*.dispatchhealth.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:66:28:95:63:38:71:b4:df:71:52:95:e2:97:89:53 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.dispatchhealth.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:66:28:95:63:38:71:b4:df:71:52:95:e2:97:89:53
Serial Number (int): 16481173361077156367297874198741354835
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ce:55:a1:67:df:5a:e5:18:4e:be:3d:29:00:44:38:75:fc:63:ab:dd
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ba:2f:0f:f4:c3:be:ad:d8:a7:1d:6c:7f:99:2d:b2:52:a3:01:3a:c1
Fingerprint (sha256): 18:76:8b:74:d3:5e:0b:c8:53:13:80:3f:70:6a:78:ca:a4:0c:e7:ac:47:18:c8:50:5b:47:e8:96:e1:e2:f0:68

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.dispatchhealth.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dispatchhealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dispatchhealth.com
web.production.dispatch-health.brightspot.cloud
*.web.production.dispatch-health.brightspot.cloud
dispatchhealth.com

Other certificates including the domain name dispatchhealth.com

(limited to 100 certificates)
richmond.dispatchhealth.com
urgentcare.dispatchhealth.com
release.dispatchhealth.com
www.dispatchhealth.com
phoenix.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
*.dispatchhealth.com
lasvegas.dispatchhealth.com
urgentcare.dispatchhealth.com
staging-risk-stratification.dispatchhealth.com
uat-patients-auth.dispatchhealth.com
richmond.dispatchhealth.com
new.dispatchhealth.com
risk-stratification.dispatchhealth.com
staging-risk-stratification.dispatchhealth.com
reports.dispatchhealth.com
conditions.dispatchhealth.com
conditions.dispatchhealth.com
*.dispatchhealth.com
blog.dispatchhealth.com
*.dispatchhealth.com
dispatchhealth.com
springfield.dispatchhealth.com
urgentcare.dispatchhealth.com
blog.dispatchhealth.com
*.dispatchhealth.com
dispatchhealth.com
urgentcare.dispatchhealth.com
urgentcare.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
*.dispatchhealth.com
new.dispatchhealth.com
richmond.dispatchhealth.com
blog.dispatchhealth.com
staging.dispatchhealth.com
zabbix.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
blog.dispatchhealth.com
staging-risk-stratification.dispatchhealth.com
testing.dispatchhealth.com
practice.dispatchhealth.com
staging-risk-stratification.dispatchhealth.com
blog.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
richmond.dispatchhealth.com
*.dispatchhealth.com
qa-risk-stratification.dispatchhealth.com
risk-stratification.dispatchhealth.com
*.dispatchhealth.com
conditions.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
conditions.dispatchhealth.com
*.dispatchhealth.com
richmond.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
conditions.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
dispatchhealth.com
urgentcare.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
practice.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
urgentcare.dispatchhealth.com
blog.dispatchhealth.com
urgentcare.dispatchhealth.com
springfield.dispatchhealth.com
*.dispatchhealth.com
*.dispatchhealth.com
practice.dispatchhealth.com
blog.dispatchhealth.com
urgentcare.dispatchhealth.com
*.dispatchhealth.com
dispatchhealth.com
testing.dispatchhealth.com
covid19.dispatchhealth.com
practice.dispatchhealth.com
risk-stratification.dispatchhealth.com
zabbix.dispatchhealth.com
risk-stratification.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
conditions.dispatchhealth.com
urgentcare.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
blog.dispatchhealth.com
urgentcare.dispatchhealth.com
blog.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
richmond.dispatchhealth.com
*.dispatchhealth.com
practice.dispatchhealth.com
practice.dispatchhealth.com
*.dispatchhealth.com
san-16-s12.tlsprovisioning.exacttarget.com
conditions.dispatchhealth.com
qa-risk-stratification.dispatchhealth.com
practice.dispatchhealth.com
blog.dispatchhealth.com
staging.dispatchhealth.com
risk-stratification.dispatchhealth.com

Certificate

The complete raw certificate details for *.dispatchhealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIQDGYolWM4cbTfcVKV4peJUzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTAyNTAwMDAwMFoXDTI0MTEyMzIzNTk1OVowHzEd
MBsGA1UEAwwUKi5kaXNwYXRjaGhlYWx0aC5jb20wggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClCi3FtYGcVg6OZTp+++lLOTIpO0f7FzywBPxn4Tv4OUG1
jXBRh6Nsf4MghUwQ4FaYx+QHrk62WUGy2VH1pCGRMyWycmG3swE/EW4fCnzT+dFz
4SdRL7J3h5PMbYXw8npbH75xmTIDyXZNwDXiIfFQ+cgo5b1BN7xzbx4xp9ptiuv7
PAdNXNA2IZXmI7kQax4uFth0MtJlMLQccU/35oWS7/nzBgN9KBGdbAgtMJeE0Qfe
ONXLdKNA+RzEETbBGXmVbCQM/CXOgElacjh7/obCRjfN1z5HcKMNPvJKMmFOHh0V
F2ye49DjvpbODxioQ3eqOZj9GXrGZq8K7GzL1ye1AgMBAAGjggNpMIIDZTAfBgNV
HSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUzlWhZ99a5RhO
vj0pAEQ4dfxjq90wgZkGA1UdEQSBkTCBjoIUKi5kaXNwYXRjaGhlYWx0aC5jb22C
L3dlYi5wcm9kdWN0aW9uLmRpc3BhdGNoLWhlYWx0aC5icmlnaHRzcG90LmNsb3Vk
gjEqLndlYi5wcm9kdWN0aW9uLmRpc3BhdGNoLWhlYWx0aC5icmlnaHRzcG90LmNs
b3VkghJkaXNwYXRjaGhlYWx0aC5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV
HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz
cC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu
cjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIB
fwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuzdBk1dsazsVct520zROiModGfLzs
3sNRSFlGcR+1mwAAAYtlLGHiAAAEAwBIMEYCIQDJC+mD6W3whmi3BP6w1kA1MCgz
k0sMZY/Gcc0BejHfswIhAPqA/gB5TKH2yId2F8pyWDd3woucnkM9q/zKVyuKCYrD
AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGLZSxhpgAABAMA
RzBFAiEAub7J/E6Ylqzg8S07PxP16g77NginRE8sJTD4F+jYiw4CIDQKuEY9gNT4
Nxodxp86Ala5OYypoI/tVeYptA5x0z5LAHYA2ra/az+1tiKfm8K7XGvocJFxbLtR
hIU0vaQ9MEjX+6sAAAGLZSxhhgAABAMARzBFAiBvnDDF1TljCyoJ01Z7bgZNieSp
MsyCwISVYEmcvtr9/gIhANlxSsvyk3QhNUv20NygAfwzMFAbXlRAlJ8kaAs9y0YC
MA0GCSqGSIb3DQEBCwUAA4IBAQAmVRRjhWRisxOWtNAwku/qGuTm2qXdw8Azuvq6
hSr0KDycAZ8DqhXgjRh7u8BsYsswaFAyN1b3eh1Pzigpe61SmTxwrQgJfULRYEvH
tFcfG+M5LlwH93dC7zFG7OJxDU72qp7bkkdSsGk+V6eDJ1GQ9NRC50atmqZJ8x8f
/epmnadp44OlPdEtD/VIODWYYWDCLPVxckV+ZDdXukLMXTgq1Z5QdPC/IiqoFf8F
W6NCSXXLMWMN9sh2/6GQFn0pH04P5AZRQ3ID2/eNCtG5DfPiWXiAOSpGrsR9eCWF
sZNV8WsfQMVk3ppzgQKf84H1oSoO/dHx03znEsBZO76TWQxO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQotxbWBnFYOjmU6fvvp
SzkyKTtH+xc8sAT8Z+E7+DlBtY1wUYejbH+DIIVMEOBWmMfkB65OtllBstlR9aQh
kTMlsnJht7MBPxFuHwp80/nRc+EnUS+yd4eTzG2F8PJ6Wx++cZkyA8l2TcA14iHx
UPnIKOW9QTe8c28eMafabYrr+zwHTVzQNiGV5iO5EGseLhbYdDLSZTC0HHFP9+aF
ku/58wYDfSgRnWwILTCXhNEH3jjVy3SjQPkcxBE2wRl5lWwkDPwlzoBJWnI4e/6G
wkY3zdc+R3CjDT7ySjJhTh4dFRdsnuPQ476Wzg8YqEN3qjmY/Rl6xmavCuxsy9cn
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16481173361077156367297874198741354835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dispatchhealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20834339671791984474577140365568724983370424647013308694201796447301029594802734623597593770360313933423212004239776857952962352273209581102376789687580863029558466077506228707179027644520887520024565252524214231167266500062115930366439057587632310333368655541534844692124847966258485988481909579760193318952017317728100380643959622145690698343913398960927322783107888280503504810456621866631705929390272192708845801975702389680315983436251982496631494282377512663712021084847026005585384202136095996110605540166479679406917608391548260406027007020809329023035943400847157205785497895685955425940538625338753844455349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce55a167df5ae5184ebe3d2900443875fc63abdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dispatchhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.production.dispatch-health.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.production.dispatch-health.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispatchhealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b652c61e20000040300483046022100c90be983e96df08668b704feb0d64035302833934b0c658fc671cd017a31dfb3022100fa80fe00794ca1f6c8877617ca72583777c28b9c9e433dabfcca572b8a098ac300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b652c61a60000040300473045022100b9bec9fc4e9896ace0f12d3b3f13f5ea0efb3608a7444f2c2530f817e8d88b0e0220340ab8463d80d4f8371a1dc69f3a0256b9398ca9a08fed55e629b40e71d33e4b007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b652c6186000004030047304502206f9c30c5d539630b2a09d3567b6e064d89e4a932cc82c0849560499cbedafdfe022100d9714acbf2937421354bf6d0dca001fc3330501b5e5440949f24680b3dcb4602
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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