web.production.forum-communications.brightspot.cloud

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:3e:b5:dc:0e:c7:be:cf:2d:52:04:35:cd:ab:78:0b was issued on by Amazon.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.production.forum-communications.brightspot.cloud

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:3e:b5:dc:0e:c7:be:cf:2d:52:04:35:cd:ab:78:0b
Serial Number (int): 6971750935062020214964519073273837579
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 1f:e1:ad:8d:f3:c3:9f:73:a2:1d:84:16:5b:8b:93:7d:33:06:66:fc
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 16:1b:1f:92:78:ae:cd:33:c0:fa:af:91:0b:5b:e1:b1:e5:26:2b:70
Fingerprint (sha256): 58:55:c0:b2:0e:db:43:32:4c:7c:5c:4d:ed:7c:d1:51:26:87:83:31:86:26:a6:7b:94:ac:7c:0f:07:dc:0e:12

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate web.production.forum-communications.brightspot.cloud

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.production.forum-communications.brightspot.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.production.forum-communications.brightspot.cloud
www.superiortelegram.com
perhamfocus.com
echopress.com
postbulletin.com
dl-online.com
pineandlakes.com
superiortelegram.com
*.web.production.forum-communications.brightspot.cloud
www.pinejournal.com
www.bemidjipioneer.com
agweek.com
therinklive.com
fccnn.com
www.siouxfallslive.com
www.wadenapj.com
wctrib.com
www.inforum.com
inforum.com
www.therinklive.com
pinejournal.com
www.agweek.com
www.fccnn.com
www.jamestownsun.com
www.perhamfocus.com
mitchellrepublic.com
wadenapj.com
www.pineandlakes.com
siouxfallslive.com
www.grandforksherald.com
www.postbulletin.com
www.dglobe.com
www.brainerddispatch.com
www.dl-online.com
thedickinsonpress.com
www.echopress.com
www.wctrib.com
brainerddispatch.com
www.mitchellrepublic.com
www.stcloudlive.com
www.duluthnewstribune.com
stcloudlive.com
www.parkrapidsenterprise.com
duluthnewstribune.com
dglobe.com
jamestownsun.com
parkrapidsenterprise.com
bemidjipioneer.com
www.thedickinsonpress.com
grandforksherald.com

Other certificates including the domain name brightspot.cloud

(limited to 100 certificates)
cst-qa.lower.chorus.brightspot.cloud
origin.ser.production.k1.amazon.brightspot.cloud
origin.afar-media.production.k3.m1.brightspot.cloud
church-qa3.church.lower.church.brightspot.cloud
origin.uat.lower.google-marketing.brightspot.cloud
entertainment.production.k1.amazon.brightspot.cloud
origin.relay-qa.lower.k1.amazon.brightspot.cloud
biospace-qa.lower.k1.m1.brightspot.cloud
origin.kpbs.kpbs.production.k3.m1.brightspot.cloud
cms.6amcity.com
origin.pitchbook-prod.production.k2.m1.brightspot.cloud
acertus-uat.lower.k1.m1.brightspot.cloud
origin.wwe-uat.lower.k2.m1.brightspot.cloud
origin.biospace-qa.lower.k1.m1.brightspot.cloud
origin.ajga-uat.ajga.lower.k1.m1.brightspot.cloud
amazon-hvh.lower.k3.m1.brightspot.cloud
static.amazon-hvh.lower.k3.m1.brightspot.cloud
origin.acertus.production.k1.m1.brightspot.cloud
origin.cst-web.production.chorus.brightspot.cloud
aarp-content-uat2.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.projectm.brightspot.cloud
tvnotas.production.k3.m1.brightspot.cloud
intsys-qa.inter-systems.lower.k2.m1.brightspot.cloud
origin.medtech.production.jnj.brightspot.cloud
origin.web.production.hca.brightspot.cloud
intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.wwe-prod.production.k2.m1.brightspot.cloud
origin.jobs.production.amazon-jobs.brightspot.cloud
origin.berlin-2023-qa.berlin-2023.lower.k2.m1.brightspot.cloud
www.nbcsportsathletedirect.com
static.church-qa.church.lower.church.brightspot.cloud
origin.epe-uat.epe.lower.k2.m1.brightspot.cloud
lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
origin.pitchbook-uat.lower.k2.m1.brightspot.cloud
origin.in-investor-uat.lower.k2.m1.brightspot.cloud
origin.getgo-qa.lower.k2.m1.brightspot.cloud
ensign-qa.ensign.lower.church.brightspot.cloud
fastmarkets.com
origin.deseret.production.chorus.brightspot.cloud
static.lexipol.lower.k1.m1.brightspot.cloud
origin.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
static.bwater-uat.bridgewater.lower.k2.m1.brightspot.cloud
static.farm-journal-qa.lower.k1.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.web.production.teaching-strategies.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.intsys.inter-systems.production.k2.m1.brightspot.cloud
origin.church-uat.church.lower.church.brightspot.cloud
amazon-last-mile.lower.k3.m1.brightspot.cloud
church-qa4.church.lower.church.brightspot.cloud
origin.pay-uat.lower.k1.amazon.brightspot.cloud
origin.vpm.production.k1.m1.brightspot.cloud
origin.foods.wholefoods.production.k1.amazon.brightspot.cloud
aarp-content-uat.aarp.lower.k1.m1.brightspot.cloud
static.biospace.production.k1.m1.brightspot.cloud
epe-qa.epe.lower.k2.m1.brightspot.cloud
bsp.elpais.com.uy
origin.vpm.production.k1.m1.brightspot.cloud
origin.carrick.production.k1.m1.brightspot.cloud
cms.6amcity.com
static.timothy-shriver-prod.production.k1.m1.brightspot.cloud
origin.chalkbeat.production.chorus.brightspot.cloud
origin.berlin-2023.berlin-2023.production.k2.m1.brightspot.cloud
static.prod-wires.production.ap.brightspot.cloud
origin.music2-qa.lower.k1.amazon.brightspot.cloud
kpbs-qa.kpbs.lower.k3.m1.brightspot.cloud
acertus-qa.lower.k1.m1.brightspot.cloud
cms.6amcity.com
cms.6amcity.com
origin.marriott-news.production.k1.m1.brightspot.cloud
origin.ei.energy-intelligence.production.k1.m1.brightspot.cloud
origin.thecity.production.chorus.brightspot.cloud
origin.lehigh-v.lehigh-valley.production.k1.m1.brightspot.cloud
static.uat.lower.dispatch-health.brightspot.cloud
entertainment-uat.lower.k1.amazon.brightspot.cloud
erepublic-qa2.erepublic.lower.k3.m1.brightspot.cloud
lexipol.production.k1.m1.brightspot.cloud
qa2.lower.forum-communications.brightspot.cloud
*.dispatchhealth.com
origin.chopra.chopra.production.k2.m1.brightspot.cloud
origin.web.production.hca.brightspot.cloud
origin.qa.lower.grove2.brightspot.cloud
static.uat.lower.amazon-sell.brightspot.cloud
origin.kpbs-uat.kpbs.lower.k3.m1.brightspot.cloud
static.notmusa.production.k3.m1.brightspot.cloud
static.aarp-states-uat.aarp.lower.k1.m1.brightspot.cloud
science-qa2.topics.lower.k1.amazon.brightspot.cloud
origin.im-qa.lower.jnj.brightspot.cloud
aarp-content.aarp.production.k1.m1.brightspot.cloud
origin.uat.lower.dispatch-health.brightspot.cloud
sixam-city-uat.lower.k1.m1.brightspot.cloud
ooc.jnj-migrated.production.jnj.brightspot.cloud
origin.csx-qa.lower.k2.m1.brightspot.cloud
origin.jnj-uat.lower.jnj.brightspot.cloud
origin.rfdtv.k1.go.brightspot.cloud
static.web.production.forum-communications.brightspot.cloud
origin.music2-uat.lower.k1.amazon.brightspot.cloud
static.gbh.production.k1.m1.brightspot.cloud
origin.aji.production.k2.m1.brightspot.cloud

Certificate

The complete raw certificate details for web.production.forum-communications.brightspot.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujIj2mckHQtd0anvmREH
zVoKaN2rggvYskcTuzbcPPQDG56pa7hd8G28J+YoU68yLyUaRDNaBGgIORw7LHvj
GxL7owhBlHf389AQmyC4H3RczZi0ST4F0AGy1jS7Ueo2ZUfiFgrqhdiLEjLdNqfU
UbsStkF1IH84AV87rlF9yyxShdLQKJsiqVo8rh4Gm/U970vlpJaGzZf2uN602she
Z6ohvNyzg8JPTFY/Ktu12R7mxe1AiMH/QxGT90ueotb/SgVruRKBLCM10uNgTAU9
iOcZuUdqAFZN1aILl56UCqV347dw/vJARInQwSnb5hpro4fJrZY4DhHphQ5ov80J
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6971750935062020214964519073273837579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.production.forum-communications.brightspot.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23505049704502345094445801861875761956662677334044255995924265531340737033561199699983402262873111531064263420416456053201187469049106150245257055268206408954828140585447945735585971308686406925065653834170673567234295609109583907871508449557156701571667163499506429474071296697742641655587380120838396952180350176149707449280393054309933359860112728648162831513388869704074680929616771718254658556106429635993674468403232228389679628887057802256121343576536595339725427475026681497566461572821149616652378151781788165804985026191201265338586814137825684878104477989035532640301663524085773515409869879966979324709233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fe1ad8df3c39f73a21d84165b8b937d330666fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1062 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.production.forum-communications.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.production.forum-communications.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therinklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siouxfallslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therinklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fccnn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxfallslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcloudlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcloudlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandforksherald.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00df0ed37f10c1433f7de2a801b18eb9b4e1affee1462ea9e2f49727b635c91f18dbe0cbb3cd7e9c0ea5b9a2388eb032ab5ea4b7b9d648bc9ed635cd60bbda572b8cebae22bfd36e8a7fea1c13f2d97ea9ee90869a88a05dd13b941bb9aaf17f35e0b81ab5bf530553e4b3e448e4098ee254ddb6b532753ffe90c59386400c3dee8fe48d66fc4d3ad728515de599f254be831296d443d86fa0518c7217a877692b57e4b52dc148d3bc0daa446817b8216fda91074b28e9708b3829f3fc5c9554d88b9fcd18064693d878fae75634e9f9680672e1b1f8d8a5544ac35fdd18935fc827597eab91a7774e2b7dea4e8b301e1ef10d6f45213f3f84938d36789933af1c