slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:a6:d4:ca:6d:3b:90:06:da:c6:50:7c:67:95:1d:61 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:a6:d4:ca:6d:3b:90:06:da:c6:50:7c:67:95:1d:61
Serial Number (int): 12829289149311699119098645970702114145
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:f0:9d:33:18:b5:94:60:2d:06:7f:cc:51:c7:d9:a7:6b:03:6b:85
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0c:f7:7a:8c:98:64:55:56:6a:9b:6e:7c:f9:92:92:2e:58:75:da:c8
Fingerprint (sha256): 20:59:6b:a7:91:f8:9d:51:d8:b6:c9:f5:35:d1:63:16:e8:f7:d2:02:02:9c:94:91:11:7f:fb:e7:a8:02:b5:36

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com
rmks.ghostenv-yegor.dev.area9lyceum.com
mks.ghostenv-yegor.dev.area9lyceum.com
ts.ghostenv-yegor.dev.area9lyceum.com
scorm.ghostenv-yegor.dev.area9lyceum.com

Other certificates including the domain name area9lyceum.com

(limited to 100 certificates)
slow-no-cdn.martin-ghost1.dev.area9lyceum.com
martin-ghost1.dev.area9lyceum.com
status.site24x7.jp
jenkins.area9lyceum.com
rhapsode.dev.area9lyceum.com
*.curator.rhapsode.com
eu.rhapsode.com
area9lyceum.com
offers.area9lyceum.com
area9lyceum.com
elb.rhapsode.area9lyceum.com
ar.area9lyceum.com
offers.area9lyceum.com
eu.area9lyceum.com
jenkins.area9lyceum.com
ar.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.dev2.area9lyceum.com
*.curator.rhapsode.com
rhapsode.qa.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
rhapsode.covid.area9lyceum.com
slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com
area9lyceum.com
status.area9lyceum.com
eu.rhapsode.dev2.area9lyceum.com
slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
offers.area9lyceum.com
area9lyceum.com
usdev.area9innovation.com
rhapsode.qa.area9lyceum.com
blog.area9lyceum.com
amccinema-ksa.status.vistamanaged.services
ghostenv-yegor.dev.area9lyceum.com
git.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.area9lyceum.com
rhapsode.dev2.area9lyceum.com
rhapsode.covid.area9lyceum.com
rhapsode.dev.area9lyceum.com
usdev.area9innovation.com
git.area9lyceum.com
jenkins.area9lyceum.com
rhapsode.covid.area9lyceum.com
slow-no-cdn.martin-ghost1.dev.area9lyceum.com
help.area9lyceum.com
blog.area9lyceum.com
area9lyceum.com
rhapsode.dev.area9lyceum.com
area9lyceum.com
eu.rhapsode.com
slow-no-cdn.martin-ghost.dev.area9lyceum.com
eu.rhapsode.qa.area9lyceum.com
rhapsode.qa.area9lyceum.com
rhapsode.dev.area9lyceum.com
area9lyceum.com
area9lyceum.com
rhapsode.dev.area9lyceum.com
patnl.status.app.vista.co
eu.rhapsode.com
area9lyceum.com
status.site24x7.jp
area9lyceum.com
usdev.area9innovation.com
eu.rhapsode.com
rhapsode.area9lyceum.com
rhapsode.dev.area9lyceum.com
status.site24x7.jp
blog.area9lyceum.com
blog.area9lyceum.com
blog.area9lyceum.com
help.area9lyceum.com
*.curator.rhapsode.com
offers.area9lyceum.com
ghostenv-yegor.dev.area9lyceum.com
area9lyceum.com
ar.area9lyceum.com
rhapsode.dev2.area9lyceum.com
usdev.area9innovation.com
martin-ghost.dev.area9lyceum.com
rhapsode.qa.area9lyceum.com
jenkins.area9lyceum.com
eu.rhapsode.dev.area9lyceum.com
martin-ghost.dev.area9lyceum.com
help.area9lyceum.com
git.area9lyceum.com
rhapsode.area9lyceum.com
area9lyceum.com
area9lyceum.com
jenkins.area9lyceum.com
rhapsode.area9lyceum.com
blog.area9lyceum.com
rhapsode.area9lyceum.com
offers.area9lyceum.com
curator.rhapsode.com
ar.area9lyceum.com
ris.rhapsode.covid.area9lyceum.com

Certificate

The complete raw certificate details for slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIQCabUym07kAbaxlB8Z5UdYTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDYwMzAwMDAwMFoXDTI1MDcwMjIzNTk1OVowOTE3
MDUGA1UEAxMuc2xvdy1uby1jZG4uZ2hvc3RlbnYteWVnb3IuZGV2LmFyZWE5bHlj
ZXVtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALN1hzBSuesu
b9FSdDYogwOxsYWRUCP08QYuHBXWzc37gvJnYTgaO1IGnCxtDOpjZSlnrRi2hGpQ
i/LTaDKJATe7ASvXH9VfLUyXbYi6gDELbrFHsrX+wPbiPAhwCH63awt5TqaqPqUF
Cte1ckcsJOZEH3/tqT59SbTYa0INpYXHXnrzz3xod37+gkZvnGb4GItAMsZ40J1z
fRxfFVAzZkOLpkgbBufTcrFL6/UQk/o/uUBjztFdUqcK10s1Bkec+uFRf8XukHVi
ehV0E4mQ2FB9ujhPduh2lW4sMw+Un88pM+MMm/gl/69ZPsUl5vfMxySkR7UmDOAh
cMFeum/Z8xkCAwEAAaOCAj8wggI7MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvp
nPl664LiMB0GA1UdDgQWBBRr8J0zGLWUYC0Gf8xRx9mnawNrhTCB3QYDVR0RBIHV
MIHSgi5zbG93LW5vLWNkbi5naG9zdGVudi15ZWdvci5kZXYuYXJlYTlseWNldW0u
Y29tgidybWtzLmdob3N0ZW52LXllZ29yLmRldi5hcmVhOWx5Y2V1bS5jb22CJm1r
cy5naG9zdGVudi15ZWdvci5kZXYuYXJlYTlseWNldW0uY29tgiV0cy5naG9zdGVu
di15ZWdvci5kZXYuYXJlYTlseWNldW0uY29tgihzY29ybS5naG9zdGVudi15ZWdv
ci5kZXYuYXJlYTlseWNldW0uY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJt
MDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
cjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIy
bTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0beX4pY3648bkvY
3utomBJp+rTfbJBqbkWpkQVWXwXHCHg/gpIdzDLmEJ+6Uujq11VviPdgTRRCfoEr
5hwRm7JuESX2lDHWxtewg3n8jJG/yQ4lMteamGP3VMimEZ9baHRFEEm1FUC/QE0j
yqbJd90O6XfPQCLDKe5g02Re3/VXEMJVOfDdp6I0Qev8pyUkQO+NJorCFgR5E9se
upEyT03QfdEgocI53tq5Zo3FH1eWhzw7DnGcAraglT6IUvkND8AJydZR3jIr7uqx
WES1vD7iO2CepKeGrGa/qXk6cOLHiT5QgKwlbbcMIHI6agUpzztg9ENv+kSFCtqb
QByhbg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3WHMFK56y5v0VJ0NiiD
A7GxhZFQI/TxBi4cFdbNzfuC8mdhOBo7UgacLG0M6mNlKWetGLaEalCL8tNoMokB
N7sBK9cf1V8tTJdtiLqAMQtusUeytf7A9uI8CHAIfrdrC3lOpqo+pQUK17VyRywk
5kQff+2pPn1JtNhrQg2lhcdeevPPfGh3fv6CRm+cZvgYi0AyxnjQnXN9HF8VUDNm
Q4umSBsG59NysUvr9RCT+j+5QGPO0V1SpwrXSzUGR5z64VF/xe6QdWJ6FXQTiZDY
UH26OE926HaVbiwzD5Sfzykz4wyb+CX/r1k+xSXm98zHJKRHtSYM4CFwwV66b9nz
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12829289149311699119098645970702114145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22654611845738258219359354423456544313397278494589454589219756889160087373995692810055333279092735521153530255777934309675616632952289068949357531789131426257450014290398439217573976200942240208963149414670472140318587067611282156643299561362344567874218719715281120986476668716300563471414788294530153320313356853464978386885899486684274979658261628987475575770199011416903492819762332523701185999807057162301373921366732451193940743609411583218475857067437041040469471641187804738412065285181042591582820355798309225087667658799856526995420029121757643251370162344275160584039930347076565118242530623519919523361561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bf09d3318b594602d067fcc51c7d9a76b036b85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slow-no-cdn.ghostenv-yegor.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmks.ghostenv-yegor.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mks.ghostenv-yegor.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.ghostenv-yegor.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorm.ghostenv-yegor.dev.area9lyceum.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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