video-player.aps.amazon-adsystem.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:f1:4f:2e:b1:c5:2d:30:e0:ed:a5:93:c4:9b:ab:10 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=video-player.aps.amazon-adsystem.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:f1:4f:2e:b1:c5:2d:30:e0:ed:a5:93:c4:9b:ab:10
Serial Number (int): 15874457506412350731526144886149196560
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d9:0f:c7:6e:15:48:8b:6c:4a:72:08:d7:62:a8:6e:3c:d6:3c:95:dc
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 6d:ff:96:cc:18:98:30:1e:de:3a:9e:c9:e9:ab:7a:a9:f8:89:8b:cd
Fingerprint (sha256): 0b:21:4f:d6:02:e3:e6:5b:a2:4f:02:ce:e7:2d:44:fd:73:00:71:cf:ab:02:f2:92:19:0e:d9:a8:59:e7:07:98

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate video-player.aps.amazon-adsystem.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for video-player.aps.amazon-adsystem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

video-player.aps.amazon-adsystem.com

Other certificates including the domain name amazon-adsystem.com

(limited to 100 certificates)
aax-us-west.amazon-adsystem.com
rcm-fe.assoc-amazon.com
aax-us-east.amazon-adsystem.com
www.assoc-amazon.fr
aax-fe-retail-direct.amazon-adsystem.com
assoc-msdk-cn.amazon-adsystem.com
wms-eu.assoc-amazon.com
aax-fe.amazon-adsystem.com
www.assoc-amazon.ca
aax-vx-fe-us-west-2.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
aax-us-east-test1.amazon-adsystem.com
rcm-na.assoc-amazon.com
aax-us-iad.amazon.com
aax-us-east-test6.amazon-adsystem.com
mads-eu.amazon.com
z-eu.amazon-adsystem.com
aax-eu-retail-direct.amazon-adsystem.com
www.assoc-amazon.ca
wms-eu.assoc-amazon.com
aax-vx-us-us-east-1.amazon-adsystem.com
aax-fe-sin.amazon-adsystem.com
aax.online-panel.advertising.amazon.dev
cdn-d.amazon-adsystem.com
rcm-fe.assoc-amazon.com
www.assoc-amazon.de
rcm-eu.assoc-amazon.com
s.amazon-adsystem.com
aax-us-pdx.amazon-adsystem.com
wms-na.assoc-amazon.com
v-eu.amazon-adsystem.com
aax-adx.ap-southeast.3px.axp.amazon-adsystem.com
rcm-fe.assoc-amazon.com
cdn-c.amazon-adsystem.com
aax-apse-dtb-web.amazon-adsystem.com
fls-na.amazon-adsystem.com
aax-eu.amazon-adsystem.com
wms-na.assoc-amazon.com
at-us-east.amazon-adsystem.com
aax-us-east-rtb-adx.amazon-adsystem.com
wms-na.assoc-amazon.com
ws-eu.assoc-amazon.com
aax-us-pdx.amazon-adsystem.com
z-eu.amazon-adsystem.com
aax-us-pdx.amazon-adsystem.com
fls-cn.amazon-adsystem.com
ws-fe.assoc-amazon.com
video-player.aps.amazon-adsystem.com
aax-eu.amazon-adsystem.com
wms-na.assoc-amazon.com
vq-eu-west-1.amazon-adsystem.com
assoc-msdk-eu.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
wms-na.assoc-amazon.com
aax-us-west.amazon-adsystem.com
www.assoc-amazon.fr
ws-fe.assoc-amazon.com
vaes.dub.amazon-adsystem.com
cell8002.pdx.spp.bid-na.ads.aps.amazon-adsystem.com
?.amazon-adsystem.com
mads.amazon.com
aax-us-east.amazon-adsystem.com
www.assoc-amazon.ca
mas-sdk.amazon.com
z-eu.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
imdb.amazon-adsystem.com
imdb.amazon-adsystem.com
aax-fe-retail-direct.amazon-adsystem.com
vq-test-us-east-1.amazon-adsystem.com
aax-vx-us-us-west-2.amazon-adsystem.com
aax-us-east-test1.amazon-adsystem.com
atue.amazon-adsystem.com
rcm-na.assoc-amazon.com
c.amazon-adsystem.com
assoc-msdk-metrics-us.amazon-adsystem.com
www.assoc-amazon.es
ws-eu.assoc-amazon.com
z-na.amazon-adsystem.com
vfw-ap.amazon-adsystem.com
mas-sdk.amazon.com
mobile-associates-service.amazon.com
rcm-eu.assoc-amazon.com
v-eu.amazon-adsystem.com
ws-cn.assoc-amazon.com
aax-fe.amazon-adsystem.com
aax-fe-sin-rtb-adx.amazon-adsystem.com
*.us-east-1.prod.3p.entry.video-ads.a2z.com
www.assoc-amazon.jp
aax-vx-us-iad.amazon-adsystem.com
www.assoc-amazon.de
v.amazon-adsystem.com
aax.online-panel.advertising.amazon.dev
fls-fe.amazon-adsystem.com
www.assoc-amazon.ca
rcm-fe.assoc-amazon.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
aax-us-iad.amazon.com
cell7002.pdx.stv.bid-na.ads.aps.amazon-adsystem.com

Certificate

The complete raw certificate details for video-player.aps.amazon-adsystem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIQC/FPLrHFLTDg7aWTxJurEDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTIyMDAwMDAwMFoXDTI1MDExODIzNTk1OVowLzEt
MCsGA1UEAxMkdmlkZW8tcGxheWVyLmFwcy5hbWF6b24tYWRzeXN0ZW0uY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntP0JDsb3jBh3S7Mo7459o0y
ZBwg2EIHml1Oi4xCwBCOhxdOk/Mw7L6WVweQ4K5JfbUnyWEZvoDdPRC2ofNCGqk7
SkYp0Yg6JncbmVinc12YS1X4kYn0MPMZjBiMZvlztUVQuZ3jrAXZfcqmOIZDv57X
zEhlcVQ6Z2OOJEwRkJMt6wZqy8cZICTn1JHLNfmEq1TH+97B4SnfEGPKTVU67BUA
1QRQnCx4PPK84FSPiNuyH1b4nAhiZzsoKk2h+iEwMLvUobwu0mG85eDWjQI6EbN3
4qE4DOENfRjHkwcYg0mWlZqgT15BBBcU5VsirqUp1wlySm//AS8q9JjCZ1CvRwID
AQABo4IC/TCCAvkwHwYDVR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYD
VR0OBBYEFNkPx24VSItsSnII12KobjzWPJXcMC8GA1UdEQQoMCaCJHZpZGVvLXBs
YXllci5hcHMuYW1hem9uLWFkc3lzdGVtLmNvbTATBgNVHSAEDDAKMAgGBmeBDAEC
ATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1hem9udHJ1c3Qu
Y29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6
Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDov
L2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwGA1UdEwEB/wQC
MAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AE51oydcmhDDOFts1N8/Uusd
8OCOG41pwLH6ZLFimjnfAAABjIU69oIAAAQDAEcwRQIgbm1UMaNBOUYNB9Soq3Ht
x2tH8BreVCkMHqopILcGBfUCIQCZvzoY3mplj/9F7hwFyo6HgdXcaofDcOVyLIGe
ZhJzOwB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjIU69p0A
AAQDAEgwRgIhAMhxAxYTOjdPR6AuPnfCk7+2m3qw+GUjfUSknuDUDrt3AiEAuKee
n+9Vy/S+QAx/K5KpKeYZWO8DRVXWXw45UNSS38AAdQB9WR4S4XgqexxhZ3xe/fjQ
h1wUoE6VnrkDL9kOjC55uAAAAYyFOvaXAAAEAwBGMEQCIH9Xk3xMyy+vV9OGEn98
wa49S5omZBzVHIQdpULZbc+UAiBx89I6Iz7aVjEE2+iPuPEAZF8yKDjEKpKnIie2
a0GC3jANBgkqhkiG9w0BAQsFAAOCAQEApcfz/vx7Z+/OmQt1Q3beqMQ2anldDgS3
+4/P6LrbnF9/mHnK/lIiTzY5hCtkaDC8niaT/KScsYsq7n7/3lFG+kvHgDDGI3nd
TnOh+ICn4o+fRgxRZuUc3yVwXhTMqtI98KyfHmk4Evp95YiBFgHDB1AX1802BK75
h+ZIGrElzxQh81jt5ffmsSIapOJXDMxb7g14Kp4zbkMHUzQmJD6dy278Uh5QKfgV
o5PM9go1iH7R8gAzJ/XuZuwsqxqo8JR+a0u+pa6lmAQwKG7sZHr2EBCgbeOLSW2k
sgNHHAfou94ijQRmHCP5d3y+3CPZdy9gjidBPIQXUwRSPX+O+EP2HA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntP0JDsb3jBh3S7Mo745
9o0yZBwg2EIHml1Oi4xCwBCOhxdOk/Mw7L6WVweQ4K5JfbUnyWEZvoDdPRC2ofNC
Gqk7SkYp0Yg6JncbmVinc12YS1X4kYn0MPMZjBiMZvlztUVQuZ3jrAXZfcqmOIZD
v57XzEhlcVQ6Z2OOJEwRkJMt6wZqy8cZICTn1JHLNfmEq1TH+97B4SnfEGPKTVU6
7BUA1QRQnCx4PPK84FSPiNuyH1b4nAhiZzsoKk2h+iEwMLvUobwu0mG85eDWjQI6
EbN34qE4DOENfRjHkwcYg0mWlZqgT15BBBcU5VsirqUp1wlySm//AS8q9JjCZ1Cv
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15874457506412350731526144886149196560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'video-player.aps.amazon-adsystem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20050170438628626487375416647966874684065680167672694746644838505895367581318900110634316030708515712880452477545461264932228734240187395080595704421393269220525674141161011966662809326874571853531781182781428072769894720969892738381276985230747866600054349780097376939344530385216937686443332316081009634684557133102384651348234190633606626848250560297728260119141863614195460319623498552214125128641746642066972400921702164002723235871256958139724395717766977599623510519615804455695582938085806857000017365293797267672505060318599694472665676449121508372787370400838884397780035412445154088805994140940010020450119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d90fc76e15488b6c4a7208d762a86e3cd63c95dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-player.aps.amazon-adsystem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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