accounts-ci-integration.fsxt.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:58:d9:27:04:7d:f9:6f:81:25:74:81:58:72:9a:cc was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=accounts-ci-integration.fsxt.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:58:d9:27:04:7d:f9:6f:81:25:74:81:58:72:9a:cc
Serial Number (int): 17741290442927535340737346111429319372
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 99:2a:1f:26:c3:9a:9e:e6:10:b9:ba:5f:ad:c7:e5:1b:07:be:cf:08
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 23:54:14:73:8f:a0:72:94:df:4e:66:6f:20:2c:ed:61:25:0d:9a:20
Fingerprint (sha256): 0e:97:3f:5e:71:c4:bc:25:de:df:01:fa:c0:53:91:5d:47:c3:77:f0:a9:d8:44:44:f1:b6:f9:ce:39:2b:53:82

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate accounts-ci-integration.fsxt.net

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for accounts-ci-integration.fsxt.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts-ci-integration.fsxt.net
accounts-ci-integration.fsapi.com
internal.accounts-apac-ci-integration.fsxt.net
accounts-apac-ci-integration.fsxt.net
accounts-apac-ci-integration.fsapi.com

Other certificates including the domain name fsxt.net

(limited to 100 certificates)
ew1-rds-be-ci-rabbitmq-02.rds-ci.fsxt.net
niemee-test.aws-dev.fsxt.net
accounts-apac-ci.fsxt.net
portal.radar.elements-stg.withsecure.com
fss-ci.fsxt.net
niemee-test.aws-dev.fsxt.net
a.accounts-emea-stg.fsxt.net
avenue-master-admin.fsxt.net
accounts-na-stg.fsxt.net
accounts-ci-integration.fsxt.net
*.facs-stg.fsxt.net
oh-ci.fsxt.net
sieportal.devtoo-ci.fsxt.net
static.accounts-stg.fsxt.net
ew1-rds-ds-stg-bigdata.rds-stg.fsxt.net
psblive.psb-stg.f-secure.com
accounts-ci-integration.fsxt.net
fss-ci.fsxt.net
*.my.fsxt.net
static.accounts-stg.fsxt.net
latest.psb-ci.fsxt.net
*.my.fsxt.net
accounts-ci-integration.fsxt.net
*.push-parthe.aws-dev.fsxt.net
us2.analytics.psb.fsxt.net
portal.radar-ci.fsxt.net
quickscan-stg.fsxt.net
rusticrule.logos.fsxt.net
*.fusion-stg.fsxt.net
psblive.analytics.psb-stg.fsxt.net
management-api-kornal.cspm-ci.fsxt.net
accounts-ci-integration.fsxt.net
portal4client.ta.fsxt.net
portal.cp.elements-stg.withsecure.com
tormja.attr-ci.fsxt.net
accounts-ci-integration.fsxt.net
playground-stg.fsxt.net
portal-elb.cp-ci.fsxt.net
ew1-rds-ds-ci-bigdata.rds-ci.fsxt.net
sieportal.devtoo-stg.fsxt.net
rus-api.radar-stg.fsxt.net
unstable.push-ci.fsxt.net
static.accounts-apac-stg.fsxt.net
portal.cp-stg.fsxt.net
arcticsauna.logos.fsxt.net
ew1-rds-be-stg-rabbitmq-01.rds-stg.fsxt.net
*.accounts-emea-ci.fsxt.net
portal.cp-stg.fsxt.net
dev.radar-ci.fsxt.net
*.fusion-ci.fsxt.net
data-api-simon.cspm-ci.fsxt.net
auth.ci.ccr-ci.fsxt.net
onlinehelp-qe.aws-dev.fsxt.net
*.facs-stg.fsxt.net
playground-stg.fsxt.net
ew1-rds-be-stg-rabbitmq-01.rds-stg.fsxt.net
stable.attr-stg.fsxt.net
onlinehelp-qe.aws-dev.fsxt.net
avenue-master-admin.fsxt.net
*.my.fsxt.net
playground-ci.fsxt.net
a.accounts-na-stg.fsxt.net
playground-ci.fsxt.net
perf.push-ci.fsxt.net
*.accounts-emea-stg.fsxt.net
ew1-rds-ds-stg-bigdata.rds-stg.fsxt.net
accounts-ci-integration.fsxt.net
static.accounts-stg.fsxt.net
auth.dev.ccr-ci.fsxt.net
latest.analytics.psb-ci.fsxt.net
ctf.playground-ci.fsxt.net
idpadmin.accounts-emea-ci-integration.fsxt.net
accounts.int.gbl.oneid-unstable.fsxt.net
ew1-rds-ds-ci-bigdata.rds-ci.fsxt.net
elements-stg.fsxt.net
skyblue-psb.fsxt.net
api.mptest1.fsxt.net
seattle.aws-dev.fsxt.net
*.my.fsxt.net
oh-stg.fsxt.net
*.rds-ci.fsxt.net
stable.attr-ci.fsxt.net
a.accounts-apac-ci-integration.fsxt.net
api.threatintel-ci.fsxt.net
static.accounts-ci.fsxt.net
auth.dev.ccr-ci.fsxt.net
*.accounts-emea-ci.fsxt.net
littledynamo.logos.fsxt.net
mail.fsxt.net
ctf.consultancy-services-ci.fsxt.net
psblive.psb-stg.f-secure.com
accounts-apac-ci.fsxt.net
onlinehelp-doc.aws-dev.fsxt.net
*.gs-stg.fsxt.net
ppaem.aws-dev.fsxt.net
radar-intra-ci.fsxt.net
dev-stable.radar-ci.fsxt.net
management-api-alexp.cspm-ci.fsxt.net
*.rds-stg.fsxt.net
*.aws-dev.fsxt.net

Certificate

The complete raw certificate details for accounts-ci-integration.fsxt.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGkDCCBXigAwIBAgIQDVjZJwR9+W+BJXSBWHKazDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDIxNDAwMDAwMFoXDTI0MDExOTIzNTk1OVowKzEp
MCcGA1UEAxMgYWNjb3VudHMtY2ktaW50ZWdyYXRpb24uZnN4dC5uZXQwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOROxcNvMRFnUEC0D4uw0++Q8pXO0
pv2/I7LsSIr7YMmkiXdCMdOCIWrfCSasP5XVs7l2Ky9tQPjftNwFqu9NMTJUgl9b
y7hmtdxNm305Tsy4PbyfIDyVqFcy7fyebSna6B5DMnDg7TDKvMVdZWv0Rg/6T1Fr
lPKjXAq44kUouNexBeGN6cJNjdqA0d74FTJtGetPKf3rgjAHZEo9ssmXQ5kcOt0L
r2Uw5+Vev2cMlnMWybc54Ic3cwfVpFoSz/TPOKNfs98RD3wMoXukfcQ/SOTJ5Ur9
8FkkgY6zLsAQxvV1bejQBQY4Ap99n5nJbwoB+9Ml/ujOm3RnRZtfaMPFAgMBAAGj
ggOdMIIDmTAfBgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4E
FgQUmSofJsOanuYQubpfrcflGwe+zwgwgc8GA1UdEQSBxzCBxIIgYWNjb3VudHMt
Y2ktaW50ZWdyYXRpb24uZnN4dC5uZXSCIWFjY291bnRzLWNpLWludGVncmF0aW9u
LmZzYXBpLmNvbYIuaW50ZXJuYWwuYWNjb3VudHMtYXBhYy1jaS1pbnRlZ3JhdGlv
bi5mc3h0Lm5ldIIlYWNjb3VudHMtYXBhYy1jaS1pbnRlZ3JhdGlvbi5mc3h0Lm5l
dIImYWNjb3VudHMtYXBhYy1jaS1pbnRlZ3JhdGlvbi5mc2FwaS5jb20wDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E
NDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0w
MS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsG
AQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYB
BQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNl
cjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYZNOLNBAAAEAwBHMEUCIECv
VIPSTQ49zu/jYrOYn0V2DgCppudA4rR97HYQQZIyAiEA7bFsffqT72knog626YyL
4jOe8O4tkI4nweF67yYDIT0AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r
OdiEcwAAAYZNOLM2AAAEAwBGMEQCIEhra2fAu345r0avyIFQl96RUj3Pnq9+IeYx
xsVIPoBjAiAZ95+4BH3SjnPXNggxhEy0Tt9bRByQIr4x/XSLHTn8FAB2ADtTd3U+
LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABhk04szEAAAQDAEcwRQIgHU9C
BOhxdl7bhOcbmKUvghpqWebsnb1DZFNvNVP06CsCIQDtmXnr4RcW+WbDPZeM8Ui4
BG82dIangEUHMrUkpU/X3zANBgkqhkiG9w0BAQsFAAOCAQEAR1oIt/hTTc7WXYql
xsZbgI032USK4RxYw7AFYmq5bLOyGm/q+ukg47o/Ow2EqAT3JH09ExpzEJD6Ux2F
tOPxFwCtM1MecvB1t2A/NKaVbjvqj9mNJdNs31ZJF49V+kdwxoPXT8rzjIL6N4/A
Ixz3A3Egf4A9H8+CsgJLNKeFeWYZkvAKAjuqZI42HMi1lxKxHK2X0Wc9TSSlJgrA
AduqvANuMf62CaYjGMD2PaNuTTdNr6VpbXU4cHWcaRbohr5yxr9FLNRpIswanoqs
ei3IL9GU7PgND9IjXSvPIYRCRSQGnWIywKAQSRwG/B/UQ3rKvc4t6mTtbv+1H3+I
z1/fPw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTkTsXDbzERZ1BAtA+Ls
NPvkPKVztKb9vyOy7EiK+2DJpIl3QjHTgiFq3wkmrD+V1bO5disvbUD437TcBarv
TTEyVIJfW8u4ZrXcTZt9OU7MuD28nyA8lahXMu38nm0p2ugeQzJw4O0wyrzFXWVr
9EYP+k9Ra5Tyo1wKuOJFKLjXsQXhjenCTY3agNHe+BUybRnrTyn964IwB2RKPbLJ
l0OZHDrdC69lMOflXr9nDJZzFsm3OeCHN3MH1aRaEs/0zzijX7PfEQ98DKF7pH3E
P0jkyeVK/fBZJIGOsy7AEMb1dW3o0AUGOAKffZ+ZyW8KAfvTJf7ozpt0Z0WbX2jD
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17741290442927535340737346111429319372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accounts-ci-integration.fsxt.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20857466000753512720825251251775452472035315877935089098086275416735999612300811677884159100888006137350014650007082460777088360975076112799149380199346357184372913525137326509761515832172104573319511860248415918616761094902640455440886048665551042581452339086954848472019842320997962350631250421649633270800865916116602338071823793679199398020318385582420752112356549719048625866261946564866305455931675670751788223519753726824027467976599865686968757629318393829960763059345806324812031581204876680976741142568459697959163558878938222226033726318776165284495649603343772320637013906115981536559014457528616290403269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							992a1f26c39a9ee610b9ba5fadc7e51b07becf08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-ci-integration.fsapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.accounts-apac-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-apac-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-apac-ci-integration.fsapi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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