www.hydrosulphite.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:0e:dd:b2:d5:64:6f:6b:36:e0:a2:67:2f:54:f4:47 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hydrosulphite.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:0e:dd:b2:d5:64:6f:6b:36:e0:a2:67:2f:54:f4:47
Serial Number (int): 9381784707690959089685376374209311815
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9d:dd:ac:c3:44:5e:b6:41:21:4c:4f:d9:50:93:bd:cd:3c:fa:3e:86
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 36:f0:0d:33:fd:d6:f7:ab:c7:72:4a:db:d6:91:17:a0:27:37:ff:75
Fingerprint (sha256): 33:c4:b1:f2:7b:d7:9d:99:29:07:ce:bc:51:4a:48:9f:94:61:f5:13:23:4c:13:d9:46:e0:a7:2b:b5:64:d3:6b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.hydrosulphite.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hydrosulphite.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hydrosulphite.com
basf-ypc.com.cn
scnfields.com
partner.agro.basf.com
revxfields.com
hydrosulphite.com
glysantin.org.cn
experience.partnerportal.basf.com
managereresource.north-america.intranet.basf.com
www.glysantin.ws
wrl-ltd.com
www.agrigenio.es
axant-flex.com
www.aroma-ingredients.basf.com
surtain-herbicide.us
www.glysantin.sk
teraxxa-wins.com
basf-sonatrach-propanchem.com
pestcontrol-secure.basf.us
www.myindustryworld.basf.com
www.glysantin.tw
www.hydrosulfite.com

Other certificates including the domain name hydrosulphite.com

(limited to 100 certificates)
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com

Certificate

The complete raw certificate details for www.hydrosulphite.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHuTCCBqGgAwIBAgIQBw7dstVkb2s24KJnL1T0RzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDMxNTAwMDAwMFoXDTI1MDQxMzIzNTk1OVowIDEe
MBwGA1UEAxMVd3d3Lmh5ZHJvc3VscGhpdGUuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAlAFBjPvfYwcgKstHwASzwIRObEVOy5L8mhzzvtf6Aay+
LmDgPIIX73KtUf+vWlt0+gcFJS6t1jBcIRgU2rtTvfblB657+aTGjWu6Y5MAHiRT
7wme55OqOGSIVSHqWt5tAMmOXYmXfBn9PtO2DmmpG+JcT9K/LIQffk/VL3bHjMA/
eE8613CWWg6j4sgw4pYnpBCZukNPOVPpoe5oFlry/vTVRaQ+Bzi/nqP6McGGVbIt
6y/S7Oz6b4XV39rE2WR/zjdTWF8PXKQKlMV5uicXsqT63nv76qnNfWs0Moh9bAec
khEa8Tx2AwyEVpI5GPQhGvrWVPnOY0wiTwuDpV0KLQIDAQABo4IE0TCCBM0wHwYD
VR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFJ3drMNEXrZB
IUxP2VCTvc08+j6GMIICAQYDVR0RBIIB+DCCAfSCFXd3dy5oeWRyb3N1bHBoaXRl
LmNvbYIPYmFzZi15cGMuY29tLmNugg1zY25maWVsZHMuY29tghVwYXJ0bmVyLmFn
cm8uYmFzZi5jb22CDnJldnhmaWVsZHMuY29tghFoeWRyb3N1bHBoaXRlLmNvbYIQ
Z2x5c2FudGluLm9yZy5jboIhZXhwZXJpZW5jZS5wYXJ0bmVycG9ydGFsLmJhc2Yu
Y29tgjBtYW5hZ2VyZXJlc291cmNlLm5vcnRoLWFtZXJpY2EuaW50cmFuZXQuYmFz
Zi5jb22CEHd3dy5nbHlzYW50aW4ud3OCC3dybC1sdGQuY29tghB3d3cuYWdyaWdl
bmlvLmVzgg5heGFudC1mbGV4LmNvbYIed3d3LmFyb21hLWluZ3JlZGllbnRzLmJh
c2YuY29tghRzdXJ0YWluLWhlcmJpY2lkZS51c4IQd3d3LmdseXNhbnRpbi5za4IQ
dGVyYXh4YS13aW5zLmNvbYIdYmFzZi1zb25hdHJhY2gtcHJvcGFuY2hlbS5jb22C
GnBlc3Rjb250cm9sLXNlY3VyZS5iYXNmLnVzghx3d3cubXlpbmR1c3RyeXdvcmxk
LmJhc2YuY29tghB3d3cuZ2x5c2FudGluLnR3ghR3d3cuaHlkcm9zdWxmaXRlLmNv
bTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j
cmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRp
MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNv
bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20v
cjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoB
aAB1AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjkHRpGkAAAQD
AEYwRAIgJiqbscjhnRfQigXhgJxP+04D7qcTcWwqAPy6tX5fW1sCIC3sAV/0jZOv
4pASIQbmj5Y4VsEvxWn62SdZw+5bKUWnAHYAfVkeEuF4KnscYWd8Xv340IdcFKBO
lZ65Ay/ZDowuebgAAAGOQdGkrwAABAMARzBFAiEAvD94nyGVyERxq/5AlgUek0gQ
7t9J+ZS9EHfODbEoK/sCIGJK+VFbl4NU14n54ErlidERvXcCyiUHXowk2iS5h6/z
AHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGOQdGkswAABAMA
SDBGAiEAsdpl/Ubb4f9D01A6M8q/YAlYd0+pE5V3TVdWL50nvRMCIQDyeWPRaH8X
DFmdgcXDsFZIMebKFV8VPXEt7ZaxZ+7hXDANBgkqhkiG9w0BAQsFAAOCAQEAQSzO
L/VD6GqLVo64wYNk6UbRHwQBcDwxRvwSCd+TPQO7iyY6ulu27VOHDBdP8j5A6ZcU
d6ZRBdnPFWdaHdTSmlKKyPh71pQ5h33a0NWMIW8uWJJk+qJJa7ZShMzNyVhLng36
7oVzS7sZ3L9XjAQrwFW5MSf434L9RK4dS46w/eC/gfgoa9f/I2GVD5LYu4vXTN/1
ynwYcVm1jQZiqX534QSufiYxJ5iN9WEMAcSWB34Hw91nTy6Ed47EjkpHkO0w74J8
gBV4A404KL+mN87cn1Ov206ycbNO2PIsMU1xetAN+CqICNI1T62e5xlPlJ94dwPC
RQyHq2EAc+ouHcmEAg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAFBjPvfYwcgKstHwASz
wIRObEVOy5L8mhzzvtf6Aay+LmDgPIIX73KtUf+vWlt0+gcFJS6t1jBcIRgU2rtT
vfblB657+aTGjWu6Y5MAHiRT7wme55OqOGSIVSHqWt5tAMmOXYmXfBn9PtO2Dmmp
G+JcT9K/LIQffk/VL3bHjMA/eE8613CWWg6j4sgw4pYnpBCZukNPOVPpoe5oFlry
/vTVRaQ+Bzi/nqP6McGGVbIt6y/S7Oz6b4XV39rE2WR/zjdTWF8PXKQKlMV5uicX
sqT63nv76qnNfWs0Moh9bAeckhEa8Tx2AwyEVpI5GPQhGvrWVPnOY0wiTwuDpV0K
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9381784707690959089685376374209311815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hydrosulphite.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18683888520011392023295783742526990102704350797095466259805017258221767146402173888767475655027100139777815343693898452691790804777948420636876762692066286988881364792963041962088617551921703149329985731594962671120466519810275875345227487755561446477691291753625335637853048046650667857868261342629973590535152449032294882430638417458648495889905944375989453659914519225381215026233583870467976502374195811934300732318507400462393980473006949289821523756783092095259461926567608473324382207101552917322765766533898806800910318988791018994139710745543591734001628166256044894996105417798860203211352406698697229666861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dddacc3445eb641214c4fd95093bdcd3cfa3e86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-ypc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scnfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.agro.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revxfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glysantin.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.partnerportal.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managereresource.north-america.intranet.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrl-ltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrigenio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axant-flex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aroma-ingredients.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtain-herbicide.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teraxxa-wins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-sonatrach-propanchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestcontrol-secure.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindustryworld.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulfite.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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