onrech.at

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:08:33:4f:c0:dc:e6:0b:7f:19:29:bd:91:c1:55:58 was issued on by Amazon.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=onrech.at

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:08:33:4f:c0:dc:e6:0b:7f:19:29:bd:91:c1:55:58
Serial Number (int): 19980999033244813499036754728829670744
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4e:e1:cf:80:cc:57:c3:22:29:a2:40:6e:8f:f0:64:69:5a:e6:0d:3d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8c:b7:d5:a8:37:f2:74:2a:ba:d1:10:1a:2b:51:80:ff:0f:b6:a7:18
Fingerprint (sha256): 11:e4:01:7a:00:fb:99:5d:ab:ac:90:7b:8e:d0:2b:da:f8:a7:28:ad:56:ca:69:6d:8a:be:d9:a5:2d:99:67:7b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate onrech.at

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onrech.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onrech.at
bestinvoicing.co.uk
ontimo.gr
onfakt.no
*.onfatt.it
onfakt.fi
*.onfakt.no
*.ontimo.gr
*.onfatt.mt
*.onfakt.fi
onrech.ch
*.bestinvoicing.co.uk
*.onfakt.bg
*.onfact.be
ontimo.cy
bestinvoicing.mt
*.onrech.ch
onfact.be
*.onlask.fi
onfakt.se
onfact.nl
enfact.be
onfact.ro
onfakt.bg
*.onfakt.se
*.enfact.be
*.onfakt.sk
onfat.cy
infakt.lt
onreik.is
enfact.lu
onrech.be
onfakt.sk
*.infakt.lt
*.onrech.at
*.nafakt.hr
onfat.pt
onrech.it
onfat.pl
*.bestinvoicing.com
*.ontimo.cy
*.onfakt.cz
*.onrech.be
onfatt.ch
*.bestinvoicing.mt
onfakt.cz
*.onfatt.ch
*.onfat.cy
*.onfakt.dk
*.onzsam.hu
onrech.lu
onarvel.ee
nafakt.hr
*.onrech.it
*.onfat.pl
*.onarvel.ee
bestinvoicing.com
onfakt.dk
onzsam.hu
*.enfact.lu
*.onreik.is
*.onfat.pt
*.onfact.es
*.enfact.fr
tireki.lv
onfact.es
*.onfactur.pl
*.tireki.lv
onrech.de
onfactur.pl
enfact.fr
nazara.si
*.onfact.nl
*.onfact.ro
*.onrech.lu
enfact.ch
*.nazara.si
onfatt.it
*.enfact.ch
*.onrech.de
onfatt.mt

Other certificates including the domain name onrech.at

(limited to 100 certificates)
store.51meters.com
onrech.at
share.node-tool.com
onrech.at
wcpl.patelgopal.com
beta.submarin.online
beta.submarin.online
www.graefe-baugruppe.de
chauyan.dev
fn.izipay.pe
onrech.at
faces-dev.royalcollege.ca
onrech.at
kaufmandevelopmentgroup.com
api.octo.app
link.vvvip.app
momkenacademy.me
kaufmandevelopmentgroup.com
d.iplan.ai
www.1first.io
games.gruppohera.it
www.selfprint.me
wcpl.patelgopal.com
u2t.pmuc.or.th
sys.malooba.app
fourinarow.foxcitygames.com
fn.izipay.pe
www.claire-and-joe.com
hire.darren.world

Certificate

The complete raw certificate details for onrech.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1dsjrTl0UrWJcJob429
1Z6Aan93Ey1lptl+Obbjs2Xiwmy1ubM5VjN30lsGexRvaL2UP6nYUqYzw9aY9pUQ
VO5Q0tNww+Ru8jS66kvmMySAoRHFMhbIMiHvqzbH4z9qqsDjPVftcMwivWru8u8Q
bJdeQ2U8EmISsZRIlZdP4XhLKMhZEtFF9haVxrHwUeE7sikyvZFe5hXdyLXXEa92
5UWGJYzCToE/mIlAtSaTRBH7rQRwbkpKsfFKIGESVoVUIAAvuOhtCFxZotCxvLO5
mgGqWgOcrotuvLu4+kb5cq329/cbCt1VInNGo/kUo3lFGg1IlWdQErx3w945Q5WF
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19980999033244813499036754728829670744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onrech.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22134813776109869410404565360738659419276555142460631366783355513428672441703891391423519882704695820751149409588220020632734804961349985770014673938614795050228898986494472589725537869579869342400854500648892140882135280923899232944406304009007108072933784841637856055806957403098919239633180345700857088301393890457196890898233730136216906035167381657547797895733780944687423811576778084852682213170624427428184132958136862098007696353049369293164028662140571112871872375429517693612376062501614320461356950143708367889330443667018117992462369799858471578845117922494335082838284950915638203586463912357183662425349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ee1cf80cc57c32229a2406e8ff064695ae60d3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1027 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinvoicing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontimo.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfatt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontimo.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfatt.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestinvoicing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontimo.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinvoicing.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlask.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfat.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infakt.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onreik.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infakt.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nafakt.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestinvoicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontimo.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestinvoicing.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfat.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onzsam.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onarvel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nafakt.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onarvel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinvoicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onzsam.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onreik.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tireki.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfactur.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tireki.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfactur.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazara.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nazara.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfatt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfatt.mt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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