subscriber.agweek.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:23:d6:b4:15:df:a7:b3:3a:e5:a1:fd:03:4b:95:b3 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscriber.agweek.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:23:d6:b4:15:df:a7:b3:3a:e5:a1:fd:03:4b:95:b3
Serial Number (int): 14807593047176795199428050090153711027
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:24:b4:dc:cd:66:fc:39:90:b2:5b:d5:88:39:43:36:8d:69:ab:26
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ec:ac:1c:da:1e:bc:31:24:85:ee:69:a0:6d:f9:86:37:8d:a4:4b:55
Fingerprint (sha256): 0e:7b:40:1d:74:15:39:fc:c4:f9:b6:16:22:f9:2e:a1:b6:2d:6f:47:23:77:a5:d6:ec:a7:1b:0b:8a:17:f1:9b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate subscriber.agweek.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscriber.agweek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscriber.agweek.com
subscriber.postbulletin.com
subscriber.brainerddispatch.com
subscriber.pinejournal.com
subscriber.thedickinsonpress.com
subscriber.echopress.com
subscriber.superiortelegram.com
subscriber.jamestownsun.com
subscriber.blackduckamerican.com
subscriber.pineandlakes.com
subscriber.wadenapj.com
subscriber.dl-online.com
subscriber.bemidjipioneer.com
subscriber.wctrib.com
subscriber.dglobe.com
subscriber.inforum.com
subscriber.perhamfocus.com
subscriber.parkrapidsenterprise.com
subscriber.mitchellrepublic.com
subscriber.grandforksherald.com

Other certificates including the domain name agweek.com

(limited to 100 certificates)
kalamazooshopping.mlive.com
subscriber.agweek.com
link.agweek.com
subscriber.agweek.com
local.wahpetondailynews.com
local.daily-chronicle.com
local.newstribune.info
www.forumcomm.com
peterborough.mykawartha.com
epaper.agweek.com
local.ftimes.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
local.northjersey.com
www.forumcomm.com
local.cambstimes.co.uk
local.moodycountyenterprise.com
parrysoundnorth.parrysound.com
local.eastlondonadvertiser.co.uk
local.hertfordshirelife.co.uk
local.guymondailyherald.com
local.moorefieldexaminer.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
admin.adforge.com
peterborough.mykawartha.com
web.production.forum-communications.brightspot.cloud
web.production.forum-communications.brightspot.cloud
kawarthalakes.mykawartha.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
origin.web.production.forum-communications.brightspot.cloud
local.thesiuslawnews.com
*.forum.cue.cloud
www.forumcomm.com
kawarthalakes.mykawartha.com
local.calgaryherald.com
web.production.forum-communications.brightspot.cloud
local.yourokmulgee.com
austinmetro.communityimpact.com
local.edp24.co.uk
eastyorkbeach.toronto.com
www.forumcomm.com
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
cms.forumcomm.com
local.hertsad.co.uk
local.insidebiz.com
*.forum.cue.cloud
local.daily-chronicle.com
parrysoundbeacon.parrysound.com
www.forumcomm.com
www.forumcomm.com
www.forumcomm.com
local.cambstimes.co.uk
link.agweek.com
local.spokane.exchange
local.beloitdailynews.com
web.production.forum-communications.brightspot.cloud
subscriber.agweek.com
url6888.agweek.com
matamata-chronicle.origami.neighbourly.co.nz
cms.forumcomm.com
local.wnypapers.com
www.forumcomm.com
farmshow.agweek.com
web.production.forum-communications.brightspot.cloud
www.forumcomm.com
local.brainerddispatch.com
eastyorkbeach.toronto.com
local.yakimaherald.com
local.doverpost.com
web.production.forum-communications.brightspot.cloud
kg.local.kentonline.co.uk
subscriber.agweek.com
parrysoundnorth.parrysound.com

Certificate

The complete raw certificate details for subscriber.agweek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgIQCyPWtBXfp7M65aH9A0uVszANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIyMTIyMTAwMDAwMFoXDTI0MDExOTIzNTk1OVowIDEe
MBwGA1UEAxMVc3Vic2NyaWJlci5hZ3dlZWsuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAjFiQZNGxGBPOPwl73Mn5C6O+FG2g43WoMc/Uk/o0oVWR
ze9w1xwk0dDkQ10yn4zgwCZqpakW/7lVwUApIWvEenQaprln5MkT4Wqd6/PTZrIg
9zt0EyP6xxbfbBqQthFJnNTxHYbChqoNcsVM7whmmzr/TKKmcrmFzjUpJJ+DzDwb
E6VTyxWdm3ujf4sJ4hG2iV7EQfcDdqFZZqySpRpLhn9oIrIhWepkyofqF9m3NEXi
wS7ko2EPntAq3v4f20Ax5zHVf8RddJsbbTZPjCpddLF17UuzMTHYPcCG+k3i5anC
0rFqKZE3AAeEbxsO6ANmKkvSHcKV4SABJFHIGVXpgQIDAQABo4IDtTCCA7EwHwYD
VR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFBEktNzNZvw5
kLJb1Yg5QzaNaasmMIICUgYDVR0RBIICSTCCAkWCFXN1YnNjcmliZXIuYWd3ZWVr
LmNvbYIbc3Vic2NyaWJlci5wb3N0YnVsbGV0aW4uY29tgh9zdWJzY3JpYmVyLmJy
YWluZXJkZGlzcGF0Y2guY29tghpzdWJzY3JpYmVyLnBpbmVqb3VybmFsLmNvbYIg
c3Vic2NyaWJlci50aGVkaWNraW5zb25wcmVzcy5jb22CGHN1YnNjcmliZXIuZWNo
b3ByZXNzLmNvbYIfc3Vic2NyaWJlci5zdXBlcmlvcnRlbGVncmFtLmNvbYIbc3Vi
c2NyaWJlci5qYW1lc3Rvd25zdW4uY29tgiBzdWJzY3JpYmVyLmJsYWNrZHVja2Ft
ZXJpY2FuLmNvbYIbc3Vic2NyaWJlci5waW5lYW5kbGFrZXMuY29tghdzdWJzY3Jp
YmVyLndhZGVuYXBqLmNvbYIYc3Vic2NyaWJlci5kbC1vbmxpbmUuY29tgh1zdWJz
Y3JpYmVyLmJlbWlkamlwaW9uZWVyLmNvbYIVc3Vic2NyaWJlci53Y3RyaWIuY29t
ghVzdWJzY3JpYmVyLmRnbG9iZS5jb22CFnN1YnNjcmliZXIuaW5mb3J1bS5jb22C
GnN1YnNjcmliZXIucGVyaGFtZm9jdXMuY29tgiNzdWJzY3JpYmVyLnBhcmtyYXBp
ZHNlbnRlcnByaXNlLmNvbYIfc3Vic2NyaWJlci5taXRjaGVsbHJlcHVibGljLmNv
bYIfc3Vic2NyaWJlci5ncmFuZGZvcmtzaGVyYWxkLmNvbTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu
oCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDAT
BgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGG
IWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYq
aHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1Ud
EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB
AAjkDklpX6/cnzRwzAEGvYm5rDAr0DOsfP4A5x+Zucbh5qLztL7fn+qwy0ZhBo0b
QM8BcKEOXgWciEEwf5OgIMTbEqEnignSkvvAkKWY+XybAgPNEucqGKkARP8uHLAQ
f/hAHa+/e8xIvPJ31GFDmyN0jIMGz9vYZ5oDkWpDXCJSXEkdCvlMwmxAsPa/6f5B
5rilWV2gLbJB2ooR7ugz2ZsWPD6RPYWLxgD5eUValUaptI4pB0cUCgkcUzufjkHQ
XNx/IfdxBR8fPn6JGKnfD4nSA+rFuHAtFZPA8Op9TCyF0EzMaoUxwfLSE8zPUbUY
yFFZJofdy3Um+GgyV1I+098=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFiQZNGxGBPOPwl73Mn5
C6O+FG2g43WoMc/Uk/o0oVWRze9w1xwk0dDkQ10yn4zgwCZqpakW/7lVwUApIWvE
enQaprln5MkT4Wqd6/PTZrIg9zt0EyP6xxbfbBqQthFJnNTxHYbChqoNcsVM7whm
mzr/TKKmcrmFzjUpJJ+DzDwbE6VTyxWdm3ujf4sJ4hG2iV7EQfcDdqFZZqySpRpL
hn9oIrIhWepkyofqF9m3NEXiwS7ko2EPntAq3v4f20Ax5zHVf8RddJsbbTZPjCpd
dLF17UuzMTHYPcCG+k3i5anC0rFqKZE3AAeEbxsO6ANmKkvSHcKV4SABJFHIGVXp
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14807593047176795199428050090153711027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscriber.agweek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17717035250270573595045784548342864387132727618607339268082272877277953415385452001016098788528788016250999166125456284137625068331059842239343992656572672672324730944723843263811396441427038023319332163454937568340559466498069796551317162404289294951390116115126713111521148272662656477368977196094802796761292662041153712250106640079311789082320521780192904418847520668555905298091645487308205372403134001788338590261099803318346939307856849400757871547153524966947857459096535651646583386796230774031880869703254574876159719684691812168271091787503870084121706597495096937955403706839671602174406117102329999518081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1124b4dccd66fc3990b25bd5883943368d69ab26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (585 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.blackduckamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.grandforksherald.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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