*.armstrong-staging.edgenuityapp.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:8b:12:6d:8b:df:e4:bd:eb:a2:72:64:a6:70:2c:87 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.armstrong-staging.edgenuityapp.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:8b:12:6d:8b:df:e4:bd:eb:a2:72:64:a6:70:2c:87
Serial Number (int): 19331294966856830071812476971173031047
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 66:16:93:40:d5:99:bc:e9:a6:45:c1:71:8e:8a:3b:7f:0c:a2:6b:bf
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 98:d4:9b:ac:4d:c7:ab:ce:79:53:82:34:02:f4:20:8c:1d:ea:34:0d
Fingerprint (sha256): 3c:cd:2a:57:96:97:e5:38:64:5a:93:16:89:ff:cc:8f:89:8d:30:04:05:19:02:4e:a0:03:68:e4:62:31:ef:39

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.armstrong-staging.edgenuityapp.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.armstrong-staging.edgenuityapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.armstrong-staging.edgenuityapp.com
student-progress-report.mp.staging.edgenuityapp.com
admin.mp.staging.edgenuityapp.com
mpng-component-library.mp.staging.edgenuityapp.com
mpng-router.mp.staging.edgenuityapp.com
student.mp.staging.edgenuityapp.com
class-progress-report.mp.staging.edgenuityapp.com
student-ilp-report.mp.staging.edgenuityapp.com
class-summary-report.mp.staging.edgenuityapp.com

Other certificates including the domain name edgenuityapp.com

(limited to 100 certificates)
*.cosmos-prod.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.cwng-staging.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.lmsadmin-qa.edgenuityapp.com
*.licenseservice-dev.edgenuityapp.com
subscriptions-qa.edgenuityapp.com
*.armstrong-dev.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
subscriptions-staging.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.zoomservice-prod.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.strategicapps-staging.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.assessment-dev.il-apps.com
*.armstrong-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.lmsadmin-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.armstrong-staging.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.lmsadmin-qa-app.wna.cloud
*.strategicapps-staging.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
*.edgelms-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-staging.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.licenseservice-prod.edgenuityapp.com
*.ops.wna.cloud
*.sequencer-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.assessment-prod.il-apps.com
*.armstrong-dev.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.sequencer-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.cwng-integrations-dev.edgenuityapp.com
*.sequencer-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.doolittle-nonprod.wna.cloud
*.assessment-prod-app.wna.cloud
*.cwng-prod.edgenuityapp.com
*.lmsadmin-dev-app.wna.cloud
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.strategicapps-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com

Certificate

The complete raw certificate details for *.armstrong-staging.edgenuityapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHajCCBlKgAwIBAgIQDosSbYvf5L3ronJkpnAshzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDIyMTAwMDAwMFoXDTIzMTAyNjIzNTk1OVowLzEt
MCsGA1UEAwwkKi5hcm1zdHJvbmctc3RhZ2luZy5lZGdlbnVpdHlhcHAuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqFn4l+YriD020A/wYYu+J4d
5yhpgHwe8U0EGsc0Yjz26TfFmm/c8rMWh4EsAl/M4lZe+RnQnKhXehLc3O0/hMCB
6xew7Z8FITpU69R+Gm8GJFOqwLBytdhnYm0MjbfH8Gu37allrT7tMyd36iQ2Fvqg
88ZWjRVkTA+kZowbKI0RzJL0SH1hVCxUaS/txqItt6nfTu+0mvpcP4+ulflayWSP
tFneJ8fCJ40nLOPAHPN1TUUQb12QRDu3sXaahYrheXfbDR1RTJ8WpW1s/pFgKfM9
xSDHc8lzH6P6atKcZt35II/4SQt5gCg6ZfY41C7nwOROmuB6w3cWmULlBCT++QID
AQABo4IEczCCBG8wHwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYD
VR0OBBYEFGYWk0DVmbzppkXBcY6KO38Momu/MIIBogYDVR0RBIIBmTCCAZWCJCou
YXJtc3Ryb25nLXN0YWdpbmcuZWRnZW51aXR5YXBwLmNvbYIzc3R1ZGVudC1wcm9n
cmVzcy1yZXBvcnQubXAuc3RhZ2luZy5lZGdlbnVpdHlhcHAuY29tgiFhZG1pbi5t
cC5zdGFnaW5nLmVkZ2VudWl0eWFwcC5jb22CMm1wbmctY29tcG9uZW50LWxpYnJh
cnkubXAuc3RhZ2luZy5lZGdlbnVpdHlhcHAuY29tgidtcG5nLXJvdXRlci5tcC5z
dGFnaW5nLmVkZ2VudWl0eWFwcC5jb22CI3N0dWRlbnQubXAuc3RhZ2luZy5lZGdl
bnVpdHlhcHAuY29tgjFjbGFzcy1wcm9ncmVzcy1yZXBvcnQubXAuc3RhZ2luZy5l
ZGdlbnVpdHlhcHAuY29tgi5zdHVkZW50LWlscC1yZXBvcnQubXAuc3RhZ2luZy5l
ZGdlbnVpdHlhcHAuY29tgjBjbGFzcy1zdW1tYXJ5LXJlcG9ydC5tcC5zdGFnaW5n
LmVkZ2VudWl0eWFwcC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy
bTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwB
AgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0w
MS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEu
YW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYB
BAHWeQIEAgSCAW8EggFrAWkAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9
bQa9bgAAAYZxyz0sAAAEAwBIMEYCIQDdc2Xi8uSPr4wlha6MnR3k7phty4nsMtET
Dv2LbSWCKQIhAPj5voPnPdNel+mz+UeR4uKaVbkHXRdh0uOKnliFHuNvAHYAs3N3
B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGGccs9sgAABAMARzBFAiAH
I6H1MgMpCfw4OZ8tAYQd3j8Pv53wt48HsHDIneZuhAIhAKhHGb+asSOcAyH0Wq1d
QwncCiaPMF/ob9mp8RPvpLlgAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG
NOvcgooAAAGGccs9gQAABAMARzBFAiA4wrSVvFifa68wF0mGQS0B8mZ7smjYWhsU
Y22uRLndSwIhAP15gHfvv4thTq0Zt4M71zOF84n5dfs2/vLcQDS6NJ4CMA0GCSqG
SIb3DQEBCwUAA4IBAQC3zXknzB4q4kgmhcH07z6hQvgFn499bSLFiiqSZvZmXL8D
BiKRf8W0+g6H0DluNXme0cPLjbBBwhcSEL0zMyRG8y78e+wFMLKQV4qejxZJwAid
fRL2IFgBo6qzV+Y+dL30lPFvyIRIA7lrINqPSgWXXOF5QFRImX3jXwIcC1rqGaux
s5Fuz6xuBA0G520bJA00UyfS/xmiQYXmJp2Co9CPo0FaQEKOoG1c447wXs3GO0+S
d6iCRR3sgrQtDhwFayRaZoDvJqMl9m49S0Inpklg2vG0+HnpSPPQENwu6Zsc1OKQ
HYcU1T3XPkyV8raWU+cnNJ0p/hYsZGv7OtajHIAi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqFn4l+YriD020A/wYYu
+J4d5yhpgHwe8U0EGsc0Yjz26TfFmm/c8rMWh4EsAl/M4lZe+RnQnKhXehLc3O0/
hMCB6xew7Z8FITpU69R+Gm8GJFOqwLBytdhnYm0MjbfH8Gu37allrT7tMyd36iQ2
Fvqg88ZWjRVkTA+kZowbKI0RzJL0SH1hVCxUaS/txqItt6nfTu+0mvpcP4+ulfla
yWSPtFneJ8fCJ40nLOPAHPN1TUUQb12QRDu3sXaahYrheXfbDR1RTJ8WpW1s/pFg
KfM9xSDHc8lzH6P6atKcZt35II/4SQt5gCg6ZfY41C7nwOROmuB6w3cWmULlBCT+
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19331294966856830071812476971173031047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.armstrong-staging.edgenuityapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22550010449360475666941621178722831286868979644396964909846610996872223555881317382811119696465977415119012494843717535236679537341892312938125077941649156438515110762934016561643533533075879527597627582289518859637142463559019679088802944398506005239620672293708961632686882351858461080529352969964089202975341394516240519376299117015307855956366479693560627518339399955569926183933507589236331469920533417509302963991232086391152880411258375936157488010952743704973691600777870082197706947350576474882483304477079873551916034692986693343097872561005238720844127556626307730735707993554867067656188089845545794076409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66169340d599bce9a645c1718e8a3b7f0ca26bbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armstrong-staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student-progress-report.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpng-component-library.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpng-router.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class-progress-report.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student-ilp-report.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'class-summary-report.mp.staging.edgenuityapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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