one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:9f:cd:79:27:57:04:42:45:59:c9:59:4f:1b:a0:43 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:9f:cd:79:27:57:04:42:45:59:c9:59:4f:1b:a0:43
Serial Number (int): 7475882672183141817164359631917260867
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 24:2a:96:44:c8:a1:ec:c7:4a:d1:66:ff:80:69:e4:a7:e8:fb:f2:83
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 8f:fd:6e:5a:69:8e:5d:b5:f0:ea:3c:fb:ce:3a:4d:da:31:20:a2:02
Fingerprint (sha256): 01:5e:c1:7f:04:73:5c:6a:d8:83:5d:e9:4d:69:ff:73:41:c2:5e:96:6e:c3:24:f3:d2:ee:06:87:c9:c0:31:98

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud
oneapi-qa.aol.com

Other certificates including the domain name oath.cloud

(limited to 100 certificates)
sonar.subscriptions-obi-fe-aws-dev.aws.oath.cloud
token-iws-proxy.payments-aws-stg.aws.oath.cloud
splunk-srch-hd.subscriptions-devops-obi-aws-dev.aws.oath.cloud
tagcache.one-mobile-prod.aws.oath.cloud
*.vpa2.aws.oath.cloud
vp56agpfbf27kfdfk3qfnb6bjgadju44x.public.vespa.oath.cloud
*.video-platform-splunk.aws.oath.cloud
*.comms-notifications-prod.aws.oath.cloud
token-service.payments-aws-stg.aws.oath.cloud
ssp-dev-ats-test.one-mobile-dev.aws.oath.cloud
*.video-data-platform-prod.aws.oath.cloud
atlantis.uplynk-inf.aws.oath.cloud
splunk-indexer.ec-horizontal-rewards-tools.aws.oath.cloud
splunk-indexer.ec-horizontal-rewards-dev-tools.aws.oath.cloud
beta1-policies.yahoo.com
one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud
*.video-stage.aws.oath.cloud
partneradservice.aws-oath-domain-match-us-mbst.aws.oath.cloud
*.autos.yahoo.com
member-pulse-push.customer-care-voc-aws-dev.aws.oath.cloud
splunk-srch-hd.subscriptions-lca-content-aws-dev.aws.oath.cloud
abumedia-aws-partner.aws.oath.cloud
*.oath-marketing-verizonmedia-production.aws.oath.cloud
vwok3l4cd6wznlc5iwdglhkdrrwmetgys.public.vespa.oath.cloud
search-ui.payments-aws-services-stg.aws.oath.cloud
jef-ui-bdp.aolp-ds-dev.aws.oath.cloud
jenkins-master.one-mobile-dev.aws.oath.cloud
*.paranoids-cloudsec-fail.aws.oath.cloud
varfbm5bestuka7uvgajs36qsvm4j3r6z.public.vespa.oath.cloud
inbox-service.payments-aws-cde-stg.aws.oath.cloud
token-iws-proxy.payments-aws-dev.aws.oath.cloud
v6ptdyponqnkh74iz3pigob72xsio3re4.vespa.oath.cloud
*.www.yahoo.com
token-iws-proxy.payments-aws-stg.aws.oath.cloud
id-ds.corp.aol.com
data-collector.payments-aws-services-prod.aws.oath.cloud
id.b2b.oath.com
qa-srs-api.pcp.aws.oath.cloud
*.artifactory-sandbox.aws.oath.cloud
*.global.vespa.yahooapis.com
splunk.ec-horizontal-rewards-tools.aws.oath.cloud
token-iws-proxy.payments-aws-stg.aws.oath.cloud
*.broker.aolp-ds-prd.aws.oath.cloud
vxjzjakdi3o7npascqumixvqycimmqcz4.public-cd.vespa.oath.cloud
*.ivn-vibe-dev.aws.oath.cloud
demo-ui.payments-aws-services-stg.aws.oath.cloud
*.geneva-server.one-mobile-dev.aws.oath.cloud
brana-api.aws-oath-fires-brana-prod.aws.oath.cloud
streamer.finance.yahoo.com
mss-api.mss-dev.aws.oath.cloud
partneradservice.aws-oath-domain-match-us-mbst.aws.oath.cloud
qai-omni-broker.us-east-1b.aolp-ds-dev.aws.oath.cloud
*.video-data-platform-dev.aws.oath.cloud
yho.com
jp.techcrunch.com
sdk.yahooinc.com
qa-jef-api.dmp.us-east-1.aolp-ds-dev.aws.oath.cloud
one4p-data-ingest.cross-platform-analytics-alephd.aws.oath.cloud
chemtrail.home-ccannell.aws.oath.cloud
jenkins-master.one-mobile-dev.aws.oath.cloud
inbox-service.payments-aws-cde-dev.aws.oath.cloud
tls.subscriptions-devops-aws-dev.aws.oath.cloud
cd.donbot.mortent.global.vespa.oath.cloud
druid-dev-us-east-1.dcs-audience-insights-dev.aws.oath.cloud
staging.autoblog.com
*.alpo.mail.aol.com
stage.tokenmanager.finance.yahooapis.com
*.autos.yahoo.com
sports.yahoo.com
splunk-srch.subscriptions-devops-access-aws-dev.aws.oath.cloud
tls.subscriptions-devops-aws-dev.aws.oath.cloud
splunk-indexer.payments-aws-tools-dev.aws.oath.cloud
internal.ups-prod-vzm.ap-southeast-1.aolp-ds-prd.aws.oath.cloud
redash.pcp-aws-redash.aws.oath.cloud
v7fbrygd6estm3f7uultqjhlvlwrij6qg.vespa.oath.cloud
subs.communications.yahoo.com
id-uat.b2b.yahooinc.com
dmp-off-ingest.aolp-ds-prd.aws.oath.cloud
v6rprg4ffmjfi4zqz2pr32kvrfzqagzuf.vespa.oath.cloud
cdn.payments-aws-obi-cdn.aws.oath.cloud
*.onecreative.aws.oath.cloud
vvpyjwrconn4s3genqpo5wijznctuffmw.vespa.oath.cloud
vlne5srwzhcapsjlcuxw7x3iasz2czp5j.vespa.oath.cloud
bid.oath-exchange-dev.aws.oath.cloud
dmp-off-ingest-qai.aolp-ds-dev.aws.oath.cloud
dtm-origin.aolp-ds-prd.aws.oath.cloud
dooh-location-api.aws-oath-fires-brana-prod.aws.oath.cloud
railplitter.flurry-stg.aws.oath.cloud
grpc.tritonserver.search-web-qlas.aws.oath.cloud
token-service.payments-aws-cde-prod.aws.oath.cloud
ycm-receiver-dev-hx.ycm-aws-devel.aws.oath.cloud
*.c2s-sa-production.aws.oath.cloud
verizon-native-protocol-service.one-mobile-prod.aws.oath.cloud
token-service.payments-aws-stg.aws.oath.cloud
vqfjxpkobwsidxbiqtr5t7bsn2i45zumr.public-cd.vespa.oath.cloud
doc-search.vespa.oath.cloud
vqdsspkopzmwtfyj7lfe7hgcbjv2mv6dr.public.vespa.oath.cloud
id-uat.corp.aol.com
console.vespa-external.aws.oath.cloud
yahoo.com

Certificate

The complete raw certificate details for one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIQBZ/NeSdXBEJFWclZTxugQzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDMxNjAwMDAwMFoXDTI1MDQxNDIzNTk1OVowPDE6
MDgGA1UEAxMxb25lLWNlbnRyYWwtYXBpLXFhLW1zZS1la3MubXNlLWRldi5hd3Mu
b2F0aC5jbG91ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALhwSwNa
PTEdrkIEvbZKYHP3/x+xSrTHDSMGRpmhPMweDpoT91gemWLhqFdg9LWa462YCAGc
sOEG2eDYLKY9lrHOHu0kGv/QmK3kAgPmn2vO2QeVfMSFA7aKmiEsyALHV8IL9YMM
5snqqWyFV6AjMp5tnN6QZl9OXkAMCR+CtIU2p143SoHbx42VYaOrIjYIECJTgeK0
Kg4vGScrrPhrenizTp+1ypSA3Az1QdyBrOpzEw4gp7wUdeGsPhVlfjyaDewupv3m
cSf+bBu8GRh30NHDX25+809MB/briAhkDveEAI5bgQBsPiNHW50z3w/F14qQXurt
zTLKqIKTANNL6dsCAwEAAaOCAx8wggMbMB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0
vqvZVUIB1y4CMB0GA1UdDgQWBBQkKpZEyKHsx0rRZv+AaeSn6PvygzBPBgNVHREE
SDBGgjFvbmUtY2VudHJhbC1hcGktcWEtbXNlLWVrcy5tc2UtZGV2LmF3cy5vYXRo
LmNsb3VkghFvbmVhcGktcWEuYW9sLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG
A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29t
L3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v
Y3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny
dC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAw
ggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AM8RVu7VLnyv84db2Wkum+kacWdK
sBfsrAHSW3fOzDsIAAABjkWpSlUAAAQDAEgwRgIhANlPxNa2hi/+XyYqZF0gkJVh
MPbSwFFuU3xM24j/zklKAiEAtZyxhaH8mqDlPo5MshjBNxHHWlKz1CNm9xWTjwhM
XvMAdwB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAY5FqUoaAAAE
AwBIMEYCIQCB4u9nXK74UB40+Nrsjrsay7bv5GJ3dqL4DBOVBuFpwgIhAMvBFGUM
+pXs/MIf2m/oF6JeBm7Jd8PY1lAZvY3m9rv0AHYA5tIxY0B3jMEQQQbXcbnOwdJA
9paEhvu6hzId/R43jlAAAAGORalKKgAABAMARzBFAiBBpRYJY/Mr5x6MJ+qEM7ce
/dUZ48sY+VME4YkoZonuQQIhAKqOwlBfnQzWPmJkZAtDSiPAZnPNSpdmnzZyDgW7
S97kMA0GCSqGSIb3DQEBCwUAA4IBAQBzsz2UnwxPNBGEn0X1QiMmo8DP3cjo6WYN
qp12C05oiVpo2IoxvtQcPtP/avMWEDEWfn9oW9W3bjdeTgB8PQxkm7D3AghdM5eq
4bIVo60gLVGov1ydJ6oMBnTsyOMsmV6/fwlmr8CTg8PyECmh/dq01U5OoYymSAw7
6K0q08MM/TqQXlnNRqBp8uIkrpmJvuwA5rV95YfwILPvXs3w2EesUpEHVPNiNMQA
5Lgn5DFyISrNGFTmH2um4UwCEfDrAY/jWhC/2g8LGAIw0XjARe4HR9xIK21kV5D9
IDypzPMURZ2hb4tSY+wZyTMDS87G9FcGCgrmZzARzeik3rbMX6b9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHBLA1o9MR2uQgS9tkpg
c/f/H7FKtMcNIwZGmaE8zB4OmhP3WB6ZYuGoV2D0tZrjrZgIAZyw4QbZ4Ngspj2W
sc4e7SQa/9CYreQCA+afa87ZB5V8xIUDtoqaISzIAsdXwgv1gwzmyeqpbIVXoCMy
nm2c3pBmX05eQAwJH4K0hTanXjdKgdvHjZVho6siNggQIlOB4rQqDi8ZJyus+Gt6
eLNOn7XKlIDcDPVB3IGs6nMTDiCnvBR14aw+FWV+PJoN7C6m/eZxJ/5sG7wZGHfQ
0cNfbn7zT0wH9uuICGQO94QAjluBAGw+I0dbnTPfD8XXipBe6u3NMsqogpMA00vp
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7475882672183141817164359631917260867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23283221865677955212974757397707195206690922209786158457890993931544693465534058302049533634862550484701385117176164346334919024329879434490696900201938873821380110774269993962467662340874710600293878829701066696600906894438652151174602578909782203324711769004129179559744683543252881735424514923015971532954134368270742506368969560275196195389252071367730044601211524071519249373832901347291469601829896240854422119305121226092621632547897608168336111738462461590640212549427211135071990488022462975758002094861677948272291642858362546220877732903741946996624652285468554547942475208957266191144130287018040724548059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							242a9644c8a1ecc74ad166ff8069e4a7e8fbf283
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-central-api-qa-mse-eks.mse-dev.aws.oath.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneapi-qa.aol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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