dev-account.flightcentre.com.au

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:a5:f8:93:a6:8d:e4:d2:c2:5f:9b:33:b2:d2:ce:bb was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev-account.flightcentre.com.au

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:a5:f8:93:a6:8d:e4:d2:c2:5f:9b:33:b2:d2:ce:bb
Serial Number (int): 14154050675175051257157745558957510331
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:29:91:cc:0f:2d:18:20:36:e0:1e:13:64:46:c8:0f:35:b4:e8:7b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 46:66:ec:5e:42:e8:75:67:86:2a:fa:5a:06:a4:fc:c8:c0:6a:a2:56
Fingerprint (sha256): 0d:17:19:37:d6:d6:fe:9c:82:b7:84:e2:de:48:79:f2:ba:c1:f7:a6:15:6b:da:be:3d:71:41:87:3a:6d:ef:f1

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate dev-account.flightcentre.com.au

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-account.flightcentre.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-account.flightcentre.com.au
dev-account-api.flightcentre.com
dev-account.flightcentre.ca
dev-profile-api.flightcentre.co.uk
dev-account.flightcentre.co.za
dev-profile-api.flightcentre.com.au
dev-account-sdk.flightcentre.co.uk
dev-account-sdk.flightcentre.com.au
dev-profile-api.flightcentre.co.za
dev-account.flightcentre.co.uk
dev-profile-api.flightcentre.ca
dev-account-sdk.flightcentre.ca
dev-account-sdk.flightcentre.co.nz
dev-profile-api.flightcentre.co.nz
dev-account-sdk.flightcentre.co.za
dev-account.flightcentre.co.nz

Other certificates including the domain name flightcentre.com.au

(limited to 100 certificates)
customer.stg.eca.fcl.cloud
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
redirect.aws.fclweb.net
acquiastage.flightcentre.com.au
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
cruises.flightcentre.com.au
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.cievents.com.au
acquiatestau.flitech.net
acquiadev.flitech.net
alerts.flightcentre.com.au
www.studentflights.com.au
acquiadev.flightcentre.com.au
flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
stg-packages.flightcentre.com.au
acquiastage.flightcentre.com.au
acquiaprod.flitech.net
dev-account.flightcentre.com.au
www.studentflights.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
acquiatestau.flitech.net
partner.flightcentre.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
www.studentflights.com.au
flightcentre.com.hk
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
www.studentflights.com.au
www.studentflights.com.au
acquiaprod.flitech.net
redirect.aws.fclweb.net
pages.travel.flightcentre.com.au
acquiatestau.flitech.net
stg-account.flightcentre.com.au
acquiaprod.flitech.net
www.studentflights.com.au
acquiadev.flitech.net
giftcards.flightcentre.com.au
giftcards.flightcentre.com.au
*.flightcentre.com.au
redirect.aws.fclweb.net
acquiadev.4dconsulting.com.au
www.cievents.com.au
www.studentflights.com.au
www.studentflights.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
www.cievents.com.au
redirect.aws.fclweb.net
redirect.aws.fclweb.net
flightcentre.com.hk
www.studentflights.com.au
acquiatestau.flitech.net
account.flightcentre.com.au
www.flightcentre.com
acquiatest.flitech.net
akamai-san60.exacttarget.com
giftcards.flightcentre.com.au
prod.31.slot.cdn.salesforce-communities.com
giftcards.flightcentre.com.au
redirect.aws.fclweb.net
flightcentre.com.hk
acquiatest.4dconsulting.com.au
redirect.aws.fclweb.net
alerts.flightcentre.com.au
redirect.aws.fclweb.net
acquiatest.flitech.net
www.studentflights.com.au
redirect.aws.fclweb.net
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
www.studentflights.com.au
click.travel.flightcentre.com.au

Certificate

The complete raw certificate details for dev-account.flightcentre.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH8jCCBtqgAwIBAgIQCqX4k6aN5NLCX5szstLOuzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDYxNjAwMDAwMFoXDTI0MDcxNTIzNTk1OVowKjEo
MCYGA1UEAxMfZGV2LWFjY291bnQuZmxpZ2h0Y2VudHJlLmNvbS5hdTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALYCC9fZgrWvf5FF7kjX/0McRqI0PBdH
pRwo9kRI/C/08eL89HG/7kM67ZhBOW3s7/sKT4aWaK/5uBGsbhqmSsDlH00YHbXS
Sf+29xASWBPQAKKTs0rFKckddyU6hwGP7j3Hv4OEZyhVX3TB5YNIAVV4FtkAAkym
1Zl25+uMsOY9/lI5Hcc4jWYMLAhpk7u9t/EFpEF1quZFSHLi6ZlMtbhiII6G4px4
+/jmvJdO7hKXgg+wEl/wF5Rh40VR1RZtuwW9ZUilBPf9UrbRwjQUdePLiWKRDE6P
UEPvPa+OaAjMImIImcP2+bSiQ3Af7/1dxV5zkqUbWu71xme0gSZWhFMCAwEAAaOC
BQAwggT8MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQW
BBTYKZHMDy0YIDbgHhNkRsgPNbToezCCAjEGA1UdEQSCAigwggIkgh9kZXYtYWNj
b3VudC5mbGlnaHRjZW50cmUuY29tLmF1giBkZXYtYWNjb3VudC1hcGkuZmxpZ2h0
Y2VudHJlLmNvbYIbZGV2LWFjY291bnQuZmxpZ2h0Y2VudHJlLmNhgiJkZXYtcHJv
ZmlsZS1hcGkuZmxpZ2h0Y2VudHJlLmNvLnVrgh5kZXYtYWNjb3VudC5mbGlnaHRj
ZW50cmUuY28uemGCI2Rldi1wcm9maWxlLWFwaS5mbGlnaHRjZW50cmUuY29tLmF1
giJkZXYtYWNjb3VudC1zZGsuZmxpZ2h0Y2VudHJlLmNvLnVrgiNkZXYtYWNjb3Vu
dC1zZGsuZmxpZ2h0Y2VudHJlLmNvbS5hdYIiZGV2LXByb2ZpbGUtYXBpLmZsaWdo
dGNlbnRyZS5jby56YYIeZGV2LWFjY291bnQuZmxpZ2h0Y2VudHJlLmNvLnVrgh9k
ZXYtcHJvZmlsZS1hcGkuZmxpZ2h0Y2VudHJlLmNhgh9kZXYtYWNjb3VudC1zZGsu
ZmxpZ2h0Y2VudHJlLmNhgiJkZXYtYWNjb3VudC1zZGsuZmxpZ2h0Y2VudHJlLmNv
Lm56giJkZXYtcHJvZmlsZS1hcGkuZmxpZ2h0Y2VudHJlLmNvLm56giJkZXYtYWNj
b3VudC1zZGsuZmxpZ2h0Y2VudHJlLmNvLnphgh5kZXYtYWNjb3VudC5mbGlnaHRj
ZW50cmUuY28ubnowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFt
YXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYI
KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6
b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9u
dHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIE
AgSCAW0EggFpAWcAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA
AYjCn3PdAAAEAwBGMEQCIHasm2NAP02ucvvBtSfYvXv0hR4OToKDTL4U7ZT0ph+y
AiAU1bA0l5tRGwNtlhg/i23AlZ4xHL8S+Ur7NEZ21n6CSQB2AEiw42vapkc0D+Vq
AvqdMOscUgHLVt0sgdm7v6s52IRzAAABiMKfdAYAAAQDAEcwRQIgclGxPtorBBEc
xoUc8wOXyqjO69hap8336tXvYJtRjdcCIQDJw/gdMLlTqe1/1Khfpz1gyFBHJi64
XkWBC2d7HDyaRwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB
iMKfc9IAAAQDAEcwRQIhAJSCp7gRsmLWonQQSuv+MAkGENqmP509lZ1VNtoSXJtK
AiAvDmxFzhgUEp/pN54JTzx50/z22glzPZCX0Bzr2mKytzANBgkqhkiG9w0BAQsF
AAOCAQEAls6ppKlCjfwONpRgn1GNk0+8sk2nBlb4RV8VM0IWXpXJAj7y94YkbPsC
Pf3OhBV1SWSfxFDIgoLFvWhDha5m3ZK3kWH8D5sgMCgJYA+IKryICmlaCNg5Bvzh
0odPwFpJv5lFVlKe33VtEtkImiWbYQ7/p8/vTqLwqo8d0et+DG58oG/fNXt3wBH8
lqI/posiov5QomeH2+6yOQbc45Hyrw/h/C8A57vTbbNtvhOYvmH0s4zPRcCZSeyP
4q2m7Oee1BNjkU19c64krJ4NjkE4wqTSW2b9xPlf/nrbTsIU8GmAMyQJmB8MaEBA
wGEMSP2iIW2YsnoBMN2+54XhiEmR3w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgIL19mCta9/kUXuSNf/
QxxGojQ8F0elHCj2REj8L/Tx4vz0cb/uQzrtmEE5bezv+wpPhpZor/m4EaxuGqZK
wOUfTRgdtdJJ/7b3EBJYE9AAopOzSsUpyR13JTqHAY/uPce/g4RnKFVfdMHlg0gB
VXgW2QACTKbVmXbn64yw5j3+UjkdxziNZgwsCGmTu7238QWkQXWq5kVIcuLpmUy1
uGIgjobinHj7+Oa8l07uEpeCD7ASX/AXlGHjRVHVFm27Bb1lSKUE9/1SttHCNBR1
48uJYpEMTo9QQ+89r45oCMwiYgiZw/b5tKJDcB/v/V3FXnOSpRta7vXGZ7SBJlaE
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14154050675175051257157745558957510331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-account.flightcentre.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22976380553397362116242926923071853158546459942560459841723442603092953127673208231929162406010201271729047821494001924114844822959560466791014693504929909459546896319291570819487342349404899755934776855292737313034519359920102600154718869122123992920443294381210125211767245557599100009478980362483724251387471123594677022147597536667929311492536056846190009407101458243175575831816482635649205783024257322964121570797396485026916368166213667360880146409467442683017491945814556414593712576203608488593682027307429534202887236792390012791581716795613699862971492263112686277003463669657372384605954614403461299995731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d82991cc0f2d182036e01e136446c80f35b4e87b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account-api.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profile-api.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profile-api.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account-sdk.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account-sdk.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profile-api.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profile-api.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account-sdk.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account-sdk.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-profile-api.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account-sdk.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-account.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096cea9a4a9428dfc0e3694609f518d934fbcb24da70656f8455f153342165e95c9023ef2f786246cfb023dfdce84157549649fc450c88282c5bd684385ae66dd92b79161fc0f9b20302809600f882abc880a695a08d83906fce1d2874fc05a49bf994556529edf756d12d9089a259b610effa7cfef4ea2f0aa8f1dd1eb7e0c6e7ca06fdf357b77c011fc96a23fa68b22a2fe50a26787dbeeb23906dce391f2af0fe1fc2f00e7bbd36db36dbe1398be61f4b38ccf45c09949ec8fe2ada6ece79ed41363914d7d73ae24ac9e0d8e4138c2a4d25b66fdc4f95ffe7adb4ec214f06980332409981f0c684040c0610c48fda2216d98b27a0130ddbee785e1884991df