*.srvindr-dev.estuary.pxt.amazon.dev
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0b:aa:7c:27:fa:04:fd:7c:fc:bf:2c:fb:a0:ef:7b:2c was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.srvindr-dev.estuary.pxt.amazon.dev
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0b:aa:7c:27:fa:04:fd:7c:fc:bf:2c:fb:a0:ef:7b:2cSerial Number (int): 15506716605651471385177279381900327724
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 46:20:26:c3:27:c5:c6:cb:f1:9e:fa:6d:1b:2e:c4:bf:fe:35:c9:c5
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 8c:25:77:ec:f1:ea:f4:d8:8c:d5:0e:0d:11:db:8e:0c:13:89:7d:5f
Fingerprint (sha256): 03:d0:62:ce:02:ce:2b:7e:70:1c:02:06:29:c6:38:15:02:ea:f5:0e:4a:72:5a:a3:bc:2e:d0:20:eb:fb:1d:26
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.srvindr-dev.estuary.pxt.amazon.dev
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.srvindr-dev.estuary.pxt.amazon.dev
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.srvindr-dev.estuary.pxt.amazon.dev
Other certificates including the domain name amazon.dev
(limited to 100 certificates)
gamma.us-east-1.nets.datacentral.amazon.dev
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
a.prdsstpdx1.us-west-2.sampling.jihm.amazon.dev
amira.magangal.people.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
*.sandbox.sentrypatrolservice.coro.amazon.dev
beta.mcp.email.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
*.usawesta2aalphaadropabhag.reverse-logistics.devices.amazon.dev
api.personal.clarity-mfe.clarity.team.hrsc.pxt.amazon.dev
alpha.inventory-history.aft.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
meikanp.caspian-payments-cn.royalties.digital.amazon.dev
raven.tools.amazon.dev
meikanp.caspian-payments.royalties.digital.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
beta.alexeyma.people.amazon.dev
api.pdc.marjohar.people.amazon.dev
wordwatcher.custodian.bm.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
trck.cnn.gamma-eu.turntable.sonic.advertising.amazon.dev
hwr.dcf6d4111ccc3c70914441a2e9c95828.hotwire.ecst.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
alpha.euclid-remote.pricing.devices.amazon.dev
webapp-aemilia.asdn.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
eu.beta.irene.auditing.tfs.amazon.dev
beta.mcp.email.amazon.dev
yaayad.devo.copsassistant-cdn.pars-bpa.amazon.dev
closed-loop-feedback.email.vector.advertising.amazon.dev
*.eu-west-1.gamma.galactus.jihm.amazon.dev
*.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev
internal-services.main.beta.eu-west-1.gulfstream.pars.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
coral.ingestion.prod.us-east-1.gulfstream.pars.amazon.dev
dev.celestia.noc.amazon.dev
*.prod.pbgcs.cetech.amazon.dev
hungmh.us-east-1.api.inquisitor.nile.amazon.dev
cognito-poc-registry.alpha.omnia.tax.amazon.dev
api.alpha.fe.tli.aces.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
api.sudevann.helix-dev.dse.audible.amazon.dev
alpha.socket.invest.compensation.amazon.dev
docprocessingapi.beta.audits.trc.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-east-1.prod.uis-man-wrangle.robotics.amazon.dev
data.ssres.beta.movement.talent.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
api.alpha-mahjyoth.case.threat-detection.cs.amazon.dev
hwr.674734f2f9443597a9d855cce5bfe7c8.hotwire.ecst.amazon.dev
svc.wewanyu.test.proxy.sram.review-tooling.security.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
beta.fe.d16g-rodeo.advertising.amazon.dev
alpha.us-west-2.alexa-automation.blink.amazon.dev
alpha-api.cme-bi.retail.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
gamma.modelregistry.ias.netzero.sustainability.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
corp.api-iad.gamma.hedwig.video.amazon.dev
*.beta.psidr.payments-security.amazon.dev
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
a.prdsstpdx1.us-west-2.sampling.jihm.amazon.dev
amira.magangal.people.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
*.sandbox.sentrypatrolservice.coro.amazon.dev
beta.mcp.email.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
*.usawesta2aalphaadropabhag.reverse-logistics.devices.amazon.dev
api.personal.clarity-mfe.clarity.team.hrsc.pxt.amazon.dev
alpha.inventory-history.aft.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
meikanp.caspian-payments-cn.royalties.digital.amazon.dev
raven.tools.amazon.dev
meikanp.caspian-payments.royalties.digital.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
beta.alexeyma.people.amazon.dev
api.pdc.marjohar.people.amazon.dev
wordwatcher.custodian.bm.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
trck.cnn.gamma-eu.turntable.sonic.advertising.amazon.dev
hwr.dcf6d4111ccc3c70914441a2e9c95828.hotwire.ecst.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
alpha.euclid-remote.pricing.devices.amazon.dev
webapp-aemilia.asdn.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
eu.beta.irene.auditing.tfs.amazon.dev
beta.mcp.email.amazon.dev
yaayad.devo.copsassistant-cdn.pars-bpa.amazon.dev
closed-loop-feedback.email.vector.advertising.amazon.dev
*.eu-west-1.gamma.galactus.jihm.amazon.dev
*.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev
internal-services.main.beta.eu-west-1.gulfstream.pars.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
coral.ingestion.prod.us-east-1.gulfstream.pars.amazon.dev
dev.celestia.noc.amazon.dev
*.prod.pbgcs.cetech.amazon.dev
hungmh.us-east-1.api.inquisitor.nile.amazon.dev
cognito-poc-registry.alpha.omnia.tax.amazon.dev
api.alpha.fe.tli.aces.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
api.sudevann.helix-dev.dse.audible.amazon.dev
alpha.socket.invest.compensation.amazon.dev
docprocessingapi.beta.audits.trc.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-east-1.prod.uis-man-wrangle.robotics.amazon.dev
data.ssres.beta.movement.talent.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
api.alpha-mahjyoth.case.threat-detection.cs.amazon.dev
hwr.674734f2f9443597a9d855cce5bfe7c8.hotwire.ecst.amazon.dev
svc.wewanyu.test.proxy.sram.review-tooling.security.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
beta.fe.d16g-rodeo.advertising.amazon.dev
alpha.us-west-2.alexa-automation.blink.amazon.dev
alpha-api.cme-bi.retail.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
gamma.modelregistry.ias.netzero.sustainability.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
corp.api-iad.gamma.hedwig.video.amazon.dev
*.beta.psidr.payments-security.amazon.dev
Certificate
The complete raw certificate details for *.srvindr-dev.estuary.pxt.amazon.dev in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhzCCA2+gAwIBAgIQC6p8J/oE/Xz8vyz7oO97LDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMTIwNzAwMDAwMFoXDTI1MDEwNTIzNTk1OVowLzEt MCsGA1UEAwwkKi5zcnZpbmRyLWRldi5lc3R1YXJ5LnB4dC5hbWF6b24uZGV2MIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1XqjHxi5Mi3k+UPv/i0EWZy t5hTGVg0qP/FbpMikIZPlkGaFkHBPna99Ez5RW/oZJigt4BOsV8Lm19PRIXR/j4E hUDag0zETsSiCQgZbKRPApkf6iuEUWmkuV1A8a2h3Ux9cW0W56FXbQJAVITG8trw 2sPTiGen2xJBcwP00xgLwYfSKHxGUSKHrl7xnGhPtk/kluv28mNN9vBexqKAwk/Q o7lFXWN6UpXi0w0WSKzz5DRFAuupdPdjDBn1DJguVrLn57kcF03qYN1oC2nW2/lj tfm6xUMsGMXMVOV+tZikdm0kGnA34FWyA6/dyJBomxks0ZN4l+Zcf2z44WmJmwID AQABo4IBkDCCAYwwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYD VR0OBBYEFEYgJsMnxcbL8Z76bRsuxL/+NcnFMC8GA1UdEQQoMCaCJCouc3J2aW5k ci1kZXYuZXN0dWFyeS5weHQuYW1hem9uLmRldjATBgNVHSAEDDAKMAgGBmeBDAEC ATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3Qu Y29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6 Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDov L2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQC MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBALIortXP Tali9eDY3w5bGwZOfGLHOnYX/eaescNFohox0o5Y23rdjSymrlpM6m3EwdXuu/Js qb0MqMDdzu3kCzgIMNi8AspT3eE5pvzBqRVDD5rIZlYQFlYLhIJwHaPcX+1nwbIk xjaj3vm7Py4GNNeJOrSt+Fvkn/vFx9iO6dEiiZJ52ZlpxB6x9SMDosb/xA4CE+09 PstsERJDlV4WNoVUO8u2i7jvSUxh0XVy0SssAQdaosGzthOtPfgj3Vbf8Xtw/iaN qbLsyxno8UgJqy4JubLqIxCbr+KI4xFWWPQpKKSQom82S/nw3j7Amubv246s0yYE T1V4xZ6YVpTc0ec= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1XqjHxi5Mi3k+UPv/i0 EWZyt5hTGVg0qP/FbpMikIZPlkGaFkHBPna99Ez5RW/oZJigt4BOsV8Lm19PRIXR /j4EhUDag0zETsSiCQgZbKRPApkf6iuEUWmkuV1A8a2h3Ux9cW0W56FXbQJAVITG 8trw2sPTiGen2xJBcwP00xgLwYfSKHxGUSKHrl7xnGhPtk/kluv28mNN9vBexqKA wk/Qo7lFXWN6UpXi0w0WSKzz5DRFAuupdPdjDBn1DJguVrLn57kcF03qYN1oC2nW 2/ljtfm6xUMsGMXMVOV+tZikdm0kGnA34FWyA6/dyJBomxks0ZN4l+Zcf2z44WmJ mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15506716605651471385177279381900327724 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.srvindr-dev.estuary.pxt.amazon.dev' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21124163789616135179109682698983356577246781991943415442690711819589037920376599088488810825759931740241096291836466864975900206562974301458071424480201349738966209984150141937272101610055168298282118592504383102068412104063581006909034748153143566044997478530842312122416454115003164986782575672266914902515479519519853213486084038998771936871666089221864901435630139416661677150436236402404444446004626951578162598876279661382459515723017962701391670718962702813125229210937944186179666113778320234134228443946489087913303494431575454015345187858229398143813193747719708813790950562437768971085632644552973970147739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 462026c327c5c6cbf19efa6d1b2ec4bffe35c9c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srvindr-dev.estuary.pxt.amazon.dev' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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