*.prod.ps.axelspringer.de

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:a8:1b:a2:53:11:1a:76:e3:f1:d8:a7:44:07:0c:9a was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.prod.ps.axelspringer.de

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:a8:1b:a2:53:11:1a:76:e3:f1:d8:a7:44:07:0c:9a
Serial Number (int): 16823602307382399951137537074116627610
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0b:3c:4e:c5:93:51:fa:b3:40:4d:b8:ec:fd:ba:db:31:a8:26:21:00
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 77:8c:49:eb:47:6b:91:da:b8:1c:6e:a7:19:ca:e4:fd:6e:fb:65:8b
Fingerprint (sha256): 3f:68:f7:30:89:7f:33:ff:20:cb:5f:51:b4:01:46:e0:4d:25:4f:0c:f7:ad:15:e2:ba:9a:af:98:12:01:1b:a3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.prod.ps.axelspringer.de

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prod.ps.axelspringer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prod.ps.axelspringer.de
*.prod.auth.mypass.de
*.welt.de
*.prod.auth.autobild.de
*.uat.ps.welt.de
*.uat.auth.axelspringer.de
*.prod.auth.axelspringer.de
*.uat.auth.mypass.de
*.uat.auth.computerbild.de
*.prod.ps.bild.de
*.prod.auth.computerbild.de
*.bild.de
*.uat.ps.spring-media.de
*.uat.ps.bild.de
*.uat.auth.sportbild.de
*.uat.auth.autobild.de
*.prod.auth.sportbild.de
*.prod.ps.mypass.de
meinkonto.axelspringer.de
*.prod.ps.spring-media.de
*.uat.ps.axelspringer.de
*.mypass.de
*.uat.ps.mypass.de
*.prod.ps.welt.de

Other certificates including the domain name axelspringer.de

(limited to 100 certificates)
mypersonal.axelspringer.de
*.axelspringer.de
*.prod.ps.axelspringer.de
el-shop.welt.de
career.axelspringer.de
ideationcouncil.axelspringer.de
*.prod.ps.bild.de
axelspringer.de
klick.regionalvermarktung.axelspringer.de
*.prod.ps.axelspringer.de
marketplace.axelspringer.de
nachhaltigkeit.axelspringer.de
go.axelspringer.de
go.axelspringer.de
efa.axelspringer.de
axelspringer.de
www.axelspringer.de
*.prod.ps.axelspringer.de
mail.oculus.axelspringer.de
*.prod.ps.axelspringer.de
nachhaltigkeit.axelspringer.de
axelspringer.de
fs.axelspringer.de
contracttool.axelspringer.de
www.axelspringer.de
lyncdiscover.axelspringer.de
*.prod.ps.axelspringer.de
www.axelspringer.de
regio360.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
earlybird.axelspringer.de
*.prod.ps.axelspringer.de
www.ideationcouncil.axelspringer.de
somaetbws.axelspringer.de
karriere.axelspringer.de
remote.axelspringer.de
contracttool.axelspringer.de
*.prod.ps.bild.de
klick.regionalvermarktung.axelspringer.de
axelspringer.de
*.api.ps.bild.de
go.axelspringer.de
rich-media.axelspringer.de
digas-review.axelspringer.de
axelspringer.de
axelspringer.de
axelspringer.de
*.services.ps.axelspringer.de
motiveingang.axelspringer.de
teams.axelspringer.de
campus.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de
axelspringer.de
link.abonnement.axelspringer.de
*.axelspringer.de
motiveingang.axelspringer.de
career.axelspringer.de
mib2.axelspringer.de
mypersonal.axelspringer.de
transfer.axelspringer.de
marketplace.axelspringer.de
*.auth.axelspringer.de
*.prod.ps.bild.de
go.axelspringer.de
nachhaltigkeit.axelspringer.de
ascs-ww.axelspringer.de
regio.axelspringer.de
upload.zs.axelspringer.de
secure.axelspringer.de
sirius.regionalvermarktung.axelspringer.de
ideationcouncil.axelspringer.de
marketplace.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
somaetbws.axelspringer.de
*.services.ps.bild.de
*.axelspringer.de
motiveingang.axelspringer.de
aboservice.audiovideofotobild.de
*.axelspringer.de
kundenservice.auth.axelspringer.de
mediaportal.axelspringer.de
teams.axelspringer.de
gutscheine.axelspringer.de
aboservice.audiovideofotobild.de
axelspringer.de
*.prod.ps.axelspringer.de
go.axelspringer.de
*.prod.ps.spring-media.de
miu5.axelspringer.de
teams.axelspringer.de
*.services.ps.bild.de
axelspringer.de
*.prod.ps.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de

Certificate

The complete raw certificate details for *.prod.ps.axelspringer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6DCCBtCgAwIBAgIQDKgbolMRGnbj8dinRAcMmjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDIyODAwMDAwMFoXDTIzMDYxNDIzNTk1OVowJDEi
MCAGA1UEAwwZKi5wcm9kLnBzLmF4ZWxzcHJpbmdlci5kZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJY5qCCStLKFTAfrdD0lNxX/pQ6BUuNHq6KuPQtp
lAjXKdFO1c2jdOvOqH5zKZBHZBopu8GqVT7Z9YOjatJGzsR3TDMuRVVJbDvNSKLh
vLb9ByYUQ1WDEo2Tq3dW0AjqvANrBVIOQv+Haby1Bn21IqzDDjvkPbGZsnbLjzOq
qrieGdUsCWPU/toeWXXNRNj6TCZgnnuaWXlm1j/hVBnQfOwi+2JiQnqrxcZgV1s9
O5VClUljDzZWyESsCuDk4DXH6tF+a+iDQEmL1Wu36perBgsvz27VplUVnJNxb92P
XcyqRxi+HfoXjx2s1nhWFjYNpqNkdbSXj61kTs0Z5NFpUDMCAwEAAaOCBPwwggT4
MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBQLPE7F
k1H6s0BNuOz9utsxqCYhADCCAisGA1UdEQSCAiIwggIeghkqLnByb2QucHMuYXhl
bHNwcmluZ2VyLmRlghUqLnByb2QuYXV0aC5teXBhc3MuZGWCCSoud2VsdC5kZYIX
Ki5wcm9kLmF1dGguYXV0b2JpbGQuZGWCECoudWF0LnBzLndlbHQuZGWCGioudWF0
LmF1dGguYXhlbHNwcmluZ2VyLmRlghsqLnByb2QuYXV0aC5heGVsc3ByaW5nZXIu
ZGWCFCoudWF0LmF1dGgubXlwYXNzLmRlghoqLnVhdC5hdXRoLmNvbXB1dGVyYmls
ZC5kZYIRKi5wcm9kLnBzLmJpbGQuZGWCGyoucHJvZC5hdXRoLmNvbXB1dGVyYmls
ZC5kZYIJKi5iaWxkLmRlghgqLnVhdC5wcy5zcHJpbmctbWVkaWEuZGWCECoudWF0
LnBzLmJpbGQuZGWCFyoudWF0LmF1dGguc3BvcnRiaWxkLmRlghYqLnVhdC5hdXRo
LmF1dG9iaWxkLmRlghgqLnByb2QuYXV0aC5zcG9ydGJpbGQuZGWCEyoucHJvZC5w
cy5teXBhc3MuZGWCGW1laW5rb250by5heGVsc3ByaW5nZXIuZGWCGSoucHJvZC5w
cy5zcHJpbmctbWVkaWEuZGWCGCoudWF0LnBzLmF4ZWxzcHJpbmdlci5kZYILKi5t
eXBhc3MuZGWCEioudWF0LnBzLm15cGFzcy5kZYIRKi5wcm9kLnBzLndlbHQuZGUw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7
BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNv
bS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBn
MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20w
NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy
bTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA
dwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYaWGgZTAAAEAwBI
MEYCIQC/3KRbevgeGI1g6cRq/rcwBhNUJjygYjK6O6iugMAZsAIhAIETZGPTm8+k
qQvLz8IarZNduARkhSu3g8xamn/FGyW+AHcAs3N3B+GEUPhjhtYFqdwRCUp5LbFn
DAuH3PADDnk2pZoAAAGGlhoGtgAABAMASDBGAiEAh/DSOAStY73j8NnlRm/SJWwS
Mwnx/g4XBncNXrm9FDQCIQDsn6Wnj+zuH7ohPCcrHhgtv3+iEJX7ux51cOGV5sQq
jgB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhpYaBoMAAAQD
AEYwRAIgS6M2GsivX2PItIbkHEbcVH5jVywucx4KrsO0It72X6YCIFhYCl/cLzka
mDZbTORiRriRooGCcDWeJiUvxenPJ1duMA0GCSqGSIb3DQEBCwUAA4IBAQAOrDOf
dRKxqD6RkK9LDKXHuf1RhDXFqytcvUqVrigkSiq0v4zUwJ3P1GDjU+swBTGy6L05
5H/14Dga2B4iVPrMiUHbpSxlFmXeLRMQxUrsGMetgHk1ABq1W+PASR6mHzJqkEZC
QOEEjGvNTFkRRdaagox14eWFgjGVwVk04/g82CKJQUo7lJKSpJzpfjwO7KCkLSQP
ufAR56/WDwhcEZm1A8l28YDH4AEGsZQqWA4zi3OS+LoSSLy4jR/7Ks5KtVdsJHJC
VLLmx2KCychx86Vt80hG1mtjUF55/NMeVWCgZebpBYEiXBSJIahZ/LsZvSi6XZBm
NA+nUO8sF1gjHRgj
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljmoIJK0soVMB+t0PSU3
Ff+lDoFS40eroq49C2mUCNcp0U7VzaN0686ofnMpkEdkGim7wapVPtn1g6Nq0kbO
xHdMMy5FVUlsO81IouG8tv0HJhRDVYMSjZOrd1bQCOq8A2sFUg5C/4dpvLUGfbUi
rMMOO+Q9sZmydsuPM6qquJ4Z1SwJY9T+2h5Zdc1E2PpMJmCee5pZeWbWP+FUGdB8
7CL7YmJCeqvFxmBXWz07lUKVSWMPNlbIRKwK4OTgNcfq0X5r6INASYvVa7fql6sG
Cy/PbtWmVRWck3Fv3Y9dzKpHGL4d+hePHazWeFYWNg2mo2R1tJePrWROzRnk0WlQ
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16823602307382399951137537074116627610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prod.ps.axelspringer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18964177346527420638251127987377123454402941597816483154351720294960055865741108980915304485131864111916305711824565055841429837020892995349617855767912341591136915769829653472489880497829602259048331474627755241309457155023313847799068627990946816563022438358643122277059571452730896569199179099470167676855052870248560682750209556981760121826009011074411418534954594159838284531166073209589736649591366354962436091412970945657473768907391927965540857550870481183699922329870209831095891771980545453383155241030959658900994765188540033765804885718463123047013099516161905816169171063938356548769286337522007703900211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b3c4ec59351fab3404db8ecfdbadb31a8262100
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.spring-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinkonto.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.spring-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.welt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000eac339f7512b1a83e9190af4b0ca5c7b9fd518435c5ab2b5cbd4a95ae28244a2ab4bf8cd4c09dcfd460e353eb300531b2e8bd39e47ff5e0381ad81e2254facc8941dba52c651665de2d1310c54aec18c7ad807935001ab55be3c0491ea61f326a90464240e1048c6bcd4c591145d69a828c75e1e585823195c15934e3f83cd82289414a3b949292a49ce97e3c0eeca0a42d240fb9f011e7afd60f085c1199b503c976f180c7e00106b1942a580e338b7392f8ba1248bcb88d1ffb2ace4ab5576c24724254b2e6c76282c9c871f3a56df34846d66b63505e79fcd31e5560a065e6e90581225c148921a859fcbb19bd28ba5d9066340fa750ef2c1758231d1823