qa.mu.int.rossi-italy.bmw.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:f9:48:2d:71:d7:86:a8:bd:1b:fa:40:90:1b:74:bc was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa.mu.int.rossi-italy.bmw.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:f9:48:2d:71:d7:86:a8:bd:1b:fa:40:90:1b:74:bc
Serial Number (int): 9269713826475804449910259066095760572
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b9:20:22:b0:75:14:76:29:c5:64:98:65:bf:f7:5b:f2:83:7f:2b:6e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 41:8d:d5:e2:da:23:a9:96:3e:86:47:b0:ab:aa:fe:e1:9e:fb:00:43
Fingerprint (sha256): 04:a3:f5:40:1e:4b:38:c1:e9:44:fa:4b:db:72:ca:18:4c:08:dc:b5:41:cd:3c:4c:2a:9e:59:4f:bd:77:5b:de

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate qa.mu.int.rossi-italy.bmw.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.mu.int.rossi-italy.bmw.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.mu.int.rossi-italy.bmw.cloud

Other certificates including the domain name bmw.cloud

(limited to 100 certificates)
drhub-i.aws.bmw.cloud
api.emea.deperso-dev.data.bmw.cloud
admin.smoss.apac.bmw.cloud
cdp.hst-dev.bmw.cloud
cdhxchrfederation-test-service.iam-oss.data.bmw.cloud
cdhxcoreexternal-authentication.iam-oss.data.bmw.cloud
cdhxlpaexternal-authentication.iam-oss.data.bmw.cloud
sf-mco.aws.bmw.cloud
resources-dev9.data.bmw.cloud
impxmv1.impact-connector-dev.data.bmw.cloud
api.loyalty-dev.my.bmw.cloud
cdhxdev14idp.iam-int.data.bmw.cloud
b2cds-neo-storybook.int.b2cds.eu-central-1.aws.bmw.cloud
rvm-test.aws.bmw.cloud
api.rita-dev.azure.bmw.cloud
data-middleware.aws.bmw.cloud
cdhxlu2.api-dev.data.bmw.cloud
us-east-1.api-dev.data.bmw.cloud
graphql.orbit-selfservice-test.aws.bmw.cloud
qa-wcmp.wcp-int.bmw.cloud
establish.test.digital-trust.bmw.cloud
bmw-int1.com
ktd.aws.bmw.cloud
compare.int.stolo.eu-central-1.aws.bmw.cloud
ispi-dev.azure.bmw.cloud
b2b.prod.trainingsmedia.bmw.cloud
cdhxdev8authorization.iam-int.data.bmw.cloud
user-api.int.manage.aws.bmw.cloud
api.eu-central-1.playground.personalization.aws.bmw.cloud
authorization.fsspk2-iam.scratch.cdh-oss.bmw.cloud
sql-dev9.data.bmw.cloud
engage-th-uat.apac.bmw.cloud
frontend-api.chengdu.manage.aws.bmw.cloud
cdhxkguquicksight-updater.iam-dev.data.bmw.cloud
content-e2e.bch-ipa.aws.bmw.cloud
graph-dev7.data.bmw.cloud
dvs-css-frontend.st4.dvscss.eu-central-1.aws.bmw.cloud
cdhxkgu-gutherkfederation-test-service.iam-oss.data.bmw.cloud
fsspk1.fsspk1-api.scratch.cdh-oss.bmw.cloud
pr2quicksight-updater.iam-oss.data.bmw.cloud
lb.int.cosy.bmw.cloud
mini-next.configurator.bmw.cloud
svmd.msdynamics.azure.bmw.cloud
crm-adapter.aws.bmw.cloud
api.blava-int.aws.bmw.cloud
dev3.ingest-dev.data.bmw.cloud
subscriptions-dev3.data.bmw.cloud
cdhxmorgraphql-api-dummy.iam-oss.data.bmw.cloud
bmw-int1.com
portal.nkam-sit.azure.bmw.cloud
rvm-int.aws.bmw.cloud
cdhxdev10idp.iam-int.data.bmw.cloud
openvidu.viper.bmw.cloud
demo.tst.us-east-1.cgpb-test.aws.bmw.cloud
dfms.bmwna-dealer-cms-reimagine-prod.us-east-1.aws.bmw.cloud
cdhxjr2.api-dev.data.bmw.cloud
cdhxcoreperformance-data.iam-oss.data.bmw.cloud
qa.mu.int.rossi-italy.bmw.cloud
configure.mini.com
cdhxdev3authentication.iam-int.data.bmw.cloud
pr0quicksight-assets.iam-oss.data.bmw.cloud
cdhxblsgraphql-api-dummy.iam-oss.data.bmw.cloud
graph-dev13.data.bmw.cloud
pr1quicksight-updater.iam-oss.data.bmw.cloud
bmw-int1.com
api.smms.apac.bmw.cloud
portal.data.bmw.cloud
issue-func.test-lppackagingapproval.azure.bmw.cloud
bmw-int1.com
impxmat.impact-connector-dev.data.bmw.cloud
authentication.fssww1-iam.scratch.cdh-oss.bmw.cloud
italy.manage.aws.bmw.cloud
mybmwweb-app.e2e.mybmwweb.eu-central-1.aws.bmw.cloud
cdhxkguidp.iam-dev.data.bmw.cloud
api.manage.aws.bmw.cloud
prodlib-ev-aggregator-prod.prodlib-prod.aws.bmw.cloud
int.nbc.bmw.cloud
cdh-api.dev.simpledata.bmw.cloud
impxjro.impact-connector-dev.data.bmw.cloud
cdhx008.api-dev.data.bmw.cloud
server.ispi.azure.bmw.cloud
intranetkr-dev.aws.bmw.cloud
bmwgroupdesignworks.com
status.codecraft.bmw.cloud
cdhxdev13docs.iam-int.data.bmw.cloud
ccr-x-dev.aws.bmw.cloud
app.engage-my-uat.apac.bmw.cloud
quizit.azure.bmw.cloud
us-east-1.api.core.data-int.bmw.cloud
cdhxmordocs.iam-dev.data.bmw.cloud
dev.sales-steering-reporting.aws.bmw.cloud
cdhxdev4quicksight-updater.iam-int.data.bmw.cloud
clouddays.data.bmw.cloud
apc.nsp-na-prod-public.aws.bmw.cloud
sql-localhost.data.bmw.cloud
pr0idp.iam-oss.data.bmw.cloud
knowledge.api.dev.aws.bmw.cloud
cdhxphb.api-dev.data.bmw.cloud
pr0graphql-api-dummy.iam-oss.data.bmw.cloud
rocketchat.wcp-int.bmw.cloud

Certificate

The complete raw certificate details for qa.mu.int.rossi-italy.bmw.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIQBvlILXHXhqi9G/pAkBt0vDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMDgwNTAwMDAwMFoXDTI0MDkwMjIzNTk1OVowKjEo
MCYGA1UEAxMfcWEubXUuaW50LnJvc3NpLWl0YWx5LmJtdy5jbG91ZDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAORKdPo8wsE5AXfRONKm3QSiL5OLOYo7
MMchokaHvZMONJUmxGgX1t+g5d5cYcfR9Vmz72rnvp/bkvxOklxDOc1/7eygzkKr
CXk0wgIKHFcDm3rCwI0gioL2svjrAlwQ/eLwPAwNLz+RB9I/d/5kxghtW4nJC+84
2/n4Loz5R92SDhM/4GiV7DaABmJwIjlrJpTn/lUtNmwLin+Nj0PVKFLsAYztQ3v6
wKA4KFp0EOXlRo/z0O6VraS5zHK2Cb0tEe6CrYgy0xVzvzb+Ca/LX42o9qepz4M8
3QzPxU2JrAeCEIkTrHfnpuW3YulmyP+sa1GPa8pGIhSmMDf5/Q99HF0CAwEAAaOC
AvkwggL1MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQW
BBS5ICKwdRR2KcVkmGW/91vyg38rbjAqBgNVHREEIzAhgh9xYS5tdS5pbnQucm9z
c2ktaXRhbHkuYm13LmNsb3VkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5y
Mm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJt
MDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAz
LmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisG
AQQB1nkCBAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ
RnEftZsAAAGJw4ulFAAABAMASDBGAiEA9LWqGSxIn49yGPrgZpCQRhJMak3zuDY2
91tgLFSn9yECIQChGJos8H1OLLit7elScPGdyLam4u6Sz0+eE4UOgxixKwB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABicOLpTgAAAQDAEcwRQIg
dD1UW/K7Ll3f9cvN9qSLF6qcAxnwPIab5+MTclhPmTwCIQDHbffGCjhWqagikuzh
p+AGFXOxfEHgJf7Pr98bQjEfPQB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k
PTBI1/urAAABicOLpOQAAAQDAEcwRQIhALZEnwqFM4sZ3WY+5O8vo3x3PsAXrOpx
LDGZWTFBpYyCAiAWvxvgbYsHLtd2tDIjSmdSUrW8FJwdW5h2p6ZLrwJB4zANBgkq
hkiG9w0BAQsFAAOCAQEAmEZBtmwswwAKRVdZ46uoKBhmACfxxJgRLjK5ymiwT7Ty
nry8Lqu3rlAAfzpS8Bquk234NRI7g2plknTdjswE5djHKReto9UmIe6xlXov3oEa
047x9PDPvSaomXdN+PiADRXdbAT2fv/36SblpjGgPIiKJyZrQCas6qoa1QLHUB3F
+AzWDv7msUziB1dOOMtk47bwFL4UU/2MC8F7cKrpIkxu9XtvZdy6WpMx4wSIMaa+
jPTv7FGREV11+zIgj5UaBqGzIiZI3rqMn1cBcb2bJ79q1Rbqv3IJ9KV6H24ztFXW
CuGvXadey35qzyD5lgCbDDaztcV5LQ3AUFUU0SWtJA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ep0+jzCwTkBd9E40qbd
BKIvk4s5ijswxyGiRoe9kw40lSbEaBfW36Dl3lxhx9H1WbPvaue+n9uS/E6SXEM5
zX/t7KDOQqsJeTTCAgocVwObesLAjSCKgvay+OsCXBD94vA8DA0vP5EH0j93/mTG
CG1bickL7zjb+fgujPlH3ZIOEz/gaJXsNoAGYnAiOWsmlOf+VS02bAuKf42PQ9Uo
UuwBjO1De/rAoDgoWnQQ5eVGj/PQ7pWtpLnMcrYJvS0R7oKtiDLTFXO/Nv4Jr8tf
jaj2p6nPgzzdDM/FTYmsB4IQiROsd+em5bdi6WbI/6xrUY9rykYiFKYwN/n9D30c
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9269713826475804449910259066095760572
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.mu.int.rossi-italy.bmw.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28819049619439219294256111137790474967147755083595442550292148328380169714329203130490842732301366594325053106291892400467400503166438387857318442734711014013910109929336637746646149620474974687135797549148476239164100013952002827003755704357504565549112391485703183966382072789310338894494382197684618263028403237949564863201409462420077678870033348607787218388025222988634432080248422490539353701186951916720583584773015182979113837662071570712876490118834834847331138273356068591556482010435720310553922492428426961113336475992178404322874682638453859608257189851256284341794407848521112768595757522927755519138909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b92022b075147629c5649865bff75bf2837f2b6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.mu.int.rossi-italy.bmw.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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