www.amazon.co.jp

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 01:ea:2e:15:ad:61:0c:64:52:28:84:69:23:aa:70:d5 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.amazon.co.jp

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:ea:2e:15:ad:61:0c:64:52:28:84:69:23:aa:70:d5
Serial Number (int): 2545160168973477336958179262614630613
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 68:0f:86:e6:e6:f6:1c:bf:4a:a1:73:c5:9d:59:c4:28:23:30:b0:89
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 14:6b:f8:60:c6:40:5f:ef:21:e7:bb:32:c7:de:3f:fe:1d:77:cc:bc
Fingerprint (sha256): 21:9a:f6:6b:65:04:6c:30:eb:22:41:0f:1d:12:41:18:42:10:90:01:95:ea:5c:f4:2c:83:19:2e:81:43:a3:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate www.amazon.co.jp

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.amazon.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amazon.co.jp
amazon.jp
match.amazonbrowserapp.jp
p-nt-www-amazon-co-jp-kalias.amazon.co.jp
p-y3-www-amazon-co-jp-kalias.amazon.co.jp
p-yo-www-amazon-co-jp-kalias.amazon.co.jp
static.amazon.co.jp
test-www.amazon.co.jp
www.amazon.co.jp
www.amazon.jp
www.cdn.amazon.co.jp

Other certificates including the domain name amazon.co.jp

(limited to 100 certificates)
alexa-skills.amazon.com.au
*.peg.a2z.com
completion.amazon.co.jp
authorcentral.amazon.co.jp
cde-ta-g7g.amazon.com
identity.browserapps.amazon.co.jp
primenow.amazon.co.jp
dcp.amazon.co.jp
skills-store-eu.amazon.com
dl.amazon.co.jp
dp-gw-na.amazon.com
nonprofitcentral.amazon.com
rcm-fe.assoc-amazon.com
dl.amazon.co.jp
ssofaast-aftx.amazon.co.jp
aeswidget.amazon.jp
aax-fe-retail-direct.amazon-adsystem.com
aan.amazon.co.jp
logistics.amazon.com
kdp.amazon.co.jp
argileto.amazon.com
payments-sandbox.amazon.co.jp
pitangui.amazon.com
*.peg.a2z.com
primenow.amazon.co.jp
fls-fe-opf.amazon.com
amazonux.com
ssofaast.amazon.co.jp
shm.amazon.co.jp
mt.amazon.co.jp
kindlestore-sha-proxy.amazon.com
brandservices.amazon.com
aftlite-portal-nrt.amazon.co.jp
kep.amazon.com
alexa-skills-beta.amazon.com.au
widgets.amazon.co.jp
kep.amazon.com
dp-gw-na.amazon.com
kdp.amazon.co.jp
www.amazon.co.jp
transportation.amazon.co.uk
stage-business.amazon.co.jp
fls-fe.amazon.com
chat.amazon.co.jp
r.amazon.co.jp
dropship.amazon.co.jp
identity.browserapps.amazon.co.jp
www22.amazon.co.jp
pitangui.amazon.com
thumbnails-photos.amazon.co.jp
advertising-api-fe.amazon.com
kep-eu.amazon.com
ramp.amazon.com
cde-ta-g7g-sha-proxy-preprod.amazon.com
cde-ta-g7g.amazon.com
manga.amazon.co.jp
account-p2k.amazon.com
aeswidget.amazon.jp
vdp.amazon.com
t200fe.api.cer.amazonvideo.com
webservices.amazon.co.jp
kindle-store-proxy-endpoint-na.amazon.com
aan.amazon.co.jp
*.peg.a2z.com
pay.amazon.co.jp
skills-store-eu.amazon.com
kdp.amazon.co.jp
kdp-eu.amazon.co.jp
skills-store-eu.amazon.com
documents.amazon.co.jp
akamai-renew-cert-digicert-arcus-www.amazon.com
dcp.amazon.co.jp
brandservices.amazon.com
cde-ta-g7g-preprod.amazon.com
api-sandbox.amazon.co.jp
ab.amazon.co.jp
ddee-preprod-jp.amazon.co.jp
rental-account.partnercentral-na.amazon.com
ddee-preprod.amazon.com
aax.online-panel.advertising.amazon.dev
hh2.amazon.co.jp
twitch.amazon.co.jp
cde-ta-g7g.amazon.com
kdp-eu.amazon.co.jp
www.amazon.co.jp
vdp.amazon.com
*.peg.a2z.com
transportation.amazon.co.jp
artistcentral.amazon.co.jp
kuato.amazon.co.jp
chat.amazon.co.jp
rcm-fe.assoc-amazon.com
msh.amazon.co.jp
brandservices.amazon.com
digprjsurvey.amazon.co.jp
sha256.webservices.amazon.co.jp
music-xray-service.amazon.co.jp
twitch.amazon.co.jp
transportation.amazon.co.uk
seller-central-pilot.amazon.co.jp

Certificate

The complete raw certificate details for www.amazon.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIQAeouFa1hDGRSKIRpI6pw1TANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMjQwNTAzMDAwMDAwWhcNMjUwNDEyMjM1
OTU5WjAbMRkwFwYDVQQDExB3d3cuYW1hem9uLmNvLmpwMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAsqbt/2RqKy436UjK74x6FEeDUNdbQk1+V5U9yJXt
08bOTMk7pY0k4kXb6tFVcUdGeus/g/0OlJHyH5yCY9OZKkhyKyvBJ/vG9jJpZmXc
+fSSNYm00PSCDdbIXw4qF8k33SsXQoyAVvoeN/U7ivTh064n42Y3jEMS8PjhfxMr
z3t8dsc0Im45LHOsy9zk/hSzPEZHgSn2xxm4JNeIjtXotfeTdBLMfQo6hOVKpky3
gIqwlylZ3oaAj2dndzp94sQIXoi8cDgFr7LoNpi7wyEIaVnD8HPEkiegHcOlrXao
9DlQkzuYMicLi28hrGSjazU0Fqd9DcQInZ7mQ5Tjv76mZwIDAQABo4IEXjCCBFow
HwYDVR0jBBgwFoAUJG4rLdBqklFRJWkBqppHponnQCAwHQYDVR0OBBYEFGgPhubm
9hy/SqFzxZ1ZxCgjMLCJMIIBJQYDVR0RBIIBHDCCARiCDGFtYXpvbi5jby5qcIIJ
YW1hem9uLmpwghltYXRjaC5hbWF6b25icm93c2VyYXBwLmpwgilwLW50LXd3dy1h
bWF6b24tY28tanAta2FsaWFzLmFtYXpvbi5jby5qcIIpcC15My13d3ctYW1hem9u
LWNvLWpwLWthbGlhcy5hbWF6b24uY28uanCCKXAteW8td3d3LWFtYXpvbi1jby1q
cC1rYWxpYXMuYW1hem9uLmNvLmpwghNzdGF0aWMuYW1hem9uLmNvLmpwghV0ZXN0
LXd3dy5hbWF6b24uY28uanCCEHd3dy5hbWF6b24uY28uanCCDXd3dy5hbWF6b24u
anCCFHd3dy5jZG4uYW1hem9uLmNvLmpwMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkw
JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMHcGA1UdHwRw
MG4wNaAzoDGGL2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2Jh
bENBRzIuY3JsMDWgM6Axhi9odHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNl
cnRHbG9iYWxDQUcyLmNybDB0BggrBgEFBQcBAQRoMGYwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsQ0FHMi5jcnQwDAYDVR0TAQH/
BAIwADCCAYEGCisGAQQB1nkCBAIEggFxBIIBbQFrAHcAzxFW7tUufK/zh1vZaS6b
6RpxZ0qwF+ysAdJbd87MOwgAAAGPPNVyswAABAMASDBGAiEAk6oS1R2I+eOVXVIm
kK5GVPPSWIkOUtZTYObPTt0pHSECIQDqfFvw2r3E+zfGLidqGzMERumKML4PfkzD
5EDEXGNZVgB3AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjzzV
cnIAAAQDAEgwRgIhAJrazdOMeP8bCBqocqyoB3k6RpcWKfeU+Ecdg8WJT6H2AiEA
pb4cKsK3WYxKKM+YN1CEA2Qt+ZM6z2LajUg0Veb7sBkAdwDm0jFjQHeMwRBBBtdx
uc7B0kD2loSG+7qHMh39HjeOUAAAAY881XKRAAAEAwBIMEYCIQCNCchG+huB2Rhe
HGFZZB4SsHQRbmXPmcJGVQHRgHNotAIhAPBp2kDN/rMxn3c8+Gt1C+7So8H4YKRO
+paCgU58AHr7MA0GCSqGSIb3DQEBCwUAA4IBAQBzCROKHjbdvYPQ949zvyQpyiPo
TvkU2injcTRtVWUDUXXlfCJAphdV/XWS3iOtUlxEdaKrCYzqTw6n9tLeckDwZ8aO
RsAURGkOnbb4vd8bYeGxeIU7j3ezYvucB8Dqvf+RnfHrPjO/Zlr7wW0cZ/ROzvbz
jOgE0Ju4bisczxFZJ/MxDX8h6qmtnVnzbuwImZFlOQ3HoO8IAx4VUQpZwLUpILF4
+Wc8wl639WJw5XgnJvaHNzQfFYvyKKRTT6wVAnTasgkVOjLJFzjBL4pwE3eb9so4
Ov29WZ+y6c4yuXl2xIYhufUxfav36zHsTun9fOkjbxLhd3NhRiFBZL5ayyG7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbt/2RqKy436UjK74x6
FEeDUNdbQk1+V5U9yJXt08bOTMk7pY0k4kXb6tFVcUdGeus/g/0OlJHyH5yCY9OZ
KkhyKyvBJ/vG9jJpZmXc+fSSNYm00PSCDdbIXw4qF8k33SsXQoyAVvoeN/U7ivTh
064n42Y3jEMS8PjhfxMrz3t8dsc0Im45LHOsy9zk/hSzPEZHgSn2xxm4JNeIjtXo
tfeTdBLMfQo6hOVKpky3gIqwlylZ3oaAj2dndzp94sQIXoi8cDgFr7LoNpi7wyEI
aVnD8HPEkiegHcOlrXao9DlQkzuYMicLi28hrGSjazU0Fqd9DcQInZ7mQ5Tjv76m
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2545160168973477336958179262614630613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.amazon.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22552734376254644351424245994161039487959490202844228602763457809003343397909881788592411515129219272753074897258488562260471174955017156216412273433928403207073201294643876346321195199720279327001701952485975588893963996592450467659435206968955464684587489483352983308027655361479195587445876887455529657231603580353768686843388602365894805597800501372774859888651195975308336494951612724907678420717019275831508007934335283196426014619698520091297029985423677932511402006468095049105899155266391364959482537296874259610543337129084631469883311573080894658862272861607373758299124048750931854839882801986882750031463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							680f86e6e6f61cbf4aa173c59d59c4282330b089
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'match.amazonbrowserapp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-nt-www-amazon-co-jp-kalias.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-y3-www-amazon-co-jp-kalias.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-yo-www-amazon-co-jp-kalias.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.amazon.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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