origin.lexis.production.ln-production.brightspot.cloud

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 09:a6:b7:a2:86:fa:e0:17:16:28:2b:31:cc:d9:68:1e was issued on by Amazon.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=origin.lexis.production.ln-production.brightspot.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:a6:b7:a2:86:fa:e0:17:16:28:2b:31:cc:d9:68:1e
Serial Number (int): 12828697798275100815908344993716725790
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 80:ea:ee:99:06:a6:36:77:93:e7:4a:ac:cc:92:27:80:87:a3:56:79
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 92:6c:a0:9d:5a:88:2e:3d:82:7f:7a:8e:f4:1d:ac:a8:07:07:04:ee
Fingerprint (sha256): 23:4b:3b:a3:d8:c9:a3:24:57:e0:7c:b1:91:25:55:36:10:21:72:26:f1:e0:be:44:32:92:2d:b3:d7:87:b6:bf

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate origin.lexis.production.ln-production.brightspot.cloud

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin.lexis.production.ln-production.brightspot.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin.lexis.production.ln-production.brightspot.cloud
*.lexis.production.ln-production.brightspot.cloud
lexis.production.ln-production.brightspot.cloud
*.origin.lexis.production.ln-production.brightspot.cloud
verify.cms.lexis.production.ln-production.brightspot.cloud
*.content.aws.lexis.com
cms.lexis.production.ln-production.brightspot.cloud
*.cms.lexis.production.ln-production.brightspot.cloud
verify.origin.lexis.production.ln-production.brightspot.cloud
*.content.aws.lexisnexis.com
static.lexis.production.ln-production.brightspot.cloud

Other certificates including the domain name brightspot.cloud

(limited to 100 certificates)
origin.ser.production.k1.amazon.brightspot.cloud
origin.uat.lower.google-marketing.brightspot.cloud
entertainment.production.k1.amazon.brightspot.cloud
origin.relay-qa.lower.k1.amazon.brightspot.cloud
origin.kpbs.kpbs.production.k3.m1.brightspot.cloud
cms.6amcity.com
origin.ajga-uat.ajga.lower.k1.m1.brightspot.cloud
amazon-hvh.lower.k3.m1.brightspot.cloud
static.amazon-hvh.lower.k3.m1.brightspot.cloud
origin.acertus.production.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
origin.medtech.production.jnj.brightspot.cloud
origin.web.production.hca.brightspot.cloud
intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.wwe-prod.production.k2.m1.brightspot.cloud
origin.jobs.production.amazon-jobs.brightspot.cloud
www.nbcsportsathletedirect.com
static.church-qa.church.lower.church.brightspot.cloud
origin.epe-uat.epe.lower.k2.m1.brightspot.cloud
lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
fastmarkets.com
origin.deseret.production.chorus.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.farm-journal-qa.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.web.production.teaching-strategies.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.intsys.inter-systems.production.k2.m1.brightspot.cloud
amazon-last-mile.lower.k3.m1.brightspot.cloud
origin.vpm.production.k1.m1.brightspot.cloud
static.biospace.production.k1.m1.brightspot.cloud
bsp.elpais.com.uy
origin.vpm.production.k1.m1.brightspot.cloud
origin.carrick.production.k1.m1.brightspot.cloud
cms.6amcity.com
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.chalkbeat.production.chorus.brightspot.cloud
cms.6amcity.com
cms.6amcity.com
origin.marriott-news.production.k1.m1.brightspot.cloud
origin.ei.energy-intelligence.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
*.dispatchhealth.com
origin.chopra.chopra.production.k2.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.notmusa.production.k3.m1.brightspot.cloud
science-qa2.topics.lower.k1.amazon.brightspot.cloud
origin.im-qa.lower.jnj.brightspot.cloud
origin.rfdtv.k1.go.brightspot.cloud
static.web.production.forum-communications.brightspot.cloud
origin.aji.production.k2.m1.brightspot.cloud
origin.notmusa.production.k3.m1.brightspot.cloud
verify.origin.prod-news.production.ap.brightspot.cloud
castle-qa.castle-connolly.lower.k2.m1.brightspot.cloud
origin.qa.lower.google-marketing.brightspot.cloud
sustainability.production.k1.amazon.brightspot.cloud
static.uat.lower.google-marketing.brightspot.cloud
origin.in-investor-qa2.lower.k2.m1.brightspot.cloud
static.acertus.production.k1.m1.brightspot.cloud
origin.lexis.production.ln-production.brightspot.cloud
origin.deseret-qa2.lower.chorus.brightspot.cloud
static.pay.production.k1.amazon.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.church-qa.church.lower.church.brightspot.cloud
origin.pay.production.k1.amazon.brightspot.cloud
origin.sixam-city.production.k1.m1.brightspot.cloud
origin.realtymogul.k1.go.brightspot.cloud
epe-uat.epe.lower.k2.m1.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
origin.farm-journal.production.k1.m1.brightspot.cloud
origin.torridon.production.k2.m1.brightspot.cloud
origin.church-perf.church.lower.church.brightspot.cloud
costar-qa.costar.lower.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
fastmarkets.com
costar-uat.costar.lower.k1.m1.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud
origin.torridon.production.k2.m1.brightspot.cloud
cdn.fastmarkets.com
gbh.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.costar-uat.costar.lower.k1.m1.brightspot.cloud
cms.6amcity.com
origin.jobs.production.amazon-jobs.brightspot.cloud
static.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
sixam-city.production.k1.m1.brightspot.cloud
origin.castle-qa.castle-connolly.lower.k2.m1.brightspot.cloud
science.topics.production.k1.amazon.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
lehigh-v-uat.lehigh-valley.lower.k1.m1.brightspot.cloud
origin.deseret.production.chorus.brightspot.cloud
origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
familysearch-zion.production.church.brightspot.cloud
origin.web.production.afar-media.brightspot.cloud
origin.medtech-uat.lower.jnj.brightspot.cloud
dispatchhealth.com

Certificate

The complete raw certificate details for origin.lexis.production.ln-production.brightspot.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgIQCaa3oob64BcWKCsxzNloHjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDgwOTAwMDAwMFoXDTI0MDkwNjIzNTk1OVowQTE/
MD0GA1UEAxM2b3JpZ2luLmxleGlzLnByb2R1Y3Rpb24ubG4tcHJvZHVjdGlvbi5i
cmlnaHRzcG90LmNsb3VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
5Sbt4NeosZS4+EbfKq2elBperg6avImxow5VxiSixocHRLVKJeMKRVoEKFPQvFeJ
5nzcNjs4LdJya5aUD1A3+RPMWl75WvV48PQfNMnth1W1BE2VFUmogEyI/lK5DD7v
koioUqeSx1hahxRi4Q7+qoh0x2SUIDhnZ8UvTBctiXv7fsT6qfpAFe2ue4AAtpXw
Tnkn0Pcvfj/6xkdgppRPZ0NOZxoFyhRDf5kg07LkEkXgnjvWL+TkHGyniia70hpw
ygfV+/PCH41yJHmzztTGYXm4MmyRGEH6IWpPSMeJ7QZo+ZU6XSXkrJhoN2qRm2wK
C6WY9wFGtyHUU5dco3yeBQIDAQABo4IDnDCCA5gwHwYDVR0jBBgwFoAUgbgOY4qJ
Ehjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFIDq7pkGpjZ3k+dKrMySJ4CHo1Z5MIIC
OQYDVR0RBIICMDCCAiyCNm9yaWdpbi5sZXhpcy5wcm9kdWN0aW9uLmxuLXByb2R1
Y3Rpb24uYnJpZ2h0c3BvdC5jbG91ZIIxKi5sZXhpcy5wcm9kdWN0aW9uLmxuLXBy
b2R1Y3Rpb24uYnJpZ2h0c3BvdC5jbG91ZIIvbGV4aXMucHJvZHVjdGlvbi5sbi1w
cm9kdWN0aW9uLmJyaWdodHNwb3QuY2xvdWSCOCoub3JpZ2luLmxleGlzLnByb2R1
Y3Rpb24ubG4tcHJvZHVjdGlvbi5icmlnaHRzcG90LmNsb3Vkgjp2ZXJpZnkuY21z
LmxleGlzLnByb2R1Y3Rpb24ubG4tcHJvZHVjdGlvbi5icmlnaHRzcG90LmNsb3Vk
ghcqLmNvbnRlbnQuYXdzLmxleGlzLmNvbYIzY21zLmxleGlzLnByb2R1Y3Rpb24u
bG4tcHJvZHVjdGlvbi5icmlnaHRzcG90LmNsb3VkgjUqLmNtcy5sZXhpcy5wcm9k
dWN0aW9uLmxuLXByb2R1Y3Rpb24uYnJpZ2h0c3BvdC5jbG91ZII9dmVyaWZ5Lm9y
aWdpbi5sZXhpcy5wcm9kdWN0aW9uLmxuLXByb2R1Y3Rpb24uYnJpZ2h0c3BvdC5j
bG91ZIIcKi5jb250ZW50LmF3cy5sZXhpc25leGlzLmNvbYI2c3RhdGljLmxleGlz
LnByb2R1Y3Rpb24ubG4tcHJvZHVjdGlvbi5icmlnaHRzcG90LmNsb3VkMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJt
MDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr
BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsG
AQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5j
ZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAkLrz0Jz/+nTRvsvAdoM23NZloMWjkmU/4AeOlRpkJLYcR+npHCV2
zrMjkUVgVy798YbSQKu7/wcpzLx5OJRyLxxpDxALnNuhOvAp4xfvBZsRBceROby+
Hqgh4CrUaHhiBXBND/Pp4QV4wgRP+nI3RK6jnpDA2ZezC4X921A4n1fDZgBrj1Qm
8Cuti/6DTJYt9JsE7QuAqnvRq9FbGXewkvxkn0VmG9J0qA4n56/cES5SW5v9javz
6CepEs5q35DMRNJu4gFFW0wxxzWMXK0z0Td3oCe8MuAUU8y+JFA/8KnPS0VmE9G1
//ssE5cMyhkodA1fpmDVhjN4f02ptaLkrA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sbt4NeosZS4+EbfKq2e
lBperg6avImxow5VxiSixocHRLVKJeMKRVoEKFPQvFeJ5nzcNjs4LdJya5aUD1A3
+RPMWl75WvV48PQfNMnth1W1BE2VFUmogEyI/lK5DD7vkoioUqeSx1hahxRi4Q7+
qoh0x2SUIDhnZ8UvTBctiXv7fsT6qfpAFe2ue4AAtpXwTnkn0Pcvfj/6xkdgppRP
Z0NOZxoFyhRDf5kg07LkEkXgnjvWL+TkHGyniia70hpwygfV+/PCH41yJHmzztTG
YXm4MmyRGEH6IWpPSMeJ7QZo+ZU6XSXkrJhoN2qRm2wKC6WY9wFGtyHUU5dco3ye
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12828697798275100815908344993716725790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28927768547171811169191383748922562214988007675005395365017558139005360387205499740245189699611535420673362641287834777805381228474756882499891546752846045633626974769004877253536677899176288179863678554332985584995353743329075614750914636165779867357847670346137989978045006310442743919255229867666715556266224788551930956473622120673857238244896806741325560622601398846526085683693911744058161214048613792330521158852875166707427819647461993232047546761900133590973671408302651464016504099347047105141824164677391205956266404063952969775306105802652334714021080857448927369772620712790786115042972559321107275750917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80eaee9906a6367793e74aaccc92278087a35679
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.cms.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.aws.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.origin.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.aws.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lexis.production.ln-production.brightspot.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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