*.architecture.dwp.gov.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:a3:ac:0d:31:d1:68:61:dc:80:56:7f:35:48:cf:07 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.architecture.dwp.gov.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:a3:ac:0d:31:d1:68:61:dc:80:56:7f:35:48:cf:07
Serial Number (int): 20788253944550779678639438496835096327
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 12:24:12:a1:5b:97:36:d2:24:ce:45:6f:68:0d:05:b8:dd:ba:5c:78
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 7a:a7:d0:ee:ee:8b:71:1a:1d:f2:6f:0a:7d:f5:89:d3:6d:09:ff:90
Fingerprint (sha256): 09:19:b3:2b:38:a5:56:50:61:de:04:0c:64:ca:27:b3:39:c1:ed:b9:78:db:fb:33:4c:23:8b:0c:eb:52:e6:f4

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.architecture.dwp.gov.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.architecture.dwp.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.architecture.dwp.gov.uk
architecture.dwp.gov.uk

Other certificates including the domain name dwp.gov.uk

(limited to 100 certificates)
36-ast.feat.exchange.dwp.gov.uk
1143-amr-exchange-gateway.feat.exchange.dwp.gov.uk
api.747-amr.feat.exchange.dwp.gov.uk
sip.dwp.gsi.gov.uk
stat-xplore.dwp.gov.uk
api.445-evergreening.feat.exchange.dwp.gov.uk
getstatepension.dwp.gov.uk
api.44-bst.feat.exchange.dwp.gov.uk
*.atw.health.dwp.gov.uk
support.findajobstage.dwp.gov.uk
secureies.dwp.gov.uk
secureupdate.dwp.gov.uk
45-ast.feat.exchange.dwp.gov.uk
api.744-bmr.feat.exchange.dwp.gov.uk
stat-xplore.dwp.gov.uk
1138-bmr.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
secureonline.dwp.gov.uk
oid-tes.feat.exchange.dwp.gov.uk
dev.uc.confirm-your-identity.dwp.gov.uk
747-bmr-exchange-gateway.feat.exchange.dwp.gov.uk
760-amr.feat.exchange.dwp.gov.uk
api.757-bmr.feat.exchange.dwp.gov.uk
communicationcentre.dwp.gov.uk
get-state-pension.service.gov.uk
supportforcysp.dwp.gov.uk
jira.dwp.gov.uk
prap-staging.dwp.gov.uk
733-amr-exchange-gateway.feat.exchange.dwp.gov.uk
741-amr.feat.exchange.dwp.gov.uk
api.1129-amr.feat.exchange.dwp.gov.uk
secure.dwp.gov.uk
298-mr-curity.feat.exchange.dwp.gov.uk
careers.dwp.gov.uk
gen-mr-1482-exchange-gateway.feat.exchange.dwp.gov.uk
dev.prap.dwp.gov.uk
ecs-mr-1483-exchange-gateway.feat.exchange.dwp.gov.uk
secureies.dwp.gov.uk
gen-mr-1481-exchange-gateway.feat.exchange.dwp.gov.uk
www.dwpe-services.direct.gov.uk
sts-tell-us-someone-died.dwp.gov.uk
380-merge-request.feat.exchange.dwp.gov.uk
1132-amr.feat.exchange.dwp.gov.uk
ecs-mr-1478-exchange-gateway.feat.exchange.dwp.gov.uk
*.architecture.dwp.gov.uk
739-amr-exchange-gateway.feat.exchange.dwp.gov.uk
api.306-evergreening.feat.exchange.dwp.gov.uk
communicationcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
1150-bmr.feat.exchange.dwp.gov.uk
tell-us-someone-died.dwp.gov.uk
jobcentre.dwp.gov.uk
getinvolved.dwp.gov.uk
497-mr-keycloak.feat.exchange.dwp.gov.uk
729-amr.feat.exchange.dwp.gov.uk
sts.dwp.gov.uk
*.digital.uc.dwp.gov.uk
40-bst-exchange-gateway.feat.exchange.dwp.gov.uk
1148-amr-exchange-gateway.feat.exchange.dwp.gov.uk
jobs.dwp.gov.uk
1143-bmr.feat.exchange.dwp.gov.uk
ecs-mr-1480-exchange-gateway.feat.exchange.dwp.gov.uk
securetest.tes.dwp.gov.uk
churchill-beta.dwp.gov.uk
*.architecture.dwp.gov.uk
paradoxrdpqa.dwp.gov.uk
mat-hol.feat.exchange.dwp.gov.uk
findajob.dwp.gov.uk
446-evergreening.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
38-ast.feat.exchange.dwp.gov.uk
get-state-pension.service.gov.uk
idp-tell-us-someone-died.dwp.gov.uk
secure.dwp.gov.uk
1141-amr.feat.exchange.dwp.gov.uk
*.staging-green.smi-wa-digital.uk
getinvolved.dwp.gov.uk
*.atw.health.dwp.gov.uk
487-merge-request-local.feat.exchange.dwp.gov.uk
301-mr-keycloak.feat.exchange.dwp.gov.uk
secureonline.dwp.gov.uk
burbank-client.ppb.dwp.gov.uk
findajob.dwp.gov.uk
758-bmr.feat.exchange.dwp.gov.uk
authorisedofficers.dwp.gov.uk
getinvolved.dwp.gov.uk
295-mr-curity.feat.exchange.dwp.gov.uk
laa-check.ppb.dwp.gov.uk
46-st.feat.exchange.dwp.gov.uk
api.744-amr.feat.exchange.dwp.gov.uk
445-evergreening.feat.exchange.dwp.gov.uk
*.health.dwp.gov.uk
prap.dwp.gov.uk
check-ns-esa-special-payment.dwp.gov.uk
seepotential.dwp.gov.uk
api.769-bmr.feat.exchange.dwp.gov.uk
493-mr-curity.feat.exchange.dwp.gov.uk
secure.dwp.gov.uk
getinvolved.dwp.gov.uk
proveyoucanapply-uc.dwp.gov.uk

Certificate

The complete raw certificate details for *.architecture.dwp.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIQD6OsDTHRaGHcgFZ/NUjPBzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTAwMzAwMDAwMFoXDTI0MTAyOTIzNTk1OVowJDEi
MCAGA1UEAwwZKi5hcmNoaXRlY3R1cmUuZHdwLmdvdi51azCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALbdN0L1RdktbcIWPYTUXgeEl+08xJLDHGbhoqdM
QStDf+a0tgztWe6Frw/NWTj6roJQT03fheOYREgg37dczDTf2HZZbaeyk4gAXN4W
EN2gwnDiqy2E3QmSJShDnyRksjxYlo9SJ2y6n6TbBujfVtY1zGI3QO6fWB1+MIOG
Ga0P7EItsg0tyONdFiNxL3SxK/kCvG4eGUQNyrB92zINvqjnDRX7Rmyin3naii3K
Th4uvcNBpZDvRrwAyEMADAtlw8V5eoK8RJId9lrHG0VMx+aGGeYxKCriwk3UScSA
V/Y1fEZPbsC88YcEKsyvoikD4IcA9YgwrL/cXSFjMh2WFyECAwEAAaOCAwswggMH
MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBQSJBKh
W5c20iTORW9oDQW43bpceDA9BgNVHREENjA0ghkqLmFyY2hpdGVjdHVyZS5kd3Au
Z292LnVrghdhcmNoaXRlY3R1cmUuZHdwLmdvdi51azATBgNVHSAEDDAKMAgGBmeB
DAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1
c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB
/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AHb/iD8KtvuVUcJhzPWH
ujS0pM27KdxoQgqf5mdMWjp0AAABivUtgV0AAAQDAEcwRQIgaAVb9FaYpTH2sf7W
Z64k/1+B8YBUWDUCG5cZDIJYt5gCIQCKaYXIeI2WgFiR8r8wGiwcB0GHtIj1Vvrw
SGps83HJCQB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABivUt
gWMAAAQDAEYwRAIgLhmhpPU+gkMDKDvdHroggCnG1IG8hIIRZUDq23BLBMECIHzO
NW4qgcOm3YPey7YX08OGEHBh3L05ecrqJwus/vmeAHcAPxdLT9ciR1iUHWUchL4N
Eu2QN38fhWrrwb8ohez4ZG4AAAGK9S2BjQAABAMASDBGAiEApm2tzoiuTH5ulZZo
b8sdebLbNpKMnlPQSmYORyeFSRMCIQD3iYhDvqrT9XdwhtHgFf+RX9wBuvP/tKna
L3MRAF1lzTANBgkqhkiG9w0BAQsFAAOCAQEAesT++cCQZyHntNM/oavjHHvF2H9f
UCWKauEVBopL4DZ4VY/lle8ovnq1PAOJrcsbDnfvWw3fDMWA50Lw7HxX5/mV/Q6J
zoiWGPL7LhN1HLGziuS7GvA9+SxkQ1hXEfBvTknOeaV6mmD8VhhHrwn1YkIONnEQ
K2OhPGPbZ4ns7Az2BvlinWMn9VxMePnEVC6wdnPj9KNu9/SIzBojMJoctK+WDdEI
eb1PlRFA6QzvVioqNcZIAz23Cha7+WFXKNPQVVqDQLV0B02dgHUpU54UWzCooGkm
a7UTxcfXIuj+AlA5oKeNbgpEHN/6NbSXaniS05wTzY7jNKml4wA913s/hg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt03QvVF2S1twhY9hNRe
B4SX7TzEksMcZuGip0xBK0N/5rS2DO1Z7oWvD81ZOPquglBPTd+F45hESCDft1zM
NN/Ydlltp7KTiABc3hYQ3aDCcOKrLYTdCZIlKEOfJGSyPFiWj1InbLqfpNsG6N9W
1jXMYjdA7p9YHX4wg4YZrQ/sQi2yDS3I410WI3EvdLEr+QK8bh4ZRA3KsH3bMg2+
qOcNFftGbKKfedqKLcpOHi69w0GlkO9GvADIQwAMC2XDxXl6grxEkh32WscbRUzH
5oYZ5jEoKuLCTdRJxIBX9jV8Rk9uwLzxhwQqzK+iKQPghwD1iDCsv9xdIWMyHZYX
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20788253944550779678639438496835096327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.architecture.dwp.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23084457112752129847185669654692145823594895951658716003729235927918024687584131180874034785308740202987053471859462701179735601630645672965287412466788170591485257182111073632856700964581389111681528487840585339215160759954189842384587951285693782720641154468941347480562350710283314575692307305888860898488577321633454272661544552651544110512254596144297679629680808818852434732770696349726420207004937931066226462571217231684440795665830772206901937351036559078710442175545896769551271619017215098042881065749491691695118997908482847881283621442040073089181768010018647018649420329008015358519485614957827982759713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							122412a15b9736d224ce456f680d05b8ddba5c78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.architecture.dwp.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'architecture.dwp.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:7|false] ObjectDescriptor [135 180 136 245 86 250 240 72 106 108 243 113 201 9 0 117 0 218 182 191 107 63 181 182 34 159 155 194 187 92 107 232 112 145 113 108 187 81 132 133 52 189 164 61 48 72 215 251 171 0 0 1 138 245 45 129 99 0 0 4 3 0 70 48 68]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20851677839870026268911169924139972690866986522009164323437480602979292349633
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 56451132482296390789039530815161474554283111862155530203843429650569487120798
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007ac4fef9c0906721e7b4d33fa1abe31c7bc5d87f5f50258a6ae115068a4be03678558fe595ef28be7ab53c0389adcb1b0e77ef5b0ddf0cc580e742f0ec7c57e7f995fd0e89ce889618f2fb2e13751cb1b38ae4bb1af03df92c6443585711f06f4e49ce79a57a9a60fc561847af09f562420e3671102b63a13c63db6789ecec0cf606f9629d6327f55c4c78f9c4542eb07673e3f4a36ef7f488cc1a23309a1cb4af960dd10879bd4f951140e90cef562a2a35c648033db70a16bbf9615728d3d0555a8340b574074d9d807529539e145b30a8a069266bb513c5c7d722e8fe025039a0a78d6e0a441cdffa35b4976a7892d39c13cd8ee334a9a5e3003dd77b3f86