apac.api.capillarytech.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0d:d6:8a:90:74:03:78:a9:07:3b:a2:ec:57:8c:3f:d1 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apac.api.capillarytech.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:d6:8a:90:74:03:78:a9:07:3b:a2:ec:57:8c:3f:d1
Serial Number (int): 18393925890215523163571890180898701265
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5b:af:1d:6e:07:a1:e3:3c:62:a8:08:78:69:b8:dd:64:3a:16:5b:cb
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 1e:93:26:1a:ac:50:de:1e:3b:a4:6d:92:82:4c:77:70:41:18:f3:e5
Fingerprint (sha256): 2b:4a:c3:70:73:d9:6c:6a:ef:be:6e:5a:88:55:f9:90:2e:19:46:d1:49:d1:0a:9a:c5:20:06:58:f5:ba:d9:1b

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate apac.api.capillarytech.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apac.api.capillarytech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apac.api.capillarytech.com
delvreports.capillary.in
storecare.capillarytech.com
apac.static.sharingan.capillarytech.com
soc.capillary.in
apac-apigateway.capillarytech.com
unsubscribe.capillary.co.in
apac.survey.capillarytech.com
apac.intouch.capillarytech.com
apac-s3wrapper.capillarytech.com
intouch.capillary.co.in
unsubscribe.capillarytech.com
apac.oldapi.capillarytech.com
static.incrm.ccsharingan.capillarytech.com
api.capillary.co.in
dlr.incrm.cc.capillarytech.com
intouch.capillarytech.com
newapi.capillary.co.in
incrm.ccsharingan.capillarytech.com
i.cplry.com
apac.sharingan.capillarytech.com
ri.capillary.co.in

Other certificates including the domain name capillarytech.com

(limited to 100 certificates)
vulcan-uat.global.dev.intouch.capillarytech.com
fdus-56.freshdesk.com
support.doctricks.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
support.nature.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
sni.cloudflaressl.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
*.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
dev.rewardsplus.capillarytech.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
*.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
fdus-56.freshdesk.com
support.nature.com
capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fsus-24.freshservice.com
*.capillarytech.com
helpdesk.appareluae.com
apac2.api.capillarytech.com
dev.rewardsplus.capillarytech.com
capillarytech.com
apac2-lms.capillarytech.com
marketing.capillarytech.com
support.doctricks.com
sgcrm.cctools.capillarytech.com
apac2.api.capillarytech.com
status.capillarytech.com
helpdesk.appareluae.com
tools-a-crm-tatacrm.cc.capillarytech.com
getdemo.capillarytech.com
status.qtplatform.com
tools-a-crm-crm-nightly-new.cc.capillarytech.com
support.doctricks.com
status.qtplatform.com
apac.api.capillarytech.com
eu.intouch.capillarytech.com
glue-a-crm-uscrm.cc.capillarytech.com
assist.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
capillarytech.com
getdemo.capillarytech.com
support.nature.com
glue-jsvt-crm-crm-nightly-new.cc.capillarytech.com
fsus-24.freshservice.com
getdemo.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
survey.capillarytech.com
mapp-crm-nightly-new.api.capillarytech.com
support.nature.com
support.nature.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fdus-56.freshdesk.com
solutions-a-crm-uscrm.cc.capillarytech.com
capillarytech.com
intouch-a-crm-crm-nightly-new.cc.capillarytech.com
getdemo.capillarytech.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
tms1-ota-status.bbpos.com
nsadmin-a-crm-uscrm.cc.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
ecom-assist.capillarytech.com
eu.intouch.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
eu.intouch.capillarytech.com
intouch-a-crm-uscrm.cc.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
support.doctricks.com
*.capillarytech.com
fdus-56.freshdesk.com

Certificate

The complete raw certificate details for apac.api.capillarytech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIITjCCBzagAwIBAgIQDdaKkHQDeKkHO6LsV4w/0TANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTEwNTAwMDAwMFoXDTI0MTIwMzIzNTk1OVowJTEj
MCEGA1UEAxMaYXBhYy5hcGkuY2FwaWxsYXJ5dGVjaC5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDQQF8MxU0YfgM++E0tMbVX9GO6Y72pGG4nMfT1
ZXJqUgzNqubnaYsc1/k1ygM/oha1ur7NGHCj18POE1haNIBdzgAceJWyOVf8C0Er
L5QLDXKXM+k3TqVtquCvTT3Qk9YLnbd50A13NQEGjj/ndumCYoTTk7Xfdw0g+cRr
NbJCBLINvDnu96NAVnnKHqyQ2bmEUsN8Bc/7wXdS0ZjhfexBZkmwnVijzrE8d81N
YQ6Vw/fQPQHL7/Y8ko9VO2jVJrdodsbTW/z117FOMw7bgZ2Q1KiXL5Or6nRQL8ZC
tikpVbljqlYICyT4jwWK31XZ4MpQSnxcFiKggx0xa2GaNSw3AgMBAAGjggVhMIIF
XTAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUW68d
bgeh4zxiqAh4abjdZDoWW8swggKPBgNVHREEggKGMIICgoIaYXBhYy5hcGkuY2Fw
aWxsYXJ5dGVjaC5jb22CGGRlbHZyZXBvcnRzLmNhcGlsbGFyeS5pboIbc3RvcmVj
YXJlLmNhcGlsbGFyeXRlY2guY29tgidhcGFjLnN0YXRpYy5zaGFyaW5nYW4uY2Fw
aWxsYXJ5dGVjaC5jb22CEHNvYy5jYXBpbGxhcnkuaW6CIWFwYWMtYXBpZ2F0ZXdh
eS5jYXBpbGxhcnl0ZWNoLmNvbYIbdW5zdWJzY3JpYmUuY2FwaWxsYXJ5LmNvLmlu
gh1hcGFjLnN1cnZleS5jYXBpbGxhcnl0ZWNoLmNvbYIeYXBhYy5pbnRvdWNoLmNh
cGlsbGFyeXRlY2guY29tgiBhcGFjLXMzd3JhcHBlci5jYXBpbGxhcnl0ZWNoLmNv
bYIXaW50b3VjaC5jYXBpbGxhcnkuY28uaW6CHXVuc3Vic2NyaWJlLmNhcGlsbGFy
eXRlY2guY29tgh1hcGFjLm9sZGFwaS5jYXBpbGxhcnl0ZWNoLmNvbYIqc3RhdGlj
LmluY3JtLmNjc2hhcmluZ2FuLmNhcGlsbGFyeXRlY2guY29tghNhcGkuY2FwaWxs
YXJ5LmNvLmlugh5kbHIuaW5jcm0uY2MuY2FwaWxsYXJ5dGVjaC5jb22CGWludG91
Y2guY2FwaWxsYXJ5dGVjaC5jb22CFm5ld2FwaS5jYXBpbGxhcnkuY28uaW6CI2lu
Y3JtLmNjc2hhcmluZ2FuLmNhcGlsbGFyeXRlY2guY29tggtpLmNwbHJ5LmNvbYIg
YXBhYy5zaGFyaW5nYW4uY2FwaWxsYXJ5dGVjaC5jb22CEnJpLmNhcGlsbGFyeS5j
by5pbjATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6
Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcB
AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0
LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5j
b20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASC
AWwBagB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi55u/usA
AAQDAEgwRgIhAJT3AgI6FD7BAf+lSO7zYII1Nv+j43/6nG0KOvRb3kpTAiEAobq5
o5+4QRLbnFkiAwlKS2xP+yPCqVktYqMGsG0fq6QAdwBIsONr2qZHNA/lagL6nTDr
HFIBy1bdLIHZu7+rOdiEcwAAAYuebv8LAAAEAwBIMEYCIQD4wXU93stVuhNU8TM4
WRb0aqVVzo1rC9g4kfzdIxgBHwIhALS20SzoU0PN2Z0PpkLFe1PFsOgOfx2S7f34
xTm2WVFjAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGLnm7/
OgAABAMARzBFAiEAzSKfisO5dyWqmkErFws+t9z6T0hTL+4lAPlnB0xhEkkCIAX5
cDZ3h9UiAU4X2xv/WbiplIPN2yCRYVLknMOo/LRrMA0GCSqGSIb3DQEBCwUAA4IB
AQAInlz5FsHVwQGt1cu7lwX7pRsXQ+VIX0lP5aw1jgcYb0DWw8JeGxg2SEYAMLxi
Jb2NJjSlS48xNdj8h/Rag04Chq8I9Om6p82+pNbeAKL3fdVKvM/8ft8dP+qbGo+1
dBSJciXE4YEuAa3gyqrOTID2jwkI0m20ukelsk+B98UEdcTb/YYa2W/g9GM4gPNz
YgDrP3FIZ8D0nA+eY8mRU7nib7rD5rjKvNcWAnZQa6aXJdS05uajcdtTheb9EbIY
J8y876Hip1Meu7hRq4F9rtIDx2S4tsXVK2xMcPmk6g5OhCtaF/EqxKnZC+eBhwLY
SLDPj6zjJUJo3EVQ5oB7kTLP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EBfDMVNGH4DPvhNLTG1
V/RjumO9qRhuJzH09WVyalIMzarm52mLHNf5NcoDP6IWtbq+zRhwo9fDzhNYWjSA
Xc4AHHiVsjlX/AtBKy+UCw1ylzPpN06lbargr0090JPWC523edANdzUBBo4/53bp
gmKE05O133cNIPnEazWyQgSyDbw57vejQFZ5yh6skNm5hFLDfAXP+8F3UtGY4X3s
QWZJsJ1Yo86xPHfNTWEOlcP30D0By+/2PJKPVTto1Sa3aHbG01v89dexTjMO24Gd
kNSoly+Tq+p0UC/GQrYpKVW5Y6pWCAsk+I8Fit9V2eDKUEp8XBYioIMdMWthmjUs
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18393925890215523163571890180898701265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apac.api.capillarytech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26289310098421857335539092843585845846527150780314913148245569286471261333957471693621562727722588885671707654702309967364445069503992721206625562498658408323332605262690021090024786667439699229449674829646101169833443792397097632690019813023950375363033612832248342048693845318434165537130390634465804697360299855940575945997587619202819461240918629427538818398899908304594066995886727065687963331202289625137448716965639693051647850639991925592902620186937943381847071431881422072104855611373033827134775344994925840164351996481234379551650496027680377246915444190488671020400491529437986905151206855926086408416311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5baf1d6e07a1e33c62a8087869b8dd643a165bcb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.api.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delvreports.capillary.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storecare.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.static.sharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soc.capillary.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac-apigateway.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsubscribe.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.survey.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.intouch.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac-s3wrapper.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intouch.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsubscribe.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.oldapi.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.incrm.ccsharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlr.incrm.cc.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intouch.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newapi.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incrm.ccsharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cplry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.sharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ri.capillary.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00089e5cf916c1d5c101add5cbbb9705fba51b1743e5485f494fe5ac358e07186f40d6c3c25e1b183648460030bc6225bd8d2634a54b8f3135d8fc87f45a834e0286af08f4e9baa7cdbea4d6de00a2f77dd54abccffc7edf1d3fea9b1a8fb57414897225c4e1812e01ade0caaace4c80f68f0908d26db4ba47a5b24f81f7c50475c4dbfd861ad96fe0f4633880f3736200eb3f714867c0f49c0f9e63c99153b9e26fbac3e6b8cabcd7160276506ba69725d4b4e6e6a371db5385e6fd11b21827ccbcefa1e2a7531ebbb851ab817daed203c764b8b6c5d52b6c4c70f9a4ea0e4e842b5a17f12ac4a9d90be7818702d848b0cf8face3254268dc4550e6807b9132cf