ci-usw2.oregon.delivery.aimatch.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:b2:63:5c:86:be:4e:c7:51:69:b4:2d:e4:95:ec:d8 was issued on by Amazon.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ci-usw2.oregon.delivery.aimatch.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:b2:63:5c:86:be:4e:c7:51:69:b4:2d:e4:95:ec:d8
Serial Number (int): 14218524087911130117748699684995984600
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:2c:c7:a8:48:10:7e:c1:f9:1a:35:09:bf:43:58:49:1f:30:17:6b
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 22:18:63:2b:d6:6b:84:25:5d:e2:7e:3e:1a:f3:1b:6e:e3:86:c8:13
Fingerprint (sha256): 06:c8:9d:9a:79:d5:30:c1:6a:ef:59:b0:79:49:87:fd:eb:eb:09:3f:4d:14:2d:79:d2:ee:3f:d0:ed:37:85:c0

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate ci-usw2.oregon.delivery.aimatch.net

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-usw2.oregon.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-usw2.oregon.delivery.aimatch.net
delivery-ci360.nature.org
delivery-ci360-prod.movistar.cl
delivery-ci360-dev.movistar.cl
delivery-ci360-test.frankfurt-airport.com
delivery-ci360-nonprod.uscellular.com
cidlvr.movistar.com.co
delivery.mktg.sas.com
delivery-ci360.movistar.com.ec
delivery-ci360.18f-cloud.com
delivery-ci360.hometrust.ca
delivery-ci360.aeromexicorewards.com
delivery-ci360-dev.movistar.com.pe
delivery-ci360.nop.movistar.com.ec
delivery-360-cicolusp.cxtrvl.com
delivery-ci360.three.com.hk
usincm-delivery.mktg.sas.com
delivery-ci360.sky.com.br
delivery-ci360.movistar.com.uy
delivery-test-ci360.nature.org
delivery-ci360.movistar.com.mx
delivery-ci360-prod.movistar.com.pe
testdelivery-ci360.three.com.hk
delivery-ci360.nop.movistar.com.ar
delivery-ci360.clubpremier.com
delivery-ci360.rogersbank.com
delivery-ci360.test.hometrust.ca
cidlvr.produbanco.com
delivery-ci360.movistar.com.ar
delivery-ci360.carnival.com
delivery-test-ci360.18f-cloud.com
delivery-ci360.antel.com.uy
delivery-ci360.quiktrip.com
delivery-ci360.lojavirtualtim.com.br
delivery-ci360.orlandomagic.com
delivery-test-ci360.quiktrip.com
delivery-ci360.munvodemo.com
delivery-ci360.coppel.com
delivery-ci360.worldwildlife.org
delivery-ci360-dev.rogersbank.com
delivery-ci360.myviejasrewards.com
delivery-ci360.blog.uniderp.com.br
delivery-ci360.uscellular.com

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-usw2.oregon.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuza2YF4TKyNy4LMYwfRu
3TqmPnd0J70pSO58YJOgQFNcBWqCAHeYWgb370415hvagQp+63AKwka1czhS1c1L
8N0dAjcW7lGh7BYFiIqk3vbnADomVvquLaCZOmBMLRAWo2kl3Dn1CsPNUkO8ouf1
/ifj9PimvA0ckUiGFo5wd3vaPG0UFCW1vpwNlCKVkRfFzc2ENbXUWzg08M1rEtmv
lgPS0CenjE5M/R1vXXtAeI6T4vkMXUp9Bx1YIMpY3nBaziLuqWzsg3/xiVIvuFcF
P+OjgAdmSbMQVKdo6EL6EIb8cGLhn3vmarg27fbHca30n+0gyG0KHzG06+RknfS4
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14218524087911130117748699684995984600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23633542722560587415629083641601778989940622877383819339499778793704851209919941448217846975015229264321275278676341881255046573847999682339943686309149056284987309672765210802055701560913392520585257611297604309536862474223002429002491809027329032067584560420184092778486645612862358951146384980149928868577281346157222771372590927676093781250693130095147781189306200896996772964562832087909354673491999983361249272145840407129949942869443541477699612339288292657379898121275044542877488967736199026633931071816004066699862116628263154309816342434534060067578546052468018388775071266545406219556272204290206763104429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							072cc7a848107ec1f91a3509bf4358491f30176b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1393 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-test.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.movistar.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.18f-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.aeromexicorewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.sky.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdelivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.produbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.carnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.18f-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.antel.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.quiktrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.lojavirtualtim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.orlandomagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.quiktrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.munvodemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.myviejasrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.blog.uniderp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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