neighborsapigw.prod.gws.ring.amazon.dev

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:50:19:5a:57:54:36:9f:e4:70:0c:98:f2:28:a2:40 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=neighborsapigw.prod.gws.ring.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:50:19:5a:57:54:36:9f:e4:70:0c:98:f2:28:a2:40
Serial Number (int): 13708177924333666095459195408846725696
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:7d:b3:a0:4c:f5:f9:81:d5:e4:b1:17:da:be:86:2c:b4:45:2a:05
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8c:72:9f:be:e5:c5:a0:4f:f3:3a:1d:c8:92:45:40:c4:a9:03:3d:29
Fingerprint (sha256): 03:47:80:48:0e:6a:04:d2:e2:92:79:79:2d:0e:8c:ed:99:e9:8f:9e:4e:32:9f:36:ec:dd:7f:39:4f:c5:fc:b3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate neighborsapigw.prod.gws.ring.amazon.dev

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for neighborsapigw.prod.gws.ring.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

neighborsapigw.prod.gws.ring.amazon.dev
neighborsapigw.us-west-2.prod.gws.ring.amazon.dev
neighborsapigw-gax.c0.us-west-2.prod.gws.ring.amazon.dev
neighborsapigw-preprod.c0.us-west-2.prod.gws.ring.amazon.dev
neighborsapigw-alb.c0.us-west-2.prod.gws.ring.amazon.dev
neighborsapigw.c0.us-west-2.prod.gws.ring.amazon.dev
neighborsapigw-geo.prod.gws.ring.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
api.pdc.marjohar.people.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
corp.api-iad.gamma.hedwig.video.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
opensearch-dash-chchu.eu.devo.purge.percolate.p13n.amazon.dev
turn.ring-mobility.devices.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
prod.eu.latis.fclm.aft.amazon.dev
ers.mutescu.people.amazon.dev
hwr.f3d3ee9d29793b9cb526d592e34a8fb3.hotwire.ecst.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
*.srvindr-dev.estuary.pxt.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
beta.ext-alexandria-quicknotate.prime-video.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
vps.pdx.prod.vx.xray.prime-video.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
beta.cruzoliv.people.amazon.dev
alpha.device.1p-idp.ihm.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
nlb.definitions.rliulin.people.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
portal.transportation.amazon.dev
huyqdo.arel.amazon.dev
dev.beta.ap-northeast-1.autoflow-visualizer.aft.amazon.dev
appsync.alpha.risk-assessment.whs.amazon.dev
icon.amazon.dev
prod.fe.latis.fclm.aft.amazon.dev
spark.eu.prod.mcrs.moderation.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
katara.boombox.pandora.amazon.dev
us-west-2.beta.messaging.ui.bsm.selling-partners.amazon.dev
marinodd.service.workflow-orchestrator.aee.amazon.dev
api.fcmap.swanwes.people.amazon.dev
beta.dcms-onboarding.ring.amazon.dev
na.gmr.gamma.apa.books.amazon.dev
beta.us-west-2.builder.edge.kuiper.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
iad.assets.creative-validation.vivid.amazon.dev
prod.portal.us-west-2.metastream.robotics.amazon.dev

Certificate

The complete raw certificate details for neighborsapigw.prod.gws.ring.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIQClAZWldUNp/kcAyY8iiiQDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTEyMjAwMDAwMFoXDTI0MTIyMDIzNTk1OVowMjEw
MC4GA1UEAxMnbmVpZ2hib3JzYXBpZ3cucHJvZC5nd3MucmluZy5hbWF6b24uZGV2
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK4LsRfiSgN/L4neteAN
iAotJZ3sSO5l4XdMrwDiHA3y2HdRwRAZXhkh+ByA3Ky7QZSZA6CIjUmWZdO8IpB7
f91t3SqdmoXPE9WScy1lgVPvxgxzMdSkO/q1sY/TBBcxUjF4FqMJ3BxaMivIo0th
eiU7ZPiyxJl/P8H3dOSKWh7U+nmk0pe8Fp6odZFsMn2AHaftN+P/Ph5LjIo3vA94
TdrNFQFlGVGvPZHI+41MWA6QuIg51G2EzoBpMJFy84UJRnRyyFIRGxS16nIxVap0
knjIp/UMrXKdc7TW3y89C7zwV4zmrfNW6z2ygdXc3FohhEjBoHpdIuAnevhLeMFr
1wIDAQABo4IETDCCBEgwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIw
HQYDVR0OBBYEFCN9s6BM9fmB1eSxF9q+hiy0RSoFMIIBfgYDVR0RBIIBdTCCAXGC
J25laWdoYm9yc2FwaWd3LnByb2QuZ3dzLnJpbmcuYW1hem9uLmRldoIxbmVpZ2hi
b3JzYXBpZ3cudXMtd2VzdC0yLnByb2QuZ3dzLnJpbmcuYW1hem9uLmRldoI4bmVp
Z2hib3JzYXBpZ3ctZ2F4LmMwLnVzLXdlc3QtMi5wcm9kLmd3cy5yaW5nLmFtYXpv
bi5kZXaCPG5laWdoYm9yc2FwaWd3LXByZXByb2QuYzAudXMtd2VzdC0yLnByb2Qu
Z3dzLnJpbmcuYW1hem9uLmRldoI4bmVpZ2hib3JzYXBpZ3ctYWxiLmMwLnVzLXdl
c3QtMi5wcm9kLmd3cy5yaW5nLmFtYXpvbi5kZXaCNG5laWdoYm9yc2FwaWd3LmMw
LnVzLXdlc3QtMi5wcm9kLmd3cy5yaW5nLmFtYXpvbi5kZXaCK25laWdoYm9yc2Fw
aWd3LWdlby5wcm9kLmd3cy5yaW5nLmFtYXpvbi5kZXYwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRy
dXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0
dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMB
Af8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdgDuzdBk1dsazsVct520
zROiModGfLzs3sNRSFlGcR+1mwAAAYv3YopjAAAEAwBHMEUCIHH6BH8XDQYnKxcK
pHOTilEfEjbYgi/Yy8kHD3RRfMdcAiEAoe5RAMEgdlkdlv6A7GWMlpp0ZWc9rgar
ypGudq2KGGoAdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYv3
YopeAAAEAwBGMEQCIDWApKsNGFRVXNGTETKkd+QAwJlhrtypEnTf/0XZrebsAiAK
XwFi3uJlHKIOmDYIGuRtUrFM94n0IlXG1Zhd0vvJ4QB1ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABi/diilcAAAQDAEYwRAIgKgxhy4Yxb+rFae6W
i/jk6A0jOuUHZNi9VilrbTcJH+UCIDdNwt+OjIb0cC+HF/QAUfrPDpLoJWxCD3i5
P+7lo9L6MA0GCSqGSIb3DQEBCwUAA4IBAQB64w4zQacKROn91CJX32TEgebqV48B
TFDcqQalFBe+L/51lw1K8eAA8ECf71EQjOKc2uEB0yAViI3fdIl4HAu9eYVgSd4y
vuZQnwHWvLk2jcFXTCNpWSDUCoGYdLcLtSW3aTn8DrMyRdOGOT/Fvtk57VMKH1mq
L/4k1JliGO3z12O6u/FvnPM5hb3R08lpGcV0wQxiDpbjUkHYePE3CbkPqOaoS4SQ
aaUgaHKOXPoIODrE56GjkM+cciZbx9aHR3q9iZkPDl/Z5XINZKpku8uGU+KiJ/Yb
BviFDv66+9N5zviZQujaPIAxBSNCbyXb8krZy9w8JoSTgbfpPfs7j6+1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK4LsRfiSgN/L4neteAN
iAotJZ3sSO5l4XdMrwDiHA3y2HdRwRAZXhkh+ByA3Ky7QZSZA6CIjUmWZdO8IpB7
f91t3SqdmoXPE9WScy1lgVPvxgxzMdSkO/q1sY/TBBcxUjF4FqMJ3BxaMivIo0th
eiU7ZPiyxJl/P8H3dOSKWh7U+nmk0pe8Fp6odZFsMn2AHaftN+P/Ph5LjIo3vA94
TdrNFQFlGVGvPZHI+41MWA6QuIg51G2EzoBpMJFy84UJRnRyyFIRGxS16nIxVap0
knjIp/UMrXKdc7TW3y89C7zwV4zmrfNW6z2ygdXc3FohhEjBoHpdIuAnevhLeMFr
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13708177924333666095459195408846725696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neighborsapigw.prod.gws.ring.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25838439332181825590167797588197120171581111944847229995733677194271179792000795733363361354410313080992726066164776022062716752454820185569445729483963615740503072139147349295521070517236110107227924383902120779283289526382942115994243957348802822870668982799448257768045328538220347584838323476944027272856609285319164414260551584357161564393928637759950942001206064691049852622545727434473669750217904227438783345227182879653323354408339015888930969766425052322493256256103142399121098299532126063317051939499810200914507452862140736959042204948797551330728730782340102395943404515458340603104778237318982575156183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							237db3a04cf5f981d5e4b117dabe862cb4452a05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborsapigw.prod.gws.ring.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborsapigw.us-west-2.prod.gws.ring.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborsapigw-gax.c0.us-west-2.prod.gws.ring.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborsapigw-preprod.c0.us-west-2.prod.gws.ring.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborsapigw-alb.c0.us-west-2.prod.gws.ring.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborsapigw.c0.us-west-2.prod.gws.ring.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborsapigw-geo.prod.gws.ring.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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