cde-ta-g7g.amazon.com

- Amazon.com, Inc. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 01:8c:50:22:0f:2e:0b:38:8a:4d:b8:77:84:a6:28:af was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Amazon.com, Inc.

Organization: Amazon.com, Inc.
State / Province: Washington
Locality: Seattle
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8c:50:22:0f:2e:0b:38:8a:4d:b8:77:84:a6:28:af
Serial Number (int): 2057774847203548083556723547615668399
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: e7:33:01:4c:6a:23:a6:1d:f6:ef:d5:e5:b3:61:36:f8:a3:7a:53:1e
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 30:f6:ef:da:85:83:71:c9:13:b6:c3:d9:d3:82:ea:8c:03:ca:04:79
Fingerprint (sha256): 10:12:af:0c:9d:26:a8:81:72:f4:24:ad:03:98:d9:8b:60:f3:5d:fd:cf:79:fc:66:57:92:06:9a:a5:67:ec:95

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate cde-ta-g7g.amazon.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cde-ta-g7g.amazon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cde-ta-g7g.amazon.com
cde-ta-g7g.amazon.co.jp
cde-ta-g7g.amazon.nl
cde-ta-g7g.amazon.fr
cde-ta-g7g.amazon.es
cde-ta-g7g.amazon.cn
cde-ta-g7g.amazon.co.uk
cde-ta-g7g.amazon.ca
cde-ta-g7g.amazon.de
cde-ta-g7g.amazon.it
cde-ta-g7g.amazon.com.mx
cde-ta-g7g.amazon.com.br
cde-ta-g7g.amazon.com.au
cde-ta-g7g.amazon.in

Other certificates including the domain name amazon.com

(limited to 100 certificates)
fresh.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
aea-console-canary.aea.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
aea-console-canary.aea.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com
monitor-api-public.eu-central-1.amazonaws.com
aftx-eu.amazon.com
aea-console-canary.aea.amazon.com
photos.amazon.com
dcp.amazon.co.jp
skills-store-eu.amazon.com
securephotostorageservice-eu-external.amazon.com
account-jobs-fe.amazon.com

Certificate

The complete raw certificate details for cde-ta-g7g.amazon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHWDCCBkCgAwIBAgIQAYxQIg8uCziKTbh3hKYorzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwODAxMDAwMDAwWhcNMjAwNjMwMTIw
MDAwWjBvMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE
BxMHU2VhdHRsZTEZMBcGA1UEChMQQW1hem9uLmNvbSwgSW5jLjEeMBwGA1UEAxMV
Y2RlLXRhLWc3Zy5hbWF6b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7cYfxFb2o+X8rhjFyOU9D0NWxywDh4ofbw9npZUuAJ2KVqjYP77Gr7lD
FfBvrPu0HG/NyJhM7vjzwygn1Er0NBOPRNwBhwI/FPzJyWoVwc4qU6TP+21Uv7KJ
1x0dp1Ul2w80afQ69UreI/NO51mxvexG5a8CmmPW+Qc81odv2DRFEuIyncnACVZl
h+arQK2fd+d5rcEx8V/JbHtV6SolaFNbvFRI3FQxdt0ZZG7MgqzcUbGB+s2y0T43
a7kYM2oTYZz7XYnKLaCyQ2cSUusLYjv7+MxsnDSEyYpWm3rLPY5cvWeZo7dOI2ka
aNHlDiOxkJVE2Bv+Kn6lakTdLN9s8wIDAQABo4IEGTCCBBUwHwYDVR0jBBgwFoAU
JG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0OBBYEFOczAUxqI6Yd9u/V5bNhNvij
elMeMIIBVAYDVR0RBIIBSzCCAUeCFWNkZS10YS1nN2cuYW1hem9uLmNvbYIXY2Rl
LXRhLWc3Zy5hbWF6b24uY28uanCCFGNkZS10YS1nN2cuYW1hem9uLm5sghRjZGUt
dGEtZzdnLmFtYXpvbi5mcoIUY2RlLXRhLWc3Zy5hbWF6b24uZXOCFGNkZS10YS1n
N2cuYW1hem9uLmNughdjZGUtdGEtZzdnLmFtYXpvbi5jby51a4IUY2RlLXRhLWc3
Zy5hbWF6b24uY2GCFGNkZS10YS1nN2cuYW1hem9uLmRlghRjZGUtdGEtZzdnLmFt
YXpvbi5pdIIYY2RlLXRhLWc3Zy5hbWF6b24uY29tLm14ghhjZGUtdGEtZzdnLmFt
YXpvbi5jb20uYnKCGGNkZS10YS1nN2cuYW1hem9uLmNvbS5hdYIUY2RlLXRhLWc3
Zy5hbWF6b24uaW4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjB3BgNVHR8EcDBuMDWgM6Axhi9odHRwOi8vY3JsMy5kaWdpY2Vy
dC5jb20vRGlnaUNlcnRHbG9iYWxDQUcyLmNybDA1oDOgMYYvaHR0cDovL2NybDQu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcmwwTAYDVR0gBEUwQzA3
BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzAIBgZngQwBAgIwdAYIKwYBBQUHAQEEaDBmMCQGCCsGAQUFBzABhhho
dHRwOi8vb2NzcC5kaWdpY2VydC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNl
cnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3J0MAkGA1UdEwQC
MAAwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDuS723dc5guuFCaR+r4Z5mow9+
X7By2IMAxHuJeqj9ywAAAWxOWKl0AAAEAwBGMEQCIGiN1uHlPrAXrGw3BLvSeQQ8
t+H8YeofC31FCvyMLUj3AiBN6nP5EZhq6Jdv2LN/DpGjVj6J9cBg2DAh1+AvTQDa
owB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbE5YqboAAAQD
AEYwRAIgEf2GRxhSotl6qvRM9ga3m0aql4kWJgLTotr+N3PjcEkCIBsdv2SZ4Vep
rkIGlAnx/uhPROJASjg6vh3FbXvCXCn0MA0GCSqGSIb3DQEBCwUAA4IBAQAsSHZP
uH2gv3o6Qm2rSDu9Lb5H434/4hvqH5jrDj/aAUUVhiUcISkoR/FpOPEd8Y2pNEsN
H7SyhT+euHR6dMV4hJnQX7kXPb6RDbXr6blll4JdFI2kKC0cPDRGBFTS077hCM+7
wv3qM0tg6VhcQqasWbv0OEVV7e3aX3lTPenvnvs6Ac/czgFlpIQ7trE3SBZcdbac
MNtA+KGht5jm3pNRJwS8JmtsZgVGkZ71wzk8N6mkWbmP2cfTMIm2o2EhS0C6CY0c
0MWmSUorP92mFiBapMRmH+Av7gYdogBYofphAAIwk4CmV/oT6Iv4w5wHSAnPBg7C
0ZWu0cF3Pwn5+Smj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cYfxFb2o+X8rhjFyOU9
D0NWxywDh4ofbw9npZUuAJ2KVqjYP77Gr7lDFfBvrPu0HG/NyJhM7vjzwygn1Er0
NBOPRNwBhwI/FPzJyWoVwc4qU6TP+21Uv7KJ1x0dp1Ul2w80afQ69UreI/NO51mx
vexG5a8CmmPW+Qc81odv2DRFEuIyncnACVZlh+arQK2fd+d5rcEx8V/JbHtV6Sol
aFNbvFRI3FQxdt0ZZG7MgqzcUbGB+s2y0T43a7kYM2oTYZz7XYnKLaCyQ2cSUusL
Yjv7+MxsnDSEyYpWm3rLPY5cvWeZo7dOI2kaaNHlDiOxkJVE2Bv+Kn6lakTdLN9s
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2057774847203548083556723547615668399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cde-ta-g7g.amazon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30016176906843108738995934251440016446209607194991035825220431197070348864970996077210343612286657401229195155579733025615036002775143907468126476512273431680172521472650921987568377888295519100678933610171036264412558376120630975975243690931514286855905521648411193747509363056146931156841205212182860812616596160695642411000469829595556809315489636423445352726249904056972090463054084267417123692303115371061358280437266248157324198125889803316928607045994379805135930589796381873285417407728784202739242585605610822314338176288151045271100910666518850158700435146168328742965323142202568920430552847976285924715763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e733014c6a23a61df6efd5e5b36136f8a37a531e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cde-ta-g7g.amazon.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c4e58a97400000403004630440220688dd6e1e53eb017ac6c3704bbd279043cb7e1fc61ea1f0b7d450afc8c2d48f702204dea73f911986ae8976fd8b37f0e91a3563e89f5c060d83021d7e02f4d00daa30075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c4e58a9ba0000040300463044022011fd86471852a2d97aaaf44cf606b79b46aa9789162602d3a2dafe3773e3704902201b1dbf6499e157a9ae42069409f1fee84f44e2404a383abe1dc56d7bc25c29f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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