tba-sit-blue-eu-west-2.tbasit06.ife.ninja

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:b3:6e:b3:cd:69:6d:93:26:33:39:6a:77:bc:b4:c9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tba-sit-blue-eu-west-2.tbasit06.ife.ninja

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b3:6e:b3:cd:69:6d:93:26:33:39:6a:77:bc:b4:c9
Serial Number (int): 4919350435501855178087337171028325577
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e6:4d:03:25:ff:b2:8f:0f:16:c0:f5:fb:40:c0:67:39:90:f1:72:37
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ca:24:16:46:46:fc:af:ff:ac:83:d5:54:42:0e:b8:8a:84:c0:73:36
Fingerprint (sha256): 02:b6:25:e6:41:a9:57:fe:7a:0b:a5:49:85:8d:3a:fb:14:ed:4d:58:1b:37:ee:22:c0:37:70:19:2d:30:c7:9e

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate tba-sit-blue-eu-west-2.tbasit06.ife.ninja

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tba-sit-blue-eu-west-2.tbasit06.ife.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tba-sit-blue-eu-west-2.tbasit06.ife.ninja
www.tbasit06.ife.ninja

Other certificates including the domain name ife.ninja

(limited to 100 certificates)
1385c5-rolb.cpi05.sit.rolb.ife.ninja
dss-r1.bmbdss.sit.dss.ife.ninja
r0.wth02.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit11.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
752c4-rolb.int01.sit.rolb.ife.ninja
1175c1-rolb.cml01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
2626c1-rolb.bus02.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit01.ife.ninja
2616c1-rolb.cpi02.sit.rolb.ife.ninja
tba-oat-green-eu-west-2.tbaoat01.ife.ninja
2613c1-rolb.cpi03.sit.rolb.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
bmb.tbadev01.ife.ninja
tba-sit-yellow-eu-west-2.tbasit02.ife.ninja
tba-sit-green-eu-west-2.tbasit06.ife.ninja
tba-sit-yellow-eu-west-2.tbasit05.ife.ninja
r0.cpi03.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit05.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
2682c1-rolb.int04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit02.ife.ninja
1174c2-rolb.wth03.sit.rolb.ife.ninja
release0.rtb01.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
2476c2-rolb.int06.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit13.ife.ninja
dss-r5.rolbdss.sit.dss.ife.ninja
tba-sit-green-eu-west-2.tbasit05.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
1174c4-rolb.cml01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit07.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
federated.sso.tiaa-sit.us.ife.ninja
dss-r3.rolbdss.sit.dss.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
1175c1-rolb.cml01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit06.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit12.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
release10.rtb01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit02.ife.ninja
930c6-rolb.wth03.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit06.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
1587c3-rolb.int06.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
742c4-rolb.cpi01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit08.ife.ninja
dss-r0.bmbdss.sit.dss.ife.ninja
tba-vpt-red-eu-west-2.tbavpt03.ife.ninja
1378c3-rolb.int08.sit.rolb.ife.ninja
754c4-rolb.int05.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
dss-r0.rolbemm.sit.dss.ife.ninja
tba-sit-red-eu-west-2.tbasit9.ife.ninja
tba-sit-green-eu-west-2.tbasit03.ife.ninja
740c3-rolb.cpi02.sit.rolb.ife.ninja
1174c5-rolb.rtb01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-green-eu-west-2.tbavpt01.ife.ninja
tba-sit-red-eu-west-2.tbasit04.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-sit-pink-eu-west-2.tbasit02.ife.ninja
tba-sit-yellow-eu-west-2.tbasit11.ife.ninja
740c1-rolb.cpi01.sit.rolb.ife.ninja
www.signingsoftware-uat.ife.ninja
tba-sit-red-eu-west-2.tbasit05.ife.ninja
bank.wth01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit02.ife.ninja
tba-sit-green-eu-west-2.tbasit03.ife.ninja
tba-sit-yellow-eu-west-2.tbasit01.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
1172c4-rolb.wth03.sit.rolb.ife.ninja
mybarclays-vpt-f.int06.vpt.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit08.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-sit-red-eu-west-2.tbasit02.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit04.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-sit-blue-eu-west-2.tbasit12.ife.ninja
federate.tiaa.awsoatln.ife.ninja
dss-r0.rolbdss.oat.dss.ife.ninja
744c2-rolb.int10.sit.rolb.ife.ninja

Certificate

The complete raw certificate details for tba-sit-blue-eu-west-2.tbasit06.ife.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEqTCCA5GgAwIBAgIQA7Nus81pbZMmMzlqd7y0yTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIxODAwMDAwMFoXDTI1MDExNjIzNTk1OVowNDEy
MDAGA1UEAxMpdGJhLXNpdC1ibHVlLWV1LXdlc3QtMi50YmFzaXQwNi5pZmUubmlu
amEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY6jk2rEZpnuO5hUx
cT2yioCoDnhr3z7CYGgYvOF1IUQj+epD7SvwNK+uuedUnmbf3F9pWQbzuNvfXG47
kbnPtFTMsogDUoZ84BI4We8pLW26jP2Bp4Qc2urA3+o1Mj8nINfjaDoYV3uZ7OuQ
0RnxCABOSDRbs9KF1H72TkeR9Gjx65dL8O+rYH5u2zVlGZ48wWcwGUbmm/rArl+A
fwZUmxDtp77vO1EZqiTxMuGKY6xoi+04rZGCfF8arHC3Qtlazu8pXUQhAR6IdycI
9FBVM4AeFjwo2ykkB93SobgLPsrvK9TwiVO3cyRryJOAMKwpgaxWlAZxYyS9hJqR
XKArAgMBAAGjggGtMIIBqTAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC
4jAdBgNVHQ4EFgQU5k0DJf+yjw8WwPX7QMBnOZDxcjcwTAYDVR0RBEUwQ4IpdGJh
LXNpdC1ibHVlLWV1LXdlc3QtMi50YmFzaXQwNi5pZmUubmluamGCFnd3dy50YmFz
aXQwNi5pZmUubmluamEwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg
LqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmww
dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5h
bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1h
em9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC
BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCofzvYuKqjd+FqQyJUjRfzVWbO
NlfXtTxQ+MO0nXkBQQxJGxEkrBVVxI9RLms9Sp98iAMI8zkyyENEWfYX8MmjlBra
LhDomDqZ8DxGa8Oq/tk/MKw3e9zUQeMlXGDeq3d56Px3AJHi5FcBdLMhtuewxeJE
WOj/kXizMcnjv4acFVw/H3pcL5gWQPZsNs1uN9ZAqzXtTrjleUhDDsrcAzxzpW/c
UItgBQJggE9e852HE/+7FsanOEkaoJ6ZPHdm8GDcsbT2lxtrH2Z0hsSeN6/0uj16
GDamYb4qpCYJ9REzQCjrqeiP1lKk7oLbX/ZZkP9TTYbE1SOMD65AGPIJVNxe
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Oo5NqxGaZ7juYVMXE9
soqAqA54a98+wmBoGLzhdSFEI/nqQ+0r8DSvrrnnVJ5m39xfaVkG87jb31xuO5G5
z7RUzLKIA1KGfOASOFnvKS1tuoz9gaeEHNrqwN/qNTI/JyDX42g6GFd7mezrkNEZ
8QgATkg0W7PShdR+9k5HkfRo8euXS/Dvq2B+bts1ZRmePMFnMBlG5pv6wK5fgH8G
VJsQ7ae+7ztRGaok8TLhimOsaIvtOK2RgnxfGqxwt0LZWs7vKV1EIQEeiHcnCPRQ
VTOAHhY8KNspJAfd0qG4Cz7K7yvU8IlTt3Mka8iTgDCsKYGsVpQGcWMkvYSakVyg
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4919350435501855178087337171028325577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tba-sit-blue-eu-west-2.tbasit06.ife.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22645800639347743786135183679516702124148044290198337126899519593470852615340206194806334583160596262788406509050146198717068705176097951086938016915694763456481157307388647698054666685261044014855052044710743788012836989385467959528002472633139663417124885051301721649733990304293712792677715344107100703699808053510662831272445272595348978738964081113322000220637868636770016307393813887017980526900979033837145999769555600689171967632038426398109812305709830766586998613337699477816677000785028709978565083564076304876425838551770443758749640373373598923597559527897674282381625435776034003919671138213992918196267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e64d0325ffb28f0f16c0f5fb40c0673990f17237
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tba-sit-blue-eu-west-2.tbasit06.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbasit06.ife.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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