dp-gw-na.amazon.com

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0f:c9:08:5e:ea:ca:8c:ea:16:01:f4:03:d5:94:a0:77 was issued on by DigiCert Inc.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dp-gw-na.amazon.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:c9:08:5e:ea:ca:8c:ea:16:01:f4:03:d5:94:a0:77
Serial Number (int): 20982241384727704764291294051890929783
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 45:f5:b0:89:c0:f0:fc:f8:93:31:42:b6:33:6d:8e:b6:0a:e7:6a:39
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): dd:9f:b2:cf:2f:ab:77:83:86:7d:81:ca:d1:5c:81:09:a8:bb:24:79
Fingerprint (sha256): 03:41:ca:da:11:9f:f0:f7:3b:78:dc:ef:68:3a:39:c7:c0:3f:25:d1:c8:84:5e:f9:6b:fa:bc:fc:ad:91:1f:fd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate dp-gw-na.amazon.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dp-gw-na.amazon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.na.gateway.devices.a2z.com
dp-gw-na.amazon.com
dp-gw-na-js.amazon.com
dp-gw-na.amazon.co.uk
dp-gw-na.amazon.de
dp-gw-na.amazon.co.jp
dp-gw-na.amazon.in
dp-gw-na.amazon.fr
dp-gw-na.amazon.it
dp-gw-na.amazon.nl
dp-gw-na.amazon.ca
dp-gw-na.amazon.com.mx
dp-gw-na.amazon.com.br
dp-gw-na.amazon.cn
dp-gw-na.amazon.com.au
dp-gw-na-backend.amazon.com
dp-gw-na.amazon.es
bob-dispatch-prod-na.amazon.com
legacy.prod.na.tcomm.gateway.devices.a2z.com
bob-dispatch.prod.us-east-1.tcomm.gateway.devices.a2z.com

Other certificates including the domain name amazon.com

(limited to 100 certificates)
fresh.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com
monitor-api-public.eu-central-1.amazonaws.com
aftx-eu.amazon.com
aea-console-canary.aea.amazon.com
photos.amazon.com
dcp.amazon.co.jp
skills-store-eu.amazon.com
securephotostorageservice-eu-external.amazon.com
account-jobs-fe.amazon.com
atig-appserver-gamma.us-east-1.amazon.com
aea-console-canary.aea.amazon.com

Certificate

The complete raw certificate details for dp-gw-na.amazon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8y8q22n8WWvZWiWMAeD
jnGabikCaDWemjyXK8GEnkZ+sMSotvAQZ0ctz9DgAPONTxfHMaqdCwo+eIRq4/L9
hlvhbIudsBgmc6hMaO43bAyK2/J05nmZHyydoPq4q9bCh4akq5O9LllDK5kAJfbt
6SvXJpYbm5EWn31X5KtNGLiq4fi9XGhIzjCq4Hs3AP/II6a3Nc7AdVRtWxRgy/eR
lJOrsfg0Pvb7Hjmp7vqhrZtAvIhu3DF/InJxcaT2JWOMhCNYRGNmMYF7yN41uM4h
ZPod14zQcQs1q4SyHz0LaTWtyvAfnH7freAqLD9xHqWus/Jica9iMyk/scnEcKkd
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20982241384727704764291294051890929783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dp-gw-na.amazon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19162943622847692275010415409354980558639582936562375141789492172605857572087544935717091186880640056216717618535101022034360961295446031867582469099765501588819716993930149607732124931886777812818116867204875322551605744171017417077519171988602677132147409418604818899822889711029834727646725539222656979486594046345123507093089413156841804876542445260367483321013656984762283344282746852810977029754699024924958824608166992575107298149847296420416646669042432854627683284016703744103520259562935643872012615431689839024313511093753154719580694855496845167526308500939228141760804210538573441412691472262205157219611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45f5b089c0f0fcf8933142b6336d8eb60ae76a39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (524 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.gateway.devices.a2z.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na-js.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na-backend.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp-gw-na.amazon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bob-dispatch-prod-na.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.prod.na.tcomm.gateway.devices.a2z.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bob-dispatch.prod.us-east-1.tcomm.gateway.devices.a2z.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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