prod.assets.act.legal.amazon.dev
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 01:af:23:97:9d:0a:57:b2:1a:c8:8b:5b:9a:bc:51:9b was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=prod.assets.act.legal.amazon.dev
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:af:23:97:9d:0a:57:b2:1a:c8:8b:5b:9a:bc:51:9bSerial Number (int): 2238601842418828101758181223679414683
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 94:44:38:07:61:d6:c5:d5:29:2f:2e:ec:38:51:76:65:2f:9e:96:83
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 47:97:2a:46:29:fd:50:cc:19:54:f9:ee:b4:61:02:74:8c:63:8b:f9
Fingerprint (sha256): 01:bf:fa:59:d9:a0:6a:8c:bd:32:76:84:e6:b5:16:eb:74:88:24:22:5a:b8:f7:ed:aa:36:54:0c:27:95:53:23
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate prod.assets.act.legal.amazon.dev
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prod.assets.act.legal.amazon.dev
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prod.assets.act.legal.amazon.dev
prod.assets.act.legal.amazon.com
prod.assets.act.legal.amazon.com
Other certificates including the domain name amazon.dev
(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
raven.tools.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
api.pdc.marjohar.people.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
alpha.euclid-remote.pricing.devices.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
yaayad.devo.copsassistant-cdn.pars-bpa.amazon.dev
*.eu-west-1.gamma.galactus.jihm.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
api.alpha.fe.tli.aces.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-east-1.prod.uis-man-wrangle.robotics.amazon.dev
data.ssres.beta.movement.talent.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
api.alpha-mahjyoth.case.threat-detection.cs.amazon.dev
hwr.674734f2f9443597a9d855cce5bfe7c8.hotwire.ecst.amazon.dev
svc.wewanyu.test.proxy.sram.review-tooling.security.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
beta.fe.d16g-rodeo.advertising.amazon.dev
alpha.us-west-2.alexa-automation.blink.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
corp.api-iad.gamma.hedwig.video.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
genaihub.ads.amazon.dev
opensearch-dash-chchu.eu.devo.purge.percolate.p13n.amazon.dev
turn.ring-mobility.devices.amazon.dev
rss-dpd-internal.internal.dev.rss.ring.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
prod.eu.latis.fclm.aft.amazon.dev
ers.mutescu.people.amazon.dev
hwr.f3d3ee9d29793b9cb526d592e34a8fb3.hotwire.ecst.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
*.srvindr-dev.estuary.pxt.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
beta.ext-alexandria-quicknotate.prime-video.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
vps.pdx.prod.vx.xray.prime-video.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
gamma.proton-proxy.people-engine.amazon.dev
beta.cruzoliv.people.amazon.dev
alpha.device.1p-idp.ihm.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
nlb.definitions.rliulin.people.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
raven.tools.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
api.pdc.marjohar.people.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
alpha.euclid-remote.pricing.devices.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
yaayad.devo.copsassistant-cdn.pars-bpa.amazon.dev
*.eu-west-1.gamma.galactus.jihm.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
api.alpha.fe.tli.aces.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-east-1.prod.uis-man-wrangle.robotics.amazon.dev
data.ssres.beta.movement.talent.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
api.alpha-mahjyoth.case.threat-detection.cs.amazon.dev
hwr.674734f2f9443597a9d855cce5bfe7c8.hotwire.ecst.amazon.dev
svc.wewanyu.test.proxy.sram.review-tooling.security.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
beta.fe.d16g-rodeo.advertising.amazon.dev
alpha.us-west-2.alexa-automation.blink.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
corp.api-iad.gamma.hedwig.video.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
genaihub.ads.amazon.dev
opensearch-dash-chchu.eu.devo.purge.percolate.p13n.amazon.dev
turn.ring-mobility.devices.amazon.dev
rss-dpd-internal.internal.dev.rss.ring.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
prod.eu.latis.fclm.aft.amazon.dev
ers.mutescu.people.amazon.dev
hwr.f3d3ee9d29793b9cb526d592e34a8fb3.hotwire.ecst.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
*.srvindr-dev.estuary.pxt.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
beta.ext-alexandria-quicknotate.prime-video.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
vps.pdx.prod.vx.xray.prime-video.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
gamma.proton-proxy.people-engine.amazon.dev
beta.cruzoliv.people.amazon.dev
alpha.device.1p-idp.ihm.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
nlb.definitions.rliulin.people.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
Certificate
The complete raw certificate details for prod.assets.act.legal.amazon.dev in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIQAa8jl50KV7IayItbmrxRmzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTEwOTAwMDAwMFoXDTI0MTIwNzIzNTk1OVowKzEp MCcGA1UEAxMgcHJvZC5hc3NldHMuYWN0LmxlZ2FsLmFtYXpvbi5kZXYwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoq4d1pnV1GZSXpmnC2XuFvfs4joHZ XY1QvUEh0f+X1b0zbra2bQHFmT2ljrIuN6S9BkuuKY7i83eAz1CzFycFXOLNn8/g 0DKHNb5jVdbTp47irFcQb44ttSevMas3EVtnTudOuh4QK2dA7xFfRfpD3YWdQto5 t9BP5RUtWHJ/pksI3uSLz5DyYjyOEE8kAnAwBeCwZgRObAa3Ay1odMpYemGf++dI SkdCW6L6QAgR3d9zfiSeQhrwrQTO0W360mRg0+13R+T/CytSltALGOuHHDSl+FNE 0SJw8e9zCSNF2BVDVhyoUwsgabFT0dOSoOrQH2TauB8qxsJ896oIAyOBAgMBAAGj ggMaMIIDFjAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4E FgQUlEQ4B2HWxdUpLy7sOFF2ZS+eloMwTQYDVR0RBEYwRIIgcHJvZC5hc3NldHMu YWN0LmxlZ2FsLmFtYXpvbi5kZXaCIHByb2QuYXNzZXRzLmFjdC5sZWdhbC5hbWF6 b24uY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0 cDovL2NybC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUF BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1 c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0 LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFt BIIBaQFnAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLtlyV EwAABAMARzBFAiEAkvdO4mY66iNT/42U+NCGEpDmeaNdOU750sEW5DF0j4UCIHTB /l0Gm18VpI2nvbMOq8i36M9e2gDfZYPb9GRHOtfvAHUASLDja9qmRzQP5WoC+p0w 6xxSActW3SyB2bu/qznYhHMAAAGLtlyVNAAABAMARjBEAiBSJ131XP04I73qcgrw KI+XfpYhF71vTWLDRT89E8PypAIgFt2o/lU8SeLEsTD/a/t9svZKB/fgU/Rtts39 F89QDiUAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAYu2XJVn AAAEAwBHMEUCIATa/DtTtHDehuwWtzsm4QfgrUxmT+/OyyMBLgEwx7OWAiEAit6Z lc7TOXPyjdg/i1x57gB3S2+WHhBS2HBkLsOmG8EwDQYJKoZIhvcNAQELBQADggEB AKUjZ31+4uwCQb5FGKSV2JlnUhNYUSdtqTxkffZJmhZxS+DqFcoQxE4O3h34aL84 4RyObhR9Zugr2FIKZVUbfwadDlB2WH48m5vzbgwG68i7bI9bT5sdjWd91liOX/QA gUuDOLDEe0jxDtpFO+Bxi749DGvj0ZSbKuTOU4MdxGR8/+1Jy5HJJQS5n1buXSRN eEPJpcMm4vwp0BaQTtVvVGMKs5xIEVQ6VVuWRGlTEXKDYIs6h2aw7IK0esOl+wo8 bYhMI7aBtOu+N4oR7aUu3/erPbGyoIy7aw24Say2qTmhuH6i3WKa9HH97jAAbRyF pD1kuaLFhLXJxfR2+bOLV5s= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKuHdaZ1dRmUl6Zpwtl7 hb37OI6B2V2NUL1BIdH/l9W9M262tm0BxZk9pY6yLjekvQZLrimO4vN3gM9Qsxcn BVzizZ/P4NAyhzW+Y1XW06eO4qxXEG+OLbUnrzGrNxFbZ07nTroeECtnQO8RX0X6 Q92FnULaObfQT+UVLVhyf6ZLCN7ki8+Q8mI8jhBPJAJwMAXgsGYETmwGtwMtaHTK WHphn/vnSEpHQlui+kAIEd3fc34knkIa8K0EztFt+tJkYNPtd0fk/wsrUpbQCxjr hxw0pfhTRNEicPHvcwkjRdgVQ1YcqFMLIGmxU9HTkqDq0B9k2rgfKsbCfPeqCAMj gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2238601842418828101758181223679414683 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.assets.act.legal.amazon.dev' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21292619405209334759149207353902792858988789183095817456350047935747283165716600662866680374367967705357575067524545380815527588815130750877717878767056516864472487464139090791757897917768338491035404576818720641278694966023923021216578183472873313606181678176593766456601261492601350680808503812583386377994160642157346409432464077064206560867646651064133859906399392989096755896922380291481552897412727763505045627587499921246876253362724444697976766396680389606302391835577918046364487670530965206715707586660008653285019681631986110999596044220483259775721394573766418798820775342116231290200161458084036672168833 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9444380761d6c5d5292f2eec385176652f9e9683 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.assets.act.legal.amazon.dev' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.assets.act.legal.amazon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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