premiumchange-api.pcu.conncen.c1.statefarm

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:57:79:f2:02:ef:26:b6:82:54:56:01:58:b8:a9:ba was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=premiumchange-api.pcu.conncen.c1.statefarm

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:57:79:f2:02:ef:26:b6:82:54:56:01:58:b8:a9:ba
Serial Number (int): 9758799142872397525255380516264782266
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b7:66:3b:61:1f:56:97:fb:cb:39:90:85:74:68:7b:ba:de:6e:20:2d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e5:fc:49:53:3a:91:97:2a:56:1a:19:db:aa:ea:45:e6:f9:8e:a9:25
Fingerprint (sha256): 1b:22:bc:61:31:99:35:80:3a:f1:a2:a3:62:5a:ab:e9:a1:4e:e0:80:9c:fc:26:37:d5:5e:4b:b0:15:d7:8f:40

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate premiumchange-api.pcu.conncen.c1.statefarm

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premiumchange-api.pcu.conncen.c1.statefarm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premiumchange-api.pcu.conncen.c1.statefarm

Other certificates including the domain name c1.statefarm

(limited to 100 certificates)
repaireligibility-1733283.claims.test.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
rentaleligibility-1713142.claims.test.c1.statefarm
status-guidance.claims.c1.statefarm
test.driveforsafety.test.goodneighbors.com
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
ocd.research.c1.statefarm
driveforsafety.whs.c1.statefarm
fireqfcapi.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1490984.claims.test.c1.statefarm
mediadownload-bus.claimsvc.test.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
repaireligibility-1727262.claims.test.c1.statefarm
roadsideassistance.claims.test.statefarm.com
rentaleligibility-1298191.claims.test.c1.statefarm
*.tl1.c1.statefarm
api.claims.sandbox.c1.statefarm
rentaleligibility-perf.claims.test.c1.statefarm
claimprefexp.claims.sandbox.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
info-exp.claimsvc.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
api.infosec.c1.statefarm
*.oic.claims.test.c1.statefarm
arsondog.whs.research.c1.statefarm
photovideocapture.claims.test.statefarm.com
api.infosec.c1.statefarm
manage-tasks.claimsvc.test.c1.statefarm
rentaleligibility-1290042.claims.test.c1.statefarm
repaireligibility-1490984.claims.test.c1.statefarm
media-mfe.claims.sandbox.c1.statefarm
providers.rental.claimsvc.c1.statefarm
telematics.aa.enrollment.test10.tl1.test.c1.statefarm
driveforsafety.whs.c1.statefarm
checkout.hub.claims.statefarm.com
cornhole-api.xrhost.c1.statefarm
managestorage.claimsvc.sandbox.test.c1.statefarm
qualfc-env4.claims.sandbox.test.c1.statefarm
nachuntar.xrhost.test.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
repaireligibility-1735606.claims.test.c1.statefarm
rentaleligibility-1743787.claims.test.c1.statefarm
facade-env4.ecrmclaims.amccint.test.c1.statefarm
roadsideassistance.claims.statefarm.com
sf-aqua-security.research.c1.statefarm
uimod-mfe.dcpm-sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
cornhole-api.xrhost.c1.statefarm
media-mfe.claims.c1.statefarm
driveforsafety.whs.test.c1.statefarm
api.rapid-reimbursement.claims.s.test.c1.statefarm
photovideocapture.claims.test.c1.statefarm
repaireligibility-1297024.claims.test.c1.statefarm
api.infosec.c1.statefarm
prepsub-exp.claims.sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
manage-tasks.claimsvc.sandbox.test.c1.statefarm
rentaleligibility-1292675.claims.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
media-mfe.claims.sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
sf-aqua-security.research.c1.statefarm
rentaleligibility-1740151.claims.test.c1.statefarm
repaireligibility-1730977.claims.test.c1.statefarm
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
gnc-virtualmeeting.amccint.c1.statefarm
rss.claims.test.c1.statefarm
mddl-dev.c1.statefarm
digitalqfc.claims.test.c1.statefarm
rentaleligibility-1736987.claims.test.c1.statefarm
ocd.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
assignments.rental.claimsvc.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
premiumchange-api.pcu.conncen.c1.statefarm
driveforsafety.whs.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
ingest-vaaei8.sfconnect.digxp.test.c1.statefarm
datalake.test.c1.statefarm
inbound-communication.edeliver.test.c1.statefarm
driveforsafety.whs.c1.statefarm
driveforsafety.whs.test.c1.statefarm
dev.armapi.test.c1.statefarm
rental-exp-rest.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1706942.claims.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
auth-utl.claimsvc.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
rentaleligibility-1290880.claims.test.c1.statefarm
my-neighborhood.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
facade.ecrmclaims.amccint.c1.statefarm
towexperienceapi-exp.claimsvc.test.c1.statefarm
env1.autoquotebuy.pcmngd01.test.c1.statefarm
api.claims.test.c1.statefarm
repaireligibility-1733275.claims.test.c1.statefarm

Certificate

The complete raw certificate details for premiumchange-api.pcu.conncen.c1.statefarm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIQB1d58gLvJraCVFYBWLipujANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIwODAwMDAwMFoXDTI1MDEwNTIzNTk1OVowNTEz
MDEGA1UEAxMqcHJlbWl1bWNoYW5nZS1hcGkucGN1LmNvbm5jZW4uYzEuc3RhdGVm
YXJtMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NeGABaBd28DeWJX
fWiwnTji3YADAlpBdG4E0eI7eYivwai2HCtvR3B/rqOlLOgHsbkjGweJoF97tzUN
LfYUQZ95UOtMOO+dWQ4KYmT1hlK0jKdvp0FHMckTvIdkb46OMCAZTpCfT0pTcJMk
CdpRy0VyyMOLidY6AeTg1V8IzKesfHOqG64krDXJMR4by7u4WxalcWkn+KEcd22G
CrukkMm9aGsIkDjCiQq4nZEVNadvuXNZmy9a4bTHDzNUsZ/3Nxup8cJNhHBUFoF/
o31Ryy1AsQnJFDmpZnicoX7xrKQiSYdVUouIytyiIUexv6DqG+kBJvcVF4Q/rI47
zOHPTQIDAQABo4IBljCCAZIwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+Xrr
guIwHQYDVR0OBBYEFLdmO2EfVpf7yzmQhXRoe7rebiAtMDUGA1UdEQQuMCyCKnBy
ZW1pdW1jaGFuZ2UtYXBpLnBjdS5jb25uY2VuLmMxLnN0YXRlZmFybTATBgNVHSAE
DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIu
YW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF
BQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2Vy
MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL
BQADggEBAJKezPC9jdT2gjJJh05zECmetYZ267iNC5PuR9dySBkloHZckjyIF215
I89GFP4I3iXCZOgk6uTci8q2jD/etgHeRWHtV7qmQ0W2yZ+hi1xlhCZ5wU0D1doG
iajTmkGkDQA0Pqu7lQ+TyrjEVA57l67YphZcbKUvXNzDn06JYTuHeiQeFld+DQpS
JrxUl3T/o+CnjvwTRuQDBHmILyKA1eBovm+kngXl8fDzP4pR+Cq3vrqFsaIj7wgd
ezYxEXoz0KimH3HamK/qSSoL6y14m+yQTRcVNyA5PqQ17HkNxFpyCOVW/UGRuLKS
ECRHnIMcxk3RIP1PBfdZ6bP/YFFm72s=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NeGABaBd28DeWJXfWiw
nTji3YADAlpBdG4E0eI7eYivwai2HCtvR3B/rqOlLOgHsbkjGweJoF97tzUNLfYU
QZ95UOtMOO+dWQ4KYmT1hlK0jKdvp0FHMckTvIdkb46OMCAZTpCfT0pTcJMkCdpR
y0VyyMOLidY6AeTg1V8IzKesfHOqG64krDXJMR4by7u4WxalcWkn+KEcd22GCruk
kMm9aGsIkDjCiQq4nZEVNadvuXNZmy9a4bTHDzNUsZ/3Nxup8cJNhHBUFoF/o31R
yy1AsQnJFDmpZnicoX7xrKQiSYdVUouIytyiIUexv6DqG+kBJvcVF4Q/rI47zOHP
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9758799142872397525255380516264782266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premiumchange-api.pcu.conncen.c1.statefarm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28383658881146350683397206220297931177474898165550052250881174717437003414664850038331802464065396233595994333713660322377944661992098244939456790073464668637406350167165002877195210223016308434505394602999605000192735388228039030279103148854919149888221617164144749259206629783889995161254580079755004738597776330020569680604963837598424739236792629801770406424979146650706627554296489682100456987201191144891480911749486953868346124607867411508818449332134635319813626090376683116983371620125604479332125898708065476496214230247380670445461052577716593197297808251861573451057387953418134950847470665319569093152589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7663b611f5697fbcb39908574687bbade6e202d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumchange-api.pcu.conncen.c1.statefarm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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