origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:0b:10:f6:ce:1b:39:07:71:2d:d9:0a:40:4a:c7:77 was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:0b:10:f6:ce:1b:39:07:71:2d:d9:0a:40:4a:c7:77
Serial Number (int): 18666651278901164592819789840433989495
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6f:74:5e:f2:1f:3f:33:c4:12:d5:fe:18:2b:60:13:8a:a5:5b:f2:22
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a9:1c:46:da:c2:34:4c:b8:9e:b4:81:56:c1:5d:7b:b2:67:bd:fc:0f
Fingerprint (sha256): 35:3b:2b:7b:5d:ed:93:1e:48:d2:5d:58:28:64:75:9a:6e:6a:ba:55:ac:99:bc:b9:e1:98:20:b5:f3:86:e2:6c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud
verify.cms.timothy-shriver-prod.production.k1.m1.brightspot.cloud
fullyalivethebook.com
*.timothy-shriver-prod.production.k1.m1.brightspot.cloud
fullyalivethebook.org
timshriver.org
cdn.timothyshriver.com
timothyshriver.org
cms.timothy-shriver-prod.production.k1.m1.brightspot.cloud
timothyshriver.com
timothy-shriver-prod.production.k1.m1.brightspot.cloud
www.timshriver.org
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
*.origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud
www.timothyshriver.org
www.fullyalivethebook.org
*.cms.timothy-shriver-prod.production.k1.m1.brightspot.cloud
www.timothyshriver.com
verify.origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud
brightspot.timothyshriver.com
www.fullyalivethebook.com

Other certificates including the domain name brightspot.cloud

(limited to 100 certificates)
cst-qa.lower.chorus.brightspot.cloud
origin.ser.production.k1.amazon.brightspot.cloud
origin.uat.lower.google-marketing.brightspot.cloud
entertainment.production.k1.amazon.brightspot.cloud
origin.relay-qa.lower.k1.amazon.brightspot.cloud
biospace-qa.lower.k1.m1.brightspot.cloud
origin.kpbs.kpbs.production.k3.m1.brightspot.cloud
cms.6amcity.com
origin.ajga-uat.ajga.lower.k1.m1.brightspot.cloud
amazon-hvh.lower.k3.m1.brightspot.cloud
static.amazon-hvh.lower.k3.m1.brightspot.cloud
origin.acertus.production.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
origin.medtech.production.jnj.brightspot.cloud
origin.web.production.hca.brightspot.cloud
intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.wwe-prod.production.k2.m1.brightspot.cloud
origin.jobs.production.amazon-jobs.brightspot.cloud
origin.berlin-2023-qa.berlin-2023.lower.k2.m1.brightspot.cloud
www.nbcsportsathletedirect.com
static.church-qa.church.lower.church.brightspot.cloud
origin.epe-uat.epe.lower.k2.m1.brightspot.cloud
lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.pitchbook-uat.lower.k2.m1.brightspot.cloud
fastmarkets.com
origin.deseret.production.chorus.brightspot.cloud
static.lexipol.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.bwater-uat.bridgewater.lower.k2.m1.brightspot.cloud
static.farm-journal-qa.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.web.production.teaching-strategies.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.intsys.inter-systems.production.k2.m1.brightspot.cloud
amazon-last-mile.lower.k3.m1.brightspot.cloud
origin.vpm.production.k1.m1.brightspot.cloud
origin.foods.wholefoods.production.k1.amazon.brightspot.cloud
static.biospace.production.k1.m1.brightspot.cloud
bsp.elpais.com.uy
origin.vpm.production.k1.m1.brightspot.cloud
origin.carrick.production.k1.m1.brightspot.cloud
cms.6amcity.com
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.chalkbeat.production.chorus.brightspot.cloud
origin.berlin-2023.berlin-2023.production.k2.m1.brightspot.cloud
acertus-qa.lower.k1.m1.brightspot.cloud
cms.6amcity.com
cms.6amcity.com
origin.marriott-news.production.k1.m1.brightspot.cloud
origin.ei.energy-intelligence.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
static.uat.lower.dispatch-health.brightspot.cloud
*.dispatchhealth.com
origin.chopra.chopra.production.k2.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.uat.lower.amazon-sell.brightspot.cloud
static.notmusa.production.k3.m1.brightspot.cloud
static.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
science-qa2.topics.lower.k1.amazon.brightspot.cloud
origin.im-qa.lower.jnj.brightspot.cloud
origin.uat.lower.dispatch-health.brightspot.cloud
sixam-city-uat.lower.k1.m1.brightspot.cloud
origin.rfdtv.k1.go.brightspot.cloud
static.web.production.forum-communications.brightspot.cloud
static.gbh.production.k1.m1.brightspot.cloud
origin.aji.production.k2.m1.brightspot.cloud
origin.notmusa.production.k3.m1.brightspot.cloud
origin.usnews-uat.lower.usnews.brightspot.cloud
verify.origin.prod-news.production.ap.brightspot.cloud
mattress-uat.mattress-firm.lower.k2.m1.brightspot.cloud
origin.qa-migration.lower.el-pais.brightspot.cloud
castle-qa.castle-connolly.lower.k2.m1.brightspot.cloud
origin.qa.lower.google-marketing.brightspot.cloud
sustainability.production.k1.amazon.brightspot.cloud
static.uat.lower.google-marketing.brightspot.cloud
origin.in-investor-qa2.lower.k2.m1.brightspot.cloud
static.acertus.production.k1.m1.brightspot.cloud
origin.lexis.production.ln-production.brightspot.cloud
origin.deseret-qa2.lower.chorus.brightspot.cloud
static.pay.production.k1.amazon.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.church-qa.church.lower.church.brightspot.cloud
static.epe.epe.production.k2.m1.brightspot.cloud
origin.pay.production.k1.amazon.brightspot.cloud
origin.sixam-city.production.k1.m1.brightspot.cloud
origin.realtymogul.k1.go.brightspot.cloud
epe-uat.epe.lower.k2.m1.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
origin.farm-journal.production.k1.m1.brightspot.cloud
origin.torridon.production.k2.m1.brightspot.cloud
origin.church-perf.church.lower.church.brightspot.cloud
brightspot-design.brightspotcdn.com
costar-qa.costar.lower.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
fastmarkets.com
costar-uat.costar.lower.k1.m1.brightspot.cloud
origin.web.production.forum-communications.brightspot.cloud

Certificate

The complete raw certificate details for origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJOTCCCCGgAwIBAgIQDgsQ9s4bOQdxLdkKQErHdzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDExNzAwMDAwMFoXDTI0MDIxNTIzNTk1OVowSDFG
MEQGA1UEAxM9b3JpZ2luLnRpbW90aHktc2hyaXZlci1wcm9kLnByb2R1Y3Rpb24u
azEubTEuYnJpZ2h0c3BvdC5jbG91ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAMOQzonzth2tIkA6zJ1lTFFCcvQ6lNU1zAQ+rK7Oh0xAfYHse0qqRU7s
D3n5tDYwXQ/L7b1DIsJjYJpsGVvPRCgt4DxNcVed79bN3UnqWoSh5XNArsKgHiVB
hN1/9S90jfiUkEybJEJMVxqtNS0L32VjNGf3QMYR8lYNzZyjrhjAVA3lF2HTAmrC
ORl5+gbB5rj1mvAf/rzVToiSaVx6LW+0NjXEiSheMhyoBs8yLZ0o1vdx3xlEZjDR
SYBy8vhdOE+zQixCFMoZs1k/HnwgmTdv4RJNA8I6peSlczJrqS26yt7uftFIu4S0
xap6dyJXU3mauv5hFwLCqcrczvrx3XECAwEAAaOCBikwggYlMB8GA1UdIwQYMBaA
FMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRvdF7yHz8zxBLV/hgrYBOK
pVvyIjCCA1gGA1UdEQSCA08wggNLgj1vcmlnaW4udGltb3RoeS1zaHJpdmVyLXBy
b2QucHJvZHVjdGlvbi5rMS5tMS5icmlnaHRzcG90LmNsb3VkgkF2ZXJpZnkuY21z
LnRpbW90aHktc2hyaXZlci1wcm9kLnByb2R1Y3Rpb24uazEubTEuYnJpZ2h0c3Bv
dC5jbG91ZIIVZnVsbHlhbGl2ZXRoZWJvb2suY29tgjgqLnRpbW90aHktc2hyaXZl
ci1wcm9kLnByb2R1Y3Rpb24uazEubTEuYnJpZ2h0c3BvdC5jbG91ZIIVZnVsbHlh
bGl2ZXRoZWJvb2sub3Jngg50aW1zaHJpdmVyLm9yZ4IWY2RuLnRpbW90aHlzaHJp
dmVyLmNvbYISdGltb3RoeXNocml2ZXIub3JngjpjbXMudGltb3RoeS1zaHJpdmVy
LXByb2QucHJvZHVjdGlvbi5rMS5tMS5icmlnaHRzcG90LmNsb3VkghJ0aW1vdGh5
c2hyaXZlci5jb22CNnRpbW90aHktc2hyaXZlci1wcm9kLnByb2R1Y3Rpb24uazEu
bTEuYnJpZ2h0c3BvdC5jbG91ZIISd3d3LnRpbXNocml2ZXIub3Jngj1zdGF0aWMu
dGltb3RoeS1zaHJpdmVyLXByb2QucHJvZHVjdGlvbi5rMS5tMS5icmlnaHRzcG90
LmNsb3Vkgj8qLm9yaWdpbi50aW1vdGh5LXNocml2ZXItcHJvZC5wcm9kdWN0aW9u
LmsxLm0xLmJyaWdodHNwb3QuY2xvdWSCFnd3dy50aW1vdGh5c2hyaXZlci5vcmeC
GXd3dy5mdWxseWFsaXZldGhlYm9vay5vcmeCPCouY21zLnRpbW90aHktc2hyaXZl
ci1wcm9kLnByb2R1Y3Rpb24uazEubTEuYnJpZ2h0c3BvdC5jbG91ZIIWd3d3LnRp
bW90aHlzaHJpdmVyLmNvbYJEdmVyaWZ5Lm9yaWdpbi50aW1vdGh5LXNocml2ZXIt
cHJvZC5wcm9kdWN0aW9uLmsxLm0xLmJyaWdodHNwb3QuY2xvdWSCHWJyaWdodHNw
b3QudGltb3RoeXNocml2ZXIuY29tghl3d3cuZnVsbHlhbGl2ZXRoZWJvb2suY29t
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5j
b20vcjJtMDIuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMi5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGFv0XD4QAABAMA
RzBFAiBkPZCs3+zYdv00g7CNppVer5VjLFhsifzxJ9L4bAIqQAIhAPR4fAwL148u
2/d9xM8Ck0wdEsCkmcdZZKGuS0BsGRmqAHYAc9meiRtMlnigIH1HneayxhzQUV5x
GSqMa4AQesF3crUAAAGFv0XEMwAABAMARzBFAiAjApA2Sg/ZeS3gTgURWEGoRyc4
EIHI5Xp+MovWMbdOpAIhAOFuDCMADNBo2F4mlRB05kZP3CnXJtcjVUTrY5wxQhoe
AHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGFv0XEEwAABAMA
SDBGAiEAyAEI12BbrDuWkevW9qYepVYms5HK4n/seYQjRJ47daQCIQDcnfvyyRmO
kWibGV36LN7rM9lkN0h0n9VvUpRAI5ipbzANBgkqhkiG9w0BAQsFAAOCAQEAGuwt
E8PeVWUsKLW3JLEn6suvB/rE5dmJLe8KhtsmEloRTV2vD1t/jGHPJTrSzQwxZz5T
qPeMWj2my//mDLSJw3kCNREcu6Q9N5omzCXgCM+4yEOC7vO52H2btENDFUQRdY85
STwnzDL2fBvIHcHrTZzAjxE2rsX+BBtTraUp+qUFwxQyOHiSSCs8GsFo462lZcHl
NCorwWPELleYK6FVPRquuL4LBiv7xWHqCvRpzj/cCoayyhSKxrE+EHu8UyRKGSYd
ePKf0+76vYKGQ5dDmili165FWxwqCjZ+wzuY6UUIq6ZKacQt/uiWSS3R8uissJPG
3OYd5/LnQ2vWcmRFoQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5DOifO2Ha0iQDrMnWVM
UUJy9DqU1TXMBD6srs6HTEB9gex7SqpFTuwPefm0NjBdD8vtvUMiwmNgmmwZW89E
KC3gPE1xV53v1s3dSepahKHlc0CuwqAeJUGE3X/1L3SN+JSQTJskQkxXGq01LQvf
ZWM0Z/dAxhHyVg3NnKOuGMBUDeUXYdMCasI5GXn6BsHmuPWa8B/+vNVOiJJpXHot
b7Q2NcSJKF4yHKgGzzItnSjW93HfGURmMNFJgHLy+F04T7NCLEIUyhmzWT8efCCZ
N2/hEk0Dwjql5KVzMmupLbrK3u5+0Ui7hLTFqnp3IldTeZq6/mEXAsKpytzO+vHd
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18666651278901164592819789840433989495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24687876359124796932683883868186450591850896735566663869570452732227891293733424186409147616899890134327172207437099945884083545613865714030741458128201873504723649020768616567982967201519024460420247529566631220668753457869597963491058321524105588310930248601503805111242709101378040425454911492470374913769754718977192897581285399469227829068941262827508037964097035142835255928285781450983062360176076163514690809557420277838239437364211803032115256670621269011967990217917670459925262872800111112229527959148626210734541643112180045679145622065855201331273513254293020402962549054239530112281039390721432479718769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f745ef21f3f33c412d5fe182b60138aa55bf222
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (847 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.cms.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullyalivethebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullyalivethebook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timshriver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.timothyshriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timothyshriver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timothyshriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timshriver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timothyshriver.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullyalivethebook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timothyshriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.origin.timothy-shriver-prod.production.k1.m1.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightspot.timothyshriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullyalivethebook.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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