www.hydrosulphite.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 08:60:e4:d3:b4:b7:01:de:e4:51:a2:30:8c:d9:f7:7a was issued on by Amazon.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hydrosulphite.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:60:e4:d3:b4:b7:01:de:e4:51:a2:30:8c:d9:f7:7a
Serial Number (int): 11136925627159137553028642326678468474
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 81:d8:e9:56:4c:8e:1a:2d:b7:3e:c4:ad:30:78:cf:7b:65:c7:1d:86
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): a9:c3:c1:67:7d:90:ab:d2:56:97:f5:55:24:dd:65:91:ba:c8:23:6e
Fingerprint (sha256): 57:53:5a:af:4a:ce:7e:60:9b:db:7e:20:a8:90:97:90:32:78:ef:f6:ba:c5:44:ea:e2:2a:20:d6:4b:e8:1e:36

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate www.hydrosulphite.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hydrosulphite.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hydrosulphite.com
basf-ypc.com.cn
partner.agro.basf.com
revxfields.com
hydrosulphite.com
glysantin.org.cn
experience.partnerportal.basf.com
managereresource.north-america.intranet.basf.com
www.glysantin.ws
axant-flex.com
www.agrigenio.es
wrl-ltd.com
www.aroma-ingredients.basf.com
www.glysantin.sk
teraxxa-wins.com
basf-sonatrach-propanchem.com
pestcontrol-secure.basf.us
www.glysantin.tw
www.hydrosulfite.com

Other certificates including the domain name hydrosulphite.com

(limited to 100 certificates)
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
www.hydrosulphite.com
teraxxa-wins.com
www.hydrosulphite.com

Certificate

The complete raw certificate details for www.hydrosulphite.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHdjCCBl6gAwIBAgIQCGDk07S3Ad7kUaIwjNn3ejANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDIwNTAwMDAwMFoXDTI1MDMwNTIzNTk1OVowIDEe
MBwGA1UEAxMVd3d3Lmh5ZHJvc3VscGhpdGUuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAzPafS4RPKmMAEVePBxCl4PkZ1ErUz08zTdIoSeZSzDcz
HaD7nGZG45Cg+hinBWKq0ljzna04+02hcSSd0B3RGH/l1kEpMU1OKmh05Lz9pd39
r+jAX/8C4jahkZld4pyOQ2EyDkzlNLlq0mePBswXIUAoOxLiK1+B8SBpVaCfbSY4
CXZKC/X2rvU9d8HyS7rCmLuBmhIqqIwJ/uNfqAib/4hhea2nd6m59oYneLVt7Kcn
y3NHF4gnyzclsFjWfsKzIltH2hxI2NwU65zZ1fjQISLrLZALwqXuQljZ3iL0QUPc
IDLXLrHTcn43RTW9iaSiqQCUvf58u0MVyrcwc0BAnwIDAQABo4IEjjCCBIowHwYD
VR0jBBgwFoAUVdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFIHY6VZMjhot
tz7ErTB4z3tlxx2GMIIBvgYDVR0RBIIBtTCCAbGCFXd3dy5oeWRyb3N1bHBoaXRl
LmNvbYIPYmFzZi15cGMuY29tLmNughVwYXJ0bmVyLmFncm8uYmFzZi5jb22CDnJl
dnhmaWVsZHMuY29tghFoeWRyb3N1bHBoaXRlLmNvbYIQZ2x5c2FudGluLm9yZy5j
boIhZXhwZXJpZW5jZS5wYXJ0bmVycG9ydGFsLmJhc2YuY29tgjBtYW5hZ2VyZXJl
c291cmNlLm5vcnRoLWFtZXJpY2EuaW50cmFuZXQuYmFzZi5jb22CEHd3dy5nbHlz
YW50aW4ud3OCDmF4YW50LWZsZXguY29tghB3d3cuYWdyaWdlbmlvLmVzggt3cmwt
bHRkLmNvbYIed3d3LmFyb21hLWluZ3JlZGllbnRzLmJhc2YuY29tghB3d3cuZ2x5
c2FudGluLnNrghB0ZXJheHhhLXdpbnMuY29tgh1iYXNmLXNvbmF0cmFjaC1wcm9w
YW5jaGVtLmNvbYIacGVzdGNvbnRyb2wtc2VjdXJlLmJhc2YudXOCEHd3dy5nbHlz
YW50aW4udHeCFHd3dy5oeWRyb3N1bGZpdGUuY29tMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVz
dC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0
cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw
Oi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/
BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUATnWjJ1yaEMM4W2zU3z9S
6x3w4I4bjWnAsfpksWKaOd8AAAGNeFaMbAAABAMARjBEAiB9bMB3kiijIj1A8qG7
8FTu0XjTM1yQq+yxjMiH2jQmdwIgIbIbtk2BhsKi7JXTt5//p1ucgcGtYya1ivPR
usEzg/oAdwB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAY14Voxy
AAAEAwBIMEYCIQCJTs0mXpXA49gg0I/fus1Kj+9Fkh+BfhPFfZjG7iKHmQIhALIJ
YrOAHuhvwRFQInxbPjJEq0+ga/lXVuEsExRlkuOCAHYA5tIxY0B3jMEQQQbXcbnO
wdJA9paEhvu6hzId/R43jlAAAAGNeFaMmQAABAMARzBFAiBlzaB6KdDSpOw6UIMY
359MynS4TDkryvW0OYaOfeT6mAIhAPbuqbdJOziNwxgMslZTBXj7466dRM24Bh3L
py4WoLfRMA0GCSqGSIb3DQEBCwUAA4IBAQAcfstAYmO5ZbqKHmB1fVNfCn7fJw5Y
Oo1eyvi8YPRRGwTI6Fu1zg/QiJLXwxu9ZaQgvPDB1n+fGNP7MR1c46q6eJJQVjzZ
S9rQsKrQdilzoCj1T5CFh6kw70cyWDeToVLptNRDBlOUf6T0I/4UeHoMm4Me7oXu
ActgkYkgsanX5gS7smvnQUzR89G04oS9/7AnQf3i99QgvUWcHlfbhUVpORblef/3
yaDhAnG6sXde/AOkFac89PRrbtmyuFTY2Q/q181hUqelzzAJ6i/FatiZJd86M8oW
ES+BoAL/JSAkwLcdAVJLTkXM//k3ZE0Okh1AUh8BfCaGSB//sASrtEAV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPafS4RPKmMAEVePBxCl
4PkZ1ErUz08zTdIoSeZSzDczHaD7nGZG45Cg+hinBWKq0ljzna04+02hcSSd0B3R
GH/l1kEpMU1OKmh05Lz9pd39r+jAX/8C4jahkZld4pyOQ2EyDkzlNLlq0mePBswX
IUAoOxLiK1+B8SBpVaCfbSY4CXZKC/X2rvU9d8HyS7rCmLuBmhIqqIwJ/uNfqAib
/4hhea2nd6m59oYneLVt7Kcny3NHF4gnyzclsFjWfsKzIltH2hxI2NwU65zZ1fjQ
ISLrLZALwqXuQljZ3iL0QUPcIDLXLrHTcn43RTW9iaSiqQCUvf58u0MVyrcwc0BA
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11136925627159137553028642326678468474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hydrosulphite.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25874228175215399186140384815167872045975097689750103514704502744396319850828043079836634783858028826618483329515909288329473741662635125785937231182154607318941654931577503255259871170419796385891686836896374902551115257770320143311549920702262273134411824073821234171661532424235161706293664954980270377158072076820790917490808298854337386487970291380504490583660080771195740744758187201093344988444222435142418750729807214133586569841804778247697225929769863302802125678788320192424275279299858900223611446936485015281671797451463301131896068644533821141451500764467382973641718985379411993492934126337490178556063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81d8e9564c8e1a2db73ec4ad3078cf7b65c71d86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (437 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-ypc.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.agro.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revxfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrosulphite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glysantin.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.partnerportal.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managereresource.north-america.intranet.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axant-flex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrigenio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrl-ltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aroma-ingredients.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teraxxa-wins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-sonatrach-propanchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestcontrol-secure.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glysantin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosulfite.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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