gateway.iconstituent.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:07:b4:3c:f2:34:38:88:0b:42:30:64:e8:55:ca:02 was issued on by Amazon.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gateway.iconstituent.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:07:b4:3c:f2:34:38:88:0b:42:30:64:e8:55:ca:02
Serial Number (int): 14661509694020730033355123421202467330
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d6:83:4a:4d:78:78:1c:a3:58:9c:d7:81:4e:0e:9f:27:5c:1d:91:03
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ab:e0:d3:c7:b1:e7:79:c8:49:a4:e1:16:18:22:b1:9a:90:53:cd:76
Fingerprint (sha256): 27:72:f5:0a:0c:dd:e0:bf:9a:30:11:1f:0b:b6:dd:e3:68:c1:9f:12:98:ef:56:62:0e:4e:15:97:2c:49:a7:9a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate gateway.iconstituent.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gateway.iconstituent.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gateway.iconstituent.com
enews.senatorbrewster.com
latinovoterusa.org
enews.senatorfontana.com
*.pasenatedemocrats.com
votedemocrats.net
enews.senatorboscola.com
enews.senatorcollett.com
enews.senatorhaywood.com
*.congressnewsletter.net
enews.pasenatormiller.com
votedem.org
enews.pasenatorcappelletti.com
enews.senatorhughes.com
enews.senatorstevesantarsiero.com
enews.healthycommunitiesoregon.com
*.montgomerycountyny.net
nassaucountyenewsletter.com
*.houseenews.net
*.ascendantapp.com
*.ascendantappforms.com
enews.senatormuth.com
fbapitest.iconstituent.com
*.ilsenatedem.com
enewsletter.illinoiscomptroller.gov
enews.senatordillon.com
enews.pasenatorkane.com
enews.senatorsharifstreet.com
votedemocrats.org
*.emailnewsletter.us
*.latinovoterusa.net
enews.senatorschwank.com
enews.senatoranthonyhwilliams.com
contact11thdistrict.iconstituent.com
enews.senatorkearney.com
klc.iconstituent.com
*.nassaucountyenewsletter.com
enews.senatorlindseywilliams.com
enews.senatorflynn.com
contact.schenectadyny.gov
enews.senatortartaglione.com
*.ilhousedem.us
votedemocrats.us
*.dcward2.us
notifications.iconstituent.com
enews.pasenatorsaval.com
enews.pasenatorcomitta.com
voteprochoice.net
nysassemblyspeaker.com

Other certificates including the domain name iconstituent.com

(limited to 100 certificates)
helpdesk.iconstituent.com
5659645909663744-fe2.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
app.iconstituent.com
helpdesk.iconstituent.com
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
helpdesk.iconstituent.com
5659645909663744-fe2.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
hcrmrdgwA.iconstituent.com
helpdesk.iconstituent.com
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
SVNREP.iconstituent.com
*.iconstituent.com
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
gateway.iconstituent.com
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
iconstituent.com
5635703144710144-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5707702298738688-fe1.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5635703144710144-fe4.pantheonsite.io
5659645909663744-fe2.pantheonsite.io
5199943883030528-fe4.pantheonsite.io
5659645909663744-fe2.pantheonsite.io

Certificate

The complete raw certificate details for gateway.iconstituent.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovnxGVK13XRcXQGPvW2I
azhjNJbrg5k8Hf3JtNN8ZUUoRslcMb3c24JOQrliMcPjrOl2HvW3yqAaqKPVQZsC
EduW3eYxcQk8nIwsgP8N6BD9WD5eiCTnWZl83o7g5iCYjoq+7iw2nrUxIQemLbbN
oZHW1aC9wHoEQgm3IMxAcaoZ9Vo6BRFFi0hhTGkgV/K218mP6Z50IcC6qoDrq/BZ
ALdVbXrElu+T0rrGrePoTUedn9gmmtOqtlA4kCDMxk9qkUtvuw04TZzD/jFPxYnr
U9yLcDY+7OPi22esXxM8oB9m16A02fnofrPCMgzKnnICnWyRBnzyqCYJUfbk9OlW
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14661509694020730033355123421202467330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gateway.iconstituent.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20573856296080676715933218466884465573799797381748204665875592143434873702103674163011377923336764634449633037447831116572685863415209616560356252388550295762616538682552543310176107018276605624337568551636899268681757546341693258374825497616956458010074518225777755339221761556810407304380833667628534788202714299091360940340609202533082561230711973232332006114130827688345674833627834576504869047324319023643986453623157580064971364349420210155446774871919156938172760057310259450899314870096638156995913515408210511858400971387904087790076317690272837719207451463185529647467339698399487817299088785572189367260719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6834a4d78781ca3589cd7814e0e9f275c1d9103
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1259 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.iconstituent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorbrewster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latinovoterusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorfontana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasenatedemocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votedemocrats.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorboscola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorcollett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorhaywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.congressnewsletter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.pasenatormiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votedem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.pasenatorcappelletti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorhughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorstevesantarsiero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.healthycommunitiesoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montgomerycountyny.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nassaucountyenewsletter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houseenews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ascendantapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ascendantappforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatormuth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbapitest.iconstituent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilsenatedem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enewsletter.illinoiscomptroller.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatordillon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.pasenatorkane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorsharifstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votedemocrats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailnewsletter.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latinovoterusa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorschwank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatoranthonyhwilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact11thdistrict.iconstituent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorkearney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klc.iconstituent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nassaucountyenewsletter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorlindseywilliams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatorflynn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.schenectadyny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.senatortartaglione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilhousedem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votedemocrats.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcward2.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.iconstituent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.pasenatorsaval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.pasenatorcomitta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voteprochoice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nysassemblyspeaker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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