media-mfe.claims.c1.statefarm

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:10:61:91:f8:be:51:2e:9d:af:2a:93:1a:59:4e:c4 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=media-mfe.claims.c1.statefarm

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:10:61:91:f8:be:51:2e:9d:af:2a:93:1a:59:4e:c4
Serial Number (int): 18694247649522859956087904347451117252
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:eb:51:f0:3a:46:9e:f5:3f:41:60:08:fb:7e:8c:84:5d:ae:d9:33
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 6c:de:17:66:b5:73:d6:d8:80:d0:02:39:91:6a:b7:8d:94:be:a0:b6
Fingerprint (sha256): 38:45:62:e1:3b:94:bc:cb:7f:a7:6a:54:5d:17:ae:cc:18:7a:68:63:00:06:c5:9a:21:75:a4:c9:37:c2:9b:52

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate media-mfe.claims.c1.statefarm

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media-mfe.claims.c1.statefarm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media-mfe.claims.c1.statefarm
media-mfe.claims.statefarm.com

Other certificates including the domain name c1.statefarm

(limited to 100 certificates)
repaireligibility-1733283.claims.test.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
rentaleligibility-1713142.claims.test.c1.statefarm
status-guidance.claims.c1.statefarm
test.driveforsafety.test.goodneighbors.com
ocd.research.c1.statefarm
driveforsafety.whs.c1.statefarm
fireqfcapi.claimsvc.sandbox.test.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
repaireligibility-1727262.claims.test.c1.statefarm
roadsideassistance.claims.test.statefarm.com
*.tl1.c1.statefarm
api.claims.sandbox.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
info-exp.claimsvc.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
api.infosec.c1.statefarm
*.oic.claims.test.c1.statefarm
arsondog.whs.research.c1.statefarm
photovideocapture.claims.test.statefarm.com
api.infosec.c1.statefarm
rentaleligibility-1290042.claims.test.c1.statefarm
media-mfe.claims.sandbox.c1.statefarm
providers.rental.claimsvc.c1.statefarm
driveforsafety.whs.c1.statefarm
checkout.hub.claims.statefarm.com
cornhole-api.xrhost.c1.statefarm
managestorage.claimsvc.sandbox.test.c1.statefarm
qualfc-env4.claims.sandbox.test.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
repaireligibility-1735606.claims.test.c1.statefarm
facade-env4.ecrmclaims.amccint.test.c1.statefarm
roadsideassistance.claims.statefarm.com
sf-aqua-security.research.c1.statefarm
uimod-mfe.dcpm-sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
cornhole-api.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
api.rapid-reimbursement.claims.s.test.c1.statefarm
photovideocapture.claims.test.c1.statefarm
api.infosec.c1.statefarm
driveforsafety.whs.test.c1.statefarm
manage-tasks.claimsvc.sandbox.test.c1.statefarm
rentaleligibility-1292675.claims.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
sf-aqua-security.research.c1.statefarm
repaireligibility-1730977.claims.test.c1.statefarm
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
gnc-virtualmeeting.amccint.c1.statefarm
rss.claims.test.c1.statefarm
mddl-dev.c1.statefarm
digitalqfc.claims.test.c1.statefarm
rentaleligibility-1736987.claims.test.c1.statefarm
ocd.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
premiumchange-api.pcu.conncen.c1.statefarm
driveforsafety.whs.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
ingest-vaaei8.sfconnect.digxp.test.c1.statefarm
datalake.test.c1.statefarm
driveforsafety.whs.c1.statefarm
driveforsafety.whs.test.c1.statefarm
dev.armapi.test.c1.statefarm
repaireligibility-1706942.claims.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
auth-utl.claimsvc.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
rentaleligibility-1290880.claims.test.c1.statefarm
my-neighborhood.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
facade.ecrmclaims.amccint.c1.statefarm
towexperienceapi-exp.claimsvc.test.c1.statefarm
env1.autoquotebuy.pcmngd01.test.c1.statefarm
api.claims.test.c1.statefarm
repaireligibility-1733275.claims.test.c1.statefarm
media-mfe-shell.claims.sandbox.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
photovideocapture.claims.test.statefarm.com
hub.claims.statefarm.com
driveforsafety.whs.test.c1.statefarm
repaireligibility-1732729.claims.test.c1.statefarm
bank-callback-api.settle.test.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
auth.proofing.cimdev.test.c1.statefarm
homesafety.ting.c1.statefarm
perf.checkout.autoquotebuy.pcmngd01.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
driveforsafety.whs.c1.statefarm
repaireligibility-1725869.claims.test.c1.statefarm
rentaleligibility-1736388.claims.test.c1.statefarm
api.claims.rapid-reimbursement.c1.statefarm
repaireligibility-1725869.claims.test.c1.statefarm
repaireligibility-1733283.claims.test.c1.statefarm

Certificate

The complete raw certificate details for media-mfe.claims.c1.statefarm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgIQDhBhkfi+US6dryqTGllOxDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTExNTAwMDAwMFoXDTI0MTIxNDIzNTk1OVowKDEm
MCQGA1UEAxMdbWVkaWEtbWZlLmNsYWltcy5jMS5zdGF0ZWZhcm0wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW6lepnFnb34WUeQcR0BD/hhyfEXXTq4Nw
K+0cc/GZ+XqLGOj+w3kmAF0dV4Il+M7fgQDQjfncbGMTr3Xdjxsu8lq8xsfKXOOy
FcGQh6FFYD2fKTYlgvTqWCXl7TeOdFX5IuhCnFYlWVeb4QteSZULwci0e59sjvVW
qVmY29oA4wIAYdH4nhGFohSGI/QpqfI3q1BPN9cvG/d3S1UgFLIf2ntUIG/UEPmH
lQOYIWdogik/yK7wDxP/oC6oPiEFV0WBkL3T02C+R/iBLpj9qLsozid+kB0RFQIh
miV4OQp0TDChl1Y/7UH6o6qz8wMoHeNAgeSu8N8xBJdHTNOWWPCHAgMBAAGjggMW
MIIDEjAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQU
q+tR8DpGnvU/QWAI+36MhF2u2TMwSAYDVR0RBEEwP4IdbWVkaWEtbWZlLmNsYWlt
cy5jMS5zdGF0ZWZhcm2CHm1lZGlhLW1mZS5jbGFpbXMuc3RhdGVmYXJtLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu
cjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2
BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJt
MDMuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2
AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi9CUJ+YAAAQDAEcw
RQIgEV2LyxgVHvCt/8FMCzoZEmRJLs8ER/YZ4vR8nv0E9jACIQCTa9wbxRjKVpgu
p+vuroPL5iBUTxdlQ9Nx0Zv2/h718AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABi9CUJ9cAAAQDAEcwRQIgXTknpQ6vtbiCkJKen3srGbVO5zxs
mor0JeFH6tdr96sCIQCllVz5FD/xp46fYBIOZB2nP+bvZsLJkGgrIjpgKOzSJwB2
AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABi9CUKBYAAAQDAEcw
RQIgQGXDUviF7D/spG4JerjLVeV2rdwMZ52mZnnsHlgjOW0CIQC4eJNezwvIXWdv
EUdsZ7kpXiOGXh1j4QN4VtejhT6dRzANBgkqhkiG9w0BAQsFAAOCAQEAI4hsYpCG
XctYmJgI02wqAkGsHgSAOkUDlsYXKZsV3ztusJ9guXVjfayCIisVp4R+pT/lzNZd
9Rk1z+E5AI/RrRcEnfBHiqodBqcoT6T4AvaySsHELH2MBALODG5AJTb+JfUeEXqG
Lg217lmW84K1VlhjwYdUo+W5gHzWFl3OdGcJUGo3DKNebHhk3rDJW1VZziQ33lBF
RnxPOCUA0I6jP5o6C0ITNEJRfhHVm5osDYhUc6VBUx7HxaTYHOE4TPF/3ABaj9M+
4vtOU1usVQgidymYCUv6sZnG79pRoJa8dM2PsZQ6tb6PeP5XXUc8IXgcXcpM3B/S
eiHqe3/+E2pVsA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlupXqZxZ29+FlHkHEdAQ
/4YcnxF106uDcCvtHHPxmfl6ixjo/sN5JgBdHVeCJfjO34EA0I353GxjE6913Y8b
LvJavMbHylzjshXBkIehRWA9nyk2JYL06lgl5e03jnRV+SLoQpxWJVlXm+ELXkmV
C8HItHufbI71VqlZmNvaAOMCAGHR+J4RhaIUhiP0KanyN6tQTzfXLxv3d0tVIBSy
H9p7VCBv1BD5h5UDmCFnaIIpP8iu8A8T/6AuqD4hBVdFgZC909Ngvkf4gS6Y/ai7
KM4nfpAdERUCIZoleDkKdEwwoZdWP+1B+qOqs/MDKB3jQIHkrvDfMQSXR0zTlljw
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18694247649522859956087904347451117252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media-mfe.claims.c1.statefarm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19051304304958155230161052634683059101107120865814201187298285409835439486071616056785023924274419723286020136029137351479419293353189818686133661057131083149280308585616278228384188117508431546381086530158420623655342570001186204674283693430111915321828018601560426510786630421206297945161025764397662990356826455842350384225406347120705775981262463991918949331299049137804273476798318017285375112425205721291687263098725576778140467466559777210277113790610392259861364470966585564564277384469502628372260910079790275623621983755484253170720178539254235061648246878322265617198702842237323897288182076323033572241543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abeb51f03a469ef53f416008fb7e8c845daed933
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-mfe.claims.c1.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-mfe.claims.statefarm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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