apps.main.playground.online.anwb.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:2a:f6:2e:73:c1:2a:ba:30:1d:03:3e:65:1c:33:9e was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apps.main.playground.online.anwb.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:2a:f6:2e:73:c1:2a:ba:30:1d:03:3e:65:1c:33:9e
Serial Number (int): 20161489557914475407633122500678529950
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: da:9b:d0:b4:58:8f:0d:f5:33:e7:56:2f:a1:1f:10:56:41:37:57:ee
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 18:f7:aa:ed:d4:7f:63:a6:29:c9:67:53:6b:35:37:a9:ba:47:71:d6
Fingerprint (sha256): 02:6f:76:9c:91:cc:02:c3:0a:52:37:a1:69:b9:aa:76:54:4e:70:ce:37:1a:d8:7c:70:c9:f4:56:5c:c9:9e:8b

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate apps.main.playground.online.anwb.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.main.playground.online.anwb.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.main.playground.online.anwb.cloud

Other certificates including the domain name anwb.cloud

(limited to 100 certificates)
apps-ws.c1.playground.online.anwb.cloud
apps.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
v48.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
yormenisbriljant.internet-shared.aws.anwb.cloud
istio.playground.online.anwb.cloud
*.c1.playground.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
api.hv-verkeerseducatie-dev.aws-public.anwb.cloud
partspoint-dev.hv-wegenwacht-dev.aws-public.anwb.cloud
author-api.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
v6324f8ba.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps.main.dev.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps.c1.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
author.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.c1.playground.online.anwb.cloud
istio.playground.online.anwb.cloud
apps.main.playground.online.anwb.cloud
v4e.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
v5a9e6da1.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.c1.playground.online.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
ve7.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
apps-ws.main.dev.online.anwb.cloud
*.datascience-external-preprod.aws-public.anwb.cloud
*.int.eks.dev.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
apps-ws.main.dev.online.anwb.cloud
apps-ws.eks.dev.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
ve3.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.c1.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
*.int.eks.dev.online.anwb.cloud
*.c1.playground.online.anwb.cloud
event-platformpjm.datahub-test.aws.anwb.cloud
istio.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
intgrtn-tst-epl.datahub-test.aws.anwb.cloud
va6.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
atcar-affiliate-bucket-bb.datahub-pub-test.aws-public.anwb.cloud
apps.c1.playground.online.anwb.cloud
partspoint-sko.hv-wegenwacht-dev.aws-public.anwb.cloud
*.k8s.dev.online.anwb.cloud
istio.playground.online.anwb.cloud
*.int.eks.dev.online.anwb.cloud
istio.playground.online.anwb.cloud
apps.c1.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
va98eccab.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps.main.playground.online.anwb.cloud
apps-ws.eks.tooling.online.anwb.cloud
*.k8s.prd.online.anwb.cloud
apps-ws.c1.dev.online.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
vfd.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.istio.playground.online.anwb.cloud
atcar-affiliate-bucket.datahub-pub-test.aws-public.anwb.cloud
apps.main.playground.online.anwb.cloud
istio.playground.online.anwb.cloud
*.eks.dev.online.anwb.cloud
vc15a99d5.end-user.hv-verkeerseducatie-dev.aws-public.anwb.cloud
atcar-affiliate-bucket.datahub-pub-test.aws-public.anwb.cloud
istio.playground.online.anwb.cloud
apps-ws.monitoring.tooling.online.anwb.cloud
partspoint-dev.hv-wegenwacht-dev.aws-public.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
apps-ws.main.playground.online.anwb.cloud
event-platformwo.datahub-test.aws.anwb.cloud
sst.online-pub-prd.aws-public.anwb.cloud
v5a9e6da148.author.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps-ws.c1.playground.online.anwb.cloud
v4d.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
*.int.c1.playground.online.anwb.cloud
*.int.eks.tooling.online.anwb.cloud
*.c1.playground.online.anwb.cloud
apps-ws.eks.dev.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
debtor-apidn.o2c-dev.aws.anwb.cloud
*.int.c1.playground.online.anwb.cloud
*.c1.dev.online.anwb.cloud
*.int.c1.playground.online.anwb.cloud
apps.main.playground.online.anwb.cloud
*.int.istio.playground.online.anwb.cloud
apps.eks.dev.online.anwb.cloud
istio.playground.online.anwb.cloud
va0.license-office.hv-verkeerseducatie-dev.aws-public.anwb.cloud
apps.c1.playground.online.anwb.cloud
author.hv-verkeerseducatie-test.aws-public.anwb.cloud
apps.monitoring.tooling.online.anwb.cloud
*.eks.tooling.online.anwb.cloud

Certificate

The complete raw certificate details for apps.main.playground.online.anwb.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEizCCA3OgAwIBAgIQDyr2LnPBKrowHQM+ZRwznjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIwNTAwMDAwMFoXDTI1MDEwMjIzNTk1OVowMTEv
MC0GA1UEAxMmYXBwcy5tYWluLnBsYXlncm91bmQub25saW5lLmFud2IuY2xvdWQw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxf2TzWgHz6VBRzlw0B1h
bnBA7t2gbtRp7D0Z09uvpsFNKgqZPgyfCZwgs3mpHHblniV4sFEtlZHt+eIkOIV1
QyZf8eRsoQfOJLCrfZKxYTg+n6DOA1yGsY0GKgogVQh/hKE4P7mECjTXbChK4ydD
qbeNmLpBKlSqi2Gei3K2JMV3qlSan9g5pMEkKRd8e69pS+fjwTE3/RUs8pp00EDj
BXa59dJJS1FIK1DpNjrJ73eGdWRBBGSTw/aopHOxXZh3pS0qCM9MFwwnmz2hIVK6
fU0Nxyh0DNkTF45sIaH+e4PEy3GJ93ZVG6IxVv6h3Y82QWZQJTO2WAqJ1VBRU8gJ
AgMBAAGjggGSMIIBjjAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAd
BgNVHQ4EFgQU2pvQtFiPDfUz51YvoR8QVkE3V+4wMQYDVR0RBCowKIImYXBwcy5t
YWluLnBsYXlncm91bmQub25saW5lLmFud2IuY2xvdWQwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAzLmFtYXpvbnRy
dXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0
dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNlcjAMBgNVHRMB
Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
mB7S6q6h+v76AlLCWlTAf/knS12Z7WxQz5aR3wZbx/GhAFnE9hVqz2rjjMjPj6cR
XsvHFd++5DW5KFrXd4C7yzi4VtOK5IDGeLuJr4FFErz2A4qmdCvocDIX30QvzsVK
Sc+ZiQzhYKrHysf76LmzGfKmG0zr/ldTxeosXcrioHlSYs3SaDmB1u8erc+F4oTN
YkwDzJbTGr6MfiHxk996eFalHkV0Yfvob+6jTbRY0IV4XOZDJi8T7Vqw3IrVthJ9
IrYawZaHQ5KISU4P1q7wTsjeRjCm4zXQ5Jhnbz3GSscTzeYJYt7L/g6vK3+ca+Ig
TwILLJ0r0tf5DMf1rH0P
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8X9k81oB8+lQUc5cNAd
YW5wQO7doG7Uaew9GdPbr6bBTSoKmT4MnwmcILN5qRx25Z4leLBRLZWR7fniJDiF
dUMmX/HkbKEHziSwq32SsWE4Pp+gzgNchrGNBioKIFUIf4ShOD+5hAo012woSuMn
Q6m3jZi6QSpUqothnotytiTFd6pUmp/YOaTBJCkXfHuvaUvn48ExN/0VLPKadNBA
4wV2ufXSSUtRSCtQ6TY6ye93hnVkQQRkk8P2qKRzsV2Yd6UtKgjPTBcMJ5s9oSFS
un1NDccodAzZExeObCGh/nuDxMtxifd2VRuiMVb+od2PNkFmUCUztlgKidVQUVPI
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20161489557914475407633122500678529950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.main.playground.online.anwb.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24714102240770180714078981059690853949698495528224253992351067882054423990412558875216438626145104763971203001763483681694453060542176190985422483975514335084428942438905950110934718741951528670539877792052229015048197193143145241604721002237650931740165139590151407222808344964450873574150012005323747876391505172934296163827521749871728124644611398535315865799696982788719801031908513908238960710202572401265551403009152426331924169893035436415425692573490777463902325634724604335148932565502848018711693538743440480947509510045263995035304110932253989362498748184861876194579287762012910064305544210853028913465353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da9bd0b4588f0df533e7562fa11f1056413757ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.main.playground.online.anwb.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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