api-a4116fe1.test2.projectkappa.xyz

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:e9:28:ea:54:52:00:02:57:9c:75:a8:bc:e1:30:92 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-a4116fe1.test2.projectkappa.xyz

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:e9:28:ea:54:52:00:02:57:9c:75:a8:bc:e1:30:92
Serial Number (int): 7856775008833241392046519383322865810
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 99:96:5e:42:d5:be:bb:b5:59:c7:f5:06:47:ed:38:02:77:4a:d5:a9
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 8b:41:6b:5c:36:c4:43:e4:d4:d1:8f:22:6a:49:3b:fd:0c:42:d7:0a
Fingerprint (sha256): 01:90:a6:b4:50:d7:56:7f:a6:a9:c0:57:ca:f7:6d:87:26:4a:38:67:0b:6f:17:a1:53:79:e1:cf:85:e5:80:12

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate api-a4116fe1.test2.projectkappa.xyz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-a4116fe1.test2.projectkappa.xyz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-a4116fe1.test2.projectkappa.xyz

Other certificates including the domain name projectkappa.xyz

(limited to 100 certificates)
vt-api-7bbcff87.test2.projectkappa.xyz
email-1bd6af5c.test3.projectkappa.xyz
email-6abfd428.test3.projectkappa.xyz
email-339137ce.test3.projectkappa.xyz
api-a4116fe1.test2.projectkappa.xyz
email-9d86da9b.test2.projectkappa.xyz
api-10eae06e.test3.projectkappa.xyz
email-f935601b.test2.projectkappa.xyz
email-9f07ab5c.test3.projectkappa.xyz
vt-api-3b89c039.test3.projectkappa.xyz
vt-api-b178f3a6.test2.projectkappa.xyz
vt-api-a8fe3641.test2.projectkappa.xyz
email-a8aff2af.test3.projectkappa.xyz
api-22e80487.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-584e0cc0.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-0fd2b4d7.test2.projectkappa.xyz
email-02544e97.test3.projectkappa.xyz
vt-api-db5e38da.test2.projectkappa.xyz
api-fc45ac63.test2.projectkappa.xyz
api-86d7f780.test2.projectkappa.xyz
email-e3bee7a0.test2.projectkappa.xyz
email-01813519.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
email-c68403c4.test2.projectkappa.xyz
email-5252ae92.test2.projectkappa.xyz
api-9341dd93.test3.projectkappa.xyz
email-ca1fa77f.test3.projectkappa.xyz
vt-api-74838ec7.test2.projectkappa.xyz
api-11fff43f.test3.projectkappa.xyz
api-0a2f2edd.test2.projectkappa.xyz
api-5972d8ee.test2.projectkappa.xyz
vt-api-855f7643.test3.projectkappa.xyz
email-171088af.test2.projectkappa.xyz
email-a3f312e2.test2.projectkappa.xyz
email-9341dd93.test3.projectkappa.xyz
email-2ec2d05a.test3.projectkappa.xyz
email-82073ce2.test2.projectkappa.xyz
vt-api-ba99a5fe.test3.projectkappa.xyz
api-941d4fb1.test2.projectkappa.xyz
email-2ed5fac0.test3.projectkappa.xyz
email-6db745aa.test3.projectkappa.xyz
api-08b2bd97.test2.projectkappa.xyz
email-cf7b1b74.test2.projectkappa.xyz
vt-api-a2b87c16.test2.projectkappa.xyz
api-3f7d8db1.test3.projectkappa.xyz
api-63f07cc4.test2.projectkappa.xyz
email-04b7baef.test2.projectkappa.xyz
email-f30660ce.test2.projectkappa.xyz
vt-api-479f787c.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-652a0d89.test2.projectkappa.xyz
api-2530578c.test3.projectkappa.xyz
api-d79fef50.test3.projectkappa.xyz
api-e6f49b67.test3.projectkappa.xyz
api-884ecac7.test2.projectkappa.xyz
vt-api-438742e5.test3.projectkappa.xyz
email-7be941c5.test2.projectkappa.xyz
email-04b7baef.test2.projectkappa.xyz
vt-api-1c124a00.test2.projectkappa.xyz
api-f839ff52.test3.projectkappa.xyz
vt-api-5252ae92.test2.projectkappa.xyz
email-024a3405.test2.projectkappa.xyz
vt-api-09eb41d2.test2.projectkappa.xyz
email-5972d8ee.test2.projectkappa.xyz
vt-api-a737ccd2.test2.projectkappa.xyz
api-9326fef8.test2.projectkappa.xyz
vt-api-59936492.test2.projectkappa.xyz
api-90af1aeb.test3.projectkappa.xyz
vt-api-dd44ad84.test2.projectkappa.xyz
vt-api-6a77c558.test2.projectkappa.xyz
email-3547b8c3.test2.projectkappa.xyz
email-2b6d8474.test3.projectkappa.xyz
api-c673d50d.test3.projectkappa.xyz
alpha.projectkappa.xyz
api-be8b25de.test3.projectkappa.xyz
api-89c72186.test2.projectkappa.xyz
email-83cfc8a7.test2.projectkappa.xyz
api-a8fe3641.test2.projectkappa.xyz
vt-api-f839ff52.test3.projectkappa.xyz
gerrit.test.projectkappa.xyz
api-f630324c.test2.projectkappa.xyz
vt-api-f630324c.test2.projectkappa.xyz
vt-api-a3f312e2.test2.projectkappa.xyz
email-5972d8ee.test2.projectkappa.xyz
vt-api-2709631a.test2.projectkappa.xyz
vt-api-df2cbbbf.test2.projectkappa.xyz
vt-api-6ce65c4a.test2.projectkappa.xyz
email-d94fcf6e.test2.projectkappa.xyz
api-ace404c6.test2.projectkappa.xyz
vt-api-0f669542.test3.projectkappa.xyz
api-0f3802d0.test2.projectkappa.xyz
email-a2b87c16.test2.projectkappa.xyz
email-d76b9440.test2.projectkappa.xyz
email-93accfb8.test3.projectkappa.xyz
vt-api-dce4c93a.test2.projectkappa.xyz
api-3d5a66a7.test2.projectkappa.xyz
gerrit.test.projectkappa.xyz
vt-api-8742d1d5.test2.projectkappa.xyz

Certificate

The complete raw certificate details for api-a4116fe1.test2.projectkappa.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEhTCCA22gAwIBAgIQBeko6lRSAAJXnHWovOEwkjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIxNTAwMDAwMFoXDTI1MDExMjIzNTk1OVowLjEs
MCoGA1UEAxMjYXBpLWE0MTE2ZmUxLnRlc3QyLnByb2plY3RrYXBwYS54eXowggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2B/k396pYNZr63j6TjbImy2Iv
+1mYc88MMehNMaFFIA+ZamT0OiGSrz7xgBsEk695Ax4kPHvaHNBaTg3NjbgjYw4C
1SMseGUcZvuDCbNRdcpjohmReI8QEQqsit2Ix9+7p0CegWvOizN41z7tXwKwFzHj
xxiebNHF8JCrxvdF4HJqz0YZDfhTwtQFP5m+Imi7GXGHeBbYmRi6TZT3ug/WZ3rw
to9JD42l7MFP/NybXdQIRBApMP4wbQ6D90w5PtbRSNztbvoTKMeobtdFg5xnyyCb
Q1Ebr1goqA4FpZZAw0tZMqq8Cblc9ZSWBIr8t2NG3SVfMH2rwpjINDjZxK1TAgMB
AAGjggGPMIIBizAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNV
HQ4EFgQUmZZeQtW+u7VZx/UGR+04AndK1akwLgYDVR0RBCcwJYIjYXBpLWE0MTE2
ZmUxLnRlc3QyLnByb2plY3RrYXBwYS54eXowEwYDVR0gBAwwCjAIBgZngQwBAgEw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7
BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNv
bS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v
b2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j
cnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAA
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAadDPicwRv
u0pBZEkK5VjkpqjJxfhZYY4gvJOP2e9MDAxgYGCqS57b2CbRKOlF8URV/gKV8KSA
ENM+CrqYAPEHplQXc6+Fa+hIrklD7dNgVDRM+BquPc5HobBCrfQXDAbMErIeQ1Ry
9/cdIe/9BQa+/orbicBsLF71tIQUdosKdpYmiPNLskCFC5VGBOWtr+BKJan8amm1
hk92AR1BSotP99RNPmfTTfZgej2vawjDJJAcLsXgaHqpXFpgkndgRB1PLvSYJyjB
clBpWeuy0CqDEn6Y29hHqDjPngTyGhYJJ1f05rbhvmzUHy1aiUQfFTBJLALbJHOh
rRr0z8eSsV2C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgf5N/eqWDWa+t4+k42y
JstiL/tZmHPPDDHoTTGhRSAPmWpk9Dohkq8+8YAbBJOveQMeJDx72hzQWk4NzY24
I2MOAtUjLHhlHGb7gwmzUXXKY6IZkXiPEBEKrIrdiMffu6dAnoFrzoszeNc+7V8C
sBcx48cYnmzRxfCQq8b3ReByas9GGQ34U8LUBT+ZviJouxlxh3gW2JkYuk2U97oP
1md68LaPSQ+NpezBT/zcm13UCEQQKTD+MG0Og/dMOT7W0Ujc7W76EyjHqG7XRYOc
Z8sgm0NRG69YKKgOBaWWQMNLWTKqvAm5XPWUlgSK/LdjRt0lXzB9q8KYyDQ42cSt
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7856775008833241392046519383322865810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-a4116fe1.test2.projectkappa.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22979303388268019637651403923486212957158362553050588828462306411604360638594422566714985740805449169451213333722399696389192471328971099547878691853732516546949215475250662110551041021269231498961136177950705310866989921812059485428465278206290635759008395734004334982788011940564305360195945322181016519146105831526548345392360163626664411213922595488484517916487680813803798638719585909104788516751845174977008422553225277598015955498367129882236107930159577807406862489198100175973666269940342653673689579551251505245628807838207514003492982867315385062647745805420799757780655561106437222217224919944244299607379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99965e42d5bebbb559c7f50647ed3802774ad5a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-a4116fe1.test2.projectkappa.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a7433e273046fbb4a4164490ae558e4a6a8c9c5f859618e20bc938fd9ef4c0c0c606060aa4b9edbd826d128e945f14455fe0295f0a48010d33e0aba9800f107a6541773af856be848ae4943edd36054344cf81aae3dce47a1b042adf4170c06cc12b21e435472f7f71d21effd0506befe8adb89c06c2c5ef5b48414768b0a76962688f34bb240850b954604e5adafe04a25a9fc6a69b5864f76011d414a8b4ff7d44d3e67d34df6607a3daf6b08c324901c2ec5e0687aa95c5a60927760441d4f2ef4982728c172506959ebb2d02a83127e98dbd847a838cf9e04f21a16092757f4e6b6e1be6cd41f2d5a89441f1530492c02db2473a1ad1af4cfc792b15d82