*.app.bcbm.pt

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:0a:6e:f0:83:62:79:ec:cf:83:56:45:0c:ec:6e:f1 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.app.bcbm.pt

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:0a:6e:f0:83:62:79:ec:cf:83:56:45:0c:ec:6e:f1
Serial Number (int): 10687997055341667158350774420686794481
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a2:71:f9:28:cb:58:20:dc:1a:25:0e:60:fa:d0:c2:01:93:da:95:30
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 1a:64:7f:98:6c:a8:43:05:1d:fb:29:ed:73:87:3e:de:c4:74:ae:d1
Fingerprint (sha256): 0c:af:e9:ef:92:53:2e:45:64:9e:6f:4a:56:81:e5:bc:f2:61:bf:59:df:d9:d1:ea:97:a5:38:05:3a:c1:96:cc

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.app.bcbm.pt

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.app.bcbm.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.app.bcbm.pt
boacamaboamesa.pt
*.aws.impresa.pt
*.blitz.pt
*.beta-expresso.sites.aws.impresa.pt
*.tribuna.expresso.pt
expresso.pt
*.expresso.pt
*.impresa.pt
boacamaboamesa.expresso.pt
*.portal-informa.impresa.pt
*.sites.aws.impresa.pt
bcbm.pt
*.boacamaboamesa.expresso.pt
*.leitor.expresso.pt
*.sicnoticias.pt
*.beta.bcbm.pt
*.beta-sicnoticias.sites.aws.impresa.pt
blitz.pt
*.bcbm.pt
sicnoticias.pt
*.boacamaboamesa.pt

Other certificates including the domain name bcbm.pt

(limited to 100 certificates)
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
boacamaboamesa.pt
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
boacamaboamesa.expresso.pt
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.advnce.sic.pt
bcbm.pt
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.app.bcbm.pt
sni76438.cloudflaressl.com
*.bcbm.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.averdade.com
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.averdade.qas.impresa.pt
*.advnce.sic.pt
*.advnce.sic.pt
*.bcbm.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
expresso.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
sni76438.cloudflaressl.com
boacamaboamesa.pt
*.advnce.sic.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com
*.advnce.sic.pt
sni76438.cloudflaressl.com
expresso.pt
*.advnce.sic.pt
sni76438.cloudflaressl.com

Certificate

The complete raw certificate details for *.app.bcbm.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHdzCCBl+gAwIBAgIQCApu8INieezPg1ZFDOxu8TANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDUwNzAwMDAwMFoXDTI1MDYwNTIzNTk1OVowGDEW
MBQGA1UEAwwNKi5hcHAuYmNibS5wdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALoM/6qHkhM1VcCaecb7BoO0K7SYpR7FwQBm7NEJpkTlT5HHaI+0bdoZ
lXoK9QJFFPJJzgPxUE5sQfZdeQvePS/IHdxWIOLGakxSCXdQY1isDHkCWs5k8BRt
YF1h7oLabY1BlJNqhN8gfgx/ByrkD1x9qiC9YlS3WsC2KuN3QUlvvre6mKsYbYtc
USUk/SaIFFndvcgK/PJbNozh4PI/RFO2yifBAHc+lyop7ZQn8dTDtvjWWr5LZ4N0
UWeGT3/IBCYecTPTYEoLtZ7DM2r1gtWWqNGyjJ2SU73nAYCJ1kP1BsUvHFidhrE8
UN4RPjCI/8qyoZkUKeqb167vGkm7ME8CAwEAAaOCBJcwggSTMB8GA1UdIwQYMBaA
FMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBSicfkoy1gg3BolDmD60MIB
k9qVMDCCAccGA1UdEQSCAb4wggG6gg0qLmFwcC5iY2JtLnB0ghFib2FjYW1hYm9h
bWVzYS5wdIIQKi5hd3MuaW1wcmVzYS5wdIIKKi5ibGl0ei5wdIIkKi5iZXRhLWV4
cHJlc3NvLnNpdGVzLmF3cy5pbXByZXNhLnB0ghUqLnRyaWJ1bmEuZXhwcmVzc28u
cHSCC2V4cHJlc3NvLnB0gg0qLmV4cHJlc3NvLnB0ggwqLmltcHJlc2EucHSCGmJv
YWNhbWFib2FtZXNhLmV4cHJlc3NvLnB0ghsqLnBvcnRhbC1pbmZvcm1hLmltcHJl
c2EucHSCFiouc2l0ZXMuYXdzLmltcHJlc2EucHSCB2JjYm0ucHSCHCouYm9hY2Ft
YWJvYW1lc2EuZXhwcmVzc28ucHSCFCoubGVpdG9yLmV4cHJlc3NvLnB0ghAqLnNp
Y25vdGljaWFzLnB0gg4qLmJldGEuYmNibS5wdIInKi5iZXRhLXNpY25vdGljaWFz
LnNpdGVzLmF3cy5pbXByZXNhLnB0gghibGl0ei5wdIIJKi5iY2JtLnB0gg5zaWNu
b3RpY2lhcy5wdIITKi5ib2FjYW1hYm9hbWVzYS5wdDATBgNVHSAEDDAKMAgGBmeB
DAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1
c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB
/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AE51oydcmhDDOFts1N8/
Uusd8OCOG41pwLH6ZLFimjnfAAABj1SaSuUAAAQDAEgwRgIhAOoblLxUbMfKZw/w
Qy8UM8FS+lzMOc+pqjlZZ1X1bMroAiEAwsleciOgg+tfpNmODljd6GOSVmKL7h0J
p7v2fZGCZn4AdQB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAY9U
mksjAAAEAwBGMEQCIGuDC5D8+id2syDdfqWjmgJV2WyflVYWoZUStU94Qd7IAiAO
eV/Iv79w9Xv7KtA6D5r9GH7dSETqtoKflFSFiaCPWAB2AObSMWNAd4zBEEEG13G5
zsHSQPaWhIb7uocyHf0eN45QAAABj1SaSzYAAAQDAEcwRQIgQxVr+8p9U6J229Zj
19CD+HOQh2B7XDyHJ1FJmg8cMFsCIQDGAbkw0hjnfqtDMlKYm4nUcnrUj3UiaZsp
zOk4025dDjANBgkqhkiG9w0BAQsFAAOCAQEAXjn8HkkseDtW924GBENIcf/YjqR3
FWg6o+NiVsMaI5VzfIG3yyUzu3OYOdayLyLCvkCdYPHccVmVdFr6T8SPWY40AEba
x0QPUbQLTSttPHgFCBDTmDgWLE/RZHw8Mng7c9PdPcyqpk8uwQfbjor/t4Dw8nfq
mzqFiI97+GKrrujf0pVSha1FoXbEgVtXZUGyJeVnEg6g5fYSGSy8idLPvLJVNBDv
zjh3BZEFWp78aTkO/lN6HF5qBnwp30sN/i3YfsozLTANv2kvfGainn1BAI4ZTYp5
3zM0niJTnvoYjlOd/ZeksA80ff6dfkjBTWhS7mExTiiQBQfxU9fEMbL1eQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugz/qoeSEzVVwJp5xvsG
g7QrtJilHsXBAGbs0QmmROVPkcdoj7Rt2hmVegr1AkUU8knOA/FQTmxB9l15C949
L8gd3FYg4sZqTFIJd1BjWKwMeQJazmTwFG1gXWHugtptjUGUk2qE3yB+DH8HKuQP
XH2qIL1iVLdawLYq43dBSW++t7qYqxhti1xRJST9JogUWd29yAr88ls2jOHg8j9E
U7bKJ8EAdz6XKintlCfx1MO2+NZavktng3RRZ4ZPf8gEJh5xM9NgSgu1nsMzavWC
1Zao0bKMnZJTvecBgInWQ/UGxS8cWJ2GsTxQ3hE+MIj/yrKhmRQp6pvXru8aSbsw
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10687997055341667158350774420686794481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app.bcbm.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23486734619498190500832552428362268589970788678486644875721209527541074248911013262441716771344544502016420102052133083120943347795112415329877001106811614168686718178601204642324647344517195362370757873820182343658522356896275040730419228009860210412000982486794479310424154958339140248457796568217623714501987541320336204495273586269593559780322876671356909230125764066430651986761222941668877911751208440422826227717504627103297279195559259719421056610655217932515534453433588754902225518554092122379386655736124138340013680716587250084022277759600993160838625166869565332708037978538147477704252279481083614670927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a271f928cb5820dc1a250e60fad0c20193da9530
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta-expresso.sites.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tribuna.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portal-informa.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leitor.expresso.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sicnoticias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta-sicnoticias.sites.aws.impresa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blitz.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcbm.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicnoticias.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacamaboamesa.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018f549a4ae50000040300483046022100ea1b94bc546cc7ca670ff0432f1433c152fa5ccc39cfa9aa39596755f56ccae8022100c2c95e7223a083eb5fa4d98e0e58dde8639256628bee1d09a7bbf67d9182667e0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018f549a4b23000004030046304402206b830b90fcfa2776b320dd7ea5a39a0255d96c9f955616a19512b54f7841dec802200e795fc8bfbf70f57bfb2ad03a0f9afd187edd4844eab6829f94548589a08f58007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018f549a4b360000040300473045022043156bfbca7d53a276dbd663d7d083f8739087607b5c3c872751499a0f1c305b022100c601b930d218e77eab433252989b89d4727ad48f7522699b29cce938d36e5d0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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