origin.music2-qa.lower.k1.amazon.brightspot.cloud

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:cd:ac:df:c0:38:80:db:da:33:37:83:e0:52:bd:35 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=origin.music2-qa.lower.k1.amazon.brightspot.cloud

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:cd:ac:df:c0:38:80:db:da:33:37:83:e0:52:bd:35
Serial Number (int): 21006347094594876775732463588762369333
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:02:1a:a0:c1:9e:69:81:ad:70:c7:54:67:90:b8:aa:59:ec:bc:e2
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): f0:43:33:ac:59:0d:21:bf:32:ad:50:7d:ae:d7:c6:3c:57:48:aa:07
Fingerprint (sha256): 14:b6:ab:b1:05:c7:33:7a:80:c7:74:29:dd:0a:ec:50:6e:15:7b:df:bc:da:44:49:59:2c:c5:93:11:38:2c:a1

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate origin.music2-qa.lower.k1.amazon.brightspot.cloud

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin.music2-qa.lower.k1.amazon.brightspot.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin.music2-qa.lower.k1.amazon.brightspot.cloud
verify.cms.music2-qa.lower.k1.amazon.brightspot.cloud
static.music2-qa.lower.k1.amazon.brightspot.cloud
cms.music2-qa.lower.k1.amazon.brightspot.cloud
verify.origin.music2-qa.lower.k1.amazon.brightspot.cloud
*.origin.music2-qa.lower.k1.amazon.brightspot.cloud
*.cms.music2-qa.lower.k1.amazon.brightspot.cloud
music2-qa.lower.k1.amazon.brightspot.cloud
*.music2-qa.lower.k1.amazon.brightspot.cloud

Other certificates including the domain name brightspot.cloud

(limited to 100 certificates)
cst-qa.lower.chorus.brightspot.cloud
origin.ser.production.k1.amazon.brightspot.cloud
origin.afar-media.production.k3.m1.brightspot.cloud
church-qa3.church.lower.church.brightspot.cloud
origin.uat.lower.google-marketing.brightspot.cloud
entertainment.production.k1.amazon.brightspot.cloud
origin.relay-qa.lower.k1.amazon.brightspot.cloud
biospace-qa.lower.k1.m1.brightspot.cloud
origin.kpbs.kpbs.production.k3.m1.brightspot.cloud
cms.6amcity.com
origin.pitchbook-prod.production.k2.m1.brightspot.cloud
acertus-uat.lower.k1.m1.brightspot.cloud
origin.wwe-uat.lower.k2.m1.brightspot.cloud
origin.biospace-qa.lower.k1.m1.brightspot.cloud
origin.ajga-uat.ajga.lower.k1.m1.brightspot.cloud
amazon-hvh.lower.k3.m1.brightspot.cloud
static.amazon-hvh.lower.k3.m1.brightspot.cloud
origin.acertus.production.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
aarp-content-uat2.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
tvnotas.production.k3.m1.brightspot.cloud
intsys-qa.inter-systems.lower.k2.m1.brightspot.cloud
origin.medtech.production.jnj.brightspot.cloud
origin.web.production.hca.brightspot.cloud
intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.wwe-prod.production.k2.m1.brightspot.cloud
origin.jobs.production.amazon-jobs.brightspot.cloud
origin.berlin-2023-qa.berlin-2023.lower.k2.m1.brightspot.cloud
www.nbcsportsathletedirect.com
static.church-qa.church.lower.church.brightspot.cloud
origin.epe-uat.epe.lower.k2.m1.brightspot.cloud
lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.pitchbook-uat.lower.k2.m1.brightspot.cloud
origin.in-investor-uat.lower.k2.m1.brightspot.cloud
origin.getgo-qa.lower.k2.m1.brightspot.cloud
ensign-qa.ensign.lower.church.brightspot.cloud
fastmarkets.com
origin.deseret.production.chorus.brightspot.cloud
static.lexipol.lower.k1.m1.brightspot.cloud
origin.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.bwater-uat.bridgewater.lower.k2.m1.brightspot.cloud
static.farm-journal-qa.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.web.production.teaching-strategies.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.church-uat.church.lower.church.brightspot.cloud
amazon-last-mile.lower.k3.m1.brightspot.cloud
church-qa4.church.lower.church.brightspot.cloud
origin.pay-uat.lower.k1.amazon.brightspot.cloud
origin.vpm.production.k1.m1.brightspot.cloud
origin.foods.wholefoods.production.k1.amazon.brightspot.cloud
aarp-content-uat.aarp.lower.k1.m1.brightspot.cloud
static.biospace.production.k1.m1.brightspot.cloud
epe-qa.epe.lower.k2.m1.brightspot.cloud
bsp.elpais.com.uy
origin.vpm.production.k1.m1.brightspot.cloud
origin.carrick.production.k1.m1.brightspot.cloud
cms.6amcity.com
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.chalkbeat.production.chorus.brightspot.cloud
origin.berlin-2023.berlin-2023.production.k2.m1.brightspot.cloud
static.prod-wires.production.ap.brightspot.cloud
origin.music2-qa.lower.k1.amazon.brightspot.cloud
kpbs-qa.kpbs.lower.k3.m1.brightspot.cloud
acertus-qa.lower.k1.m1.brightspot.cloud
cms.6amcity.com
cms.6amcity.com
origin.marriott-news.production.k1.m1.brightspot.cloud
origin.ei.energy-intelligence.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
static.uat.lower.dispatch-health.brightspot.cloud
entertainment-uat.lower.k1.amazon.brightspot.cloud
erepublic-qa2.erepublic.lower.k3.m1.brightspot.cloud
lexipol.production.k1.m1.brightspot.cloud
qa2.lower.forum-communications.brightspot.cloud
*.dispatchhealth.com
origin.chopra.chopra.production.k2.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.qa.lower.grove2.brightspot.cloud
static.uat.lower.amazon-sell.brightspot.cloud
origin.kpbs-uat.kpbs.lower.k3.m1.brightspot.cloud
static.notmusa.production.k3.m1.brightspot.cloud
static.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
science-qa2.topics.lower.k1.amazon.brightspot.cloud
origin.im-qa.lower.jnj.brightspot.cloud
aarp-content.aarp.production.k1.m1.brightspot.cloud
origin.uat.lower.dispatch-health.brightspot.cloud
sixam-city-uat.lower.k1.m1.brightspot.cloud
ooc.jnj-migrated.production.jnj.brightspot.cloud
origin.csx-qa.lower.k2.m1.brightspot.cloud
origin.jnj-uat.lower.jnj.brightspot.cloud
origin.rfdtv.k1.go.brightspot.cloud
static.web.production.forum-communications.brightspot.cloud
origin.music2-uat.lower.k1.amazon.brightspot.cloud
static.gbh.production.k1.m1.brightspot.cloud
origin.aji.production.k2.m1.brightspot.cloud

Certificate

The complete raw certificate details for origin.music2-qa.lower.k1.amazon.brightspot.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHqDCCBpCgAwIBAgIQD82s38A4gNvaMzeD4FK9NTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDUyNTAwMDAwMFoXDTI0MDYyMjIzNTk1OVowPDE6
MDgGA1UEAxMxb3JpZ2luLm11c2ljMi1xYS5sb3dlci5rMS5hbWF6b24uYnJpZ2h0
c3BvdC5jbG91ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALzkdJ/8
ju8Ku2+IOD4rGTdz7OxICnr2V6pvvYavRR5EPLTLIE3UkRrGmy4l+HVKEgFJ1R8X
5si523WruTN65bhYF+I/y9JuiqqbdkwCy+7MZjdfmA9ZX4maU2TddbL5UguVPZfs
8S0CEmORCwhHOFKI7Id5TkTHV0CLR/zIfGQPjFn4ttaTKdgdJEqLAJAhIe3giEkt
kMyiSNwBBjiQl8g53Nzr8tw2SH1+52R39E1njbQxRAsQPQIIkQROeee5RAk6S2dv
TL1rZYwlmYBOKDUuvobGlmnjPUCj3R+ilxPZEjNqLoPc+Xp/vPOeIyE3fsE7RJ4R
zLrqu8gvfVBxldcCAwEAAaOCBKQwggSgMB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7
O1CVn+blkBOFMB0GA1UdDgQWBBR7AhqgwZ5pga1wx1RnkLiqWey84jCCAdUGA1Ud
EQSCAcwwggHIgjFvcmlnaW4ubXVzaWMyLXFhLmxvd2VyLmsxLmFtYXpvbi5icmln
aHRzcG90LmNsb3VkgjV2ZXJpZnkuY21zLm11c2ljMi1xYS5sb3dlci5rMS5hbWF6
b24uYnJpZ2h0c3BvdC5jbG91ZIIxc3RhdGljLm11c2ljMi1xYS5sb3dlci5rMS5h
bWF6b24uYnJpZ2h0c3BvdC5jbG91ZIIuY21zLm11c2ljMi1xYS5sb3dlci5rMS5h
bWF6b24uYnJpZ2h0c3BvdC5jbG91ZII4dmVyaWZ5Lm9yaWdpbi5tdXNpYzItcWEu
bG93ZXIuazEuYW1hem9uLmJyaWdodHNwb3QuY2xvdWSCMyoub3JpZ2luLm11c2lj
Mi1xYS5sb3dlci5rMS5hbWF6b24uYnJpZ2h0c3BvdC5jbG91ZIIwKi5jbXMubXVz
aWMyLXFhLmxvd2VyLmsxLmFtYXpvbi5icmlnaHRzcG90LmNsb3VkgiptdXNpYzIt
cWEubG93ZXIuazEuYW1hem9uLmJyaWdodHNwb3QuY2xvdWSCLCoubXVzaWMyLXFh
Lmxvd2VyLmsxLmFtYXpvbi5icmlnaHRzcG90LmNsb3VkMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g
LIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYh
aHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipo
dHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0T
AQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUA7s3QZNXbGs7FXLed
tM0TojKHRny87N7DUUhZRnEftZsAAAGIVP2ImgAABAMARjBEAiAtrf0potk2v9I1
lUPvu6jVrphDAITBzAPyQwhdhmykfgIgXwQXGlSJS0u0BHn+UxvAU/t8HDqfGIoD
IdKlDVqqRD8AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYhU
/YiBAAAEAwBHMEUCIQCEv32/PjyYpFScCPS1/2CXC+eI7WRtVtGeGC+R539k4AIg
bpzhHW6OeDB3cLKdTHnakfDtH1wJr98gZQmhaA8c7ygAdgDatr9rP7W2Ip+bwrtc
a+hwkXFsu1GEhTS9pD0wSNf7qwAAAYhU/YhrAAAEAwBHMEUCIFNhaQHO/OMIVOg+
KwEVcsfIJRZhpClhw5ea3aO3JFeEAiEA54u657caUejP+Apq9SIuj5hssezOAKvK
FqtOMamLy9EwDQYJKoZIhvcNAQELBQADggEBAKQ5mvu9o1VGHGBCKBJlVjbNBBZF
elCOmqaASMgf6GD3E+/y1j0KIybIi4Y9/3osFmGCcPMhY0tWn0i9m+plh14SqmRL
mdobDyap8VJEl50bCl4g/A3cpEWsxphstlhgrue0ZOcGcWw2PztxDGYqZVuujUnQ
n5BCDLgBZ2G0WF8yO1Ah1E9F3fv5Ya7PMT6LrDZaAu0+6jLTOVZSLjLMZHy9gpSq
XJQRcydthvv1M+jx/vGIp1pc0F9K/0sXx96LwMc4YwSHCS6K8Cby6zTNTQX5+AtP
hs+0+eSB9lAbOZU7xzIOcMotlBcHwTvNR1ywgRKq7kA0ixbwhbnKFPhAs7c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOR0n/yO7wq7b4g4PisZ
N3Ps7EgKevZXqm+9hq9FHkQ8tMsgTdSRGsabLiX4dUoSAUnVHxfmyLnbdau5M3rl
uFgX4j/L0m6Kqpt2TALL7sxmN1+YD1lfiZpTZN11svlSC5U9l+zxLQISY5ELCEc4
Uojsh3lORMdXQItH/Mh8ZA+MWfi21pMp2B0kSosAkCEh7eCISS2QzKJI3AEGOJCX
yDnc3Ovy3DZIfX7nZHf0TWeNtDFECxA9AgiRBE5557lECTpLZ29MvWtljCWZgE4o
NS6+hsaWaeM9QKPdH6KXE9kSM2oug9z5en+8854jITd+wTtEnhHMuuq7yC99UHGV
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21006347094594876775732463588762369333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23845456972045932772689476248392096656202472952913547162556739054553866426510146031546148399792227404933447159016645501459277180643363531631924621975078676196198213914270099667236299341366677978119261403289535359630263198040276273191099901713778746818238569858255397538362109189396428728535766400970323712183539907543879758169859205227494660317898601793207332485819972629414025892924962628922264741475856065745905554988828428006620732482326664323369625100113608464999199989764977847947124778348610663491307259222429595895844719160213177029132228656262529144618216899604445826910322475471928109355196983820933284337111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b021aa0c19e6981ad70c7546790b8aa59ecbce2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (460 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.cms.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.origin.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.music2-qa.lower.k1.amazon.brightspot.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018854fd889a000004030046304402202dadfd29a2d936bfd2359543efbba8d5ae98430084c1cc03f243085d866ca47e02205f04171a54894b4bb40479fe531bc053fb7c1c3a9f188a0321d2a50d5aaa443f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018854fd8881000004030047304502210084bf7dbf3e3c98a4549c08f4b5ff60970be788ed646d56d19e182f91e77f64e002206e9ce11d6e8e78307770b29d4c79da91f0ed1f5c09afdf206509a1680f1cef28007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018854fd886b0000040300473045022053616901cefce30854e83e2b011572c7c8251661a42961c3979adda3b7245784022100e78bbae7b71a51e8cff80a6af5222e8f986cb1ecce00abca16ab4e31a98bcbd1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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