aws-cf-rd24.mars-inc.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:89:ff:e1:e3:31:d2:e0:80:1e:77:5a:d1:ab:29:93 was issued on by Amazon.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd24.mars-inc.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:89:ff:e1:e3:31:d2:e0:80:1e:77:5a:d1:ab:29:93
Serial Number (int): 14008814538567257432451283780998211987
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 91:52:63:64:0b:60:7f:d6:10:e7:5a:f6:3d:d4:5f:8e:f2:2e:fc:fb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 16:4c:3e:5e:58:b0:21:1b:8e:22:df:b1:48:77:3e:4b:d6:9a:3b:59
Fingerprint (sha256): 51:4d:19:70:17:18:e9:ba:2d:27:e3:bc:a8:6d:1d:55:61:0e:0d:72:d2:bf:74:e3:e0:bc:da:4c:54:57:a4:2a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate aws-cf-rd24.mars-inc.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd24.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd24.mars-inc.com
nutro.com
www.juicyfruit.africa
snickers.in
www.pedigree.be
whiskas.at
www.snickers.in
wrigleys-extra.de
pedigree.be
www.whiskas.at
www.pedigree.at
www.shop.royalcanin.se
www.nutro.com
www.whiskas.be
www.fosterverse.com
www.hub.mars.com
www.orbitmexico.mx
whiskas.ua
avent.royalcanin.fr
orbitmexico.mx
www.whiskas.ua
www.avent.royalcanin.fr
lucas.com.mx
hub.mars.com
www.wrigleys-extra.de
www.lucas.com.mx
whiskas.be
shop.royalcanin.se
pedigree.at
fosterverse.com
juicyfruit.africa

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd24.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYgg8dm7bPvREZrJWPS1
1jKnEiHKj69zPe5EqJAd7zEVYFo0gcKUqssVSALVhoSARYqSPbCO1sbULs8VmtQ9
X+L+wd5Atupjw68umF9uXl2nMVvj2j1mM4ydvO7WkMVKIw49Fz4nb47rLrOPdNYv
dhRuEns6U9trOA5u/kUZ38NbbJsHh6e8VIeszZXzNdSzNofX1Emlb+I5J2oMrvhP
+MlTj6V3ujLWZzE6fT2I7ohay1GbxlqR9q5t/1GkcDoWs4ftOJp3RluYBobpRf8l
bbEVfPrukwcmikkmU6M5pMAKGcedy07DGIOn3fAfuINV+TztiNGWO6Aq68yCZe4a
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14008814538567257432451283780998211987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd24.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20896447878487679802387683660578261620768193348892002171239253959315950218615575332141311518816933619060745265370490280236978044584818531923758814588086287680289385571789489057876073473606271346347094889934177657638232480182229449035984470812014894490960666588583041021814125464211249720562931725554332866055230397124005387729922154808794768022575046125278970563906956097949888619566167825393918185359603996191119337494180668186998690145715856214739944862552932844359633460084252147082826047551734479800832107594475598627270312774001689793891175085238832679321501530943415594689513193786027728138522083380383064136421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							915263640b607fd610e75af63dd45f8ef22efcfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (542 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd24.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juicyfruit.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedigree.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiskas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleys-extra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigree.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whiskas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedigree.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whiskas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fosterverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitmexico.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiskas.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avent.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitmexico.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whiskas.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avent.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucas.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleys-extra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucas.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiskas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigree.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosterverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicyfruit.africa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185e7a8a6a300000403004630440220628ef53c1f42c0df2d3645d136e606e7e22471057a3461719d5fdb08094d4c380220658e1c4677579079533f3731940b74f7390f5d47c710822222cccc05df76560600770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000185e7a8a7070000040300483046022100dd8c6f895e4fe2a6f6cc1beb2dc90ea1c1da1ebccf4a7b86b81f0e8ca5a8da33022100886b456329ea01d6bea2944b9c9183fb3b31a133b52f068ec5a8aac0cbde0a8000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000185e7a8a6de000004030046304402206c2eca85f4919d07ce34c0481e1116de85ecf6bc740ff066584e09b788f6214502205b2aee028aab88a90393225bb68242b41550b216345ae752343f1afea3ba0eb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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