ci-usw2.oregon.delivery.aimatch.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:c4:2f:bc:97:46:7a:27:06:72:14:5c:48:d2:88:b4 was issued on by Amazon.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ci-usw2.oregon.delivery.aimatch.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:c4:2f:bc:97:46:7a:27:06:72:14:5c:48:d2:88:b4
Serial Number (int): 7664798378160768028910920178225809588
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e2:f5:7f:92:3c:d8:38:6d:d2:fe:77:f0:c2:16:8d:ce:7f:81:c2:e8
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 06:47:c6:f7:30:6b:33:83:bc:ee:3a:4e:8c:2b:b8:8e:78:f2:5e:c3
Fingerprint (sha256): 1f:7c:60:31:fa:35:a4:07:3d:6f:c2:7a:ab:c7:0a:10:14:67:0c:ce:aa:63:a1:bd:fe:c7:97:b0:6f:c3:51:6c

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate ci-usw2.oregon.delivery.aimatch.net

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-usw2.oregon.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-usw2.oregon.delivery.aimatch.net
delivery-ci360.nature.org
delivery-ci360-prod.movistar.cl
delivery-ci360.triosmartbreath.com
delivery-ci360-dev.movistar.cl
delivery-ci360-test.frankfurt-airport.com
delivery-ci360-nonprod.uscellular.com
cidlvr.movistar.com.co
delivery.mktg.sas.com
delivery-ci360.movistar.com.ec
delivery-ci360.18f-cloud.com
delivery-ci360.hometrust.ca
delivery-ci360.aeromexicorewards.com
delivery-ci360-dev.movistar.com.pe
delivery-360-cicolusp.cxtrvl.com
delivery-ci360.nop.movistar.com.ec
usincm-delivery.mktg.sas.com
delivery-ci360.three.com.hk
delivery-ci360.digitalalchemy.mx
delivery-ci360.sky.com.br
delivery-ci360.movistar.com.uy
delivery-test-ci360.nature.org
delivery-ci360.movistar.com.mx
delivery-ci360-prod.movistar.com.pe
testdelivery-ci360.three.com.hk
delivery-ci360.nop.movistar.com.ar
delivery-ci360.clubpremier.com
delivery-ci360.rogersbank.com
delivery-ci360.test.hometrust.ca
cidlvr.produbanco.com
delivery-ci360.movistar.com.ar
delivery-ci360.carnival.com
delivery-test-ci360.18f-cloud.com
delivery-ci360.orlandomagic.com
delivery-ci360.lojavirtualtim.com.br
delivery-ci360.antel.com.uy
delivery-ci360.munvodemo.com
delivery-ci360.coppel.com
delivery-ci360.worldwildlife.org
delivery-ci360-dev.rogersbank.com
delivery-ci360.myviejasrewards.com
delivery-ci360.blog.uniderp.com.br
delivery-ci360.uscellular.com

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-usw2.oregon.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4C19S3R56RyUS/DvUlx
2TveIgbpkwqhZ6Ldvf1gs1qyVU8FGi3WUSWsgForDC05OwyhhdPfRbhZ+0aZsJ4E
wlKBTF0BBbXjdVKktNUvU0tUgoP+PUFzs+BStLR9cWM72al5m5Egg6hfL+8jp+hC
jkrfFQxrz/GIJBMXlrHc8bUjbp+DTVe0+OL0UxxEw2PfyxsmnO/+TFQ1Aqj/y//M
CM2fyfce7hZuw28JykAlMbz77vyfhUe5vMDbkvSNviLxrsETsGFA4Cj4DPHQ23CM
jgYU7u1FeTh2lrDgSPWKta/Av0ZhNDZrZ77GmjapZD1C2wE6gIEendlgx5uBz3FX
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7664798378160768028910920178225809588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22660126236333395912098750627668931352269763219323278604576368812537115468545357523402293497814584321699408216338353429537767778816031882540383346712015166607301381611278190854984041368856117614106924411540033186500040922809845398099215065252975893242187298179163908624692251522102928994776692921085128261075105815339794499466456692264751239078919115196497554666543228986734471005889366984787691775119932338764935932171560464806066064147885823078132760065007096107155499230877400104794794976010674405758534813255548826233687317371109650449891569082719602480772058021436658207976481962314891684412352081255203024754589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2f57f923cd8386dd2fe77f0c2168dce7f81c2e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1400 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.triosmartbreath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-test.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.movistar.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.18f-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.aeromexicorewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.digitalalchemy.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.sky.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdelivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.produbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.carnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.18f-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.orlandomagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.lojavirtualtim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.antel.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.munvodemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.myviejasrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.blog.uniderp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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