*.staging.atl-paas.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:3e:16:90:06:ef:e5:9a:f5:3d:11:77:61:ba:06:19 was issued on by Amazon.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.staging.atl-paas.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:3e:16:90:06:ef:e5:9a:f5:3d:11:77:61:ba:06:19
Serial Number (int): 12285431991307012170127525627230291481
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:c3:d2:a9:b9:c6:07:99:e8:86:fb:f2:43:28:2d:86:2c:28:cb:25
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 1d:69:9c:2a:de:9a:f4:c9:50:91:8d:f8:88:4f:85:66:90:81:76:9a
Fingerprint (sha256): 04:2f:ae:08:94:3a:b6:bd:95:39:e6:6d:46:06:e1:57:18:53:ba:5d:8c:bb:06:da:f4:71:fc:9a:8b:38:b6:b7

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.staging.atl-paas.net

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.atl-paas.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.atl-paas.net
*.packages.stg.atlassian.com
*.us-west-1.staging.public.atl-paas.net
*.internal.apsoutheast2.staging.atlassian.io
*.ca-central-1.staging.public.atl-paas.net
*.eu-central-1.staging.public.atl-paas.net
*.us-west-2.sp.dev.atl-paas.net
*.staging.public.atl-paas.net
*.internal.staging.atlassian.io
*.us-west-1.sp.staging.atl-paas.net
*.apsoutheast2.staging.atlassian.io
*.stg.internal.atlassian.com
*.ap-southeast-1.sp.staging.atl-paas.net
*.eu-central-2.sp.staging.atl-paas.net
*.internal.apsoutheast.staging.atlassian.io
*.ap-southeast-1.staging.atl-paas.net
*.ca-central-1.sp.staging.atl-paas.net
*.stg.atlassian.com
*.euwest.staging.atlassian.io
*.us-west-2.staging.atl-paas.net
*.internal.uswest2.staging.atlassian.io
*.us-east-1.sp.staging.atl-paas.net
*.uswest.staging.atlassian.io
*.staging.dea.atlassian.com
*.internal.uswest.staging.atlassian.io
*.ap-southeast-2.staging.atl-paas.net
*.eu-central-1.staging.atl-paas.net
*.sp.staging.atl-paas.net
*.ap-southeast-2.sp.dev.atl-paas.net
*.ca-central-1.staging.atl-paas.net
*.ap-southeast-2.staging.public.atl-paas.net
*.us-west-1.staging.atl-paas.net
*.eu-central-1.sp.staging.atl-paas.net
*.us-west-2.staging.public.atl-paas.net
*.apsoutheast.staging.atlassian.io
*.internal.euwest.staging.atlassian.io
*.eu-central-2.staging.public.atl-paas.net
*.useast.staging.atlassian.io
*.ap-southeast-1.staging.public.atl-paas.net
*.us-west-2.sp.staging.atl-paas.net
*.staging.atlassian.io
*.us-east-1.staging.public.atl-paas.net
*.internal.useast.staging.atlassian.io
*.ap-southeast-2.sp.staging.atl-paas.net
*.uswest2.staging.atlassian.io
*.eu-west-1.staging.atl-paas.net
*.eu-central-2.staging.atl-paas.net
*.sgw.staging.atl-paas.net
*.us-east-1.staging.atl-paas.net
*.eu-west-1.sp.staging.atl-paas.net
*.eu-west-1.staging.public.atl-paas.net

Other certificates including the domain name atl-paas.net

(limited to 100 certificates)
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
ingress-int-01.paas-stgwest2.us-west-2.kitt-inf.net
*.prod.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
ingress-internal-01.paas-pdevapse2.ap-southeast-2.kitt-inf.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
ingress-internal-01.paas-devwest2.us-west-2.kitt-inf.net
*.atl-paas.net
ingress-internal-01.paas-stgwest2.us-west-2.kitt-inf.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.platdev.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.staging.atl-paas.net
ingress-cust-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atlassian.io
*.atl-paas.net
ingress-internal-01.ap-southeast-2.paas-playground3.kitt-inf.net
*.staging.atl-paas.net
ingress-internal-01.us-west-2.paas-stg.kitt-inf.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atlassian.io
*.platdev.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.alvintest.atl-paas.net
*.platdev.atl-paas.net
ingress-internal-01.paas-prodwest2.us-west-2.kitt-inf.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
ingress-internal-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
ingress-internal-01.paas-prodeast.us-east-1.kitt-inf.net
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net

Certificate

The complete raw certificate details for *.staging.atl-paas.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hpcW6J0V1HXEfqGJTaV
l/kCmOVMKNWcAa1Lq/QY4cr99YA+gqpRilmhmvtNt6jdNedrvzRatCqthNHbvsxA
+3fvxpWGDDq2Ri8BkmoDZxahwYOWd/FLZbXlO6yBkbzMUvKfxaGZG8DCZMgpmDe+
LjYoUN8+Oj8gzYutXaO2v2fipqJmEh1H+T3YEUxdxoU4jwACj4whnSGUnxNObp+j
4G4fXSzOLh/wmsv3oRrwNadX3cLH1kLCEftKKCTXNAojoAH0CtOj1R413ph0RIgP
VBgjqwdifAATPMPyxSMErxdNowZO8HROwQUqWTO2yFXI91q9edj2SOj+WTA9gEX0
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12285431991307012170127525627230291481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.atl-paas.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27532949464360580401113468003337129138254622178687942850184214730080965467165435595863796400117454969698760620556458983112029602889286563998331957965437214476574371831361541932170967274129787032483739599538532483743823937591722913672472965893185694651312439474211943171372074924222544623017994583625206929920604884901155756671418283612099528705562117405364498000994834796811248348576534789154460622906853946800888644866139696212691221655942560936549632149000083303619080690912290226291697398186941767759807756830378321313909225748902817260246357375240498603392058634228220402596737159725712346305944453917741458781291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0c3d2a9b9c60799e886fbf243282d862c28cb25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1867 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packages.stg.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.apsoutheast2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca-central-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-central-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.sp.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apsoutheast2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.internal.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-1.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-central-2.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.apsoutheast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca-central-1.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euwest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.dea.atlassian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.uswest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-central-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.sp.dev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ca-central-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-central-1.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apsoutheast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.euwest.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-central-2.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.useast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.useast.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uswest2.staging.atlassian.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-central-2.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgw.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.sp.staging.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-1.staging.public.atl-paas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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