nonprofitcentral.amazon.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:c2:4d:9a:a3:79:39:cd:41:9b:80:25:b4:6b:61:63 was issued on by Amazon.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nonprofitcentral.amazon.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:c2:4d:9a:a3:79:39:cd:41:9b:80:25:b4:6b:61:63
Serial Number (int): 16959615537243864996363422501148778851
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 00:7c:f6:1d:a5:be:d3:ad:89:15:a4:16:af:e4:28:55:dd:76:ed:c0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 32:45:6f:45:f7:d8:42:e9:30:e9:7b:f5:7d:95:9b:59:f1:ea:fc:f2
Fingerprint (sha256): 53:80:cd:fa:f1:7b:0a:05:87:cc:25:16:cb:61:05:d2:05:11:01:79:3c:a0:f3:b5:7a:72:05:d7:71:a9:05:9d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate nonprofitcentral.amazon.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nonprofitcentral.amazon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nonprofitcentral.amazon.com
www.sothebys.amazon.com
amazonservices.de
www.livebid.com
localamazon.com
zshops.com
toronto.amazon.com
amazongamesstudio.com
toronto.amazon.ca
amazon.livebid.com
www.warehouse-deals.com
associates-blog.amazon.de
nonprofit.amazon.com
yourstore.amazon.com
honorsystem.com
booksurgepages.net
associates-blog.amazon.com
www.amapedia.com
www.livebid.amazon.com
www.localamazon.com
kaidian.amazon.com
honoursystem.amazon.com
www.mturk.amazon.com
www.amazongamestudios.com
livebid.amazon.com
gregmanning.amazon.com
affiliate-blog.amazon.com
www.filmfinders.com
www.kdp.com
filmfinders.com
www.honorsystem.amazon.com
www.booksurgepages.net
www.amazonservices.de
www.amazongamesstudios.com
requestor.mturk.amazon.com
www.honorsystem.com
partenaires-blog.amazon.fr
amazondcn.com
www.honoursystem.amazon.com
warehouse-deals.com
fba.amazon.co.jp
amazongamestudios.com
amazongamesstudios.com
www.orgcentral.amazon.com
feeds.amazon.com
www.charities.amazon.com
www.amazonlocal.com
orgs.amazon.com
livebid.com
www.mechturk.com
www.fba.amazon.com
nonprofits.amazon.com
amazongamestudio.com
amazonlocal.com
warehousedeals.amazon.com
www.amazongamestudio.com
organization.amazon.com
honorsystem.amazon.com
mturk.amazon.com
mechturk.com
www.amazongamesstudio.com
www.nonprofits.amazon.com
sothebysauction.amazon.com
associates-blog.amazon.fr
www.charitycentral.amazon.com
orgcentral.amazon.com
requester.mturk.amazon.com
kdp.com
partner-blog.amazon.de
zshops.amazon.com
vancouver.amazon.ca
mechanicalturk.com
zshop.com
www.fba.amazon.co.jp
partnerprogramm-blog.amazon.de
vancouver.amazon.com
www.nonprofit.amazon.com
ats.amazon.com
www.organizations.amazon.com
sothebyssearch.amazon.com
organizations.amazon.com
fba.amazon.com
www.gregmanning.amazon.com
sothebys.amazon.com
fba.amazon.jp

Other certificates including the domain name amazon.com

(limited to 100 certificates)
fresh.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
routingtools-jlb-l-dub.dub.proxy.amazon.com
us-west-1.awsc-integ.aws.amazon.com
aea-console-canary.aea.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
aea-console-canary.aea.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
aea-console-canary.aea.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
emf-operator-console-prod-sin-cell2.corp.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
ap-east-1.signin.aws
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
edge-customer-troubleshooting.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
foxhound.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
emf-operator-console-prod-sin-cell3.corp.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com

Certificate

The complete raw certificate details for nonprofitcentral.amazon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UHSTCwAwrvrB3njOZFW
itXf1SK9y2cQPaTCiAXWCPg1fmdzMHNn/fkZWOnCaAdMdPctKazU9hgsE5IbJG+O
wtFLDiSgQWNfsIEvwd4w/u16udxPLtMDQ3IDruhyMTRPMc+COhGhVmRKTfC1mzVL
S3Ar3JlKR8goRrlNTzXrhcJvxLVitWWmi8stlXw8JhNhRtadS9M/U/Fend54CB+0
Gdth4c5TXDdskHzBWFB2/edFaPN+o3vF5eukzo0ZulrdiBD8EQulrbRWV72WEOpL
FzJvrh9n9hMXT3g2pd3/b8Zrb073AnSizL01W3fIz8VTvemppkqXOgBHZQX8Q1mc
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16959615537243864996363422501148778851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprofitcentral.amazon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29445982836028965500799226881892342496937048938342238486187816217051319650415871450434677069623947837374083044351529283907780110600657172219078989626730854559582132749129483325252582110112499306850425572526806561732186227901438378205191973306888364286894911204304461108092637868059830655196508922461590903172257734962380669190735518499702910432346016800837039117277178392943456366531891538497272997146932420061309085485171120490285885254719969413555552263118552383844751262618490873079529460225442310200157315246944085574828362170015156381314827856548083045885151054209885375349958581752858976957928905579521463917777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							007cf61da5bed3ad8915a416afe42855dd76edc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1887 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofitcentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sothebys.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonservices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localamazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamesstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.livebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warehouse-deals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofit.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourstore.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksurgepages.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amapedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebid.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localamazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaidian.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honoursystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebid.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregmanning.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate-blog.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmfinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmfinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorsystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksurgepages.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonservices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamesstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestor.mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires-blog.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazondcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honoursystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouse-deals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamesstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgcentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charities.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgs.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechturk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fba.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofits.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehousedeals.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organization.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorsystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechturk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamesstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprofits.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebysauction.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charitycentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requester.mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-blog.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshops.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouver.amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalturk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fba.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerprogramm-blog.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouver.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprofit.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ats.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organizations.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebyssearch.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organizations.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gregmanning.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebys.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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