retool.ams.prototype.corporateprojects.amazon.dev

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:77:15:f5:d4:10:12:b6:07:b4:e4:dd:90:86:51:00 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=retool.ams.prototype.corporateprojects.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:77:15:f5:d4:10:12:b6:07:b4:e4:dd:90:86:51:00
Serial Number (int): 9922924703791801533661813795222606080
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ad:fc:a8:4f:ea:73:5a:78:18:14:8c:79:52:c0:02:f7:9f:2f:40:13
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ef:68:36:1c:5b:67:e1:8c:cc:8f:10:08:76:d6:82:0f:32:f2:e3:aa
Fingerprint (sha256): 0e:9d:fc:20:99:85:18:94:26:b6:87:16:bb:d8:9b:2f:f9:52:31:46:95:98:e4:3d:67:7b:ba:a4:87:eb:84:32

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate retool.ams.prototype.corporateprojects.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for retool.ams.prototype.corporateprojects.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

retool.ams.prototype.corporateprojects.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
api.pdc.marjohar.people.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
opensearch-dash-chchu.eu.devo.purge.percolate.p13n.amazon.dev
turn.ring-mobility.devices.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
ers.mutescu.people.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
beta.ext-alexandria-quicknotate.prime-video.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
vps.pdx.prod.vx.xray.prime-video.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
beta.cruzoliv.people.amazon.dev
alpha.device.1p-idp.ihm.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
nlb.definitions.rliulin.people.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
portal.transportation.amazon.dev
dev.beta.ap-northeast-1.autoflow-visualizer.aft.amazon.dev
appsync.alpha.risk-assessment.whs.amazon.dev
icon.amazon.dev
spark.eu.prod.mcrs.moderation.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
katara.boombox.pandora.amazon.dev
us-west-2.beta.messaging.ui.bsm.selling-partners.amazon.dev
marinodd.service.workflow-orchestrator.aee.amazon.dev
api.fcmap.swanwes.people.amazon.dev
beta.dcms-onboarding.ring.amazon.dev
na.gmr.gamma.apa.books.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
iad.assets.creative-validation.vivid.amazon.dev
prod.portal.us-west-2.metastream.robotics.amazon.dev
ssa-central.cops.amazon.dev
iad-beta.aviary.audible.amazon.dev
beta.kaizer.graph.amazon.dev
beta.us-west-2.mdcs.mshop.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
trck.ahs.prod-eu.turntable.sonic.advertising.amazon.dev
ak-game-service.prod.iad.games.kids.amazon.dev
dub.beta.unicorn-phoenix.lending.payments.amazon.dev

Certificate

The complete raw certificate details for retool.ams.prototype.corporateprojects.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEoTCCA4mgAwIBAgIQB3cV9dQQErYHtOTdkIZRADANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIwMzAwMDAwMFoXDTI0MDEwMjIzNTk1OVowPDE6
MDgGA1UEAxMxcmV0b29sLmFtcy5wcm90b3R5cGUuY29ycG9yYXRlcHJvamVjdHMu
YW1hem9uLmRldjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpTFFP9
aFnXCU/rU4k0j1DNiz+l868PhbstyD4lfay8aIHhD9Vv247PQ9AFihvLMWauRvrV
08lUWsmJptVjMnxXaovzkmtFZaQ23xJIbwcrZ27Hiicaops0qx7KLn+LnJCjL6O0
hE5OvsW76JF/sp8H3WFCu7BShEhLAoL2aXsnldn25DDBAY47RhGncJPK8IBDAK0D
HyZXZJlGFhL52M3hpLJtzBX73XAdAvhizdQNkDSGqR3xiTOoitHJGuxmzJYxJpt8
Gx4Ov9t+XQqOlcapwf+KH2NqaeLrNd0p0jLBoJsL13I4dufuo4hcyRFpW4bESkgL
r2kCm302J6V5hRUCAwEAAaOCAZ0wggGZMB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7
O1CVn+blkBOFMB0GA1UdDgQWBBSt/KhP6nNaeBgUjHlSwAL3ny9AEzA8BgNVHREE
NTAzgjFyZXRvb2wuYW1zLnByb3RvdHlwZS5jb3Jwb3JhdGVwcm9qZWN0cy5hbWF6
b24uZGV2MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250
cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0
LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAqiUtnQ2rus6XyWQiby1pgy3gDc3k0He8H1Mi
h28u8l06zjKx0adu+j01aG7Dme536zHLt4QSXaC2/75KDuq2+zKCqCXrSyA7sqg2
4AnBcIKoqYxC0S3U5q2WoUWVpBDioBzgoGu8GWqvi+XUuwucD2tzmoZAn+9B6Y5l
a8dzzSqyfQTOWhgyBXHM9mWe/7S5XI1QMnZE6LIal5GlI2PsPJnQCZeLv3yaisEq
TglgIwdcVusYP6O0IuJZwvMc4eB/R50M31DuWG+kWqYxvL/60ZlxKMIRU/DH1i0K
dcuhjQSAJpGORdNpP4LmDsqa01FYsXW/InsCVhUM6JfOb+iO0w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulMUU/1oWdcJT+tTiTSP
UM2LP6Xzrw+Fuy3IPiV9rLxogeEP1W/bjs9D0AWKG8sxZq5G+tXTyVRayYmm1WMy
fFdqi/OSa0VlpDbfEkhvBytnbseKJxqimzSrHsouf4uckKMvo7SETk6+xbvokX+y
nwfdYUK7sFKESEsCgvZpeyeV2fbkMMEBjjtGEadwk8rwgEMArQMfJldkmUYWEvnY
zeGksm3MFfvdcB0C+GLN1A2QNIapHfGJM6iK0cka7GbMljEmm3wbHg6/235dCo6V
xqnB/4ofY2pp4us13SnSMsGgmwvXcjh25+6jiFzJEWlbhsRKSAuvaQKbfTYnpXmF
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9922924703791801533661813795222606080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retool.ams.prototype.corporateprojects.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23521292705970967429743826315619697783132102046136193160797659483733236083517747884604222724534701794329621781833158208234883197522670847313254408631886731680362625192037463445179612461242718860380604707565706719977135852262319759011660516145101965330586049453175649638304521176841466888482652402851120609247740438228375693911020566835601229598895342835370269089266455773107296957052276527884062426049270454123387268904644015768447037842707347923046253388109618206714798096265098743138420630453753471304337831548474155136889780153782481120500604179545166219051999434244583023646980424413415895248512731687527504250133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adfca84fea735a7818148c7952c002f79f2f4013
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retool.ams.prototype.corporateprojects.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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