content-tagging-service-prod.us-east-1.lb.cvent.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:be:7e:db:db:6d:be:a1:32:e2:da:48:7f:64:41:6a was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=content-tagging-service-prod.us-east-1.lb.cvent.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:be:7e:db:db:6d:be:a1:32:e2:da:48:7f:64:41:6a
Serial Number (int): 10293705376103569382547632846442611050
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9b:2e:26:3d:c0:f6:ea:9e:5c:fc:17:c9:7f:2b:cf:02:05:bb:0c:8e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 17:d3:c1:45:08:e3:8f:c0:7a:d7:d7:16:6e:66:8b:23:00:49:39:b7
Fingerprint (sha256): 08:dc:8d:a2:ba:6e:90:5c:be:84:12:08:ce:d2:4e:62:c1:5f:6c:5f:b8:b1:dd:cd:8a:3a:40:2c:fa:4b:b7:4d

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate content-tagging-service-prod.us-east-1.lb.cvent.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for content-tagging-service-prod.us-east-1.lb.cvent.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

content-tagging-service-prod.us-east-1.lb.cvent.com
content-tagging-service.us-east-1.cvent-production.cvent.cloud
content-tagging-service-production.us-east-1.lb.cvent.com
content-tagging-service.cvent-production.cvent.cloud
content-tagging-service-prod.us-east-1.lb.core.cvent.org
content-tagging-service-production.us-east-1.lb.core.cvent.org
content-tagging-service.us-east-1.private.cvent-production.cvent.cloud

Other certificates including the domain name cvent.com

(limited to 100 certificates)
www.cvent.com
cds4.cvent.com
video-editor.sandbox-app.cvent.com
test.cvent.com
cdktesting-us-east-1-stack-2.lb.cvent.com
heroquiz.cvent.com
www.t2.cvent.com
sslcertificate3.queue-it.net
cds4.cvent.com
cds4.cvent.com
ebs-ir-test.cvent.com
badges.app.t2.cvent.com

*.cvent.com
cds3.cvent.com
cds1.cvent.com
eventinabox.cvent.com
hq-expresswaye-002.remotephone.cvent.com
cdktesting-us-east-1.lb.cvent.com
eventinabox.cvent.com
*.us-west-2.lb.cvent.com
queue.disneymovieclub.go.com
cds1.cvent.com
cvent.com
smart.cvent.com
cds1.cvent.com
cds3.cvent.com
badges.load-app.s2.cvent.com
test.cvent.com
cds3.cvent.com
cds2.cvent.com
*.us-west-2.lb.cvent.com
mattt-testing3.cvent.com
*.cvent.com
cds2.cvent.com
community.cvent.com
sso-development.cvent.com
cds1.cvent.com
heroquiz.cvent.com
mattt-test1.cvent.com
cdktesting-us-west-2.cvent.com
smart.cvent.com
cds3.cvent.com
community.cvent.com
cds1.cvent.com
smart.cvent.com
cds3.cvent.com
sbcvm.cvent.com
custom-eur.cvent.com
ssc.cvent.com
*.us-east-1.lb.cvent.com
cds4.cvent.com
cds4.cvent.com
content-tagging-service-prod.us-east-1.lb.cvent.com
ux.cvent.com
cds2.cvent.com
test.cvent.com
isignatures.cvent.com
api.cvent.com
cds1.cvent.com
*.app.cvent.com
*.us-east-1.lb.cvent.com
test.cvent.com
cds4.cvent.com
eventinabox.cvent.com
status-testing.cvent.com
cds4.cvent.com
cdktesting-us-east-1.lb.cvent.com
cds2.cvent.com
cds4.cvent.com
cds4.cvent.com
cds3.cvent.com
cds3.cvent.com
test.cvent.com
cds2.cvent.com
cdktesting-us-east-1.cvent.com
*.cvent.com
falcon-service-int.us-east-1.lb.cvent.com
cds4.cvent.com
cds1.cvent.com
attendee-hub-eur.cvent.com
cds4.cvent.com
cds4.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
queue.disneymovieclub.go.com
cds3.cvent.com
cds2.cvent.com
pages.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
csn-gdpr-service.core-app-prod.cvent.cloud
cds3.cvent.com
www.cvent.com
isignatures.cvent.com
cdktesting-us-east-1.cvent.com
cds3.cvent.com
sslcertificate3.queue-it.net
advocates.cvent.com
community.cvent.com

Certificate

The complete raw certificate details for content-tagging-service-prod.us-east-1.lb.cvent.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHijCCBnKgAwIBAgIQB75+29ttvqEy4tpIf2RBajANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDgxMDAwMDAwMFoXDTI0MDkwNzIzNTk1OVowPjE8
MDoGA1UEAxMzY29udGVudC10YWdnaW5nLXNlcnZpY2UtcHJvZC51cy1lYXN0LTEu
bGIuY3ZlbnQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzJ4
Nc/iRmzIQFMXhlIR1gViiKyGd1yhUJ5X2FiIuhJ4spmFcaKMQTNw8FrVbpPR9rUn
wKLgBxGAZDAsgaAs/Ac1Z1g/M65krHeoKmapfprSzhhgcMWELNwBgKmTLDLEaAL8
rFWEUy8kx8j+gydoAmnWLMwz5QTY/9UECCBad21wy0NJMiezmZOoC2dYklepV2DH
l0Pe3kXWtZtzhE1GCHDw69podE1u8VmKSGuys+WpMd0blmtRolBboaGEmkMj+rxn
JO5kknwlLCRKYlYdWfPmXRxaoOS1rX+p8VnHrCUTfdE2CXiqG09SFhvIKahaHRVj
mwGP3gEo4I4MtDNkIQIDAQABo4IEhDCCBIAwHwYDVR0jBBgwFoAUgbgOY4qJEhjl
+js7UJWf5uWQE4UwHQYDVR0OBBYEFJsuJj3A9uqeXPwXyX8rzwIFuwyOMIIBtQYD
VR0RBIIBrDCCAaiCM2NvbnRlbnQtdGFnZ2luZy1zZXJ2aWNlLXByb2QudXMtZWFz
dC0xLmxiLmN2ZW50LmNvbYI+Y29udGVudC10YWdnaW5nLXNlcnZpY2UudXMtZWFz
dC0xLmN2ZW50LXByb2R1Y3Rpb24uY3ZlbnQuY2xvdWSCOWNvbnRlbnQtdGFnZ2lu
Zy1zZXJ2aWNlLXByb2R1Y3Rpb24udXMtZWFzdC0xLmxiLmN2ZW50LmNvbYI0Y29u
dGVudC10YWdnaW5nLXNlcnZpY2UuY3ZlbnQtcHJvZHVjdGlvbi5jdmVudC5jbG91
ZII4Y29udGVudC10YWdnaW5nLXNlcnZpY2UtcHJvZC51cy1lYXN0LTEubGIuY29y
ZS5jdmVudC5vcmeCPmNvbnRlbnQtdGFnZ2luZy1zZXJ2aWNlLXByb2R1Y3Rpb24u
dXMtZWFzdC0xLmxiLmNvcmUuY3ZlbnQub3JngkZjb250ZW50LXRhZ2dpbmctc2Vy
dmljZS51cy1lYXN0LTEucHJpdmF0ZS5jdmVudC1wcm9kdWN0aW9uLmN2ZW50LmNs
b3VkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVz
dC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEB
BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3Qu
Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNv
bS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIB
aQFnAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJ4WErzgAA
BAMARjBEAiBTjSzzaMwFBgtZrT60vW1ydJRnSdmWTcbnimfhvnzSpAIgdQbCWN1D
eVSccaxKBDcs8eycIQgVerBUuUSJhZRx6NAAdgBIsONr2qZHNA/lagL6nTDrHFIB
y1bdLIHZu7+rOdiEcwAAAYnhYSvfAAAEAwBHMEUCIHJXGGClnGagkSPmZSPi3vne
071KxPZXh2JQZK8K7qRHAiEAyhFfod1GD8KjP25xmmYB7B4aa8z+tQO5oRC7E/gy
wZkAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYnhYSuoAAAE
AwBHMEUCIQCBaVY/nCZCZ/QBK5K5PSnl6tmCdUIuv94nhsU0Qogg9QIgR+yREhn8
1C4K85rgVfHX7NHKRJ0O8SXlIJxtP2kPPJ4wDQYJKoZIhvcNAQELBQADggEBAFFB
LNU46tizEClXgN3LF6iBFuhNoawZhw2Dj1PfFiWXKvlPlqip+M0Lfd6hNRqlm0V+
ae63AxazQJscj0o7jPTwM1av62ApYAsdV7GILipt0hV4CpgRxldiuOSQeuixIq9J
b+L1645Cm3VPcuF7k7rQHjveRZuqArkV3E99pgHXAAa1f4RjYvJEM2j+pxbJjDaF
PxS/0uH8XPjdlSEDDHwj+YeW1WWfoadfM8+DksOTzyfmc2mIus72aJ6xCMPbgyo6
53d89AZbS+tPmkd0R7nNI7wzWuRjmk2i3OC8e2qBX7sUfiF11gG6IqLVa2d0giqB
oxZ923/kizK8QdJuZeM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzJ4Nc/iRmzIQFMXhlIR
1gViiKyGd1yhUJ5X2FiIuhJ4spmFcaKMQTNw8FrVbpPR9rUnwKLgBxGAZDAsgaAs
/Ac1Z1g/M65krHeoKmapfprSzhhgcMWELNwBgKmTLDLEaAL8rFWEUy8kx8j+gydo
AmnWLMwz5QTY/9UECCBad21wy0NJMiezmZOoC2dYklepV2DHl0Pe3kXWtZtzhE1G
CHDw69podE1u8VmKSGuys+WpMd0blmtRolBboaGEmkMj+rxnJO5kknwlLCRKYlYd
WfPmXRxaoOS1rX+p8VnHrCUTfdE2CXiqG09SFhvIKahaHRVjmwGP3gEo4I4MtDNk
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10293705376103569382547632846442611050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content-tagging-service-prod.us-east-1.lb.cvent.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26156216601055656010394443173384492589445207636346303069879564528362723446442868816444502387331118900652289464380288122852034713548017812172805885664299407874106308938206920575547887006379145582004688780339912149460466483337435830911875362262691708375356757449520060029783697904384648366685349240241071769224035807497197509318125597786944351357585438536899696355419355073343513797830769351175966726999468518811989362378334759461503036006421707856311549561353884291341252591556909966908428444668122051749296717005960350114211796436725283682268181199090752161214226394208004891761156914035007492566991073203040313107489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b2e263dc0f6ea9e5cfc17c97f2bcf0205bb0c8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (428 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-prod.us-east-1.lb.cvent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service.us-east-1.cvent-production.cvent.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-production.us-east-1.lb.cvent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service.cvent-production.cvent.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-prod.us-east-1.lb.core.cvent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service-production.us-east-1.lb.core.cvent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tagging-service.us-east-1.private.cvent-production.cvent.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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