prod.eu-west-1.mdcs.mshop.amazon.dev

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:60:08:53:29:90:22:a9:2b:6a:6c:99:6d:95:36:62 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.eu-west-1.mdcs.mshop.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:60:08:53:29:90:22:a9:2b:6a:6c:99:6d:95:36:62
Serial Number (int): 19107821287485617972083891074799842914
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bc:1a:ab:12:e6:78:99:92:ae:28:b1:38:73:02:8f:15:2c:5d:4e:fb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 9c:ba:55:21:3b:09:b0:c5:86:21:6c:bd:12:2b:05:25:dc:d0:e1:08
Fingerprint (sha256): 3b:94:57:09:d1:3f:33:f8:35:b4:ea:c2:ba:73:0f:d1:7a:9b:09:cd:7c:8b:14:9c:16:6b:7b:49:ad:66:fc:62

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate prod.eu-west-1.mdcs.mshop.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.eu-west-1.mdcs.mshop.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.eu-west-1.mdcs.mshop.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
regular.us-east-1.alpha.atta.kaspian.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
*.timlawso.physical.advertising.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
lialx.test.attribution.privacy.amazon.dev
coredump-parser.eink.amazon.dev
auth.prototype.alps.music.amazon.dev
andrena.niksinn.icon.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
*.beta.psidr.payments-security.amazon.dev
turn.ring-mobility.devices.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
beta.cruzoliv.people.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
api.fcmap.swanwes.people.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
beta.us-west-2.mdcs.mshop.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
dub.beta.unicorn-phoenix.lending.payments.amazon.dev
scorecard.ads.amazon.dev
zhenzihu.dev.mmt-validation.people-engine.amazon.dev
prod.luma.workshop.mathieud.people.amazon.dev
andrena.niksinn.icon.amazon.dev
fpd.sumantbh.icon.amazon.dev
aax.online-panel.advertising.amazon.dev
gulbt-failure-analysis.bsxqa.digital-books.amazon.dev
jp.problemsolve-gamma.dolphinprod.last-mile.amazon.dev
static.alpha.luma.workshop.mathieud.people.amazon.dev
dashboard.beta.security-health-monitor.acs.amazon.dev
igl.search.inside.amazon.dev
*.beta.psidr.payments-security.amazon.dev
cdj.invite.prototype.alps.music.amazon.dev
ui.pvsin.last-mile.amazon.dev
virtual.opstechit.amazon.dev
beta.step-up-tool.rbs.amazon.dev
matbacic.search.inside.amazon.dev
user.prototype.alps.music.amazon.dev
*.alpha.mouse.payments-security.amazon.dev
beta.supernova-selfservice.amazon.dev
gamma.us-west-2.mdcs.mshop.amazon.dev
us-west-2.alpha.shbhvya.people.amazon.dev
avus-na-onebox.upsell.video.alexa.amazon.dev
*.search.acp.selling-partners.amazon.dev
dev4.cyclone.gdq.amazon.dev
upload-flexsimwebapp.wwde.amazon.dev
*.rongzhou.people.amazon.dev
us-west-2.alpha.lab.dml.alexa.amazon.dev
gamma.cubeout.grokalert.last-mile.amazon.dev
placement.proxy.gamma.us-east-1.zds.arc.hit.amazon.dev
abhisaha.rpmsui.cloudtune.amazon.dev
api.beta.supernova-selfservice.amazon.dev
lease-management.gunapal.people.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
beta.cgs.cmt.amazon.dev
*.app-flow.mshop.amazon.dev
wichor.nanobots.alexa.amazon.dev
www.jiegao.people.amazon.dev
testrail.primeair.amazon.dev
avpes-na-beta.purchase.video.alexa.amazon.dev
eu-west-1.prod.lab.dml.alexa.amazon.dev
beta.gm.plukemea.people.amazon.dev
alpha.pdx.external-gateway.eve.alexa.amazon.dev
docs.datapath.amazon.dev
alpha-test.timeoff.atoz.amazon.dev
jxf.jxf.people.amazon.dev
gamkavya-cln-tracker.bsxqa.digital-books.amazon.dev
api.sanderavdev.compdomain.compensation.amazon.dev
na.datastash-gamma.pacman.last-mile.amazon.dev
tot.aft.amazon.dev
alpha.audit.tracker.ab.amazon.dev
*.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
andrena-test.niksinn.icon.amazon.dev
jingjp.test.attribution.privacy.amazon.dev
aim-dev-kdc.internal-audit.amazon.dev
beta.secpar.bm.amazon.dev
api.integ.mx-internal.igt.physical-stores.amazon.dev
prod.api.scrubjay.birds.amazon.dev
beta.use1.hitas.icon.amazon.dev
api.us-west-2.alpha.shopper-gateway.subs.f3.amazon.dev
master-feamazon.prod-api.transaction.fuse.amazon.dev
fokker.irx.icon.amazon.dev
*.accounting-royalty.digital.amazon.dev
*.beta.psidr.payments-security.amazon.dev
jayara.beta.step-up-tool.rbs.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev

Certificate

The complete raw certificate details for prod.eu-west-1.mdcs.mshop.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEhzCCA2+gAwIBAgIQDmAIUymQIqkramyZbZU2YjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIyMTIwMjAwMDAwMFoXDTI0MDEwMTIzNTk1OVowLzEt
MCsGA1UEAxMkcHJvZC5ldS13ZXN0LTEubWRjcy5tc2hvcC5hbWF6b24uZGV2MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohyzxF80fioVLUF6QSCykOX2
h2OEj2r2JfmB6mHip24IrB3swsnjTSDL15WWpARTajiqvUSgmn3QzRuUs7MRI87I
p63vdvo5wr5r2XQEnOIlAddGaV+WjcgqfqDn6RqIQ5GQwEsNZoztlrBatLF5l3zc
+fEZY7Yr0VYGOXDFhGjOU90tqEA+wDOzHIIbYZuFrYDxdWZpIlw1Cn8klwnSC+YS
/xdkHqn6R8tLc2p17l5FOaHjlSyEjOtjlGBKGmRqiSlP5j/dmLK0peItbkoxKaUD
BFEHkC1/PTKs+AtT5TNEn4JAzaW7dhD++UndnaerQREYArQU/F12ij0xPjTRAQID
AQABo4IBkDCCAYwwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYD
VR0OBBYEFLwaqxLmeJmSriixOHMCjxUsXU77MC8GA1UdEQQoMCaCJHByb2QuZXUt
d2VzdC0xLm1kY3MubXNob3AuYW1hem9uLmRldjAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0
dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAE
DDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6
Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDov
L2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQC
MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGxfvRfe
dhgGdy6kzP2DWJaQ6ERWCkDiDmoKyylNbUHLzquGmMcJ9yfEken7ANv4rUhMSGLp
jZSNkEzAqC3RixjwoKHajJsZf1cvhBzI5cDpDt6JXZorM94pzBEt2+vC81y4uKDO
78Esmjz9MfdkSK/j2b6YyvLYcPZdqpqmPNuN3zlGgNK4mS7KEMOL2fdcSUyC+1G4
G80/eThduTVv1KFLfFoT+1rum8yeW74b+O91ksfPL3SHC2njxHDibSQPHJ2fKDnX
MiaoBgEXT/u2mGSFZ/7qFu5HvPFUjtiC6kYmpY80Rj8hCNBviKebyJswTK3RjjeR
zwAfdf+RSKXw2Zs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohyzxF80fioVLUF6QSCy
kOX2h2OEj2r2JfmB6mHip24IrB3swsnjTSDL15WWpARTajiqvUSgmn3QzRuUs7MR
I87Ip63vdvo5wr5r2XQEnOIlAddGaV+WjcgqfqDn6RqIQ5GQwEsNZoztlrBatLF5
l3zc+fEZY7Yr0VYGOXDFhGjOU90tqEA+wDOzHIIbYZuFrYDxdWZpIlw1Cn8klwnS
C+YS/xdkHqn6R8tLc2p17l5FOaHjlSyEjOtjlGBKGmRqiSlP5j/dmLK0peItbkox
KaUDBFEHkC1/PTKs+AtT5TNEn4JAzaW7dhD++UndnaerQREYArQU/F12ij0xPjTR
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19107821287485617972083891074799842914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.eu-west-1.mdcs.mshop.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20464758994302155944391176003826728810110976653234784463699551907880939877949628447704434350617010675793281370553599605606397134001049331572404067420280461039843028731437241056068561574517879774222933779420388912679342230299251768687491402608401413929185644603063411280876469653310796939202378575146865808577719389634671848710492869721118080240968901766402674577847148263108396864107100328964739758317465846912672230274660195796496277031412758933968471423868128372196481629163527197884007595698512897075368037140030230366777403806581648312501819806605267640363582216454671937262679947589734690304151138660239271055617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc1aab12e6789992ae28b13873028f152c5d4efb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.eu-west-1.mdcs.mshop.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c5fbd17de761806772ea4ccfd83589690e844560a40e20e6a0acb294d6d41cbceab8698c709f727c491e9fb00dbf8ad484c4862e98d948d904cc0a82dd18b18f0a0a1da8c9b197f572f841cc8e5c0e90ede895d9a2b33de29cc112ddbebc2f35cb8b8a0ceefc12c9a3cfd31f76448afe3d9be98caf2d870f65daa9aa63cdb8ddf394680d2b8992eca10c38bd9f75c494c82fb51b81bcd3f79385db9356fd4a14b7c5a13fb5aee9bcc9e5bbe1bf8ef7592c7cf2f74870b69e3c470e26d240f1c9d9f2839d73226a80601174ffbb698648567feea16ee47bcf1548ed882ea4626a58f34463f2108d06f88a79bc89b304cadd18e3791cf001f75ff9148a5f0d99b