ci-usw2.oregon.delivery.aimatch.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:4a:8a:c5:8c:d4:0e:bd:2c:04:56:95:bf:c4:05:fc was issued on by Amazon.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ci-usw2.oregon.delivery.aimatch.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:4a:8a:c5:8c:d4:0e:bd:2c:04:56:95:bf:c4:05:fc
Serial Number (int): 11020868557868486719818480210829116924
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a7:99:1b:6c:9a:fa:4a:07:97:51:51:0d:79:fe:e1:cd:e0:ce:0c:c9
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 32:23:18:39:f9:aa:1d:b8:7c:dd:de:20:c0:60:8d:ab:6a:ed:27:72
Fingerprint (sha256): 23:78:9c:b8:da:ee:da:05:23:35:2e:cb:7e:16:d6:cf:e1:c1:1f:17:87:6c:de:a0:3a:02:9e:d8:0d:e1:7d:18

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ci-usw2.oregon.delivery.aimatch.net

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-usw2.oregon.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-usw2.oregon.delivery.aimatch.net
delivery-ci360.nature.org
delivery-ci360-prod.movistar.cl
delivery-ci360.triosmartbreath.com
delivery-ci360-dev.movistar.cl
delivery-ci360-test.frankfurt-airport.com
delivery-ci360-nonprod.uscellular.com
cidlvr.movistar.com.co
delivery.mktg.sas.com
delivery-ci360.movistar.com.ec
delivery-ci360.hometrust.ca
delivery-ci360.aeromexicorewards.com
delivery-ci360-dev.movistar.com.pe
delivery-360-cicolusp.cxtrvl.com
delivery-ci360.nop.movistar.com.ec
usincm-delivery.mktg.sas.com
delivery-ci360.drf.com
delivery-ci360.three.com.hk
delivery-ci360.digitalalchemy.mx
delivery-ci360.sky.com.br
delivery-ci360.movistar.com.uy
delivery-test-ci360.nature.org
delivery-ci360.movistar.com.mx
delivery-ci360-prod.movistar.com.pe
delivery-ci360.nop.movistar.com.ar
testdelivery-ci360.three.com.hk
delivery-ci360.clubpremier.com
delivery-ci360.rogersbank.com
delivery-ci360.test.hometrust.ca
cidlvr.produbanco.com
delivery-ci360.movistar.com.ar
delivery-ci360.carnival.com
delivery-ci360.orlandomagic.com
delivery-ci360.antel.com.uy
delivery-ci360.lojavirtualtim.com.br
delivery-ci360.munvodemo.com
delivery-ci360.coppel.com
delivery-ci360.worldwildlife.org
delivery-ci360-dev.rogersbank.com
delivery-ci360.myviejasrewards.com
delivery-ci360.blog.uniderp.com.br
delivery-ci360.uscellular.com

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
tngcibyokst.oregon-cassandra.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-usw2.oregon.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJsTCCCJmgAwIBAgIQCEqKxYzUDr0sBFaVv8QF/DANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDMyNjAwMDAwMFoXDTI1MDQyNDIzNTk1OVowLjEs
MCoGA1UEAxMjY2ktdXN3Mi5vcmVnb24uZGVsaXZlcnkuYWltYXRjaC5uZXQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Lt0rpxoyCxeeiKPRWtDdR4Qu
BRyv+52hD0j0lTJ4IWgQVf2hWrlQmqGyaP4/zQ1uGYIzbSFGfJwPxEiS3BfUQPIi
qeyu+W2Im/RwmzICbebJFjsBxg2901m1HglTZPyV4WhT0Yyu41Ao2QMuaK9LmH7b
hFY1dGl5VmViMycZv1RQl8BTTlR2gA1ovUeEtOVX3VxvMrpIpKkFkp6NR8m8430+
qHsKiwPCxQ2Mu4LQEBNi+kO0aqJfXlYSWri7zUfL8YOkRz5Y931+BWR9u8l81nhe
vh3DhLkBkt8XMlOATFJU02AkN+wTFWXy6JxlBHBmx0GkDgiwzpGuFht5Du37AgMB
AAGjgga7MIIGtzAfBgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNV
HQ4EFgQUp5kbbJr6SgeXUVENef7hzeDODMkwggVYBgNVHREEggVPMIIFS4IjY2kt
dXN3Mi5vcmVnb24uZGVsaXZlcnkuYWltYXRjaC5uZXSCGWRlbGl2ZXJ5LWNpMzYw
Lm5hdHVyZS5vcmeCH2RlbGl2ZXJ5LWNpMzYwLXByb2QubW92aXN0YXIuY2yCImRl
bGl2ZXJ5LWNpMzYwLnRyaW9zbWFydGJyZWF0aC5jb22CHmRlbGl2ZXJ5LWNpMzYw
LWRldi5tb3Zpc3Rhci5jbIIpZGVsaXZlcnktY2kzNjAtdGVzdC5mcmFua2Z1cnQt
YWlycG9ydC5jb22CJWRlbGl2ZXJ5LWNpMzYwLW5vbnByb2QudXNjZWxsdWxhci5j
b22CFmNpZGx2ci5tb3Zpc3Rhci5jb20uY2+CFWRlbGl2ZXJ5Lm1rdGcuc2FzLmNv
bYIeZGVsaXZlcnktY2kzNjAubW92aXN0YXIuY29tLmVjghtkZWxpdmVyeS1jaTM2
MC5ob21ldHJ1c3QuY2GCJGRlbGl2ZXJ5LWNpMzYwLmFlcm9tZXhpY29yZXdhcmRz
LmNvbYIiZGVsaXZlcnktY2kzNjAtZGV2Lm1vdmlzdGFyLmNvbS5wZYIgZGVsaXZl
cnktMzYwLWNpY29sdXNwLmN4dHJ2bC5jb22CImRlbGl2ZXJ5LWNpMzYwLm5vcC5t
b3Zpc3Rhci5jb20uZWOCHHVzaW5jbS1kZWxpdmVyeS5ta3RnLnNhcy5jb22CFmRl
bGl2ZXJ5LWNpMzYwLmRyZi5jb22CG2RlbGl2ZXJ5LWNpMzYwLnRocmVlLmNvbS5o
a4IgZGVsaXZlcnktY2kzNjAuZGlnaXRhbGFsY2hlbXkubXiCGWRlbGl2ZXJ5LWNp
MzYwLnNreS5jb20uYnKCHmRlbGl2ZXJ5LWNpMzYwLm1vdmlzdGFyLmNvbS51eYIe
ZGVsaXZlcnktdGVzdC1jaTM2MC5uYXR1cmUub3Jngh5kZWxpdmVyeS1jaTM2MC5t
b3Zpc3Rhci5jb20ubXiCI2RlbGl2ZXJ5LWNpMzYwLXByb2QubW92aXN0YXIuY29t
LnBlgiJkZWxpdmVyeS1jaTM2MC5ub3AubW92aXN0YXIuY29tLmFygh90ZXN0ZGVs
aXZlcnktY2kzNjAudGhyZWUuY29tLmhrgh5kZWxpdmVyeS1jaTM2MC5jbHVicHJl
bWllci5jb22CHWRlbGl2ZXJ5LWNpMzYwLnJvZ2Vyc2JhbmsuY29tgiBkZWxpdmVy
eS1jaTM2MC50ZXN0LmhvbWV0cnVzdC5jYYIVY2lkbHZyLnByb2R1YmFuY28uY29t
gh5kZWxpdmVyeS1jaTM2MC5tb3Zpc3Rhci5jb20uYXKCG2RlbGl2ZXJ5LWNpMzYw
LmNhcm5pdmFsLmNvbYIfZGVsaXZlcnktY2kzNjAub3JsYW5kb21hZ2ljLmNvbYIb
ZGVsaXZlcnktY2kzNjAuYW50ZWwuY29tLnV5giRkZWxpdmVyeS1jaTM2MC5sb2ph
dmlydHVhbHRpbS5jb20uYnKCHGRlbGl2ZXJ5LWNpMzYwLm11bnZvZGVtby5jb22C
GWRlbGl2ZXJ5LWNpMzYwLmNvcHBlbC5jb22CIGRlbGl2ZXJ5LWNpMzYwLndvcmxk
d2lsZGxpZmUub3JngiFkZWxpdmVyeS1jaTM2MC1kZXYucm9nZXJzYmFuay5jb22C
ImRlbGl2ZXJ5LWNpMzYwLm15dmllamFzcmV3YXJkcy5jb22CImRlbGl2ZXJ5LWNp
MzYwLmJsb2cudW5pZGVycC5jb20uYnKCHWRlbGl2ZXJ5LWNpMzYwLnVzY2VsbHVs
YXIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0
cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0
LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAq9kUatUm/HuVeJ5msBJK4YjQ1uTP88AVkAF/
y4XF6bVMjj3Ecxq5AtpgjQaxJPcwx3vB0g48+cGp6G7ywAAOoQfjPBLZx7G0lXRa
aJDiInkfgfMWJzGE1co+iosFnVWNaYAdH3RpkJbYmQSeLpIH/WC8XZgKRobZECMx
56DPWcnoTf3kZ92VXALLlRru8XvfwuKFt9EEsuJ+7Ia8OTdHoB7L0Q/HH7837xz+
HdHmYNRMK2mhOdcTQkkEkvltLG6c8pVNhxXdh0rUOKVjyZ7MsI9CwF206lelC8Ym
k7xoKtUlT/0L7yulwhHQSHpnu8H+4vhayxhGWqivao9fnCS47Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS7dK6caMgsXnoij0VrQ
3UeELgUcr/udoQ9I9JUyeCFoEFX9oVq5UJqhsmj+P80NbhmCM20hRnycD8RIktwX
1EDyIqnsrvltiJv0cJsyAm3myRY7AcYNvdNZtR4JU2T8leFoU9GMruNQKNkDLmiv
S5h+24RWNXRpeVZlYjMnGb9UUJfAU05UdoANaL1HhLTlV91cbzK6SKSpBZKejUfJ
vON9Pqh7CosDwsUNjLuC0BATYvpDtGqiX15WElq4u81Hy/GDpEc+WPd9fgVkfbvJ
fNZ4Xr4dw4S5AZLfFzJTgExSVNNgJDfsExVl8uicZQRwZsdBpA4IsM6RrhYbeQ7t
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11020868557868486719818480210829116924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23882149112319330859423843098142324015642192084551136731874266779893799372799147137565367145189407086614060198153349561513937740911925165326344090436137000947309574649011081551990388707720294817029866065849494348095702027883805959245484379567706782980623816377992070933533997950296441968462445650328547979456469518338172432723950981281143175375059600137701576153224383037571173980205946367309795979955905120001511914670057718480225679298374443196189951650041042056163611526658559147351887269223299983039988041644952681692297750484955055113268719512723063682031563076613742412430656535746558257277822556766649157873147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7991b6c9afa4a079751510d79fee1cde0ce0cc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1359 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-usw2.oregon.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.triosmartbreath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-test.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.movistar.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.aeromexicorewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-delivery.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.drf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.digitalalchemy.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.sky.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-prod.movistar.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.nop.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testdelivery-ci360.three.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.hometrust.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cidlvr.produbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.carnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.orlandomagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.antel.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.lojavirtualtim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.munvodemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.rogersbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.myviejasrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.blog.uniderp.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00abd9146ad526fc7b95789e66b0124ae188d0d6e4cff3c01590017fcb85c5e9b54c8e3dc4731ab902da608d06b124f730c77bc1d20e3cf9c1a9e86ef2c0000ea107e33c12d9c7b1b495745a6890e222791f81f316273184d5ca3e8a8b059d558d69801d1f74699096d899049e2e9207fd60bc5d980a4686d9102331e7a0cf59c9e84dfde467dd955c02cb951aeef17bdfc2e285b7d104b2e27eec86bc393747a01ecbd10fc71fbf37ef1cfe1dd1e660d44c2b69a139d71342490492f96d2c6e9cf2954d8715dd874ad438a563c99eccb08f42c05db4ea57a50bc62693bc682ad5254ffd0bef2ba5c211d0487a67bbc1fee2f85acb18465aa8af6a8f5f9c24b8ed