onrech.at

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:8a:39:8b:3f:b8:88:f3:12:da:d6:d1:d9:26:7a:e0 was issued on by Amazon.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=onrech.at

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:8a:39:8b:3f:b8:88:f3:12:da:d6:d1:d9:26:7a:e0
Serial Number (int): 17997668041464354883756736488371813088
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 43:5f:9f:f8:06:63:71:bc:61:7b:6b:2d:ec:ca:87:f7:59:3c:0f:e7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b1:6a:f0:33:52:db:b4:da:13:c9:58:28:0e:9f:fe:eb:78:39:53:b6
Fingerprint (sha256): 39:1a:14:6e:ac:cc:8e:5e:96:1c:6a:ed:8a:1e:7f:64:94:a3:aa:55:ed:b3:49:eb:9f:b1:59:2c:88:7c:87:cc

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate onrech.at

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for onrech.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

onrech.at
bestinvoicing.co.uk
ontimo.gr
onfakt.no
*.onfatt.it
onfakt.fi
*.onfakt.no
*.ontimo.gr
*.onfatt.mt
*.onfakt.fi
onrech.ch
*.bestinvoicing.co.uk
*.onfakt.bg
*.onfact.be
ontimo.cy
bestinvoicing.mt
*.onrech.ch
onfact.be
*.onlask.fi
onfakt.se
onfact.nl
enfact.be
onfact.ro
onfakt.bg
*.onfakt.se
*.enfact.be
*.onfakt.sk
onfat.cy
infakt.lt
onreik.is
enfact.lu
onrech.be
onfakt.sk
*.infakt.lt
*.onrech.at
*.nafakt.hr
onfat.pt
onrech.it
onfat.pl
*.bestinvoicing.com
*.ontimo.cy
*.onfakt.cz
*.onrech.be
onfatt.ch
*.bestinvoicing.mt
onfakt.cz
*.onfatt.ch
*.onfat.cy
*.onfakt.dk
*.onzsam.hu
onrech.lu
onarvel.ee
nafakt.hr
*.onrech.it
*.onfat.pl
*.onarvel.ee
bestinvoicing.com
onfakt.dk
onzsam.hu
*.enfact.lu
*.onreik.is
*.onfat.pt
*.onfact.es
*.enfact.fr
tireki.lv
onfact.es
*.onfactur.pl
*.tireki.lv
onrech.de
onfactur.pl
enfact.fr
nazara.si
*.onfact.nl
*.onfact.ro
*.onrech.lu
enfact.ch
*.nazara.si
onfatt.it
*.enfact.ch
*.onrech.de
onfatt.mt

Other certificates including the domain name onrech.at

(limited to 100 certificates)
store.51meters.com
onrech.at
share.node-tool.com
onrech.at
wcpl.patelgopal.com
beta.submarin.online
beta.submarin.online
www.graefe-baugruppe.de
chauyan.dev
fn.izipay.pe
onrech.at
faces-dev.royalcollege.ca
onrech.at
kaufmandevelopmentgroup.com
api.octo.app
link.vvvip.app
momkenacademy.me
kaufmandevelopmentgroup.com
d.iplan.ai
www.1first.io
games.gruppohera.it
www.selfprint.me
wcpl.patelgopal.com
u2t.pmuc.or.th
sys.malooba.app
fourinarow.foxcitygames.com
fn.izipay.pe
www.claire-and-joe.com
hire.darren.world

Certificate

The complete raw certificate details for onrech.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z+BNuncBy5KcywpyAEI
Zcx4yFX0sq6ZLzTbBWCHJSQl2xJPa+lOdKerprE3CA0/XGtDLg6H0z6dCVFbSxT+
8ex8YEXHrsvFGMFuJZlIp2AxkLv0PjuIu4BDWQyJ+rMkehHLsPec5TndHq9r9cH0
L5tcfU/i55nm0xbUTXAspbJaqc+pg3DIlY89vVblHSfMzJSiVeWMlpRTNsNstdTy
r5T79zaXQQosRD1d5ODxIMpjYZji2uzkT4B/P9z/hYOyMz4Gim5bJ8zahicj7f8m
QjAqgZo4ujhw1EqONcKkfPST4zhBONj7VptEtarF7bZ6GTuIcvlT5BjJfgyrdYpN
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17997668041464354883756736488371813088
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'onrech.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29997132997804615960571020396018486156010203554456079461616469289831825132143451203187334912171999803625444515893414054304496116459148972059823239836982568190330166111615568741486851414146597073869939231245360658674220511199835081983950789855176566395114205424299719254343930421654472927002613579978109613351097308762593699151734594621982722169175579334708710033668637876230821640811427739713850509847630562289944342688963492716173402744698867650238091713865208953525164710579148526426765869919958701463333930230977331876900297770180942982100397888230939827910001414689083823105296378155093435713824212924610101530089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							435f9ff8066371bc617b6b2decca87f7593c0fe7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1027 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinvoicing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontimo.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfatt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontimo.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfatt.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestinvoicing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontimo.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinvoicing.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlask.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfat.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infakt.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onreik.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infakt.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nafakt.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestinvoicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontimo.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestinvoicing.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfatt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfat.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfakt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onzsam.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onarvel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nafakt.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onarvel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestinvoicing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfakt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onzsam.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onreik.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tireki.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfact.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfactur.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tireki.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfactur.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazara.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onfact.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfact.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nazara.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfatt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfact.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfatt.mt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018694dbf0df0000040300473045022015c8150fd4135d06b3485c6c0f9e5d11e0ea3aec4e1926d536ce47a36e3fbbec022100c5c5288b1b9fd5e10d1d38dc65f74102f1bf128186ae7701b3085519adf7c4e3007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018694dbf1050000040300473045022100cdde451f7e37796f6b9d9aa2d63f4ff39218b8198a3b3bf23265fedbc9928717022034df1b77ea19579e99453927cceeb2b69d1f7c4bc384898898b0cb60c0d8ad86007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018694dbf0a200000403004730450221008a2e79af3433300c6dae351b57f8d062c44a23225438f012e87843e3f4b24ac102202bd445a82cad4355d0f41be9e2e535af211f0fc9159d91bd14e72b719d25a5df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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