federate.tiaa.awsoatln.ife.ninja

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:9f:f7:62:ee:ac:ef:67:cc:6f:54:a6:55:84:56:1b was issued on by Amazon.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=federate.tiaa.awsoatln.ife.ninja

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:9f:f7:62:ee:ac:ef:67:cc:6f:54:a6:55:84:56:1b
Serial Number (int): 19439784734894386312878420890011063835
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2e:21:e8:58:e7:09:51:c7:d7:f0:06:2b:6d:19:ba:67:d3:6a:90:80
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bf:ce:09:92:a6:83:79:e2:fa:24:af:68:f6:1a:39:4b:d8:0a:ad:9e
Fingerprint (sha256): 05:2d:99:8c:c2:4f:0a:0a:07:a4:4e:43:a7:e7:d9:05:aa:97:d2:07:97:9e:ab:0a:3f:ea:2c:4c:7c:a9:97:33

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate federate.tiaa.awsoatln.ife.ninja

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for federate.tiaa.awsoatln.ife.ninja

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

federate.tiaa.awsoatln.ife.ninja
release14.tiaa.awsoatln.ife.ninja
release0.tiaa.awsoatln.ife.ninja
oauthobbcl.tiaaob.awsoatln.ife.ninja
release18.tiaa.awsoatln.ife.ninja
release4.tiaa.awsoatln.ife.ninja
release18.tiaaob.awsoatln.ife.ninja
release10.tiaaob.awsoatln.ife.ninja
release9.tiaaob.awsoatln.ife.ninja
release5.tiaaob.awsoatln.ife.ninja
release8.tiaa.awsoatln.ife.ninja
tokenbcl.tiaa.awsoatln.ife.ninja
release0.tiaaob.awsoatln.ife.ninja
release11.tiaa.awsoatln.ife.ninja
oauthbcl.tiaa.awsoatln.ife.ninja
release13.tiaaob.awsoatln.ife.ninja
release1.tiaa.awsoatln.ife.ninja
release19.tiaa.awsoatln.ife.ninja
release15.tiaaob.awsoatln.ife.ninja
release19.tiaaob.awsoatln.ife.ninja
release2.tiaaob.awsoatln.ife.ninja
release15.tiaa.awsoatln.ife.ninja
release5.tiaa.awsoatln.ife.ninja
release9.tiaa.awsoatln.ife.ninja
release10.tiaa.awsoatln.ife.ninja
release6.tiaaob.awsoatln.ife.ninja
tokenobbcl.tiaaob.awsoatln.ife.ninja
release16.tiaa.awsoatln.ife.ninja
release16.tiaaob.awsoatln.ife.ninja
release12.tiaaob.awsoatln.ife.ninja
release12.tiaa.awsoatln.ife.ninja
release2.tiaa.awsoatln.ife.ninja
release6.tiaa.awsoatln.ife.ninja
release3.tiaaob.awsoatln.ife.ninja
token.tiaa.awsoatln.ife.ninja
oauth.tiaa.awsoatln.ife.ninja
federatebcl.tiaa.awsoatln.ife.ninja
release7.tiaaob.awsoatln.ife.ninja
release17.tiaa.awsoatln.ife.ninja
release11.tiaaob.awsoatln.ife.ninja
release13.tiaa.awsoatln.ife.ninja
release3.tiaa.awsoatln.ife.ninja
release4.tiaaob.awsoatln.ife.ninja
release17.tiaaob.awsoatln.ife.ninja
release7.tiaa.awsoatln.ife.ninja
release8.tiaaob.awsoatln.ife.ninja
release1.tiaaob.awsoatln.ife.ninja
release14.tiaaob.awsoatln.ife.ninja

Other certificates including the domain name ife.ninja

(limited to 100 certificates)
1385c5-rolb.cpi05.sit.rolb.ife.ninja
dss-r1.bmbdss.sit.dss.ife.ninja
r0.wth02.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit11.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
752c4-rolb.int01.sit.rolb.ife.ninja
1175c1-rolb.cml01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
tba-sit-green-eu-west-2.ldntbarit13.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt02.ife.ninja
tba-sit-green-eu-west-2.tbasit04.ife.ninja
2626c1-rolb.bus02.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit01.ife.ninja
2616c1-rolb.cpi02.sit.rolb.ife.ninja
tba-oat-green-eu-west-2.tbaoat01.ife.ninja
2613c1-rolb.cpi03.sit.rolb.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
bmb.tbadev01.ife.ninja
tba-sit-yellow-eu-west-2.tbasit02.ife.ninja
tba-sit-green-eu-west-2.tbasit06.ife.ninja
tba-sit-yellow-eu-west-2.tbasit05.ife.ninja
r0.cpi03.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit05.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
2682c1-rolb.int04.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit02.ife.ninja
1174c2-rolb.wth03.sit.rolb.ife.ninja
release0.rtb01.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
2476c2-rolb.int06.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit13.ife.ninja
dss-r5.rolbdss.sit.dss.ife.ninja
tba-sit-green-eu-west-2.tbasit05.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
1174c4-rolb.cml01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit07.ife.ninja
tba-sit-green-eu-west-2.tbasit10.ife.ninja
federated.sso.tiaa-sit.us.ife.ninja
dss-r3.rolbdss.sit.dss.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
1175c1-rolb.cml01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit06.ife.ninja
tba-vpt-blue-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit12.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
release10.rtb01.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit02.ife.ninja
930c6-rolb.wth03.sit.rolb.ife.ninja
tba-sit-blue-eu-west-2.tbasit06.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
tba-sit-blue-eu-west-2.tbasit11.ife.ninja
tba-vpt-red-eu-west-2.tbavpt01.ife.ninja
1587c3-rolb.int06.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
742c4-rolb.cpi01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit08.ife.ninja
dss-r0.bmbdss.sit.dss.ife.ninja
tba-vpt-red-eu-west-2.tbavpt03.ife.ninja
1378c3-rolb.int08.sit.rolb.ife.ninja
754c4-rolb.int05.sit.rolb.ife.ninja
tba-sit-purple-eu-west-2.tbasit02.ife.ninja
dss-r0.rolbemm.sit.dss.ife.ninja
tba-sit-red-eu-west-2.tbasit9.ife.ninja
tba-sit-green-eu-west-2.tbasit03.ife.ninja
740c3-rolb.cpi02.sit.rolb.ife.ninja
1174c5-rolb.rtb01.sit.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit04.ife.ninja
tba-sit-blue-eu-west-2.tbasit13.ife.ninja
tba-vpt-green-eu-west-2.tbavpt01.ife.ninja
tba-sit-red-eu-west-2.tbasit04.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-sit-pink-eu-west-2.tbasit02.ife.ninja
tba-sit-yellow-eu-west-2.tbasit11.ife.ninja
740c1-rolb.cpi01.sit.rolb.ife.ninja
www.signingsoftware-uat.ife.ninja
tba-sit-red-eu-west-2.tbasit05.ife.ninja
bank.wth01.sit.rolb.ife.ninja
tba-sit-red-eu-west-2.tbasit02.ife.ninja
tba-sit-green-eu-west-2.tbasit03.ife.ninja
tba-sit-yellow-eu-west-2.tbasit01.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
1172c4-rolb.wth03.sit.rolb.ife.ninja
mybarclays-vpt-f.int06.vpt.rolb.ife.ninja
tba-sit-yellow-eu-west-2.tbasit08.ife.ninja
tba-sit-red-eu-west-2.tbasit06.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-vpt-red-eu-west-2.tbavpt02.ife.ninja
tba-sit-red-eu-west-2.tbasit02.ife.ninja
tba-vpt-green-eu-west-2.tbavpt03.ife.ninja
tba-sit-blue-eu-west-2.tbasit04.ife.ninja
tba-sit-green-eu-west-2.tbasit9.ife.ninja
tba-sit-blue-eu-west-2.tbasit12.ife.ninja
federate.tiaa.awsoatln.ife.ninja
dss-r0.rolbdss.oat.dss.ife.ninja
744c2-rolb.int10.sit.rolb.ife.ninja

Certificate

The complete raw certificate details for federate.tiaa.awsoatln.ife.ninja in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBTRMAbtEJNlPbr7ceMV
LNYPtUCKIirdTIUmz7vBRLWXX0N5P3mpFSTn8hitQV7Oiu5KRM1Txs44pnhiZA3U
Wn02/hYiJ2QaM5W5yQtO9Qv39F3hK89lsgwQGPbaZRqCLQayoM7xu1gwMAne3Leu
chrxLGz07HJ9BW7i5zWR/IZq7D2t4PDsseEhsoe8B6+A71SJ+alYReNqbiVKkXVo
DSb2iGUPONOZFSy+eUlpeOgOGcmvtmkG7qjqW8e4ZLrrh9dzhTtp84i0u++/vc4V
Ah8/e2PuW/aF6RtHn1RaoR4a7Iq+8DCq6RytK+R14Hbck8HTSuV/h1OLtXufYnE8
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19439784734894386312878420890011063835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'federate.tiaa.awsoatln.ife.ninja'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17683628009124359720785015148733497699730211157539885495595476562845962365581532587082184170346920093191125643424730500494853354795998852165141314732519595621149110375056716503731947861780796214851758738354142483237963471613329089111162417061530693678987269189555493026925402449083376244616861932930518047465973786943604838756258102836664820169979765935410469481076837557626095685178205373406106020067510644312692878947704672363483840453834749235597385047613872563046796679470125947757330932778022489296190149173927438511206828054906824568740703437072719477902354325268240227862707730320415191858610914013928011938859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e21e858e70951c7d7f0062b6d19ba67d36a9080
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1701 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federate.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release14.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release0.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauthobbcl.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release18.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release4.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release18.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release10.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release9.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release5.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release8.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenbcl.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release0.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release11.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauthbcl.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release13.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release1.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release19.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release15.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release19.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release2.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release15.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release5.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release9.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release10.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release6.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenobbcl.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release16.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release16.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release12.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release12.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release2.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release6.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release3.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'token.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federatebcl.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release7.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release17.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release11.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release13.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release3.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release4.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release17.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release7.tiaa.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release8.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release1.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release14.tiaaob.awsoatln.ife.ninja'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008e16952cfd2c58d44ecbb51307630a6d801e8c37dbba32b2ef346f3f12b6b30342d4ee24f42b84f6029ae17c47b9d2dee596e793a5708375f3af84ad9f61853ebd6aeebfd8cce2636003355ceb4c58f0791a6f532d20b2b805ba5899cc705f03e76826df067e916d2d958683359300be35acaf5e9d68d2417b033879aa4cd9fdcf1d2ec749437480c8579825d8be4e67eae92fd6e5ae9c37b04addfb2f63b8a188d0b41e1a88843762089a007c0a62859e8a185befefcad5d5229704dcf6c9e486c3e8bbe1241c5228a0eb593f411c6e34b58752a6e0d04e6b546bd3b91beaffba00c608eee385bed834fe2763b4224c9f81ccf12f51856ffa5db0d3c17fac2e