env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:59:f5:f7:84:8b:82:79:55:84:f2:16:47:e1:7c:cb was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:59:f5:f7:84:8b:82:79:55:84:f2:16:47:e1:7c:cb
Serial Number (int): 13759383178988472201727642325372468427
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:a3:cf:4c:4a:77:c0:f4:35:a0:16:3a:ed:a3:eb:39:61:93:ef:84
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e0:a5:27:f6:d0:57:7d:40:a4:ea:b6:1d:f4:ef:12:81:64:c0:26:b9
Fingerprint (sha256): 09:6b:32:82:02:a6:fc:20:fd:29:68:73:59:26:c2:21:43:84:c4:90:2b:7f:8d:17:05:23:7d:5f:1e:fc:8a:a3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr
*.env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr

Other certificates including the domain name vsct.fr

(limited to 100 certificates)
ivts-51182.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-31165m.connect-api.evoyageurs-tech-dev.aws.vsct.fr
env-mabm.device-info-invictus.evoyageurs-dev.aws.vsct.fr
ivts-51725m.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-59210.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-58400m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
*.transilien-dev.aws.vsct.fr
ivts-50080.master.connect-api.evoyageurs-dev.aws.vsct.fr
2024b071.evoyageurs-tech-dev.aws.vsct.fr
ivts-59531.master.connect-api.evoyageurs-dev.aws.vsct.fr
c44a0fc7.evoyageurs-tech-dev.aws.vsct.fr
4dcd83c9.evoyageurs-tech-dev.aws.vsct.fr
ivts-48869m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
ivts-61227m.storybook-react-inv.evoyageurs-dev.aws.vsct.fr
ivts-46924.master.connect-api.evoyageurs-dev.aws.vsct.fr
psct-54623m.api.platform-scts-dev.aws.vsct.fr
2f276c02.evoyageurs-tech-dev.aws.vsct.fr
415e94ba.evoyageurs-tech-dev.aws.vsct.fr
det-production.euronet.vsct.fr
ivts-47227.master.connect-api.evoyageurs-dev.aws.vsct.fr
recette1.drd-mpd.vsct.fr
psct-44396m.api.platform-scts-dev.aws.vsct.fr
ivts-50802m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
ivts-49942c.storybook-react-inv.evoyageurs-dev.aws.vsct.fr
ivts-10251m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
e1b508cf.evoyageurs-tech-dev.aws.vsct.fr
ivts-30310m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
3b7cc1e5.evoyageurs-tech-dev.aws.vsct.fr
ivts-29049m.storybook-react-inv.evoyageurs-dev.aws.vsct.fr
prod1.transilien.vsct.fr
psct-60159m.api.platform-scts-dev.aws.vsct.fr
*.eu-west-1.transverse.aws.vsct.fr
b79ccdc6.evoyageurs-tech-dev.aws.vsct.fr
env-brem.connect-api.evoyageurs-tech-dev.aws.vsct.fr
ivts-57159m.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
ivts-24249m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
ivts-28645m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
3b83023f.evoyageurs-tech-dev.aws.vsct.fr
ivts-50471m.connect-api.evoyageurs-tech-dev.aws.vsct.fr
recette-transilien-cpt.vsct.fr
*.evtech-inno-prod.aws.vsct.fr
ivts-28017m.web-react-invictus.evoyageurs-dev.aws.vsct.fr
vpn1-production1.euronet.vsct.fr
ivts-58833m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
ivts-48656m.connect-api.evoyageurs-tech-dev.aws.vsct.fr
e28d159b.evoyageurs-tech-dev.aws.vsct.fr
ivts-28435m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
renovate-5bb6956c.flex-aftersales.evoyageurs-dev.aws.vsct.fr
ocebo.vsct.fr
ws-rec3-csm.vsct.fr
ivts-50812m.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-51702.master.connect-api.evoyageurs-dev.aws.vsct.fr
*.ouicloud-dev.aws.vsct.fr
ivts-22335m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
f5602639.platform-scts-dev.aws.vsct.fr
ivts-48203.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-58400m.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
ivts-41496c.connect-api.evoyageurs-dev.aws.vsct.fr
*.evtechbigdata-dev.aws.vsct.fr
87ddba25.evoyageurs-tech-dev.aws.vsct.fr
psct-30310m.api.platform-scts-dev.aws.vsct.fr
sncf.com
2e2b9f9d.evoyageurs-tech-dev.aws.vsct.fr
recette.pepita.vsct.fr
a157e603.platform-scts-tech-dev.aws.vsct.fr
df32b4ed.evoyageurs-tech-dev.aws.vsct.fr
ivts-50712.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-34685.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-27729m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
psct-41496c.api.platform-scts-dev.aws.vsct.fr
*.vsct.fr
sncf.com
ivts-51650.master.connect-api.evoyageurs-dev.aws.vsct.fr
krum.vsct.fr
www.recette1.eurostar.vsct.fr
ivts-59437m.rc-andora-front.evoyageurs-dev.aws.vsct.fr
integration1.pao.vsct.fr
psct-47940m.api.platform-scts-tech-dev.aws.vsct.fr
ivts-29130m.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
env-era.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-31169c.galileo-admin-invictus.evoyageurs-dev.aws.vsct.fr
ivts-39855m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
api.maas-dev.aws.vsct.fr
*.ouitaas-dev.aws.vsct.fr
195df6ea.payg-dev.aws.vsct.fr
admins.voyages-sncf.com
env-zyac.device-info-invictus.evoyageurs-dev.aws.vsct.fr
c270e1de.evoyageurs-tech-dev.aws.vsct.fr
thalysmobile.vsct.fr
ivts-29048m.device-info-invictus.evoyageurs-dev.aws.vsct.fr
rec.wshoraires.vsct.fr
1ebbab06.evoyageurs-tech-dev.aws.vsct.fr
ivts-47441.master.connect-api.evoyageurs-dev.aws.vsct.fr
env-zzhc.device-info-invictus.evoyageurs-dev.aws.vsct.fr
ivts-29048m.storybook-flutter-inv.evoyageurs-dev.aws.vsct.fr
usine.idpass.sncf.com
env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr
ivts-50785.master.connect-api.evoyageurs-dev.aws.vsct.fr
2024b071.evoyageurs-tech-dev.aws.vsct.fr
api.transilien.vsct.fr

Certificate

The complete raw certificate details for env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIQCln194SLgnlVhPIWR+F8yzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIxOTAwMDAwMFoXDTI1MDExNjIzNTk1OVowQDE+
MDwGA1UEAxM1ZW52LWFjby5tYXN0ZXIuY29ubmVjdC1hcGkuZXZveWFnZXVycy1k
ZXYuYXdzLnZzY3QuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW
PDYs5LgcX/+f4p/Yx+2oa2YQpOyoEKq5xxP0PuvlzvHZDRjcKBiOXnvDvrOsJl3p
+85ZQhmGxaj73wVN7YaKUBM1U8s9lvxKUVIefzyv5z7Pd25xdoKtR2jmYfJsZts/
REngtFnYSh7qf67aW8ARinhecZJrffY9TwJPb4fTbq8GiMy8MrE0d3W65yOAQ84P
QymTUnsI6zEbdejmKg5TcYxXFzOtTKw9UW9q2yNTsFiwhgkaGF2w8Qhw16dKVsmc
m3QI8+2KsiQFa5AACY4cMMbTsotszITWN1fM29+lPpmZwcXsyhqsE9bWCUdCphIf
6uzRo9ZC5kfCtetQ5yBBAgMBAAGjggHaMIIB1jAfBgNVHSMEGDAWgBTAMVLNWlDD
gnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUiqPPTEp3wPQ1oBY67aPrOWGT74QweQYD
VR0RBHIwcII1ZW52LWFjby5tYXN0ZXIuY29ubmVjdC1hcGkuZXZveWFnZXVycy1k
ZXYuYXdzLnZzY3QuZnKCNyouZW52LWFjby5tYXN0ZXIuY29ubmVjdC1hcGkuZXZv
eWFnZXVycy1kZXYuYXdzLnZzY3QuZnIwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV
HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz
cC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu
cjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwzLQhZlAXU9hs
ylyiZ3qr4oZjZwr+i8EVLqLttp1gsTFed/MiI1plw2WgfSWsqom00rvJdLLAU8pD
K9ywyupQB1t91kNGRQU5FIOmunqGE82fFPnhbpSmrhovlpls9qqOBRazeAmMPblk
h1xMav9xyJfQAK1GUD0aygCIQ/98y2x0GqlhpwbRacEE3hlCRclyDERxV9xAo3+z
b78mgkiO5NrmkuEHxkGAq2IToippdETmoJyjlxuAkrd0Ng55CWi0HSXMzLnleZZH
wQFJHqxpPsH0iWELhUebmOzd0B4EJa8rycb7tmNoiLHE3qA7bYPwr+FGT8Wdkfoe
1DruLNOx
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jw2LOS4HF//n+Kf2Mft
qGtmEKTsqBCquccT9D7r5c7x2Q0Y3CgYjl57w76zrCZd6fvOWUIZhsWo+98FTe2G
ilATNVPLPZb8SlFSHn88r+c+z3ducXaCrUdo5mHybGbbP0RJ4LRZ2Eoe6n+u2lvA
EYp4XnGSa332PU8CT2+H026vBojMvDKxNHd1uucjgEPOD0Mpk1J7COsxG3Xo5ioO
U3GMVxczrUysPVFvatsjU7BYsIYJGhhdsPEIcNenSlbJnJt0CPPtirIkBWuQAAmO
HDDG07KLbMyE1jdXzNvfpT6ZmcHF7MoarBPW1glHQqYSH+rs0aPWQuZHwrXrUOcg
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13759383178988472201727642325372468427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27044688720416665578312947979454357880141978028153721748879992534163878266378339947684789648140161470647364446091129362744008935918838146118995011310738824574660200734874512767659729346022604035250961834635289750984297175279063258946001738832648257455403432177816647274243718294863297203718418986258878821259584701999260274395110267572928327940210608240196203156182766196405266023313806347303240498084222527692787364005611901140463473830999621155044656131182706970253347572941413534912002625215595085914791218465631408008376218499891152578541806495769463264298341067090940025926715922798761589935693603294567652073537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aa3cf4c4a77c0f435a0163aeda3eb396193ef84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.env-aco.master.connect-api.evoyageurs-dev.aws.vsct.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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