dev.idv.warnermediaprivacy.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:17:e7:bf:6c:a8:ed:e7:8c:a6:48:70:a2:d3:fb:95 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev.idv.warnermediaprivacy.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:17:e7:bf:6c:a8:ed:e7:8c:a6:48:70:a2:d3:fb:95
Serial Number (int): 6770263209496968230921362815413648277
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:3d:61:bf:8a:c9:fd:44:cc:3b:93:2f:aa:de:17:8e:7a:4a:24:51
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 57:08:f6:d2:9f:d7:88:a4:92:a8:74:25:07:f7:ad:bb:bc:d3:d2:e1
Fingerprint (sha256): 32:a3:41:40:0d:c9:ec:18:99:7f:2f:89:e5:b2:a6:b2:d5:71:67:3e:0b:b3:38:95:93:08:13:fa:bc:43:30:6f

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate dev.idv.warnermediaprivacy.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.idv.warnermediaprivacy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.idv.warnermediaprivacy.com
www.dev.idv.warnermediaprivacy.com

Other certificates including the domain name warnermediaprivacy.com

(limited to 100 certificates)
qa.content.privacycenter.wb.com
cartoonito.co.uk
dev.idv.warnermediaprivacy.com
auth.dev.idv.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
qa.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consent.api.warnermediaprivacy.com
nonprod.consentadmin.api.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
api.dev.idv.warnermediaprivacy.com
idv.warnermediaprivacy.com
warnermediaprivacy.com
warnermediaprivacy.com
sni.cloudflaressl.com
api.idv.warnermediaprivacy.com
cartoonito.co.uk
api.dev.idv.warnermediaprivacy.com
api.dev.idv.warnermediaprivacy.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
stage.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
idv.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
api.idv.warnermediaprivacy.com
www.warnermediaprivacy.com
sni.cloudflaressl.com
cartoonito.co.uk
consent.api.warnermediaprivacy.com
stage.privacy.wizardingworld.com
consent.api.warnermediaprivacy.com
warnermediaprivacy.com
stage.warnermediaprivacy.com
qa.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
api.dev.idv.warnermediaprivacy.com
dev.idv.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
dev.consentadmin.api.warnermediaprivacy.com
dev.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
stage.warnermediaprivacy.com
qa.warnermediaprivacy.com
sni.cloudflaressl.com
sni.cloudflaressl.com
auth.dev.idv.warnermediaprivacy.com
sni.cloudflaressl.com
stage.warnermediaprivacy.com
Stage.privacycenter.wb.com
dev.warnermediaprivacy.com
idv.warnermediaprivacy.com
sit.consentadmin.api.warnermediaprivacy.com
sni.cloudflaressl.com
dev.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
dev.consent.api.warnermediaprivacy.com
stage.warnermediaprivacy.com
auth.dev.idv.warnermediaprivacy.com
dev.warnermediaprivacy.com
consentadmin.api.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
dev.idv.warnermediaprivacy.com
idv.warnermediaprivacy.com
sni.cloudflaressl.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
sit.consentadmin.api.warnermediaprivacy.com
www.warnermediaprivacy.com
cartoonito.co.uk
sit.consentadmin.api.warnermediaprivacy.com
consent.api.warnermediaprivacy.com
dev.warnermediaprivacy.com
dev.consent.api.warnermediaprivacy.com
qa.consent.api.warnermediaprivacy.com
idv.warnermediaprivacy.com
consent.api.warnermediaprivacy.com
dev.consent.api.warnermediaprivacy.com
auth.idv.warnermediaprivacy.com
stage.warnermediaprivacy.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sit.consentadmin.api.warnermediaprivacy.com
dev.consent.api.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
sni.cloudflaressl.com
dev.warnermediaprivacy.com
sit.consent.api.warnermediaprivacy.com
auth.idv.warnermediaprivacy.com
stage.warnermediaprivacy.com

Certificate

The complete raw certificate details for dev.idv.warnermediaprivacy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgIQBRfnv2yo7eeMpkhwotP7lTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTAxOTAwMDAwMFoXDTI0MTExNTIzNTk1OVowKTEn
MCUGA1UEAxMeZGV2Lmlkdi53YXJuZXJtZWRpYXByaXZhY3kuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUHRlGqS7oPftURn10fcEtNyMe+pLDhs
d7qW2gBdbxYGaVUfzPzbmW0Ra6AgJclXlkXYb2AX/egfb6bdNl7GkBfCiHR3czMG
YHFZoBZ7sNvFurPI+70vJIZPyPqGukmblECTxLmHEbnZEomnNqd/lCFLurD+nrjj
cSbE5pbjLcXjEjMr3PAUNqPt0Ozs2zOr+LR/JlWXyry8+NaDCnhTsYCueK9WDOGe
a67jGe1f+B9zKZwlqdc9kBKbfIdBBxFco5TUhsMDJgkLlBXRGdV3JHzeYNFQHTAb
Hxc/YnVLDt6HUKifD+iuQS7Tz+gu/EAVDTckWy/QFEVu7CRW6kJK1QIDAQABo4ID
GTCCAxUwHwYDVR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYE
FOg9Yb+Kyf1EzDuTL6reF456SiRRME0GA1UdEQRGMESCHmRldi5pZHYud2FybmVy
bWVkaWFwcml2YWN5LmNvbYIid3d3LmRldi5pZHYud2FybmVybWVkaWFwcml2YWN5
LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6
Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcB
AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0
LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5j
b20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASC
AWgBZgB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi0XfLAgA
AAQDAEcwRQIhAJxKjqolg64VfxpuLN97LFG0qjV5BN6otMUOgfyDzKh7AiBp9V6h
FLEnlUyz3rsc6iX4KxwizXymOV3uO6UTBF47mgB1AEiw42vapkc0D+VqAvqdMOsc
UgHLVt0sgdm7v6s52IRzAAABi0XfLAkAAAQDAEYwRAIgSuDXEKiK8fPGNYSPJEYV
ZA4ZUdqvfv2HZMVcpqZfW5oCIHn5Iv4IFOEB4ZeN1XcFNWqceRFqT8FWzGF/l3Ln
smILAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLRd8sVAAA
BAMARjBEAiAzRsB0UjrS+wzzyg/7U21zKBH9VAUQObkwZ0IU/gcjpgIgMSdSGckc
i4GO3DRj4WapgSFjGsB6puIqbuAgq6n6gyYwDQYJKoZIhvcNAQELBQADggEBAEbd
oqRWkeEN45JR+sb7ndFDNW0ogSeZSS/VBsTn7QCDHKbL9r+O2Nru8PtmLtlz+fxn
vfqK085PCMHWdo0bjnZ4qVPMvZoH2uhdTtm4vHhENsmnarecqJxMZCK3NaHxOHjD
NIrdRPU92Ehhu41UpthbzQC+UvaY76mPl+pUyuYgTo2tpk6nwM2Sjc3Al+2LOtyJ
HcjDMOVeHNOw2Wqc3zDgU0jYfNfr1rGTmh9V9r8B0mP776RhRP9VT2TdeeXuSG5f
31gYnzekT05+SYcSz7oyRTbK9gy2jrDJkgegrRa/nCVi1EXizwa2XnQeIi024AEm
v8ujWd4IEo9gPIIoodQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUHRlGqS7oPftURn10fc
EtNyMe+pLDhsd7qW2gBdbxYGaVUfzPzbmW0Ra6AgJclXlkXYb2AX/egfb6bdNl7G
kBfCiHR3czMGYHFZoBZ7sNvFurPI+70vJIZPyPqGukmblECTxLmHEbnZEomnNqd/
lCFLurD+nrjjcSbE5pbjLcXjEjMr3PAUNqPt0Ozs2zOr+LR/JlWXyry8+NaDCnhT
sYCueK9WDOGea67jGe1f+B9zKZwlqdc9kBKbfIdBBxFco5TUhsMDJgkLlBXRGdV3
JHzeYNFQHTAbHxc/YnVLDt6HUKifD+iuQS7Tz+gu/EAVDTckWy/QFEVu7CRW6kJK
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6770263209496968230921362815413648277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.idv.warnermediaprivacy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18841963836231500896173219232014630921730418724870865819157210351385998574999145916646199879714666658831114294168792554080937443617836532077965765303840030530366208263725439826550059596014856934800556943752881851077882614962155669810314850655951761234182946486769384677464014465841836608085946040997838676040117146137563627428128583510650633018835182764076838141690704392628898091183996066608852643228281085425832986884699439200476581205413306997791442304424309766711506583576183185318696185866549914841562863415775949663628651286585979866716109669311642562254627848882368585444819627691882621763085608985071599110869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e83d61bf8ac9fd44cc3b932faade178e7a4a2451
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.idv.warnermediaprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.idv.warnermediaprivacy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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