cn-northwest-1-onebox.quicksight.amazonaws.cn

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:f5:4f:ae:10:70:24:45:b3:2a:42:a3:91:14:b6:36 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cn-northwest-1-onebox.quicksight.amazonaws.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f5:4f:ae:10:70:24:45:b3:2a:42:a3:91:14:b6:36
Serial Number (int): 5261412818842077491526914403441358390
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 86:7f:c8:7b:fd:cb:84:5f:2d:19:d7:d0:14:54:b8:9a:20:c1:32:ca
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 4f:34:7f:4f:26:68:c7:43:2d:88:19:0d:6a:31:c0:10:37:47:74:5e
Fingerprint (sha256): 3f:17:5d:09:89:e6:ed:af:60:13:67:81:27:42:3a:72:2e:c8:b1:06:e0:c9:64:c9:be:47:32:93:8f:1f:29:a3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate cn-northwest-1-onebox.quicksight.amazonaws.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cn-northwest-1-onebox.quicksight.amazonaws.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cn-northwest-1-onebox.quicksight.amazonaws.cn

Other certificates including the domain name amazonaws.cn

(limited to 100 certificates)
cn-northwest-1.console.amazonaws.cn
spaceneedle-beta-zhy.amazonaws.cn
s3-console-cn-north-1.console.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
aws-console-nav-integ.cn-northwest-1.amazonaws.cn
*.signin.amazonaws.cn
signup-onebox.amazonaws.cn
aws-console-nav-preprod.cn-northwest-1.amazonaws.cn
gamma.api.support.amazonaws.cn
support.amazonaws.cn
signup-gamma.amazonaws.cn
cn-north-1.certificate.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
*.signin.amazonaws.cn
api.support.amazonaws.cn
awstraining-idm-cn-prod.cn-north-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
sg-console-cn-north-1.console.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.console.amazonaws.cn
support.amazonaws.cn
policysim.amazonaws.cn
signup.amazonaws.cn
callback.es-staging.cn-north-1.amazonaws.cn
signup.amazonaws.cn
support.amazonaws.cn
api.support.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
phd.amazonaws.cn
glacier-console-cn-north-1.console.amazonaws.cn
status.amazonaws.cn
acerendering-awsmarketplace.amazonaws.cn
support.amazonaws.cn
koipond.cn-north-1.amazonaws.cn
*.signin.amazonaws.cn
cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn
cn-northwest-1-onebox.quicksight.amazonaws.cn
cn-north-1.console.amazonaws.cn
console.amazonaws.cn
support.amazonaws.cn
status.amazonaws.cn
live.zhy.prod.content-server.marketing.aws.a2z.org.cn
awsmarketplace-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
live.bjs.prod.content-server.marketing.aws.a2z.org.cn
*.signin.amazonaws.cn
cn-north-1.console.amazonaws.cn
docs.amazonaws.cn
scamp-prod.cn-north-1.amazonaws.com.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.quicksight.amazonaws.cn
0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
api.support.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
operatornet-gamma.cn-north-1.amazonaws.cn
cloudfront-console-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
cn-north-1.console.amazonaws.cn
policysim.amazonaws.cn
cn-north-1.console.amazonaws.cn
cn-north-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
awsconsole.cn-north-1.amazonaws.com.cn
policysim.amazonaws.cn
signup.amazonaws.cn
cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
koipond.cn-northwest-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
status.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
phd-console.cn-north-1.amazonaws.cn
awsmarketplace-gamma.amazonaws.cn
operatornet.cn-north-1.amazonaws.cn
awsmarketplace.amazonaws.cn
console.amazonaws.cn
www.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
gamma.support.amazonaws.cn
reactions.marketplace.cn-northwest-1.amazonaws.cn
docs.amazonaws.cn
toucan.amazonaws.cn
signup.amazonaws.cn
signup-gamma.amazonaws.cn
cloudfront-console.amazonaws.cn
sdk-for-sapabap.aws.amazon.com
docs.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
operatornet.cn-northwest-1.amazonaws.cn
squidhat.amazonaws.cn
photon-portal-gamma.cn-northwest-1.aws.amazon.com.cn
policysim.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn

Certificate

The complete raw certificate details for cn-northwest-1-onebox.quicksight.amazonaws.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgIQA/VPrhBwJEWzKkKjkRS2NjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDEwMzAwMDAwMFoXDTI1MDEzMTIzNTk1OVowODE2
MDQGA1UEAxMtY24tbm9ydGh3ZXN0LTEtb25lYm94LnF1aWNrc2lnaHQuYW1hem9u
YXdzLmNuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsR5GFYmsswk
cMwx54r6zJF2vcON57aILOtFEd07NviHZKeSieQ/NcicAZiRPuFtdnMccfEoCZ//
SVHmUC3UW8Yf4UL+Q/Ac2nxCdWmd0770c6fpSSTiSotyDmyiRnvOWL07GxcTQwuX
cNc1OEtbQlDxfTAS9/c62pidj+8/TwsHMIO24Tq+cpoVr9rX1zKiBWkemVFQnwbK
GpGIJaezm21L0qr6eRxeEeyZrRxZVomPAdfs9RxUTPihjTIwjztmQh8HxLfazXSO
Z6bhgzLOYSynD/qKhGzvnPbxv4nEO2Csp3RGNTujzHCI80Bu4XNg/pNVjsaToO+8
0DXH61MQhwIDAQABo4IDBzCCAwMwHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc
+XrrguIwHQYDVR0OBBYEFIZ/yHv9y4RfLRnX0BRUuJogwTLKMDgGA1UdEQQxMC+C
LWNuLW5vcnRod2VzdC0xLW9uZWJveC5xdWlja3NpZ2h0LmFtYXpvbmF3cy5jbjAT
BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu
cjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2
BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJt
MDIuY2VyMAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2
AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjNEEXkcAAAQDAEcw
RQIhAPnkyeN0FJNicEhm7py6DF4yOLrUGhOukrShUKJR+KuOAiACLAplixBRnREX
6MmUbybP/ifQ9QbEYedkz4VSmZHZkAB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWe
uQMv2Q6MLnm4AAABjNEEXk4AAAQDAEcwRQIhAKasHDrTFnD7LAr5VhpU4TpmSMS4
ynLQ5GacBE+Povm2AiAKYP9WdnIRpZ8bgtT5+IvZq2mcXFO2jJyF/v12oCIFxAB3
AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjNEEXnUAAAQDAEgw
RgIhAIYorcm7pN2tgZrih1AwUBd/+eksqfQfobQV9uduqPkmAiEA074iAxWiQHig
plWB7t1JM+HcDurGHxgmtt3Hen4A4VEwDQYJKoZIhvcNAQELBQADggEBAGQZYA8d
fQfSMm1MDZbAjdTKhvEFqtl2CMOfyQU1wo2qD8f7ufFT2NhCD5hfwUDGJY8wcV/G
pOxs+JM/U55+gQW9VzbRN/bDagLS9D7wjnElYqS9aBdWxEs2lw5Lyn9Qsj3DgRtY
cCPye7uAz61YA/X3vVokSjbpnrSsBMDJw3/0YcOVKMlpNK9pvBk1mUrMzGIFtbIf
uqhqluDPR+1hwwgTUklv7l88CI5YDVbfp0W7U64SCjz4S64FiM30rDXcqglmi3Q2
n4+kYcbcxmEBxAJVJg2KmhTTVHL4wrhcxy7Z5+syhSoXcRtEroOcAPetgBdxU5jq
bRsbLYXa3kMoPBg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsR5GFYmsswkcMwx54r6
zJF2vcON57aILOtFEd07NviHZKeSieQ/NcicAZiRPuFtdnMccfEoCZ//SVHmUC3U
W8Yf4UL+Q/Ac2nxCdWmd0770c6fpSSTiSotyDmyiRnvOWL07GxcTQwuXcNc1OEtb
QlDxfTAS9/c62pidj+8/TwsHMIO24Tq+cpoVr9rX1zKiBWkemVFQnwbKGpGIJaez
m21L0qr6eRxeEeyZrRxZVomPAdfs9RxUTPihjTIwjztmQh8HxLfazXSOZ6bhgzLO
YSynD/qKhGzvnPbxv4nEO2Csp3RGNTujzHCI80Bu4XNg/pNVjsaToO+80DXH61MQ
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5261412818842077491526914403441358390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cn-northwest-1-onebox.quicksight.amazonaws.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25092068844120474495767809646529510705318681549701887827905451022553591482175433737653663023287461444402560792318600753164295750209438906405565415500438321284426833855315039755739049474271429268615736390169679655271863684506264895302837759834200995476215379883705979652732953874514915560135658736315130900942837660172790570018950894296445733030015770863806054892774347053159979449086629661228165155282693783161448021780773367527497208305475051642228358423132760855520603575128182935947107690991054401019064678921202411813997067424426633732214822665621065009919469111719735748027645478298567679969707627106811631571079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							867fc87bfdcb845f2d19d7d01454b89a20c132ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn-northwest-1-onebox.quicksight.amazonaws.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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