jwplayer.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:9a:c7:a8:2d:d8:b8:3c:c6:00:26:9c:f0:b4:ab:b7 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jwplayer.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:9a:c7:a8:2d:d8:b8:3c:c6:00:26:9c:f0:b4:ab:b7
Serial Number (int): 14095943198094774718157074762541870007
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:41:3a:c2:ae:a6:8b:31:1c:ba:1f:df:31:f9:ee:29:80:3d:1a:eb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 24:4e:dc:df:e2:c0:34:3e:28:d3:0b:4e:7d:33:0d:6c:e4:94:0a:c1
Fingerprint (sha256): 26:e1:0f:0c:86:de:67:be:2a:38:69:e1:43:73:19:69:e3:75:1a:7f:79:0b:51:43:89:81:87:3c:23:ca:ed:7b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate jwplayer.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jwplayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jwplayer.com
vualto.com
videoplayerbidding.com
openvideoads.co.uk
jwplatform.com
*.jwplayer.com
jwshowcase.com
*.jeroenwijering.com
longtailvideo.com
*.videoplayerbidding.com
*.vualto.com
openvideoads.com
bitsontherun.com
*.longtailvideo.com
jwstation.com
*.jwstation.com
jeroenwijering.com
*.openvideoads.com
*.bitsontherun.com
*.jwplatform.com
*.jwshowcase.com
*.openvideoads.co.uk

Other certificates including the domain name jwplayer.com

(limited to 100 certificates)
statuspage.io
vicksot.com
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net
jwplayer.com
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
jwplayer.com
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
www.wekick.app
appstatus.dancecapsules.merce.broadleafclients.com
releases.jwplayer.com
yuiki.jp
info.jwplayer.com
a3.shared.global.fastly.net
status.affirm.com
a3.shared.global.fastly.net
support.jwplayer.com
developer.jwplayer.com
beta-developer.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
supportfeedback.jwplayer.com
*.jwplayer.com
statuspage.io
*.jwplayer.com
hivebloom.com
jwplayer.com
intellocator.com
jwplayer.map.fastly.net
a3.shared.global.fastly.net
statuspage.io
developer.jwplayer.com
statuspage.io
info.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
grimtictac.co.za
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
a3.shared.global.fastly.net
jwplatform.com
api.test.boost.jwplayer.com
statuspage.io
statuspage.io
jwplayer.com
a3.shared.global.fastly.net
hook-dev.jwplayer.com
hook-dev.jwplayer.com
statuspage.io
jwplayer.com
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
a3.shared.global.fastly.net
yofardev.fr
a3.shared.global.fastly.net
newenanalytics.uy
statuspage.io
jwplayer.com
jwplayer.com
blucubemedia.com
a3.shared.global.fastly.net
arteycreaciones.com.co
statuspage.io
a3.shared.global.fastly.net
demos.jwplayer.com
api.test.boost.jwplayer.com
api.test.boost.jwplayer.com
statuspage.io
statuspage.io
lockdown.gaborcs.com
releases.jwplayer.com
a3.shared.global.fastly.net
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
signatures.jwplayer.com
statuspage.io
statuspage.io
demos.jwplayer.com
releases.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
sl.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net

Certificate

The complete raw certificate details for jwplayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIQCprHqC3YuDzGACac8LSrtzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDEyNDAwMDAwMFoXDTI1MDIyMjIzNTk1OVowFzEV
MBMGA1UEAxMMandwbGF5ZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApvX7gUkCN2xZTRQynIFXqRJKUjC4fE21x9pim/n0FQyLut1KdJ/idG8B
MD5MTXYDsTyn69aAlLkvOfcXfwh0/ailkcVav2y8nhwvzMvmiG3K8rYPZscPVLnq
0FTuULWAyZGirLAU+rG00ebn+S2uytcetthAkeO+/4aEevGrbpOf88C8cV+VMUN3
oC9VKfNE0kpSBDaJZXsMiHmU0tL6TYmvvytB+F+BLPAOWg08+cotpVQ0lHwoeUwu
QWzh4BRzDbWVWieGtlL1kaGGDQ27SDp25bxN/GPOJqd/I9gPipl4eyH6b7fc5/E2
6oMQOxZ2nsB3RiC7E8OOc7SqUtxwQwIDAQABo4IDBjCCAwIwHwYDVR0jBBgwFoAU
wDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFMZBOsKuposxHLof3zH57imA
PRrrMIIBowYDVR0RBIIBmjCCAZaCDGp3cGxheWVyLmNvbYIKdnVhbHRvLmNvbYIW
dmlkZW9wbGF5ZXJiaWRkaW5nLmNvbYISb3BlbnZpZGVvYWRzLmNvLnVrgg5qd3Bs
YXRmb3JtLmNvbYIOKi5qd3BsYXllci5jb22CDmp3c2hvd2Nhc2UuY29tghQqLmpl
cm9lbndpamVyaW5nLmNvbYIRbG9uZ3RhaWx2aWRlby5jb22CGCoudmlkZW9wbGF5
ZXJiaWRkaW5nLmNvbYIMKi52dWFsdG8uY29tghBvcGVudmlkZW9hZHMuY29tghBi
aXRzb250aGVydW4uY29tghMqLmxvbmd0YWlsdmlkZW8uY29tgg1qd3N0YXRpb24u
Y29tgg8qLmp3c3RhdGlvbi5jb22CEmplcm9lbndpamVyaW5nLmNvbYISKi5vcGVu
dmlkZW9hZHMuY29tghIqLmJpdHNvbnRoZXJ1bi5jb22CECouandwbGF0Zm9ybS5j
b22CECouandzaG93Y2FzZS5jb22CFCoub3BlbnZpZGVvYWRzLmNvLnVrMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w
Mi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr
BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsG
AQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j
ZXIwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B
AQsFAAOCAQEACuba+makg4BR8gm7sQT9n4LX8LGnZ0p98W8cSHOUCSumtJ4Baq0U
9iMShuLqvIeSfcOLwzrLRuK5cIse2qvXjzDr0dKCQJhmTTe9z+8l0rRhZL3KsMbR
iQTIrwDj6IeAS/BXqSelRCiIdepKcQv4mFxrEpzhIxYGGPLIwZhUR0/1lz4jR22C
sRY+0ASaFdvHHvaKZbPnpl+wFLSo2E3aPul5MR2hVQWle9D6ywnceebOgqeMjOfF
dx677uDcgRitYj7rCCRIeMd76j9v1vlvqE18McurfrwCbCWk7RKsXnYh3nu6OEUq
4QuZkTvb4F0N05RGut54guZEvwrWl5NQug==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvX7gUkCN2xZTRQynIFX
qRJKUjC4fE21x9pim/n0FQyLut1KdJ/idG8BMD5MTXYDsTyn69aAlLkvOfcXfwh0
/ailkcVav2y8nhwvzMvmiG3K8rYPZscPVLnq0FTuULWAyZGirLAU+rG00ebn+S2u
ytcetthAkeO+/4aEevGrbpOf88C8cV+VMUN3oC9VKfNE0kpSBDaJZXsMiHmU0tL6
TYmvvytB+F+BLPAOWg08+cotpVQ0lHwoeUwuQWzh4BRzDbWVWieGtlL1kaGGDQ27
SDp25bxN/GPOJqd/I9gPipl4eyH6b7fc5/E26oMQOxZ2nsB3RiC7E8OOc7SqUtxw
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14095943198094774718157074762541870007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jwplayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21076857087117821823741606917399740061699571253123817537694232092697519179037224633443250345158596835461846545819658391318549722207569809877164277170400559149581812306752224516856096126496586603966431678768402289762253681178038688134123439022003309484031476362762024157788470964522121255479872714727911947760101147803888032169769295953984374623293510655404020722579070914240880480957225363858040857843311506246330534718365828534829070566760614200251020444270823215153282551480975099471650281058889600354133682453441602736757115464444358242434965750758304863170915090033046017929900920912128128072947028613651928739907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6413ac2aea68b311cba1fdf31f9ee29803d1aeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (410 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vualto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayerbidding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvideoads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwshowcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeroenwijering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longtailvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoplayerbidding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vualto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvideoads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitsontherun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longtailvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeroenwijering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openvideoads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitsontherun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwshowcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openvideoads.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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