subscription.timeinc.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 03:10:1c:f5:9e:e6:2d:8e:18:fc:13:e3:01:45:63:bc was issued on by Amazon.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscription.timeinc.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:1c:f5:9e:e6:2d:8e:18:fc:13:e3:01:45:63:bc
Serial Number (int): 4071348104636922720316099049642353596
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: b1:9d:1c:9c:b7:6c:63:b8:27:1e:6a:be:af:ba:ff:9f:bf:0f:1a:83
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ad:14:a2:ec:2d:61:d2:c7:c0:1d:2e:03:3c:60:a7:ee:03:de:1c:29
Fingerprint (sha256): 5d:93:5e:bf:49:93:51:b6:42:61:f7:cd:64:be:18:50:d5:91:75:7e:7f:44:12:cd:b2:3d:5c:e5:c4:aa:a7:ed

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate subscription.timeinc.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscription.timeinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscription.timeinc.com
backissues.ew.com
subscription.timeforkids.com
www.timeincshop.com
subscription.cookinglight.com
subscription.health.com
subscription.peopleenespanol.com
subscription.sikids.com
subscription.realsimple.com
subscription.ew.com
www.magazineselectstore.com
shop.si.com
subscription.coastalliving.com
subscription.people.com
backissues.money.com
shop.ew.com
shop.time.com
subscription.money.com
subscription.timeedge.com
digitalstore.instyle.com
subscription.si.com
maghound.com
subscription.time.com
www.magazinereadermall.com
subscription.fortune.com
backissues.people.com
www.oxmoorhouse.com
www.mysubscriptionstore.com
subscription.foodandwine.com
subscription.travelandleisure.com
www.partnernewsstand.timeinc.com
subscription.instyle.com
backissues.realsimple.com
subscription.southernliving.com
www.employeenewsstand.timeinc.com
shop.timeinc.com
backissues.time.com
backissues.fortune.com
nymag.customersvc.com

Other certificates including the domain name timeinc.com

(limited to 100 certificates)
tcspcimw1mva1.tcs.timeinc.com
office.timeinc.com
subscription.timeinc.com
editor.timeinc.com
www.oxmoorhouse.com
submission-platform.timeinc.com
subscription.timeinc.com
qa-subscription.ecommerce.timeinc.com
www.timeinclistrental.com
qa-subscription.ecommerce.timeinc.com
qa-subscription.ecommerce.timeinc.com
cgi.pathfinder.com
thewell.timeinc.com
subscription-assets.timeinc.com
testpc.timeinc.com
office.timeinc.com
seawlocal1.timeinc.com
facebookstage.timeinc.com
lucie.timeinc.com
spotlightcdn.timeinc.com
cdn.video.timeinc.com
qa-subscription.ecommerce.timeinc.com
remoteny-test.timeinc.com
dev-dcms.www.timeinc.net
subscription.timeinc.com
nyccormvdc11.corp.ad.timeinc.com
nyccormvdc11.corp.ad.timeinc.com
www.meredith.com
cdn.video.timeinc.com
cgi.timeinc.com
qa-www.oxmoorhouse.com
remoteuk.timeinc.com
httpqc1.tcs.timeinc.com
tmpcaa.enterprise.corpad.timeinc.com
qa-lucie-aws.timeinc.com
careers.timeinc.com
qa-www.oxmoorhouse.com
nyccormvdc12.corp.ad.timeinc.com
www.timeinclistrental.com
engineering.timeinc.com
nycpsappp1.timeinc.com
subscription-assets.timeinc.com
awscloud.timeinc.com
mobileservices.timeinc.com
prod-dcms.www.timeinc.net
fast.timeinc.com
ise.meredith.com
spotlightstage.timeinc.com
jam.timeinc.com
www.reference.dcms-sa.timeinc.net
spotlight.timeinc.com
seawlocal2.timeinc.com
nycasavpn1.timeinc.com
subscription-assets.timeinc.com
office.timeinc.com
adgallery.timeinc.com
qa-lucie.timeinc.com
subscription.timeinc.com
mobileservicestest.timeinc.com
www.oxmoorhouse.com
adgallery.timeinc.com
awscloud.timeinc.com
lonbfbsonsbc1.timeinc.com
subscription.timeinc.com
wwdev1.timeinc.com
engineering.timeinc.com
echostage.timeinc.com
coversxchange.timeinc.com
spotlightcdn.timeinc.com
www.timeinclistrental.com
qa-www.oxmoorhouse.com
tpottest.tcs.timeinc.com
txship.timeinc.com
cm.ecommerce.timeinc.com
fast.timeinc.com
psofttestservices.timeinc.com
psoftservices.timeinc.com
psycordc12.corp.ad.timeinc.com
subscription.timeinc.com
www.meredith.com
editor.timeinc.com
hkasavpn1.timeinc.com
subscription.timeinc.com
dev-theshop.meredith.com
www.timeinclistrental.com
lucie.timeinc.com
www.oxmoorhouse.com
support.timeinc.com
facebook.timeinc.com
editor.timeinc.com
corp.ad.timeinc.com
ny225cppmsub.nw.timeinc.com
360.meredith.com
whkcormvdc15.corp.ad.timeinc.com
www.oxmoorhouse.com
qa-cm.ecommerce.timeinc.com
nycfinma1.corp.ad.timeinc.com
dev.jam.timeinc.com
credantgk.timeinc.com
nycfinma1.corp.ad.timeinc.com

Certificate

The complete raw certificate details for subscription.timeinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+djQFYAw3XLQIM5V2bj
TMGyjKGPsizxVz0FYaTJ+19KviC6DS5+xNEtejyNzVVUGf7LCj0N2CAGmw/yNEa6
bpMzVbbsajPhJ0RhnoqJQGkkMT3gzIOXuS+RO+YGbS7TMK33/01RgED1rhxUpY0c
X3zFnMuaxDY4afnGgm9tyYDx03grJRQgH8TyNOGCLd8osllw2EVxC44nRfwohQ5K
cGPJNS8md5qBPQP95p5YlspL+VGwHywXSsrE10aXf5RpZ0tsWIPeun02+6H0Om7Z
Siz3bf+RQNjziGHlXcKe501w4bzGj8xltL6LxIG3btF3guBHRJknb9QgWMBHnNxw
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4071348104636922720316099049642353596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscription.timeinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26245430655682622119845623019070035758835971123607059922522489952489785832939845825065920097485488158912842888391065489022446122957249780762387885262119891321169875230976224271012871576671289435066310036954069002750084131133158238769472556583634338332283080468284934596573294769527218936206115300330131831593584834611864002010570511051241836910358297879958948712315058425949980405162777873293193241628784565807385243863083354982453915118165255079745773488131024160618539815221159808554020521931298374471779044837108240772143095591207816909805902885746355653277927294957161307783429321334499129784926311240433628115083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b19d1c9cb76c63b8271e6abeafbaff9fbf0f1a83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (982 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backissues.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.timeforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timeincshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.sikids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazineselectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backissues.money.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.money.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.timeedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstore.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.si.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maghound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magazinereadermall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.fortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backissues.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxmoorhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysubscriptionstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.travelandleisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnernewsstand.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backissues.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employeenewsstand.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.timeinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backissues.time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backissues.fortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymag.customersvc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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