lumixexperience.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:71:81:a2:22:80:dd:7b:b7:99:e6:7d:c1:db:3a:d9 was issued on by Amazon.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lumixexperience.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:71:81:a2:22:80:dd:7b:b7:99:e6:7d:c1:db:3a:d9
Serial Number (int): 17869322766697819010089316155429436121
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ef:fd:d7:9f:a9:dd:da:45:e4:b1:4e:4d:ff:f3:e8:79:96:9f:c8:e6
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): af:62:5c:dd:7e:e5:62:a6:b8:87:78:33:7d:e7:80:4c:ec:f3:cd:74
Fingerprint (sha256): 2c:2e:e1:df:e4:11:34:dd:da:22:5b:ba:7b:96:5b:91:5c:16:22:58:01:27:48:f9:d2:f3:a7:d0:fc:8d:33:6b

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate lumixexperience.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lumixexperience.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lumixexperience.com
lumix-experience.de
www.lumix-experience.nl
lumix-experience.nl
www.lumix-experience.de
lumixexperience.panasonic.co.uk
www.lumixexperience.panasonic.co.uk
www.lumixexperience.com
www.lumixgexperience.de
www.lumixexperience.co.uk
lumixexperience.de
lumixexperience.nl
www.lumixexperience.de
www.lumix-experience.co.uk
lumixexperience.panasonic.nl
lumix-experience.co.uk
lumixgexperience.de
www.lumixexperience.nl
lumixexperience.co.uk

Other certificates including the domain name lumixexperience.com

(limited to 100 certificates)
poweryourday.win.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
lumixexperience.com
showroom.eu.panasonic.com
lumixexperience.com
lumixexperience.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com
poweryourday.win.eu.panasonic.com
showroom.eu.panasonic.com
showroom.eu.panasonic.com

Certificate

The complete raw certificate details for lumixexperience.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnjCCBoagAwIBAgIQDXGBoiKA3Xu3meZ9wds62TANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDIxMDAwMDAwMFoXDTIzMDQyNjIzNTk1OVowHjEc
MBoGA1UEAxMTbHVtaXhleHBlcmllbmNlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALIvIiLhnnHVEaDG4mqHkgJG5g3JLBFGaFDU5sWav0QISNm6
Qdt9dznstwOFjOzRX2/YTTGdiAmgXEHPJC9nUmCH1OXtZPOcN1Ui75XSgsUTkyxO
woA+FSrccpVOib+V58GWhIlSd5oRzHZfL+NxREeMAXUtRRN/SxDks12XsNFTSe85
ot7UZmIpykY4ZvWJIV8TjdSxQaYRzf133n6qJIj/SFlBd/t5qlO/qZHGgYEEA1Um
kfesu7pr1dD1HWqFK1beXmgDQBU0roBeDuSkV/oxAEpQM0qJtzxj8fiIyK2OnnF/
m1mLtwXX3Z0Rw3v/VS3lUFLbqDJJiOky4pCXiVECAwEAAaOCBLgwggS0MB8GA1Ud
IwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBTv/defqd3aReSx
Tk3/8+h5lp/I5jCCAecGA1UdEQSCAd4wggHaghNsdW1peGV4cGVyaWVuY2UuY29t
ghNsdW1peC1leHBlcmllbmNlLmRlghd3d3cubHVtaXgtZXhwZXJpZW5jZS5ubIIT
bHVtaXgtZXhwZXJpZW5jZS5ubIIXd3d3Lmx1bWl4LWV4cGVyaWVuY2UuZGWCH2x1
bWl4ZXhwZXJpZW5jZS5wYW5hc29uaWMuY28udWuCI3d3dy5sdW1peGV4cGVyaWVu
Y2UucGFuYXNvbmljLmNvLnVrghd3d3cubHVtaXhleHBlcmllbmNlLmNvbYIXd3d3
Lmx1bWl4Z2V4cGVyaWVuY2UuZGWCGXd3dy5sdW1peGV4cGVyaWVuY2UuY28udWuC
Emx1bWl4ZXhwZXJpZW5jZS5kZYISbHVtaXhleHBlcmllbmNlLm5sghZ3d3cubHVt
aXhleHBlcmllbmNlLmRlghp3d3cubHVtaXgtZXhwZXJpZW5jZS5jby51a4IcbHVt
aXhleHBlcmllbmNlLnBhbmFzb25pYy5ubIIWbHVtaXgtZXhwZXJpZW5jZS5jby51
a4ITbHVtaXhnZXhwZXJpZW5jZS5kZYIWd3d3Lmx1bWl4ZXhwZXJpZW5jZS5ubIIV
bHVtaXhleHBlcmllbmNlLmNvLnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny
bC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
cjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIy
bTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX8G
CisGAQQB1nkCBAIEggFvBIIBawFpAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk
yoWGNOvcgooAAAGGPbvnSQAABAMARzBFAiEA8Sck+myAsy0/K8V4K8uM8yY7FHmj
WWa3nWSxZuINEV4CIFvXngm/cgqB2VTBOPeJynQL4RP1zUXjpMMglx1BXIdRAHYA
s3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGGPbvnSwAABAMARzBF
AiEAunrj3LUwpmqV5G/4ygP/nJTlR27oJAznOzZ56OlKzFUCIGnNTMbzTES/ucvn
B7Tq9Vr2/AuXF7HcXh0Pzvf0ClnGAHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXE
nh0JgSXttJkAAAGGPbvnBgAABAMASDBGAiEAv0aneGnT91y/yKM5y2m366eFUIAL
/fNTFefaTrd05psCIQClWce75VYzcI0DuLbXMyEJhCO4enuIi8xX99WC7BlubDAN
BgkqhkiG9w0BAQsFAAOCAQEAByzVGmUG7L50XRKPx4nGB7gB6Ger8WHsmfsZ6sst
WWWhd+2ah8fiC91TqCXaEYYld8KYLhElhLGfQdkc58YMiIYvWAdRAylgt8JqnvEF
Wrkxryqbtup7MAx2CydqbdB+lgQR7jZrMXj/KSfiMcQpPsWhYBzk2wfSkldZuMmm
BQNvZaFt5CLmw+3LbgjnwW9Hbd3LnSF1ORh9pKRRO/HhRANfZIOQMfgSiDO3YaA4
t9qPRPvbLw1C8M2iKk81Zgrxr+p4ocKIgM9vnRSDo95QuUxxkxIfpbJBE6sOENAm
gANIfyMqZxS3DeZMDHdKnUCdEhEjqXEV7eD26Tlgc2xcTw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi8iIuGecdURoMbiaoeS
AkbmDcksEUZoUNTmxZq/RAhI2bpB2313Oey3A4WM7NFfb9hNMZ2ICaBcQc8kL2dS
YIfU5e1k85w3VSLvldKCxROTLE7CgD4VKtxylU6Jv5XnwZaEiVJ3mhHMdl8v43FE
R4wBdS1FE39LEOSzXZew0VNJ7zmi3tRmYinKRjhm9YkhXxON1LFBphHN/Xfefqok
iP9IWUF3+3mqU7+pkcaBgQQDVSaR96y7umvV0PUdaoUrVt5eaANAFTSugF4O5KRX
+jEASlAzSom3PGPx+IjIrY6ecX+bWYu3BdfdnRHDe/9VLeVQUtuoMkmI6TLikJeJ
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17869322766697819010089316155429436121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumixexperience.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22493660602506139323468226336508256054781364955349385124943771870291380311784890628219639060859621484562271713944290598293795226191290309622921081944436077786413812357904239306354335028902828181268599383807877802353829739206965045182663393075060236037001695459456116637150122293157558766348796524669055284481070108290347234831621860806114490361144577198703605537699743673538996543098217821449702990583256924246550269342481436593484807423638717032002082216470392527336718840234746001009955799070390879674574369175984383440627328119922655534722724044934711565194359754986848336806355508827473486311651806174266586007889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							effdd79fa9ddda45e4b14e4dfff3e879969fc8e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (478 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumix-experience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumix-experience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumix-experience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumix-experience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.panasonic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixgexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumix-experience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.panasonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumix-experience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixgexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumixexperience.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumixexperience.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00072cd51a6506ecbe745d128fc789c607b801e867abf161ec99fb19eacb2d5965a177ed9a87c7e20bdd53a825da11862577c2982e112584b19f41d91ce7c60c88862f580751032960b7c26a9ef1055ab931af2a9bb6ea7b300c760b276a6dd07e960411ee366b3178ff2927e231c4293ec5a1601ce4db07d2925759b8c9a605036f65a16de422e6c3edcb6e08e7c16f476dddcb9d217539187da4a4513bf1e144035f64839031f8128833b761a038b7da8f44fbdb2f0d42f0cda22a4f35660af1afea78a1c28880cf6f9d1483a3de50b94c7193121fa5b24113ab0e10d0268003487f232a6714b70de64c0c774a9d409d121123a97115ede0f6e93960736c5c4f