*.cwng-prod.edgenuityapp.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:91:cf:82:cd:20:45:cf:1a:91:6b:e5:7c:a2:1c:92 was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cwng-prod.edgenuityapp.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:91:cf:82:cd:20:45:cf:1a:91:6b:e5:7c:a2:1c:92
Serial Number (int): 3415547857989906805367358765586848914
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 63:64:9b:fa:f0:08:73:39:33:ea:79:be:bc:20:79:f5:44:db:04:b8
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 3d:05:e0:88:60:06:65:52:13:07:93:54:38:92:c1:26:8c:9a:9d:20
Fingerprint (sha256): 0b:95:05:5e:d7:83:96:74:d8:62:11:ee:1d:2d:a8:e5:6b:4b:11:e0:a8:8f:33:42:08:17:99:74:95:bc:7e:33

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.cwng-prod.edgenuityapp.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cwng-prod.edgenuityapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cwng-prod.edgenuityapp.com
licensing-api.ex.edgenuity.com
error-dashboard-api.cwng.imaginelearning.engineering
grading-api.ex.edgenuity.com
enote-api.ex.edgenuity.com
enrollment-api.ex.edgenuity.com
catalog-api.ex.edgenuity.com
org-api.ex.edgenuity.com
impersonation-banner-ui.ex.edgenuity.com
course-api.ex.edgenuity.com
section-api.ex.edgenuity.com
student-api.ex.edgenuity.com
student.ex.edgenuity.com

Other certificates including the domain name edgenuityapp.com

(limited to 100 certificates)
*.cosmos-prod.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.cwng-staging.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.lmsadmin-qa.edgenuityapp.com
*.licenseservice-dev.edgenuityapp.com
subscriptions-qa.edgenuityapp.com
*.armstrong-dev.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
subscriptions-staging.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.zoomservice-prod.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.strategicapps-staging.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.assessment-dev.il-apps.com
*.armstrong-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.lmsadmin-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.armstrong-staging.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.lmsadmin-qa-app.wna.cloud
*.strategicapps-staging.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
*.edgelms-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-staging.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.licenseservice-prod.edgenuityapp.com
*.ops.wna.cloud
*.sequencer-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.assessment-prod.il-apps.com
*.armstrong-dev.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.sequencer-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.cwng-integrations-dev.edgenuityapp.com
*.sequencer-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.doolittle-nonprod.wna.cloud
*.assessment-prod-app.wna.cloud
*.cwng-prod.edgenuityapp.com
*.lmsadmin-dev-app.wna.cloud
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.strategicapps-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com

Certificate

The complete raw certificate details for *.cwng-prod.edgenuityapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHcTCCBlmgAwIBAgIQApHPgs0gRc8akWvlfKIckjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDkwODAwMDAwMFoXDTI0MTAwNjIzNTk1OVowJzEl
MCMGA1UEAwwcKi5jd25nLXByb2QuZWRnZW51aXR5YXBwLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAPQqftBXPBrbqBzRRlkV/aSD2FfMEh6nQkdH
AWwVzOUagjbNHJ4G2SYit39bbBYkAoXKwn9S7DWtfZoEjx3WlKehkSl0T3R7MgI1
MvURbLTJZl/l/fYyKSyaJ0Y/v5bgeS2nJVIKXyWyXoJ9V4H96gNFdvdCfAGp6Fc6
qjxiTDzO5M3r3WOaGLXPmAUl75wMbDrREVY8qSGMopxd9Am/C2B11D+FgN/66Bz9
jCKaPJZPpxRA3KF32B5+ocqbaTwRcqhJzVuTBuZ69CXnYQiYEkPVXfzAZjgDqSdA
GSxDMFlLkWQL7+S7mSgZ9a3iV6H5MkyEDMgz50lk30Ua44OzKx0CAwEAAaOCBIIw
ggR+MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRj
ZJv68AhzOTPqeb68IHn1RNsEuDCCAbEGA1UdEQSCAagwggGkghwqLmN3bmctcHJv
ZC5lZGdlbnVpdHlhcHAuY29tgh5saWNlbnNpbmctYXBpLmV4LmVkZ2VudWl0eS5j
b22CNGVycm9yLWRhc2hib2FyZC1hcGkuY3duZy5pbWFnaW5lbGVhcm5pbmcuZW5n
aW5lZXJpbmeCHGdyYWRpbmctYXBpLmV4LmVkZ2VudWl0eS5jb22CGmVub3RlLWFw
aS5leC5lZGdlbnVpdHkuY29tgh9lbnJvbGxtZW50LWFwaS5leC5lZGdlbnVpdHku
Y29tghxjYXRhbG9nLWFwaS5leC5lZGdlbnVpdHkuY29tghhvcmctYXBpLmV4LmVk
Z2VudWl0eS5jb22CKGltcGVyc29uYXRpb24tYmFubmVyLXVpLmV4LmVkZ2VudWl0
eS5jb22CG2NvdXJzZS1hcGkuZXguZWRnZW51aXR5LmNvbYIcc2VjdGlvbi1hcGku
ZXguZWRnZW51aXR5LmNvbYIcc3R1ZGVudC1hcGkuZXguZWRnZW51aXR5LmNvbYIY
c3R1ZGVudC5leC5lZGdlbnVpdHkuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwOwYD
VR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20v
cjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j
c3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0
LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADCC
AX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA7s3QZNXbGs7FXLedtM0TojKHRny8
7N7DUUhZRnEftZsAAAGKdx++IwAABAMASDBGAiEAnqsCnykvblHatEJEFcD/v9so
aBxu1cK4lVw6qmRyQPkCIQD3GnWESm5SFd5rtF07+nuYhN0G2/BRJ7hM+r1/V2eM
VQB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABincfvgEAAAQD
AEcwRQIgKxwYJauM3jrQEmghkWPw2F80tDxaUU+77tuUGzNZEh8CIQCmhRmeBrUw
CVwyIRj7L1nmjnvmrziOdBZZrKAWF0ICJAB2ANq2v2s/tbYin5vCu1xr6HCRcWy7
UYSFNL2kPTBI1/urAAABincfvhIAAAQDAEcwRQIgNLcwMaEQ3BbAom85xakxO7F8
q4ra02csacmReMPcQrcCIQChyY22Zv+hd1F6l3TBB+vTWRNKOw8LPo24skQw5RuA
JTANBgkqhkiG9w0BAQsFAAOCAQEAHRDo1XNmgVaa592Vo3dTJmi5AQxwkB3qqFop
3JYOku2/BHQ+6fNnsDJLOPWAzl3KHpVQIQ0AxqcpTPhQqOFayxRgwVtZ9QAljxB5
X9Ez3quPJ3GxKyk/BNOIeJo4OO7FGHESoEJLIbAhnq+D1kdV5gEryAKRDoh99Rbl
eN33+1XHegsZy8zNZetbZZcVC1zAorTUUAMjG6clSNrvT2/UC5QI6Gx/UT6KDxfl
ADKf5jxGLC+W/X2mkBlOJy0aq6+DToHiyl+4F99z94JhUSZTx1zRZSaVxIBg5JSs
WJp5tyV6JrpiQgImZ9t+h24S5am3upn4R/xWtaUlXODP9uNqjA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Cp+0Fc8GtuoHNFGWRX9
pIPYV8wSHqdCR0cBbBXM5RqCNs0cngbZJiK3f1tsFiQChcrCf1LsNa19mgSPHdaU
p6GRKXRPdHsyAjUy9RFstMlmX+X99jIpLJonRj+/luB5LaclUgpfJbJegn1Xgf3q
A0V290J8AanoVzqqPGJMPM7kzevdY5oYtc+YBSXvnAxsOtERVjypIYyinF30Cb8L
YHXUP4WA3/roHP2MIpo8lk+nFEDcoXfYHn6hyptpPBFyqEnNW5MG5nr0JedhCJgS
Q9Vd/MBmOAOpJ0AZLEMwWUuRZAvv5LuZKBn1reJXofkyTIQMyDPnSWTfRRrjg7Mr
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3415547857989906805367358765586848914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cwng-prod.edgenuityapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30823101657965847510659885300973510810056213476179542175532839265220978763903975365286667714144187748115255515475906169161465372039032916412690343633970438919607891150254492375723413799890541903610948793524366803417778123970642780263163313407276322370795238764493782142867895782722550871853120978644259016377235961075562409363694398324532460863962814785431258519289372287034416594701322155948999250517176252671444381837029410062972261041398406363671137795723921475749601368275719953591028619122167582204646284177883913721069737541225319129607325303676802428127227599249367839143508291372641839524080611315738886744861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63649bfaf008733933ea79bebc2079f544db04b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (424 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwng-prod.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensing-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'error-dashboard-api.cwng.imaginelearning.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grading-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enote-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impersonation-banner-ui.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'course-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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