.cn
*.canaryc6d360e9.r2er1x.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.1yvbl1.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-b99d58f.86vx4q.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-db5f60dfb51.brai9q.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary18ee2004f676.pzm4t8.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary69c2d23b.tph8gl.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-d7b546f.r73c5a.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryfb1b380c.figtwr.c3.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary7784e303fab0.3bt3xw.c1.kafka.cn-north-1.amazonaws.com.cn

Certificate

The complete raw certificate details for *.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuthHDpDz8q7wYLl+oCy9
0C+HsLCBa7UJkR5wGZKf3va5bZF/J09lERTB2CizXgxyZYnZpxD3A6B4agby7XI6
Qb+8gLFBwcvJo1nyhiKp0Z4HmajZH+QeQMei4iIj/AdoYYth73ws+UfP6e25KiKU
UPk1y+FVqe0UetOfBG8cdUoooGptDvixvbi6rRTEZbXXSaXMOfHkUUaTuyjPE26W
Y8KvN7rddn5077DVTbofr1pOYgbvGxCJQJOjk3/XLiVxcTV7ONpODi/R6X0Xd/dj
BWlV3EGL5eJwWhkjoxCSwwVFULnwrtqg269xER4LcWdx4QgORFh7vFGTXLvNvp4n
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15933824314959948532319224067489210880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23586975166404306668883102515109008186919533767403272337222672558215722928671135202468365404346565448678795162745580089689231871652678391660796840559943809977167911385725433294642751773971725636506667058129545045782866185563351483465845271167191258965210666094128602771319174520373246354616550344590133635122778344658894864984324058061572804578458754923350163793408926912005207299448009215081156272280730087383531873307684187517487952069783182007106771583925224868005469877999139220009255547230332219456286342157947888275178074325659906242632454013275948047278116006788341985143882903331153983624752764618118866544397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9389ca73102de4c530c5ec84d0302ec381197771
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram2.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam2.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls2.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.privatelinkcan.hm2d78.c3.kafka.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b9f8f46ff400c3a41fe7f43d2506de6438198623f3bc5867db50d028ffc574e09a2bdcc6905027d23e55777ed4b35a8d91ef241bba1fc753b791f6a4df0a4e9949c4b7106d7b7043fd3f28b15cbc5f19637fba814dfb9af973ccb20a140fedb7ecb2d80abad1277ecf9cfca5616a9c043aaf75ec05d20d9cdaab5b044a6b8f6dbfc1b46e41fb60125ae952fe7708008d08f06895f2202ea488016007ff38ce7a5c6e783b6c517631a6ea04399221995649b81a8ba2c87a92eb69b12e4a4ffd87aab423d2e743d57b728864b64750b412a9155c360547fdd2ebe168d2c1dd45e529908d749752bb852ee2a6a76dea4421106744454bb1860838f8a59c1e1e81a7