shop.panasonic.de

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:99:cf:8e:0f:59:3c:09:37:35:dc:f3:54:20:2d:b7 was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.panasonic.de

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:cf:8e:0f:59:3c:09:37:35:dc:f3:54:20:2d:b7
Serial Number (int): 4786315120647762224444158136486473143
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 18:8f:49:26:66:07:fd:43:a5:58:5f:40:fa:90:0c:4f:95:20:c5:ef
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c4:4c:fb:0d:cb:c9:d9:68:d1:e9:62:a1:e9:76:40:66:c7:d7:1b:65
Fingerprint (sha256): 24:06:b5:6d:fd:d0:17:d8:05:e7:af:97:18:f8:c6:02:ac:23:1e:c7:2d:79:86:94:e1:54:aa:4b:d7:81:6d:4a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate shop.panasonic.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.panasonic.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.panasonic.de
shop.panasonic.it
shop.panasonic.fr
panasonic-accessories.co.uk
www.panasonic-accessories.co.uk
shop.panasonic.es
panasonic-europe-service.com
shop.panasonic.eu
shop.panasonic.be
pas-europe.com
panasonic-ebiz.com
shop.panasonic.pl
shop.panasonic.nl
shop.panasonic.at
shop.panasonic.se

Other certificates including the domain name panasonic.de

(limited to 100 certificates)
uat-partner.panasonic.de
seccas.panasonic.de
www.lumixgexperience.panasonic.de
www.experience.panasonic.de
panasonic.de
experience.panasonic.de
partner.panasonic.de
as.prdcg.panasonic.de
showroom.eu.panasonic.com
www.pase.panasonic.de
sni.cloudflaressl.com
partner2.panasonic.de
showroom.eu.panasonic.com
100-jahre.panasonic.de
panasonic.eu
partner.panasonic.de
100-jahre.panasonic.de
www.lumixgexperience.panasonic.de
business.panasonic.de
aircon.panasonic.de
pideu.panasonic.de
shop.panasonic.de
shop.panasonic.de
jira.pase.panasonic.de
partner.panasonic.de
shop.panasonic.de
aircon.panasonic.de
shop.panasonic.de
lumixgexperience.panasonic.de
aircon.panasonic.de
unavailable.panasonic.eu
unavailable.panasonic.eu
lumixexperience.panasonic.co.uk
panasonicpartnerportal.com
partner.panasonic.de
sps.pase.panasonic.de
pideu.panasonic.de
lumixgexperience.panasonic.de
www.lumixgexperience.panasonic.de
shop.panasonic.de
panasonic.de
pideu.panasonic.de
aircon.panasonic.de
experience.panasonic.de
partner2.panasonic.de
pideu.panasonic.de
panasonic.de
jira.pase.panasonic.de
pideu.panasonic.de
panasonic.de
partner.panasonic.de
aircon.panasonic.de
aircon.panasonic.de
*.panasonic.de
shop.panasonic.de
seccas.panasonic.de
unavailable.panasonic.eu
aircon.panasonic.de
www.experience.panasonic.de
unavailable.panasonic.eu
jira.pase.panasonic.de
shop.panasonic.de
shop.panasonic.de
www.experience.panasonic.de
www.lumixgexperience.panasonic.de
panasonic.de
www.generation-freedom.com
partner.panasonic.de
www.lumixgexperience.panasonic.de
jira.pase.panasonic.de
aircon.panasonic.de
panasonic.de
shop.panasonic.de
pideu.panasonic.de
shop.panasonic.de
aircon.panasonic.de
www.pase.panasonic.de
partner.panasonic.de
www.pase.panasonic.de
panasonic.de
business.panasonic.eu
www.lumixgexperience.panasonic.de
shop.panasonic.de
panasonic.de
showroom.eu.panasonic.com
*.panasonic.de
partner.panasonic.de
partner2.panasonic.de
panasonic.de
www.generation-freedom.com
partner2.panasonic.de
business.panasonic.ie
shop.panasonic.de
business.panasonic.ie
sm.panasonic.de
panasonic.de
unavailable.panasonic.eu
www.pase.panasonic.de
partner.panasonic.de
partner.panasonic.de

Certificate

The complete raw certificate details for shop.panasonic.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIQA5nPjg9ZPAk3NdzzVCAttzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDIxMDAwMDAwMFoXDTIzMTAyMjIzNTk1OVowHDEa
MBgGA1UEAxMRc2hvcC5wYW5hc29uaWMuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVmvVFcNdWCiquhVCNRvUk65zsAjgDHyZK47T85ep1XPyIYXbn
NpAEAYVjqUWDF29t1qx45jHTg4ESQHQ3SPzDtTPBCAS+hay0HqcgXzATeNzhOPgo
GfMkIlY5Cn0I/hn/KqfqptI66ol38PsYjjeIFaT2w9ausVE3qfPBuIRtGjIdXjU8
1SIfuNJS4kAcP3GF4dGAHWRJHyufUigICznsiVVd0a474/ZaxKHZgWfCwL8SR/jJ
NcOuP1T/frpHH8YZzX9fdodrXC8zi3tcJ2gF08PWcC+7uwclKFnM81TIu8Y9Bgv4
NrSLjb+/AtFdVCAHKN+6a1KL3WvlXDxUhtN3AgMBAAGjggQZMIIEFTAfBgNVHSME
GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUGI9JJmYH/UOlWF9A
+pAMT5Ugxe8wggFLBgNVHREEggFCMIIBPoIRc2hvcC5wYW5hc29uaWMuZGWCEXNo
b3AucGFuYXNvbmljLml0ghFzaG9wLnBhbmFzb25pYy5mcoIbcGFuYXNvbmljLWFj
Y2Vzc29yaWVzLmNvLnVrgh93d3cucGFuYXNvbmljLWFjY2Vzc29yaWVzLmNvLnVr
ghFzaG9wLnBhbmFzb25pYy5lc4IccGFuYXNvbmljLWV1cm9wZS1zZXJ2aWNlLmNv
bYIRc2hvcC5wYW5hc29uaWMuZXWCEXNob3AucGFuYXNvbmljLmJlgg5wYXMtZXVy
b3BlLmNvbYIScGFuYXNvbmljLWViaXouY29tghFzaG9wLnBhbmFzb25pYy5wbIIR
c2hvcC5wYW5hc29uaWMubmyCEXNob3AucGFuYXNvbmljLmF0ghFzaG9wLnBhbmFz
b25pYy5zZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9u
dHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEF
BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRy
dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVz
dC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIB
bASCAWgBZgB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhjj6
JLQAAAQDAEYwRAIgRCK4Di6xGtAh9pbRmLoSPSXkMU8/L5purnG45jMCbCMCIBJx
Ow40Eht47h2eH8aaCRbMRmNlfEThvvbeszNEfiU6AHYAs3N3B+GEUPhjhtYFqdwR
CUp5LbFnDAuH3PADDnk2pZoAAAGGOPok6wAABAMARzBFAiAvlZa1OtkO6S6qDXVo
KJmSyunx21GFC7CLOTWIpZGNRAIhAKG13XrW1Bm1HJQxCRXmQvHgPDcLYpCcD+Fg
aJVtRgXoAHUArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGGOPok
8gAABAMARjBEAiAFa/SbKwQN70RGnNGS6x72+mllAc4asPDzeM/CexaKyAIgMFig
Do1DCsgoNI4fXzFjkYHdLMnOEB04ms6wrbN9kJwwDQYJKoZIhvcNAQELBQADggEB
AEFf8CEgjQdN6jVqwhPxBVACIdu2XnWAokPKXsSfaThykLGj0oX0lvH8llCqVOGv
zWcOm3H4YtTGjFNj6uREY4WCtItZpOY1DNSj1lp3CtK04Dt7NEj3L88aboLa6RvN
hpVPmJDPdcKPsGVEY2tvvtVh/4Gq/Kz91btYyGQZSRhLbbxLIIHqXHJt7s3Hwhiv
7d8YypCgdv0RGxAKgXurDFy1/nxIGRU142ZNlsY7dK8p2v4Q80ecjro1Nh8mLBQo
uxFQepFUah7aflZghM2N1tcNlZ6+yc8ZAfHAhquDHaMajdQlgJ6tH0pRgIE1v1jI
sr/++u/e9YlFwrS7PdOYq3s=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZr1RXDXVgoqroVQjUb1
JOuc7AI4Ax8mSuO0/OXqdVz8iGF25zaQBAGFY6lFgxdvbdaseOYx04OBEkB0N0j8
w7UzwQgEvoWstB6nIF8wE3jc4Tj4KBnzJCJWOQp9CP4Z/yqn6qbSOuqJd/D7GI43
iBWk9sPWrrFRN6nzwbiEbRoyHV41PNUiH7jSUuJAHD9xheHRgB1kSR8rn1IoCAs5
7IlVXdGuO+P2WsSh2YFnwsC/Ekf4yTXDrj9U/366Rx/GGc1/X3aHa1wvM4t7XCdo
BdPD1nAvu7sHJShZzPNUyLvGPQYL+Da0i42/vwLRXVQgByjfumtSi91r5Vw8VIbT
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4786315120647762224444158136486473143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.panasonic.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18885920122471822214634567560867537454374819036927801968360560669467684052805358842559641934527063680061551152801579014332026337691758814120018677671813812523344906767740146659909962132703890633012820839029401119299975110951007952641105336211464932708261116435235593776058533191982182826144670399416082280171017264647284653250473175995420345623728067394137480460985510698815784956067135878770686149152376734203860194608564998752245466582647965473486049439887970916218199327263421721039881464038065543186340543469940822742054991032700879252279991471299102912728403282697219372234601096347505305583843810806189164778359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							188f49266607fd43a5585f40fa900c4f9520c5ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panasonic-accessories.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panasonic-accessories.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panasonic-europe-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pas-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panasonic-ebiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.panasonic.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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