retool.ams.prototype.corporateprojects.amazon.dev

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:77:15:f5:d4:10:12:b6:07:b4:e4:dd:90:86:51:00 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=retool.ams.prototype.corporateprojects.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:77:15:f5:d4:10:12:b6:07:b4:e4:dd:90:86:51:00
Serial Number (int): 9922924703791801533661813795222606080
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ad:fc:a8:4f:ea:73:5a:78:18:14:8c:79:52:c0:02:f7:9f:2f:40:13
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ef:68:36:1c:5b:67:e1:8c:cc:8f:10:08:76:d6:82:0f:32:f2:e3:aa
Fingerprint (sha256): 0e:9d:fc:20:99:85:18:94:26:b6:87:16:bb:d8:9b:2f:f9:52:31:46:95:98:e4:3d:67:7b:ba:a4:87:eb:84:32

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate retool.ams.prototype.corporateprojects.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for retool.ams.prototype.corporateprojects.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

retool.ams.prototype.corporateprojects.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
gamma.styleguides.leo.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
*.timlawso.physical.advertising.amazon.dev
beta.supernova.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
lialx.test.attribution.privacy.amazon.dev
coredump-parser.eink.amazon.dev
auth.prototype.alps.music.amazon.dev
andrena.niksinn.icon.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
*.beta.psidr.payments-security.amazon.dev
turn.ring-mobility.devices.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
beta.cruzoliv.people.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
portal.transportation.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
us-west-2.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.fcmap.swanwes.people.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
beta.kaizer.graph.amazon.dev
beta.us-west-2.mdcs.mshop.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
ak-game-service.prod.iad.games.kids.amazon.dev
dub.beta.unicorn-phoenix.lending.payments.amazon.dev
scorecard.ads.amazon.dev
zhenzihu.dev.mmt-validation.people-engine.amazon.dev
bp.sdn.kuiper.amazon.dev
prod.luma.workshop.mathieud.people.amazon.dev
andrena.niksinn.icon.amazon.dev
beta.vse-fixer.tools.amazon.dev
fe.beta.tiago-ops-video.alexa.amazon.dev
ui.fe.stagewebsite-master.last-mile.amazon.dev
fpd.sumantbh.icon.amazon.dev
gamma.na.cms.physical.advertising.amazon.dev
aax.online-panel.advertising.amazon.dev
gulbt-failure-analysis.bsxqa.digital-books.amazon.dev
jp.problemsolve-gamma.dolphinprod.last-mile.amazon.dev
us-east-1.prod.api.uhd.music.amazon.dev
static.alpha.luma.workshop.mathieud.people.amazon.dev
cf.dc-ext.us-east-1.gateway.bids.physical-stores.amazon.dev
dashboard.beta.security-health-monitor.acs.amazon.dev
igl.search.inside.amazon.dev
*.beta.psidr.payments-security.amazon.dev
cdj.invite.prototype.alps.music.amazon.dev
beta.perm.immigration.amazon.dev
us-east-1.alpha.analysis-service.afn-fcp.promise.amazon.dev
prod.us-east-1.swa.last-mile.amazon.dev
ui.pvsin.last-mile.amazon.dev
virtual.opstechit.amazon.dev
beta.step-up-tool.rbs.amazon.dev
aelden.alpha.us-east-1.heartbeat.cs.amazon.dev
matbacic.search.inside.amazon.dev
user.prototype.alps.music.amazon.dev
webapi.stage.coco.scot.amazon.dev
*.alpha.mouse.payments-security.amazon.dev
beta.supernova-selfservice.amazon.dev
gamma.us-west-2.mdcs.mshop.amazon.dev
us-west-2.alpha.shbhvya.people.amazon.dev
avus-na-onebox.upsell.video.alexa.amazon.dev
api.eu.prod.landing.advantage.vendors.amazon.dev
prod.eu.grok.resolution.mbe.last-mile.amazon.dev
cloudauth.us-east-1.prod.tsv.alps.lamps.amazon.dev
*.search.acp.selling-partners.amazon.dev
dev4.cyclone.gdq.amazon.dev
api.na.prod.landing.advantage.vendors.amazon.dev
upload-flexsimwebapp.wwde.amazon.dev
*.rongzhou.people.amazon.dev
templates.leo.amazon.dev
us-west-2.beta.api.uhd.music.amazon.dev
us-west-2.alpha.lab.dml.alexa.amazon.dev
gamma.cubeout.grokalert.last-mile.amazon.dev
placement.proxy.gamma.us-east-1.zds.arc.hit.amazon.dev
abhisaha.rpmsui.cloudtune.amazon.dev
*.beta.pdps-events.payments.amazon.dev
api.beta.supernova-selfservice.amazon.dev

Certificate

The complete raw certificate details for retool.ams.prototype.corporateprojects.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEoTCCA4mgAwIBAgIQB3cV9dQQErYHtOTdkIZRADANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIwMzAwMDAwMFoXDTI0MDEwMjIzNTk1OVowPDE6
MDgGA1UEAxMxcmV0b29sLmFtcy5wcm90b3R5cGUuY29ycG9yYXRlcHJvamVjdHMu
YW1hem9uLmRldjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpTFFP9
aFnXCU/rU4k0j1DNiz+l868PhbstyD4lfay8aIHhD9Vv247PQ9AFihvLMWauRvrV
08lUWsmJptVjMnxXaovzkmtFZaQ23xJIbwcrZ27Hiicaops0qx7KLn+LnJCjL6O0
hE5OvsW76JF/sp8H3WFCu7BShEhLAoL2aXsnldn25DDBAY47RhGncJPK8IBDAK0D
HyZXZJlGFhL52M3hpLJtzBX73XAdAvhizdQNkDSGqR3xiTOoitHJGuxmzJYxJpt8
Gx4Ov9t+XQqOlcapwf+KH2NqaeLrNd0p0jLBoJsL13I4dufuo4hcyRFpW4bESkgL
r2kCm302J6V5hRUCAwEAAaOCAZ0wggGZMB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7
O1CVn+blkBOFMB0GA1UdDgQWBBSt/KhP6nNaeBgUjHlSwAL3ny9AEzA8BgNVHREE
NTAzgjFyZXRvb2wuYW1zLnByb3RvdHlwZS5jb3Jwb3JhdGVwcm9qZWN0cy5hbWF6
b24uZGV2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250
cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0
LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAqiUtnQ2rus6XyWQiby1pgy3gDc3k0He8H1Mi
h28u8l06zjKx0adu+j01aG7Dme536zHLt4QSXaC2/75KDuq2+zKCqCXrSyA7sqg2
4AnBcIKoqYxC0S3U5q2WoUWVpBDioBzgoGu8GWqvi+XUuwucD2tzmoZAn+9B6Y5l
a8dzzSqyfQTOWhgyBXHM9mWe/7S5XI1QMnZE6LIal5GlI2PsPJnQCZeLv3yaisEq
TglgIwdcVusYP6O0IuJZwvMc4eB/R50M31DuWG+kWqYxvL/60ZlxKMIRU/DH1i0K
dcuhjQSAJpGORdNpP4LmDsqa01FYsXW/InsCVhUM6JfOb+iO0w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulMUU/1oWdcJT+tTiTSP
UM2LP6Xzrw+Fuy3IPiV9rLxogeEP1W/bjs9D0AWKG8sxZq5G+tXTyVRayYmm1WMy
fFdqi/OSa0VlpDbfEkhvBytnbseKJxqimzSrHsouf4uckKMvo7SETk6+xbvokX+y
nwfdYUK7sFKESEsCgvZpeyeV2fbkMMEBjjtGEadwk8rwgEMArQMfJldkmUYWEvnY
zeGksm3MFfvdcB0C+GLN1A2QNIapHfGJM6iK0cka7GbMljEmm3wbHg6/235dCo6V
xqnB/4ofY2pp4us13SnSMsGgmwvXcjh25+6jiFzJEWlbhsRKSAuvaQKbfTYnpXmF
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9922924703791801533661813795222606080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retool.ams.prototype.corporateprojects.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23521292705970967429743826315619697783132102046136193160797659483733236083517747884604222724534701794329621781833158208234883197522670847313254408631886731680362625192037463445179612461242718860380604707565706719977135852262319759011660516145101965330586049453175649638304521176841466888482652402851120609247740438228375693911020566835601229598895342835370269089266455773107296957052276527884062426049270454123387268904644015768447037842707347923046253388109618206714798096265098743138420630453753471304337831548474155136889780153782481120500604179545166219051999434244583023646980424413415895248512731687527504250133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adfca84fea735a7818148c7952c002f79f2f4013
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retool.ams.prototype.corporateprojects.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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