516-mr-curity.feat.exchange.dwp.gov.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:8b:58:ed:f8:6e:48:0b:f7:bd:38:cb:f0:8b:63:f7 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=516-mr-curity.feat.exchange.dwp.gov.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:8b:58:ed:f8:6e:48:0b:f7:bd:38:cb:f0:8b:63:f7
Serial Number (int): 19332724910330404995667979486471349239
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 42:97:65:95:30:27:15:d2:c4:a3:05:2a:60:ac:88:58:12:bd:c8:02
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 8d:5e:ef:ae:5d:42:2e:cb:79:eb:41:23:ea:68:e1:30:9c:1b:aa:b0
Fingerprint (sha256): 05:10:e3:ae:fd:36:00:e3:ff:05:12:2f:d6:bb:ee:f2:51:8b:92:4d:6f:8d:f9:a1:ed:b7:ed:08:da:27:67:64

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate 516-mr-curity.feat.exchange.dwp.gov.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 516-mr-curity.feat.exchange.dwp.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

516-mr-curity.feat.exchange.dwp.gov.uk

Other certificates including the domain name dwp.gov.uk

(limited to 100 certificates)
36-ast.feat.exchange.dwp.gov.uk
gen-mr-1666-exchange-gateway.feat.exchange.dwp.gov.uk
1143-amr-exchange-gateway.feat.exchange.dwp.gov.uk
309-mr-redis.feat.exchange.dwp.gov.uk
api.747-amr.feat.exchange.dwp.gov.uk
sip.dwp.gsi.gov.uk
stat-xplore.dwp.gov.uk
api.445-evergreening.feat.exchange.dwp.gov.uk
getstatepension.dwp.gov.uk
api.44-bst.feat.exchange.dwp.gov.uk
*.atw.health.dwp.gov.uk
783-bmr-exchange-gateway.feat.exchange.dwp.gov.uk
support.findajobstage.dwp.gov.uk
secureies.dwp.gov.uk
778-amr-exchange-gateway.feat.exchange.dwp.gov.uk
secureupdate.dwp.gov.uk
321-evergreening.feat.exchange.dwp.gov.uk
45-ast.feat.exchange.dwp.gov.uk
api.744-bmr.feat.exchange.dwp.gov.uk
780-amr.feat.exchange.dwp.gov.uk
stat-xplore.dwp.gov.uk
1138-bmr.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
secureonline.dwp.gov.uk
oid-tes.feat.exchange.dwp.gov.uk
dev.uc.confirm-your-identity.dwp.gov.uk
747-bmr-exchange-gateway.feat.exchange.dwp.gov.uk
760-amr.feat.exchange.dwp.gov.uk
api.546-merge-request.feat.exchange.dwp.gov.uk
api.v2-11-merge-request.feat.exchange.dwp.gov.uk
api.757-bmr.feat.exchange.dwp.gov.uk
775-amr-exchange-gateway.feat.exchange.dwp.gov.uk
565-merge-request.feat.exchange.dwp.gov.uk
communicationcentre.dwp.gov.uk
516-mr-curity.feat.exchange.dwp.gov.uk
get-state-pension.service.gov.uk
supportforcysp.dwp.gov.uk
jira.dwp.gov.uk
771-bmr-exchange-gateway.feat.exchange.dwp.gov.uk
prap-staging.dwp.gov.uk
mr-887-redis.feat.exchange.dwp.gov.uk
733-amr-exchange-gateway.feat.exchange.dwp.gov.uk
api.315-evergreening.feat.exchange.dwp.gov.uk
741-amr.feat.exchange.dwp.gov.uk
api.1129-amr.feat.exchange.dwp.gov.uk
secure.dwp.gov.uk
api.orl-dun.feat.exchange.dwp.gov.uk
298-mr-curity.feat.exchange.dwp.gov.uk
careers.dwp.gov.uk
gen-mr-1482-exchange-gateway.feat.exchange.dwp.gov.uk
dev.prap.dwp.gov.uk
519-mr-keycloak.feat.exchange.dwp.gov.uk
ecs-mr-1483-exchange-gateway.feat.exchange.dwp.gov.uk
secureies.dwp.gov.uk
hol-mat.feat.exchange.dwp.gov.uk
gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk
api.553-merge-request.feat.exchange.dwp.gov.uk
584-evergreening.feat.exchange.dwp.gov.uk
www.dwpe-services.direct.gov.uk
sts-tell-us-someone-died.dwp.gov.uk
380-merge-request.feat.exchange.dwp.gov.uk
1132-amr.feat.exchange.dwp.gov.uk
ecs-mr-1478-exchange-gateway.feat.exchange.dwp.gov.uk
*.architecture.dwp.gov.uk
739-amr-exchange-gateway.feat.exchange.dwp.gov.uk
api.306-evergreening.feat.exchange.dwp.gov.uk
communicationcentre.dwp.gov.uk
bab-har-exchange-gateway.feat.exchange.dwp.gov.uk
getinvolved.dwp.gov.uk
1150-bmr.feat.exchange.dwp.gov.uk
1205-amr-exchange-gateway.feat.exchange.dwp.gov.uk
tell-us-someone-died.dwp.gov.uk
jobcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
772-bmr.feat.exchange.dwp.gov.uk
497-mr-keycloak.feat.exchange.dwp.gov.uk
api.773-amr.feat.exchange.dwp.gov.uk
729-amr.feat.exchange.dwp.gov.uk
bab-har-exchange-gateway.feat.exchange.dwp.gov.uk
sts.dwp.gov.uk
*.digital.uc.dwp.gov.uk
40-bst-exchange-gateway.feat.exchange.dwp.gov.uk
ecs-mr-1683-exchange-gateway.feat.exchange.dwp.gov.uk
1148-amr-exchange-gateway.feat.exchange.dwp.gov.uk
jobs.dwp.gov.uk
1143-bmr.feat.exchange.dwp.gov.uk
ecs-mr-1480-exchange-gateway.feat.exchange.dwp.gov.uk
securetest.tes.dwp.gov.uk
churchill-beta.dwp.gov.uk
789-amr-exchange-gateway.feat.exchange.dwp.gov.uk
*.architecture.dwp.gov.uk
paradoxrdpqa.dwp.gov.uk
mat-hol.feat.exchange.dwp.gov.uk
api.592-1-evergreening.feat.exchange.dwp.gov.uk
gen-mr-1675-exchange-gateway.feat.exchange.dwp.gov.uk
findajob.dwp.gov.uk
446-evergreening.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
38-ast.feat.exchange.dwp.gov.uk
790-amr-exchange-gateway.feat.exchange.dwp.gov.uk

Certificate

The complete raw certificate details for 516-mr-curity.feat.exchange.dwp.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEizCCA3OgAwIBAgIQDotY7fhuSAv3vTjL8Itj9zANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDYwMTAwMDAwMFoXDTI0MDYyOTIzNTk1OVowMTEv
MC0GA1UEAxMmNTE2LW1yLWN1cml0eS5mZWF0LmV4Y2hhbmdlLmR3cC5nb3YudWsw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4SRYgap4TPlqqpBkUhrz
7hghFcKDhP2hvkGugn1Trj6AMkFou37iIk02nZw6XKcvD6hrlTZORw6FwcZDB2L0
AmVXoNXmKnqxeQoC+RB/WaHS+RWz4RCo65N/+ZAUawZ3tOHI6MfehGD5UmcIrQzC
7EK1NzXq53tdk6xqTVtNyo4Ovlj8pNenMcF9LFh+I4KeYCgpAWNwtY74z3gWLs5m
i4DxqKwuq+2KYlpgFYKGHM8iEbywxkdiqyVAn1TImcUAJgeWf2KhMWWR5572rJqV
crG+P+Kqy3TJpO7RGx6HZTiaEcVTRiSQOdJMzWS1Gm6DN5VLxEeloTSWHDdFE7vL
AgMBAAGjggGSMIIBjjAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAd
BgNVHQ4EFgQUQpdllTAnFdLEowUqYKyIWBK9yAIwMQYDVR0RBCowKIImNTE2LW1y
LWN1cml0eS5mZWF0LmV4Y2hhbmdlLmR3cC5nb3YudWswDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs
hipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYD
VR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0
dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMB
Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ
8G126VV3MGKBYQF48Zsn7c5MTUvFgwTTwlagMEY/wMqdfIwydipNyeZaJ/TBT7fh
LgCLhZSXgJnwUlbV7RnaK5LKCMOXrrMdZLhkF1uB0oOns7QjcAr1DXimparjbsPk
RrZS+0bdePdHH1z9JyB+zrnBRcmX9riDfVAArSWaxTxVxHltEXTPVay94ExCwj46
O6+hcwH7X0k/cnz9rO1XmHmdAEL6wUydXffKq69wMNB5aWMJdAM+YMhy3NvlXLXz
bR6sBXfrDmSNxIp6YlWH1VtbmNIe0b/EzkkXdNKYenZ5yPh/hVZDwM1BwoDZmXTC
GiF86GFyNqOXoyIwQ3P7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eEkWIGqeEz5aqqQZFIa
8+4YIRXCg4T9ob5BroJ9U64+gDJBaLt+4iJNNp2cOlynLw+oa5U2TkcOhcHGQwdi
9AJlV6DV5ip6sXkKAvkQf1mh0vkVs+EQqOuTf/mQFGsGd7ThyOjH3oRg+VJnCK0M
wuxCtTc16ud7XZOsak1bTcqODr5Y/KTXpzHBfSxYfiOCnmAoKQFjcLWO+M94Fi7O
ZouA8aisLqvtimJaYBWChhzPIhG8sMZHYqslQJ9UyJnFACYHln9ioTFlkeee9qya
lXKxvj/iqst0yaTu0Rseh2U4mhHFU0YkkDnSTM1ktRpugzeVS8RHpaE0lhw3RRO7
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19332724910330404995667979486471349239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516-mr-curity.feat.exchange.dwp.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26494827383859761605642755657913851978891601915726253799683621662447359288356585394488918389158168434536562010303298678938693304685546545547826159987188781590290398954286908645298160208739857759200060626644388462938728493887831796350730847452117976616518890513884700994287091568823627085197028082603777243571012268822658178223407332494903673650157243918968152854213157245852659168408761790621760741298103678348836808817283267461590967664873058916181628068871178117284369665762461799463530949900276505156026046447343945382310505372088596408007516676517157106840807240630057615602098760437691553906182599357884932537291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							42976595302715d2c4a3052a60ac885812bdc802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '516-mr-curity.feat.exchange.dwp.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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