ci-usw2.oregon.delivery.aimatch.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:fc:aa:a1:25:dc:62:e7:9a:b4:fa:4c:cb:2b:23:ee was issued on by Amazon.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ci-usw2.oregon.delivery.aimatch.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:fc:aa:a1:25:dc:62:e7:9a:b4:fa:4c:cb:2b:23:ee
Serial Number (int): 2641147581219854123789914127309939694
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5f:df:30:a1:77:f7:de:b4:fa:26:05:05:50:f8:14:6a:db:38:b0:04
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 64:82:22:46:b3:61:55:53:c7:ea:c3:69:b6:b8:48:89:d0:9c:92:ff
Fingerprint (sha256): 20:fe:e6:3e:d3:a1:7a:f8:85:3e:8d:2d:c2:fc:3d:c5:b5:20:86:58:46:25:f2:66:74:3a:41:d8:1b:2b:16:03

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ci-usw2.oregon.delivery.aimatch.net

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-usw2.oregon.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-usw2.oregon.delivery.aimatch.net
delivery-ci360.nature.org
delivery-ci360-prod.movistar.cl
delivery-ci360.triosmartbreath.com
delivery-ci360-dev.movistar.cl
delivery-ci360-test.frankfurt-airport.com
delivery-ci360-nonprod.uscellular.com
delivery.mktg.sas.com
cidlvr.movistar.com.co
delivery-ci360.movistar.com.ec
delivery-ci360.hometrust.ca
delivery-ci360.aeromexicorewards.com
delivery-ci360-dev.movistar.com.pe
delivery-ci360.nop.movistar.com.ec
delivery-360-cicolusp.cxtrvl.com
delivery-ci360.three.com.hk
delivery-ci360.drf.com
usincm-delivery.mktg.sas.com
delivery-ci360.digitalalchemy.mx
delivery-ci360.sky.com.br
delivery-ci360.movistar.com.uy
delivery-test-ci360.nature.org
delivery-ci360.movistar.com.mx
delivery-ci360-prod.movistar.com.pe
delivery-ci360.nop.movistar.com.ar
testdelivery-ci360.three.com.hk
delivery-ci360.clubpremier.com
delivery-ci360.rogersbank.com
delivery-ci360.test.hometrust.ca
cidlvr.produbanco.com
delivery-ci360.movistar.com.ar
delivery-ci360.carnival.com
delivery-ci360.lojavirtualtim.com.br
delivery-ci360.antel.com.uy
delivery-ci360.orlandomagic.com
delivery-ci360.munvodemo.com
delivery-ci360.coppel.com
delivery-ci360.worldwildlife.org
delivery-ci360-dev.rogersbank.com
delivery-ci360.myviejasrewards.com
delivery-ci360.blog.uniderp.com.br
delivery-ci360.uscellular.com

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
tweety.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
daffy.oregon.delivery.dev.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
tngcibyokst.oregon-cassandra.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
tngcicmkst.oregon-cassandra.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-usw2.oregon.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnRBxxHG+mGGxch+Su2l
2QZfl4265ymnjb6kE+C/6bWhMEtfXBJlxFR3Zl0PY29oyFw/QTWayavjTp6Xbc6A
QleJqiu0Tvd6hi8XlPpDgaJI6iJxdfEsFRUcbTRNc1CFp197rzLFDpM+ZhcZDOuc
f+slDrhYosdo0gp1GtNRaAbcbs2YG9fvTKT6iRfDUssnVruFOuAD9/AmleLsa9wc
5QoHzMvyR3bC4EeP0CieFmAXZpPbkEuiYTwG7u6IzURJdfKwmiKs4O0nrIt1n1o+
4wtAGlsbuYugQa6ioiMedFNuxx9/4i9bgBem+NY4cBjRLmfo807yg65Gm8YFJZHu
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2641147581219854123789914127309939694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22022793499746293433845016788429824221123014090998910247109931457638919278367796483639437138658382004887820554635427824373716308097785754692950363294193030773784886978806017606851766759921737239163737859144108284458112771100137905613212761134176705188517632972092831987412718221199575161641075628608706839896126400050628133617505576366453180316096087347196170885866320588065323697454368046682004379285865691130886531994896243140884312638741731129953612185358581251812524928910201459377608572159045730038588518481919570631724158173847396911931021593322726128950591611370714769716451708409228999814931409743845855981151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fdf30a177f7deb4fa26050550f8146adb38b004
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1359 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.triosmartbreath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-test.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.movistar.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.aeromexicorewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.drf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.digitalalchemy.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.sky.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdelivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.produbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.carnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.lojavirtualtim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.antel.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.orlandomagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.munvodemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.myviejasrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.blog.uniderp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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