dg-0066-5dceb1a.client-tls.adestra.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:1d:36:c0:f5:aa:51:37:66:0f:32:46:0a:08:1a:96 was issued on by Amazon.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dg-0066-5dceb1a.client-tls.adestra.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:1d:36:c0:f5:aa:51:37:66:0f:32:46:0a:08:1a:96
Serial Number (int): 8127055121562533496780155152713128598
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e9:ef:c5:03:56:6a:0f:e9:91:da:da:3d:23:76:d6:bf:69:62:24:24
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 9f:8f:97:49:1b:a2:a5:40:46:a1:0d:ec:c6:c0:ee:4c:55:e3:0a:28
Fingerprint (sha256): 1a:a7:ee:b9:ea:55:51:db:53:49:66:9b:8b:5e:4f:69:05:03:a6:2a:9c:f3:4e:2f:e8:1b:80:cb:f9:c8:18:de

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate dg-0066-5dceb1a.client-tls.adestra.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dg-0066-5dceb1a.client-tls.adestra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dg-0066-5dceb1a.client-tls.adestra.com
e-news.fm-world.co.uk
event.cipfaannualconference.org.uk
email.publicfinance.co.uk
event.cqiconference.org
email.thechemicalengineer.com
event.publicfinanceawards.co.uk
mail.iemaawards.net
email.theactuaryjobs.com
mail.rcmconference.org.uk
email.cpoagenda.com
mail.iwfmimpactawards.co.uk
event.rec-awards.com
email.theactuary.com
event.publicfinancelive.org
email.redactive.co.uk
e-news.facilitatemagazine.com
e-news.thebiomedicalscientist.net
recruitment-matters.rec.uk.com
jobsemail.cibsejournal.com
email.ioshmagazine.com
email.recruiter.co.uk
e-news.theactuary.com
newsletter.iema-transform.net
email.theplanner.co.uk
event.rcmawards.com
email.ifst.org

Other certificates including the domain name adestra.com

(limited to 100 certificates)
statuspage.io
www.adestra.com
adestra.com
*.adestra.com
statuspage.io
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
prostatus.whitepages.com
dg-0109-77cf551.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
dg-0070-c174270.client-tls.adestra.com
dg-0150-2354af7.client-tls.adestra.com
dg-0067-b4f0d23.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dg-0008-7ca737e.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
apac-status.cayuse.com
statuspage.io
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0123-38b8329.client-tls.adestra.com
dg-0002-02ce7f1.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0004-127170c.client-tls.adestra.com
statuspage.io
dg-0085-edb0cc1.client-tls.adestra.com
statuspage.io
dg-0149-55938d1.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0087-960804b.client-tls.adestra.com
prostatus.whitepages.com
dg-0013-b3d7a9c.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0125-dc75dcd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0134-2e87d88.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
statuspage.io
prostatus.whitepages.com
prostatus.whitepages.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0102-ddf9d6b.client-tls.adestra.com
statuspage.io
dg-0026-6664b28.client-tls.adestra.com
dg-0109-77cf551.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0105-2d8a3ed.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0113-21a1b55.client-tls.adestra.com
statuspage.io
statuspage.io
prostatus.whitepages.com
dg-0031-fc95c30.client-tls.adestra.com
statuspage.io
statuspage.io
dg-0133-2f5a5bb.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0098-f0d9eae.client-tls.adestra.com
dg-0154-9db8122.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0144-e509e47.client-tls.adestra.com
statuspage.io
dg-0146-7cb0364.client-tls.adestra.com
statuspage.io

Certificate

The complete raw certificate details for dg-0066-5dceb1a.client-tls.adestra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WJDV9s9jb/58hNI75jX
doER4UYaX7daEaR75r+dGnhZfXhkA7zpWDdcG7XSIYie4TMu9KH3wKSrU37vOvO6
AWoF/CfxMJeWIZKmhhhgC2W+J3sKluAMSnUyeN/16ortKG0hOotIC97CIGpB8JB6
WH7s2guiuFl3j1t4LsfSyrFtWnlqbhNinL9E847u7lVADNrZeEB73u0zkEpG4Kxd
QOAGCx8hCVfoRDpCOBE3EY8RhIqF3OPKUN+9vX0ljQlUZqDbniHyA4a84US+7Gpt
gOgS27HULUmP/P804h6aXhgN8w7L1mQ+yRYz4JqquwoC5+VLUcZ4/Zmd9XEZaq4v
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8127055121562533496780155152713128598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dg-0066-5dceb1a.client-tls.adestra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28452073937874522333490113133974734553130594954011803544587975976312932638987972454675664606650510652585214247052080326653333319071497622484497716419312647031902567131949169733311439002821046962834069925150387813889361943508184143548671249277706640858162883212723622800837583701860403663499856790107748533327756209319543097027982467804579697073095002790222596521489157118527972778255008152340588703733373835819979931145014429608438369991799729809715783953842568650159136981912744988141807956895837063575568061402854253832727530323392412157087897289489294082904708796659613970222893952163566000970650855305032227499793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9efc503566a0fe991dada3d2376d6bf69622424
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (727 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dg-0066-5dceb1a.client-tls.adestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.fm-world.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cipfaannualconference.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.publicfinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cqiconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thechemicalengineer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.publicfinanceawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iemaawards.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.theactuaryjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rcmconference.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.cpoagenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iwfmimpactawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.rec-awards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.theactuary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.publicfinancelive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.redactive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.facilitatemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.thebiomedicalscientist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment-matters.rec.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsemail.cibsejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.ioshmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.recruiter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.theactuary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.iema-transform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.theplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.rcmawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.ifst.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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