xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:3d:bd:de:b3:41:af:54:6a:4f:08:0b:ff:69:54:00 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:3d:bd:de:b3:41:af:54:6a:4f:08:0b:ff:69:54:00
Serial Number (int): 16271317077334008200196189713106293760
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6e:ac:b7:7e:f0:81:52:45:42:66:0a:f4:a5:2e:0b:78:b8:26:d1:f2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 51:15:89:a1:b8:b5:34:b3:0e:37:ff:35:26:04:e0:92:e2:eb:c9:93
Fingerprint (sha256): 40:e2:1a:f1:7a:c6:19:7f:19:b9:e8:13:ea:cf:5c:9b:ab:09:c9:d1:5a:88:6c:77:c8:1a:ee:50:72:2f:26:8c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
xgelcicd-acg.lb.anuvu.cloud

Other certificates including the domain name anuvu.cloud

(limited to 100 certificates)
jckonlb-jnksmstr-01.game.us1.lb.anuvu.cloud
kctkcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
uuawnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
yincnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
n70ealb-mon-01.dvps.us1.lb.anuvu.cloud
yuhknlb-jnksmstr-01.game.us1.lb.anuvu.cloud
mbd3cfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
ri5nalb-mon-01.dvps.us1.lb.anuvu.cloud
kh7inlb-jnksmstr-01.game.us1.lb.anuvu.cloud
cbcqcfr-afgo-01.afgo.us1.lb.anuvu.cloud
gkfxnlb-aviary-01.game.us1.lb.anuvu.cloud
c335cfr-hatchery-01.game.us1.lb.anuvu.cloud
yl4salb-mon-01.dvps.us1.lb.anuvu.cloud
bi5bnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
liotcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
jkatcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
pml3nlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
nn8fcfr-hatchery-01.game.us1.lb.anuvu.cloud
t8b0alb-afrapimk-01.afgo.us1.lb.anuvu.cloud
w4pycfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
w4pyalb-afrapimk-01.afgo.us1.lb.anuvu.cloud
zsgunlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
trhhnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
cygexternal-tftest.lb.anuvu.cloud
jckonlb-flock-01.game.us1.lb.anuvu.cloud
meuqcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
agiulutvunittest.hatchery-s3.lb.anuvu.cloud
97ohk0ezec2-tftest-01.tftt.us1.lb.anuvu.cloud
injacfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
vzo6nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
e0pe-tftest-alternate-s3-static.lb.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
y79bcfr-game-01.game.us1.lb.anuvu.cloud
tf4dalb-mon-01.dvps.us1.lb.anuvu.cloud
n70ealb-mon-01.dvps.us1.lb.anuvu.cloud
xbeycfr-unittest-01.game.us1.lb.anuvu.cloud
o99ialb-mon-01.dvps.us1.lb.anuvu.cloud
dvlrnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
fjutcfr-hatchery-01.game.us1.lb.anuvu.cloud
pml3alb-mon-01.dvps.us1.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.sg.anuvu.cloud
kjbvnlb-aviary-01.game.us1.lb.anuvu.cloud
j0izalb-mon-01.dvps.us1.lb.anuvu.cloud
xui1re5pcicd-artifact.lb.anuvu.cloud
thkxcfr-afgo-01.afgo.us1.lb.anuvu.cloud
xnpfalb-mon-01.dvps.us1.lb.anuvu.cloud
cfr-mprtuam-01.cops.us1.pr.anuvu.cloud
le8zcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
helfnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
l6vlcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
sngnnlb-flock-01.game.us1.lb.anuvu.cloud
t3bwcfr-hatchery-01.game.us1.lb.anuvu.cloud
kkvxnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
o8hexternal-tftest.lb.anuvu.cloud
xcldcfr-afgo-01.afgo.us1.lb.anuvu.cloud
ecianlb-jnksmstr-02.game.us1.lb.anuvu.cloud
co84cfr-afgo-01.afgo.us1.lb.anuvu.cloud
pqt2nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
co84cfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
tvxlnlb-flock-01.game.us4.lb.anuvu.cloud
dangalb-mon-01.dvps.us1.lb.anuvu.cloud
dku3cfr-game-01.game.us1.lb.anuvu.cloud
h3xcalb-mon-01.dvps.us1.lb.anuvu.cloud
ish0nlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
p9mdnlb-flock-01.game.us1.lb.anuvu.cloud
oqeealb-mon-01.dvps.us1.lb.anuvu.cloud
g6oncfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
vk1ucfr-hatchery-01.game.us1.lb.anuvu.cloud
yuhkcfr-hatchery-01.game.us1.lb.anuvu.cloud
vgdenlb-flock-01.game.us4.lb.anuvu.cloud
c8r5cfr-game-01.game.us1.lb.anuvu.cloud
i50xalb-afrapimk-01.afgo.us1.lb.anuvu.cloud
yl4salb-mon-01.dvps.us1.lb.anuvu.cloud
iskccfr-mprtrba-01.cops.us1.lb.anuvu.cloud
wgx9alb-afrapimk-01.afgo.us1.lb.anuvu.cloud
bixscfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
788lmp1tunittest.hatchery-s3.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
behzalb-mon-01.dvps.us1.lb.anuvu.cloud
sj31cfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
ra29nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
ak7dnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
v9g7cfr-game-01.game.us1.lb.anuvu.cloud
gyz6nlb-aviary-01.game.us1.lb.anuvu.cloud
45j9ndxfec2-flock-01.tftt.us1.lb.anuvu.cloud
m2dunlb-jnksmstr-02.game.us1.lb.anuvu.cloud
cg0salb-mon-01.dvps.us1.lb.anuvu.cloud
qnq3nlb-jnksmstr-02.game.us1.lb.anuvu.cloud
dvlrnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
u1qkalb-afrapimk-01.afgo.us1.lb.anuvu.cloud
gu4qnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
uurfnlb-jnksmstr-03.game.us1.lb.anuvu.cloud
helfnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
x0r8alb-mon-01.dvps.us1.lb.anuvu.cloud
fbusnlb-jnksmstr-03.game.us1.lb.anuvu.cloud
sngnnlb-jnksmstr-01.game.us1.lb.anuvu.cloud
pebdalb-mon-01.dvps.sa1.lb.anuvu.cloud
qnq3nlb-jnksmstr-03.game.us1.lb.anuvu.cloud
uurfnlb-flock-01.game.us1.lb.anuvu.cloud

Certificate

The complete raw certificate details for xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIQDD293rNBr1RqTwgL/2lUADANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIwODAwMDAwMFoXDTI1MDEwNTIzNTk1OVowNTEz
MDEGA1UEAxMqeGdlbG5sYi1qbmtzbXN0ci0wMS5hY2cudXMxLmxiLmFudXZ1LmNs
b3VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cTqm5vuNAcGyQdj
b5AlqhDB4fVisePkGrCukxgPq019sZxlkghTy9ax0HUjEouejRlTQfUy9YtzNA9t
9mW6auZzBxlCbJjMpcMN8FzwvVTQBYmA/i51ar0Vr46wxzhbrcKZnN4gT5se9ETD
sJ4tiSO5u1QtEjo1iBjq0QOjWrGED72wv+XFmPceSAjTiXfrPNbexIxXiy40cBHM
g7yYI9X+qtz2cny6i6Bgcb+AsUmSxU3H9lUHqlYVZIKNXjD0ulBobz+HzXcx/1bT
Z7kucjKf9WX4n46AGMySD6Vfo9fLWlGm9xHSnx4P9DwNZzMeAaSWMm8fizl321Mr
oezD9wIDAQABo4IBszCCAa8wHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+Xrr
guIwHQYDVR0OBBYEFG6st37wgVJFQmYK9KUuC3i4JtHyMFIGA1UdEQRLMEmCKnhn
ZWxubGItam5rc21zdHItMDEuYWNnLnVzMS5sYi5hbnV2dS5jbG91ZIIbeGdlbGNp
Y2QtYWNnLmxiLmFudXZ1LmNsb3VkMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJt
MDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
cjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIy
bTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVTEMch/wU5feuwe
aLkpxnCulL88hToCaDH5rHvMvRoSYUy5lxvP4C/fWAb/TfbLhJ7UF2VDdO22g5HS
lVX4FZyC7vMKn9+En2MpdDJ5XcfXp8BVRRou5jK+2IxH6hNGfRmiGETkFpuAaWsG
umYRSgHUH92izivFQFDzBtuD5hMt4MmCnR8KUZWIiaHQG6xzulYx4SrqXILPSYAD
+duPULcZpOiZuf0sr9uxyYzlELm8NiFDeKcxmfAyE2Flf1ZG9+zFiz1VjWwKNTWi
AOXqk4jKdlYlV0OClVPQh6CoItPqLAcd5JAIXTZwcVt71KnokhGKsJ+GJuK9TQm2
uv46VQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cTqm5vuNAcGyQdjb5Al
qhDB4fVisePkGrCukxgPq019sZxlkghTy9ax0HUjEouejRlTQfUy9YtzNA9t9mW6
auZzBxlCbJjMpcMN8FzwvVTQBYmA/i51ar0Vr46wxzhbrcKZnN4gT5se9ETDsJ4t
iSO5u1QtEjo1iBjq0QOjWrGED72wv+XFmPceSAjTiXfrPNbexIxXiy40cBHMg7yY
I9X+qtz2cny6i6Bgcb+AsUmSxU3H9lUHqlYVZIKNXjD0ulBobz+HzXcx/1bTZ7ku
cjKf9WX4n46AGMySD6Vfo9fLWlGm9xHSnx4P9DwNZzMeAaSWMm8fizl321MroezD
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16271317077334008200196189713106293760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26480908852027465239562735315534529980000985354770694198737133447479618615412123781986847265364917552396005723975493000667683505332399215238887397851918100035310395216494331285176902469852855197765974535894969046851018776100993542073444549771111113054210804025229590567346312929496128561100217518686239462543514008959571717440011316296538840440264853770783525618047931881184389153349650451686941452437157096962931720914513411563760051271282825701895883437203885392745744807150866762966099366361400542691868725686850311590360299032054119106919350008166337364995020923864257706694744211758977007964855067297554553947127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6eacb77ef081524542660af4a52e0b78b826d1f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xgelcicd-acg.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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