seiga.dev.nicovideo.jp

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:29:83:51:74:26:c1:a0:cf:ab:12:c0:dd:68:06:8e was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=seiga.dev.nicovideo.jp

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:29:83:51:74:26:c1:a0:cf:ab:12:c0:dd:68:06:8e
Serial Number (int): 20153967557060022754159442742875784846
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9f:80:d4:54:4c:47:a7:b2:4b:f3:d0:30:d0:bd:d0:9f:af:85:63:bc
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 3a:08:f1:60:d5:62:e0:32:a6:df:e9:10:06:5f:e8:3f:94:e8:74:58
Fingerprint (sha256): 06:e1:54:a9:6d:00:da:5e:15:e1:66:ba:05:05:73:35:6b:2f:70:90:45:3e:ff:bc:f3:53:e8:75:b0:37:82:12

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate seiga.dev.nicovideo.jp

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seiga.dev.nicovideo.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seiga.dev.nicovideo.jp
*.seiga.dev.nicovideo.jp
*.sp.seiga.dev.nicovideo.jp
*.deliver.seiga.dev.nicovideo.jp
*.manage.seiga.dev.nicovideo.jp
*.deliver.feature.seiga.dev.nicovideo.jp
deliver.feature.seiga.dev.nicovideo.jp
*.api.seiga.dev.nicovideo.jp

Other certificates including the domain name nicovideo.jp

(limited to 100 certificates)
*.stg.nicovideo.jp
bapi.nicobus.stg.nicovideo.jp
oauth.nicovideo.jp
fs.live.nicovideo.jp
*.live2.dev.nicovideo.jp
3d.nicovideo.jp
alb-aws.embed.dev.nicovideo.jp
*.nicovideo.jp
info.nicovideo.jp
account.nicovideo.jp
site.pre.nicovideo.jp
*.cas.nicovideo.jp
*.blog.nicovideo.jp
api.news.dev.nicovideo.jp
account.stage.nicovideo.jp
secure.ch.nicovideo.jp
enquete.nicovideo.jp
*.astral.nicovideo.jp
secapp.nicovideo.jp
mtm.nicovideo.jp
3d.nicovideo.jp
seiga.dev.nicovideo.jp
*.stg.nicovideo.jp
payment.nicovideo.jp
*.spi.nicovideo.jp
*.search.nicovideo.jp
secure.i.nicovideo.jp
*.nicovideo.jp
w301.npts.nicovideo.jp
m.point.nicovideo.jp
game.nicovideo.jp
oshirasebox.dev.nicovideo.jp
engageprincess.nicovideo.jp
secure.i.test.nicovideo.jp
3d.nicovideo.jp
enquete.stg.o-in.nicovideo.jp
payserv.nicovideo.jp
*.stg.nicovideo.jp
*.blog.dev.nicovideo.jp
*.live2.nicovideo.jp
payment.point.nicovideo.jp
secure.ch.nicovideo.jp
papi.seiga.nicovideo.jp
apis.live.nicovideo.jp
payment.nicovideo.jp
sp.seiga.nicovideo.jp
payment.nicovideo.jp
g-pay.nicovideo.jp
api.gadget.test.o-in.nicovideo.jp
capi.fpay.dev.nicovideo.jp
com.nicovideo.jp
nicoad.nicovideo.jp
dev.nicovideo.jp
chokaigitour.jp.site.pre.nicovideo.jp
*.sv.nicovideo.jp
*.cdn.nicovideo.jp
alb-aws.embed.dev.nicovideo.jp
creator-support.nicovideo.jp
account.nicovideo.jp
embed.nicovideo.jp
account.nicovideo.jp
sp.nicovideo.jp
m.secure.ch.nicovideo.jp
payserv.nicovideo.jp
*.nicovideo.jp
skima.is
bmtb.sandbox.nicovideo.jp
*.nicovideo.jp
tktk.nicovideo.jp
site.pre.dev.nicovideo.jp
notification.dev.nicovideo.jp
*.enquete.nicovideo.jp
kouza.nicovideo.jp
notification.nicovideo.jp
payment.point.nicovideo.jp
faq.nicovideo.jp
ndc.nicovideo.jp
tktk.nicovideo.jp
fpay.dev.nicovideo.jp
*.nicovideo.jp
anime.nicovideo.jp
eaweb.g-pay.nicovideo.jp
upload.api.ch.nicovideo.jp
*.q.nicovideo.jp
ssl.seiga.nicovideo.jp
*.astral.dev.nicovideo.jp
skima.is
*.dev.nicovideo.jp
oauth.nicovideo.jp
*.stg.nicovideo.jp
point.nicovideo.jp
site.live.stage.nicovideo.jp
*.nicovideo.jp
ox.ads.nicovideo.jp
payment.nicovideo.jp
public.api.dev.nicovideo.jp
sp.book.nicovideo.jp
*.enquete.dev.nicovideo.jp
anime.nicovideo.jp
ichiba.nicovideo.jp

Certificate

The complete raw certificate details for seiga.dev.nicovideo.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGyTCCBbGgAwIBAgIQDymDUXQmwaDPqxLA3WgGjjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTAyNDAwMDAwMFoXDTI0MTEyMTIzNTk1OVowITEf
MB0GA1UEAxMWc2VpZ2EuZGV2Lm5pY292aWRlby5qcDCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBALGDp4MTgTJq2f/Y2p/LHGp2fjBXg4zu+Zo2MYfc1X1C
bVhHPNP9gsSejVpiUvoeYWM/XsLiR+52A1apunF+hwQjKP5U/Y2nft1E+KpF1IRG
fKz8//zUDia5/j+hYkTAoMufUz74iqeir7UO3YyQYJvOujV00Hx3Lw/ImxKSnqHl
dUjgQF65dB/Jh+NKrtUOTFo2ODd3nZXHe1SuUcU0O+cwXbaHsAkgQZnUbWV051pB
NBHlnk4PXQ05AGdnhYkqq1patYUv6KRzkdmf9220qXnSiQxzwlWxotD29a1+yLgA
0RHc6JilZUF/1zpJ0hEQlZLx1C/XJl+b4KeUs8rLvxMCAwEAAaOCA+AwggPcMB8G
A1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBSfgNRUTEen
skvz0DDQvdCfr4VjvDCCAQ8GA1UdEQSCAQYwggECghZzZWlnYS5kZXYubmljb3Zp
ZGVvLmpwghgqLnNlaWdhLmRldi5uaWNvdmlkZW8uanCCGyouc3Auc2VpZ2EuZGV2
Lm5pY292aWRlby5qcIIgKi5kZWxpdmVyLnNlaWdhLmRldi5uaWNvdmlkZW8uanCC
HyoubWFuYWdlLnNlaWdhLmRldi5uaWNvdmlkZW8uanCCKCouZGVsaXZlci5mZWF0
dXJlLnNlaWdhLmRldi5uaWNvdmlkZW8uanCCJmRlbGl2ZXIuZmVhdHVyZS5zZWln
YS5kZXYubmljb3ZpZGVvLmpwghwqLmFwaS5zZWlnYS5kZXYubmljb3ZpZGVvLmpw
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny
bC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLYNFAmwAABAMA
RzBFAiEAkfgh6UkPcNseax9CEJ7wLtXQSVbo05r70WNzZoPxJOcCICgS7LIjWBC9
pjLUhhjXP7Bo07RO4i3jM83wBCotscVXAHYASLDja9qmRzQP5WoC+p0w6xxSActW
3SyB2bu/qznYhHMAAAGLYNFACgAABAMARzBFAiEAv5Csrapji3o8w0xyskmYTL6o
154TzmziqE4EbxLyINMCIBfU0aLRmJ8e69F8qlHqf1c6o16z443DLQZWbw+Cpndv
AHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLYNFAAgAABAMA
SDBGAiEArHqNWfFToWt7SI7WuB5rNemCZfXwelsE0onjSD04olUCIQD+ugIJp30k
2NG94jpKf3GX7pExgkYgUydIPRQBwLwe9jANBgkqhkiG9w0BAQsFAAOCAQEAK/BS
Z6O/sSqkw5tChr+sdpyIoJPKGo6KtjMSr4FXS6dwkepZtP1ga4UlZyp3SEYOb6s7
P7X8xN1c7NyyJbag1gYumz0W8rpErTscHgLQeGHgCW6hdaMy3slK+qZKQrAuhj3g
cXg1CEMTBjEVzhZXW98qc/nn3Odz+uLapl/AgFUY845j/pPvT25eOjsWhy46iHtZ
1c5S++sUhLQUdZj8cN+LpqbiCVe6tv3Lrwb+pFQdW/iRWJGZqSWTu39xDh8nELdK
PMcLl9qhE6g63VarLc1gsesitysstwoepvVG85gbrD58GSwToVHzqEQeHmku0btx
V4gOL+yzSg7CURXSyg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYOngxOBMmrZ/9jan8sc
anZ+MFeDjO75mjYxh9zVfUJtWEc80/2CxJ6NWmJS+h5hYz9ewuJH7nYDVqm6cX6H
BCMo/lT9jad+3UT4qkXUhEZ8rPz//NQOJrn+P6FiRMCgy59TPviKp6KvtQ7djJBg
m866NXTQfHcvD8ibEpKeoeV1SOBAXrl0H8mH40qu1Q5MWjY4N3edlcd7VK5RxTQ7
5zBdtoewCSBBmdRtZXTnWkE0EeWeTg9dDTkAZ2eFiSqrWlq1hS/opHOR2Z/3bbSp
edKJDHPCVbGi0Pb1rX7IuADREdzomKVlQX/XOknSERCVkvHUL9cmX5vgp5Szysu/
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20153967557060022754159442742875784846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seiga.dev.nicovideo.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22409101155572415369862916036226672256764611392803647876591392986122390672268032828833415723635140852604713784510588377911107977752269087503516623105635981911947818556683235687182608757614261266669051580460175223899187923301377153184068056004608240546652434797653895969172498924349282313572652653585008042760334864061385198704694068157218064700854695618518321453105058884308318836231425869404305084713538714585824644834905370918860008042423384587765117844130291748886591278320880983485518413312583654221440599614201207046094690409713865572714557937191468208213701543745973298432131012452303223171348402121062029704979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f80d4544c47a7b24bf3d030d0bdd09faf8563bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (262 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp.seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deliver.seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manage.seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deliver.feature.seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliver.feature.seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.seiga.dev.nicovideo.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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