pilot.mss.centurylink.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:e3:9b:7a:d6:f0:55:ca:cb:7f:05:46:99:05:18:d6 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pilot.mss.centurylink.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:e3:9b:7a:d6:f0:55:ca:cb:7f:05:46:99:05:18:d6
Serial Number (int): 9157172867441633298796310495446243542
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b6:bd:7c:3e:ec:03:e5:70:88:1b:01:d1:86:ae:46:a4:0b:cb:38:95
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 36:9b:3c:5a:8b:8e:b3:2f:82:cf:88:0d:e5:4c:75:83:d6:7c:12:27
Fingerprint (sha256): 01:99:41:fb:75:45:b1:88:c1:e8:10:48:3e:5e:ee:d5:03:93:7d:36:f2:14:33:48:a7:f4:97:7b:28:9b:40:79

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate pilot.mss.centurylink.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pilot.mss.centurylink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pilot.mss.centurylink.com
pilot.ap1.mss.centurylink.com
pilot.eu1.mss.lumen.com
pilot.mss.lumen.com
pilot.ap1.mss.lumen.com
pilot.us1.mss.lumen.com
pilot.eu1.mss.centurylink.com
pilot.us1.mss.centurylink.com

Other certificates including the domain name centurylink.com

(limited to 100 certificates)
ctlchangead.centurylink.com
ctlchangead.centurylink.com
*.cloud.centurylink.com
rvmweb.centurylink.com
ipsops-test1.centurylink.com
www.centurylink.com
lab.iaf.centurylink.com
mcoe.centurylink.com
www.centurylink.com
businessvoip.centurylink.com
qxgisp-itv1-basicauth.centurylink.com
gadHCDHHS.ccc.centurylink.com
rmc-itv1.centurylink.com
vbs.level3.com
tcat-test1.centurylink.com
alumni.centurylink.com
pypi.mss.centurylink.com
promotions.centurylink.com
webops.centurylink.com
ctlmft1.centurylink.com
salesforceWFtest.centurylink.com
ixg-notices-test.centurylink.com
mrit.centurylink.com
cole.centurylink.com
ucexe1dmz.centurylink.com
iot7-test1.centurylink.com
ctg-itv1.centurylink.com
communicator6.centurylink.com
nagios.mss.centurylink.com
clustere-p2.alpha.expressway.hcs.centurylink.com
sipp-odc.centurylink.com
pilot.mss.centurylink.com
imaxml-notices-test.centurylink.com
LIVE.AF.CENTURYLINK.COM
cora.centurylink.com
smetrics.centurylink.com
hcde-ppo-itv1.centurylink.com
sapmobile-test1.centurylink.com
kai04.centurylink.com
gadSCOUPD.ccc.centurylink.com
splunk-test-ext.centurylink.com
sv.citedisplay.com
akamaisecure2.qualtrics.com
ebcontent.centurylink.com
sngaccesspool1.centurylink.com
news.centurylink.com
ctg-itv1.centurylink.com
gadCHUBB1.ccc.centurylink.com
ctlchangead.centurylink.com
qxgbc3-dmz.centurylink.com
dn1mtbaccess.centurylink.com
wfm.govccc.centurylink.com
controlnetworx.centurylink.com
ue1psbc02.govccc.centurylink.com
bgksbc.centurylink.com
ERM.Centurylink.com
clustere-p2.mhp.expressway.hcs.centurylink.com
ctlverify-test.centurylink.com
LIVE.IAF.CENTURYLINK.COM
LIVE.AF.CENTURYLINK.COM
de.controlcenter.centurylink.com
www.cert2.centurylink.com
tcat7-test1.centurylink.com
secure4s.scene7.com
qhome-test1.centurylink.com
psba.centurylink.com
gadSOFSUN.ccc.centurylink.com
ecd.lumen.com
bidmaster.centurylink.com
dn1mtbaccess.centurylink.com
tcat-preprod.centurylink.com
cag-ddc.ctlaccess.centurylink.com
eam.centurylink.com
wfmILSLLC.ccc.centurylink.com
promotions.centurylink.com
sipp-odc.centurylink.com
gadIOWAHT.ccc.centurylink.com
sipp-ddc.centurylink.com
jaadu-itv1.centurylink.com
get.centurylink.com
careeropportunities.centurylink.com
controlfederal-itv1.centurylink.com
ocsrp2.centurylink.com
ebus-test.centurylink.com
logs.mss.centurylink.com
ddcaccesspool.centurylink.com
ready.centurylink.com
vdi.centurylink.com
qgsisupplierportal.centurylink.com
selfservice.centurylink.com
controlcenter-e2e.centurylink.com
voiceconfig.centurylink.com
kai01.centurylink.com
hcmadminapi.govccc.centurylink.com
cid-adn.ccc.centurylink.com
qxgbc3-itv1-dmz.centurylink.com
sip.ctltest.centurylink.com
sapmobile-test1.centurylink.com
partnerlinkemea.centurylink.com
w3lweb-itv1-dmz.centurylink.com

Certificate

The complete raw certificate details for pilot.mss.centurylink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgIQBuObetbwVcrLfwVGmQUY1jANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDQxOTAwMDAwMFoXDTI0MDUxODIzNTk1OVowJDEi
MCAGA1UEAxMZcGlsb3QubXNzLmNlbnR1cnlsaW5rLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM7HTN2dfytIwnlOP36f8ri42qRx+7J4+iM76IeU
ebcPaKFJPBEe0T9LC6/x5wKejOX+k6m3LPTzii/cyrW0SO5gPa9nnW5b8QoKbMCY
B2JUK6Q4INW2QOeq5xUdHIlcaUj+dUy2JTrf2JL3lMfn4r91L45IFjoTU/eM5q7z
FwtwrFQK9g3s78lL60gV+LTPFwJM0g4gxnWauu3N07zVIfQf0f7nQ+RNkB+HVl9E
sYBoej4uERh76fzowjIHBDHPgHd1HEa+5oUAHF80bcZHGt+NUi2zAvz8gY9msmNa
YnOKiCPEzFLDqqkm7h2M/orT2rzhaBiUPIkjQoJ6Ceq4wJUCAwEAAaOCA7MwggOv
MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBS2vXw+
7APlcIgbAdGGrkakC8s4lTCB4wYDVR0RBIHbMIHYghlwaWxvdC5tc3MuY2VudHVy
eWxpbmsuY29tgh1waWxvdC5hcDEubXNzLmNlbnR1cnlsaW5rLmNvbYIXcGlsb3Qu
ZXUxLm1zcy5sdW1lbi5jb22CE3BpbG90Lm1zcy5sdW1lbi5jb22CF3BpbG90LmFw
MS5tc3MubHVtZW4uY29tghdwaWxvdC51czEubXNzLmx1bWVuLmNvbYIdcGlsb3Qu
ZXUxLm1zcy5jZW50dXJ5bGluay5jb22CHXBpbG90LnVzMS5tc3MuY2VudHVyeWxp
bmsuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250
cnVzdC5jb20vcjJtMDIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0
LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFv
BIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGHl7kB
hAAABAMASDBGAiEAxBAKoVnt2iqDfgqwfqLxjKs000nOUJvVccfxBT441hkCIQCU
Pp4HCfbkoz9qm/yxnbG4uPdq6fw011LU2qFzqRMSxAB2AHPZnokbTJZ4oCB9R53m
ssYc0FFecRkqjGuAEHrBd3K1AAABh5e5Ae0AAAQDAEcwRQIgd81yfOZcu2Bh5YYb
6pwqxa3r6hXcXUMReUly2Xc6svcCIQDuS0ReS+sGL4jSQHUOTx9mtA6q5K2VCUcg
+7GCjqXJQgB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABh5e5
AbMAAAQDAEcwRQIhAMm7wmo01JNCJJHwn1VkzAQ1TanuMBlzt5qHEczYSnCEAiAj
r4+G0dZGttWuh2LXCnccm5I28SeluHoMEywfTzhBnTANBgkqhkiG9w0BAQsFAAOC
AQEAjzpJQsRXhCrFsEfM0yvN835E4QEbu0Ph5l6FiDAqrfYwo+uhl9uMihj+sb65
UFEhbo4SK00nDEDsGtLTjpg/ZymkR5j1T3k0T1aSVTucWH+8lfT7i9yrtEPlIE6a
HeyizBkm+UviSGyJuBuWTGKaAiXA0PBoppWZ3LaLOL6P2ToO55peD2gWG2LM0f18
o782+HWlex57Mdj6qcWYws3mvH6+WcH4xxzf9vPsWCycG8yOLe24CpjfxeILk4+4
ktcPeH/RmmZh/F1zDE2qbiKMTnKoQfDCxyHL1zqGKhoXAJ/dNH9zrPD3+fr23z8J
z/kGbytWTNVy5AaRdRvbBGPG8w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsdM3Z1/K0jCeU4/fp/y
uLjapHH7snj6Izvoh5R5tw9ooUk8ER7RP0sLr/HnAp6M5f6Tqbcs9POKL9zKtbRI
7mA9r2edblvxCgpswJgHYlQrpDgg1bZA56rnFR0ciVxpSP51TLYlOt/YkveUx+fi
v3UvjkgWOhNT94zmrvMXC3CsVAr2DezvyUvrSBX4tM8XAkzSDiDGdZq67c3TvNUh
9B/R/udD5E2QH4dWX0SxgGh6Pi4RGHvp/OjCMgcEMc+Ad3UcRr7mhQAcXzRtxkca
341SLbMC/PyBj2ayY1pic4qII8TMUsOqqSbuHYz+itPavOFoGJQ8iSNCgnoJ6rjA
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9157172867441633298796310495446243542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pilot.mss.centurylink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26103369442421942539847785705502949360238114553682293379048680211706584755736384504388073347650017981965086900977204562641119675654236208490858759810409061251138664963075804616677682556463621000205524096792594653427055537438541595944566108861007922560694653188858257691046092871807124100062621607362636656314425979115247568817155450821987477165511434748044583853971499587763226609694448247283281215814073896840082434613861041266015447625391741490474643025340139274933000440337475798447438825716865440748524040405602266835755888260870852748637345487887342290006541361363611875900495270869573115102122950151612843737237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6bd7c3eec03e570881b01d186ae46a40bcb3895
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.mss.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.ap1.mss.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.eu1.mss.lumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.mss.lumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.ap1.mss.lumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.us1.mss.lumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.eu1.mss.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.us1.mss.centurylink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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