cfrsa-dev.rogerdubuis.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:19:1c:92:91:81:5c:13:62:b0:eb:2a:c5:30:78:b9 was issued on by Amazon.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cfrsa-dev.rogerdubuis.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:19:1c:92:91:81:5c:13:62:b0:eb:2a:c5:30:78:b9
Serial Number (int): 4118070928630460308931168686543239353
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d2:5c:4a:7c:f2:20:3e:a0:26:45:9a:78:cd:1a:86:54:d4:e0:9d:a4
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 82:51:58:28:66:2c:81:7c:db:b1:8e:40:a2:bc:29:f3:6f:d2:a7:c6
Fingerprint (sha256): 5e:6a:9d:3c:93:0c:91:de:5f:0b:7a:4f:8c:ed:87:e8:03:90:c7:c6:50:1f:33:b7:bc:c8:97:8d:9d:73:eb:7d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate cfrsa-dev.rogerdubuis.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfrsa-dev.rogerdubuis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cfrsa-dev.rogerdubuis.com
cfrsa-dev.iwc.com
cfrsa-dev.panerai.com
cfrsa-dev.jaeger-lecoultre.com
pega-dev.richemont.com
cfrsa-dev.jaeger-lecoultre.cn
cfrsa-dev.montblanc.com
cfrsa-dev.vancleefarpels.com
cfrsa-dev.alange-soehne.com
*.pegacloud.net
cfrsa-dev.iwc.cn
cfrsa-dev.piaget.com
cfrsa-dev.vacheron-constantin.com
cfrsa-dev.cartier.com

Other certificates including the domain name rogerdubuis.com

(limited to 100 certificates)
intranet.richemont.com
intranet.richemont.com
press.rogerdubuis.com
scan.preprod2.cartier.com
www.rogerdubuis.com
intranet.richemont.com
spark.dev.piaget.com
dam.richemont.com
intranet.richemont.com
akamai-san176.exacttarget.com
media.richemont.com
www.rogerdubuis.com
www.rogerdubuis.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
admin.www.rogerdubuis.com
press.rogerdubuis.com
intranet.richemont.com
intranet.richemont.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
scan.preprod2.cartier.com
press.rogerdubuis.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
www.quality.alange-soehne.com
media.richemont.com
scan.dev.cartier.com
linemedia.preprod.richemont.com
www.rogerdubuis.com
www.quality.alange-soehne.com
admin.rogerdubuis.com
cartiercare.preprod2.cartier.com
intranet.staging.richemont.com
spark.preprod.piaget.com
spark.dev.piaget.com
intranet.quality.richemont.com
intranet.dev.richemont.com
www.rogerdubuis.com
scan.cartier.com
intranet.staging.richemont.com
scan.preprod.cartier.com
limitednumbers.rogerdubuis.com
admin.www.rogerdubuis.com
vcs.richemont.com
intranet.richemont.com
scan.preprod2.cartier.com
rogerdubuis.richemont.cn
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
scan.dev2.cartier.com
dam.richemont.com
scan.dev2.cartier.com
spark.piaget.com
akamai-san176.exacttarget.com
scan.cartier.com
www.rogerdubuis.com
scan.preprod.cartier.com
media.richemont.com
admin.www.rogerdubuis.com
press.rogerdubuis.com
www.quality.alange-soehne.com
admin.www.rogerdubuis.com
www.rogerdubuis.com
intranet.richemont.com
scan.preprod.cartier.com
www.quality.alange-soehne.com
scan.dev2.cartier.com
www.rogerdubuis.com
intranet.staging.richemont.com
intranet.richemont.com
www.rogerdubuis.com
www.rogerdubuis.com
intranet.richemont.com
www.rogerdubuis.com
intranet.richemont.com
intranet.richemont.com
api.weboutique.quality.iwc.cn
intranet.richemont.com
wwsip.richemont.com
cfrsa-stg.rogerdubuis.com
www.rogerdubuis.com
scan.preprod3.cartier.com
intranet.richemont.com
spark.qual.piaget.com
scan.dev2.cartier.com
intranet.dev.richemont.com
scan.preprod.cartier.com
spark.qual.piaget.com
www.rogerdubuis.com
admin.rogerdubuis.com
www.rogerdubuis.com
www.rogerdubuis.com
intranet.richemont.com
intranet.quality.richemont.com
wwsip.richemont.com

Certificate

The complete raw certificate details for cfrsa-dev.rogerdubuis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHLDCCBhSgAwIBAgIQAxkckpGBXBNisOsqxTB4uTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMDgxNTAwMDAwMFoXDTI0MDkxMzIzNTk1OVowJDEi
MCAGA1UEAxMZY2Zyc2EtZGV2LnJvZ2VyZHVidWlzLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMUPBlvCMSI4Iy+2yHVuSlcZBl34nC/5dgVMHIMD
P+VFi5SVpV9UrojrnTvk3c4MnMc3E2zIceqI5zMLv1JGRKU3KJEjTEeNfOZHPfqj
y9z1ZglwRtlYf0vRoJKYVdWsiNJOGXre6I0Sr80mzb5HRHJWT0J9DBXVZlQxOH05
5ZbMHaZprazoIIz4eJNU3fIyyO3c384/kpnSUSz83vi1ZlCnWneT7iq/pNzskvAa
umM90XuqCLp3fb7smwhUDd7yiwGtxWWDDuROg/tXtTH8OpcuczXpzJt5dBSpLz7b
z3RD+EDKmoruqXOzSZghg37B5ECcUl5JyaMtoebqh22ZzLUCAwEAAaOCBEAwggQ8
MB8GA1UdIwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBTSXEp8
8iA+oCZFmnjNGoZU1OCdpDCCAXAGA1UdEQSCAWcwggFjghljZnJzYS1kZXYucm9n
ZXJkdWJ1aXMuY29tghFjZnJzYS1kZXYuaXdjLmNvbYIVY2Zyc2EtZGV2LnBhbmVy
YWkuY29tgh5jZnJzYS1kZXYuamFlZ2VyLWxlY291bHRyZS5jb22CFnBlZ2EtZGV2
LnJpY2hlbW9udC5jb22CHWNmcnNhLWRldi5qYWVnZXItbGVjb3VsdHJlLmNughdj
ZnJzYS1kZXYubW9udGJsYW5jLmNvbYIcY2Zyc2EtZGV2LnZhbmNsZWVmYXJwZWxz
LmNvbYIbY2Zyc2EtZGV2LmFsYW5nZS1zb2VobmUuY29tgg8qLnBlZ2FjbG91ZC5u
ZXSCEGNmcnNhLWRldi5pd2MuY26CFGNmcnNhLWRldi5waWFnZXQuY29tgiFjZnJz
YS1kZXYudmFjaGVyb24tY29uc3RhbnRpbi5jb22CFWNmcnNhLWRldi5jYXJ0aWVy
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1hem9udHJ1
c3QuY29tL3IybTAzLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcB
AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0
LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5j
b20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSC
AWoBaAB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABifaXGtEA
AAQDAEYwRAIgOy+PBLnTO5pxixUhXIfO51Fa1ol/AfH+PLkizKl5LNkCIEImfI2B
cPbuZweooh+CQh2/UhFBKNX+9f0riZaTvSj4AHcASLDja9qmRzQP5WoC+p0w6xxS
ActW3SyB2bu/qznYhHMAAAGJ9pca5gAABAMASDBGAiEAsvVxw80O+h20RS4gsGW6
fu+IU0pgTWKB81JPUZP/5SICIQDPuDp29Dl7OPk5UWvODH4lru/Cbd1GAw3qO0KO
0rhoZQB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABifaXGqsA
AAQDAEcwRQIgKDt8rc/LiZIjn0cOJRfzP244zi8qD63PyXJig9635zkCIQDkU2WK
c1KBFIpnGhjds2W1OfUtLhN7Ib1qD18d84Y8tjANBgkqhkiG9w0BAQsFAAOCAQEA
dFogCHHU6AE7q0WNkqGeWEUfDeel63Mg8vzr0AK3l4SiS2DE3DTJU3FXhYWMytH+
lnNCgaJe7QFiGCOIJ+1qMKmQMLZW8m3oXVn+5MCsvJh9CGbrdY95ZaQFUnYWkcUA
RU5dkTsfdKqEQfIeffwSaUL7PxJ7gncgH8OAwA28v//yRKc31Lh8mkQUiSwD35o3
3+LQ6xpB9+jmTQE+ZIkpjq4kpIEcds3/+jexdpL9uO6N385OYamvDAdCkzCgaIw1
zUIe4vmeChzTk3qf4TmP8DDRIic28m+jzJ7sb7dX100AZ5are/S+SNxV18BKqvhV
iQkaJ+estnx67HUZ14kCrQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ8GW8IxIjgjL7bIdW5K
VxkGXficL/l2BUwcgwM/5UWLlJWlX1SuiOudO+TdzgycxzcTbMhx6ojnMwu/UkZE
pTcokSNMR4185kc9+qPL3PVmCXBG2Vh/S9GgkphV1ayI0k4Zet7ojRKvzSbNvkdE
clZPQn0MFdVmVDE4fTnllswdpmmtrOggjPh4k1Td8jLI7dzfzj+SmdJRLPze+LVm
UKdad5PuKr+k3OyS8Bq6Yz3Re6oIund9vuybCFQN3vKLAa3FZYMO5E6D+1e1Mfw6
ly5zNenMm3l0FKkvPtvPdEP4QMqaiu6pc7NJmCGDfsHkQJxSXknJoy2h5uqHbZnM
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4118070928630460308931168686543239353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfrsa-dev.rogerdubuis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24876355101884302098451838489013014473693079702976707254797390372194892379777026655139628374676131179711045363442780949441219277184887530675737937220638925318294095705225788627610220708897836781403305327440336258609591857792991431057384399891910230883120042905795260403213330475654274973591461723988312605527826660326278493634206523881587680014763185276669880630915388748033291821349317149201057225374699571984444935231846519271408354339325719474313277485885892650170812981585222538391755044865819148979572175498717663191950372387289423385580556052939858723881065127303959211533805506174002715092971566581681277750453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d25c4a7cf2203ea026459a78cd1a8654d4e09da4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.rogerdubuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pega-dev.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.jaeger-lecoultre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pegacloud.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfrsa-dev.cartier.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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