*.dlvryk8sd.ext.aws.zooplus.io

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:96:8c:8c:27:b1:f6:5f:a9:f8:26:bc:bb:ce:60:69 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.dlvryk8sd.ext.aws.zooplus.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:96:8c:8c:27:b1:f6:5f:a9:f8:26:bc:bb:ce:60:69
Serial Number (int): 8757063145062041332516334280398233705
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 28:db:41:4d:82:6e:15:c2:5e:d6:0d:8f:56:ca:ca:44:e8:c7:a7:0d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5b:cf:8f:b1:a8:22:02:d0:4a:51:b4:e3:b4:77:6d:ab:5c:62:eb:39
Fingerprint (sha256): 08:f9:ef:c4:3f:eb:0f:80:08:46:bd:b5:24:05:1c:7d:63:d0:3b:06:cc:5d:43:5e:8f:70:3b:6e:61:40:ff:ea

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.dlvryk8sd.ext.aws.zooplus.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dlvryk8sd.ext.aws.zooplus.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dlvryk8sd.ext.aws.zooplus.io
*.public.zooplus.net

Other certificates including the domain name zooplus.io

(limited to 100 certificates)
b3.shared.global.fastly.net
thelasttest.jiradev.zooplus.io
recommendation-api.rcengp.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
*.dlvryk8sp.int.aws.zooplus.io
cdn-feature-shop-9078.discod.ext.aws.zooplus.io
*.tsac.ext.zooplus.io
dii2.shpp.ext.zooplus.io
*.dnak8sp.int.aws.zooplus.io
*.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.jiradev.zooplus.io
*.accntk8sp.int.aws.zooplus.io
cdn-beta.disco.ext.aws.zooplus.io
coupon-provider-service-dev.zappd.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
hendrix-neo4j-prod.hendrixp.int.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.loytyk8sd.ext.aws.zooplus.io
*.dnak8sd.int.aws.zooplus.io
*.zooplus.io
coupon-provider-service-prod.zappp.int.aws.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
personalization-tracking-api.letop.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
hendrix-api.hendrixd.ext.aws.zooplus.io
*.zooplus.io
b3.shared.global.fastly.net
*.shopk8sp.int.aws.zooplus.io
*.srcngk8sd.ext.aws.zooplus.io
*.sndx.int.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
cdn-release.discod.ext.aws.zooplus.io
*.dlvryk8sd.ext.aws.zooplus.io
aws-accounts.wallaby-test.zooplus.io
*.catsk8sd.int.aws.zooplus.io
cdn-prod.disco.ext.aws.zooplus.io
*.idpk8sp.ext.aws.zooplus.io
*.zooplus.io
dlv-d.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
*.ndbk8sp.int.aws.zooplus.io
dii2.shpp.ext.zooplus.io
*.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.ps-prod.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
*.srcngk8sp.int.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
*.mdmk8sd.ext.aws.zooplus.io
b3.shared.global.fastly.net
test-rsoleto.partdev.int.int.aws.zooplus.io
b3.shared.global.fastly.net
shpd.mediazs.com
*.zooplus.io
b3.shared.global.fastly.net
finalup.jiradev.zooplus.io
*.ipsk8sd.ext.aws.zooplus.io
self-care-gateway.cscd.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.jiradev.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.ndbk8sd.int.aws.zooplus.io
fileportal.mft-dev.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
b3.shared.global.fastly.net
*.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.rcengd.int.aws.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.dmmd.ext.aws.zooplus.io
cdn-feature-shop-9468.shpsrchd.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io
website.sampleapd.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
hendrix-api-prod.hendrixp.int.aws.zooplus.io
development.jiradev.zooplus.io
b3.shared.global.fastly.net
*.dgmktk8sd.int.aws.zooplus.io
*.custsk8sp.ext.aws.zooplus.io
*.zooplus.io
dii2.shpp.ext.zooplus.io
customer-historization.idpc-dev.ext.aws.zooplus.io
b3.shared.global.fastly.net
sonarqube.sonarp.int.aws.zooplus.io
*.zooplus.io
*.edd-d.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io

Certificate

The complete raw certificate details for *.dlvryk8sd.ext.aws.zooplus.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIQBpaMjCex9l+p+Ca8u85gaTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDIxMDAwMDAwMFoXDTIzMTIxNTIzNTk1OVowKTEn
MCUGA1UEAwweKi5kbHZyeWs4c2QuZXh0LmF3cy56b29wbHVzLmlvMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUBPMogNywv/0oyTVjQjQdaizZufOYEd
qswsEG5fEBLnxOeqeuIdLoE2Qcm0293+tp4d1+AkWMjTmWsyf0ASALHXcXjl9pTu
L6eUof65DnNoG1z+sQs1zWKA1OrppxoH1VGxHUbj+U4ZWabfygr53Tzojj6DfmfS
AJkZ+ipIQt9+6EEsmzPMB4OgS1fwBMQiJ4fSMU1i43iGVViazJpA3uI4vUvnvejj
O5sYj5bEVCnQgeIA8MJztS65BSVCoYoOZSG5i7G71mvftkc6UcvSFJEJhyzaNK8b
2D/B5ZM+BrAY1OrWu1KsK1HHtQ1ZLY8OJ96BouVhucAOyssPvzOT1wIDAQABo4ID
DTCCAwkwHwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYE
FCjbQU2CbhXCXtYNj1bKykTox6cNMD8GA1UdEQQ4MDaCHiouZGx2cnlrOHNkLmV4
dC5hd3Muem9vcGx1cy5pb4IUKi5wdWJsaWMuem9vcGx1cy5uZXQwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy
MDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5j
cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF
BzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH
MAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAM
BgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDoPtDaPvUG
NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYY9HP6IAAAEAwBHMEUCIFedrtN6
yf4ndF4mWWqsAgPkdPyLVPaOQLtDliC+c/zeAiEAjnKHnxW70eAWzwfkkb3zFxPU
Le90aPqVUwEjArZhzHYAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTal
mgAAAYY9HP7cAAAEAwBHMEUCIQC6cDynAVVg5/6mc9whGz1h3S//f6ot/ZDwNvlR
f8L7uQIgJQDzS8Kf4pbNyWx7pCfwbpBPJSOpHHwXAdROnVnKw9wAdgC3Pvsk35xN
unXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYY9HP6uAAAEAwBHMEUCIFkaYClv
k9Y6LJacgIxGmUae/3T1Byp3GsDAlXdlzHT1AiEA0uzr4nwQeDTVtQ1pe6ovt0uI
WqB8AVtmiqGW2G4b+ecwDQYJKoZIhvcNAQELBQADggEBAK4j4FeLp/1hcM3RXirv
2Za4Cn+Yw78HSm/IixAL2I8LaWW+iOuxKX32e7SEceBqK+Q9nbZ0q4EGtuMRlcJK
uMDnaz/he58iC/mHR24VlPAO+G+O1ojWpft7Owx6rnCuZbYmBv4WenOXE+B2rEaW
6RCHpF5wQnFvFVhi9Jo8Sdn3xnKKRTIbn9VXEPhrvVdNgUUooqVeD1c3yDBHwrrt
vSbKJtAWUiN9EpavsaGftXOfMsh1l7Ey0xingk9oGhKXvAFF2rEkRK6cNH6V/oYS
AZTRLrBAUXyP1U+lOJvLWSfNzQ+XubhftdTtWJ0OOXJXSqJmjrTmCgptt3ykSHGN
6sE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUBPMogNywv/0oyTVjQj
QdaizZufOYEdqswsEG5fEBLnxOeqeuIdLoE2Qcm0293+tp4d1+AkWMjTmWsyf0AS
ALHXcXjl9pTuL6eUof65DnNoG1z+sQs1zWKA1OrppxoH1VGxHUbj+U4ZWabfygr5
3Tzojj6DfmfSAJkZ+ipIQt9+6EEsmzPMB4OgS1fwBMQiJ4fSMU1i43iGVViazJpA
3uI4vUvnvejjO5sYj5bEVCnQgeIA8MJztS65BSVCoYoOZSG5i7G71mvftkc6UcvS
FJEJhyzaNK8b2D/B5ZM+BrAY1OrWu1KsK1HHtQ1ZLY8OJ96BouVhucAOyssPvzOT
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8757063145062041332516334280398233705
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dlvryk8sd.ext.aws.zooplus.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19346172789516565239015713271680325089483328144625131263398517644646839737643936837507067838983207558681873617493403516543917978619998006670367704324316128242771515331968976256405435894073794059272455474632176603563838782810450677892067866128876265144687826759442676116072633276351310142803482709088039675384973504623269844763164986723952645031841796646232597242296505985256773673704954157905498906392678649377654502577145951374675264177310672343765066840029433840334636711284878618544111234698670751300085523201075191255185486981506723942997050707256079965779222124919595536950655244274429337459345780445563040535511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28db414d826e15c25ed60d8f56caca44e8c7a70d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlvryk8sd.ext.aws.zooplus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.public.zooplus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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