mi9cdn.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:12:a4:20:d2:46:e0:43:5c:60:0e:79:57:8a:84:81 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mi9cdn.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:12:a4:20:d2:46:e0:43:5c:60:0e:79:57:8a:84:81
Serial Number (int): 8072158233716857387680562015302747265
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4d:fb:ca:21:f4:1a:18:8a:35:4b:fc:8f:08:de:d4:7f:91:49:a2:5a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ab:10:89:bf:d1:5e:ed:9a:bc:b6:3f:7b:f7:ff:65:ce:ea:02:f8:29
Fingerprint (sha256): 60:eb:90:a9:50:9b:ec:94:f0:22:b8:e0:2e:85:ae:44:af:88:c4:08:a8:a9:79:24:2b:87:b3:f2:b5:25:f5:4e

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate mi9cdn.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mi9cdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mi9cdn.com
vms.mi9cdn.com
9vms.com.au
9video.com.au
dev.9vms.com.au
*.dev.9vms.com.au
*.vms.mi9cdn.com
*.dev.9video.com.au
*.9video.com.au
vms-api.mi9cdn.com
*.mi9cdn.com
*.9vms.com.au
*.nine.com.au
*.9now.com.au
*.video.nine.com.au
*.video-preview.9now.com.au
dev.9video.com.au
*.vms-api.mi9cdn.com

Other certificates including the domain name mi9cdn.com

(limited to 100 certificates)
api-vms.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nz.vpn.mi9cdn.com
docker-registry.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
mi9cdn.com
www.networkservices.ninemsn.com.au
docker-registry.mi9cdn.com
docker-registry-nine.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
docker-registry-nine.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
mi9cdn.com
nz.vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vpn.mi9cdn.com
nz.vpn.mi9cdn.com
www.networkservices.ninemsn.com.au
vms.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nz.vpn.mi9cdn.com
mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.mi9cdn.com
vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
docker-registry.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
int.vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.vms-api.mi9cdn.com
mi9cdn.com
mi9cdn.com
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
docker-registry-nine.mi9cdn.com
www.networkservices.ninemsn.com.au
mi9cdn.com
www.networkservices.ninemsn.com.au
int.vms-api.mi9cdn.com
www.networkservices.ninemsn.com.au
mi9cdn.com
www.networkservices.ninemsn.com.au
int.vms-api.mi9cdn.com

Certificate

The complete raw certificate details for mi9cdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+DCCBeCgAwIBAgIQBhKkINJG4ENcYA55V4qEgTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDMyNzAwMDAwMFoXDTI1MDQyNjIzNTk1OVowFTET
MBEGA1UEAxMKbWk5Y2RuLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI2WdZNc4WCbZT0Sbo1W8lDnpiBHze7CV95D5bTFqfqkLrQ0molhIN25RCZX
HJnT950ChAoUrUkj/9J044BBCEhtZVh2iSm3AWiXkelpcUpipeicx5gGvTio1J+u
uUe6og5HDQxMZmxyESJk1eYBGJUDB5FHvEoi4+UKsEt1tuw26DrKFszT96v42F2w
teOOECMqsnW62KpLLk1mfHUElRmFF07kEoltFdX9/8KN7ZQzup0xtNbm4MsrF2Xk
gj3sPasgQiXfytLf3Ym5O6oLX6Wv4rQ+BXhsuAed+2d4rLwW73Ia5hlVp2nAtGjz
wPyF/Y9QKHfr8FaA7DbiUsRqBzkCAwEAAaOCBBswggQXMB8GA1UdIwQYMBaAFMAx
Us1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRN+8oh9BoYijVL/I8I3tR/kUmi
WjCCAUsGA1UdEQSCAUIwggE+ggptaTljZG4uY29tgg52bXMubWk5Y2RuLmNvbYIL
OXZtcy5jb20uYXWCDTl2aWRlby5jb20uYXWCD2Rldi45dm1zLmNvbS5hdYIRKi5k
ZXYuOXZtcy5jb20uYXWCECoudm1zLm1pOWNkbi5jb22CEyouZGV2Ljl2aWRlby5j
b20uYXWCDyouOXZpZGVvLmNvbS5hdYISdm1zLWFwaS5taTljZG4uY29tggwqLm1p
OWNkbi5jb22CDSouOXZtcy5jb20uYXWCDSoubmluZS5jb20uYXWCDSouOW5vdy5j
b20uYXWCEyoudmlkZW8ubmluZS5jb20uYXWCGyoudmlkZW8tcHJldmlldy45bm93
LmNvbS5hdYIRZGV2Ljl2aWRlby5jb20uYXWCFCoudm1zLWFwaS5taTljZG4uY29t
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny
bC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMi5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFo
AHYAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGOfntGYgAABAMA
RzBFAiEAoqbld1RWxkmDvFPVQaJqMnc7+OjZlT7qlxLQa9ZTEGkCIDd3xU+d4UbU
H2uQe9M81q8HN/Q4o5UHQOsQEkGbBErTAHcAfVkeEuF4KnscYWd8Xv340IdcFKBO
lZ65Ay/ZDowuebgAAAGOfntGjAAABAMASDBGAiEAzTk3FGAqpAsJEDiK2xlwku5S
R3RwnR7cmWzota9l8ycCIQDJA2cKbGSDrzor65KiSGD3QNroVC607hRBC2eSOaXD
TgB1AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAABjn57Rm4AAAQD
AEYwRAIgdL9PHdnFssaQjOthHdP6hB1awOdSjBAm/zXTwQHrw5wCIFx1grPdjfTR
Ma9nKzG0dE2CTa3C304YHzLVuSLh7rZ+MA0GCSqGSIb3DQEBCwUAA4IBAQBQoZ4x
oVYzjaW1IIotS/2Z5dH3sgiyRRmDi0Zn7EBB6b8OWiB8nKpfasz9+f83SFDlGFWU
stbo90lXfiykAEMToXefa0M6/J0yBvGf5BRV0tZxg6L4j3ideIsLHYi0gnUAVbl9
bHrW1fe7c4WI3ZN4+H/Q9Pr3ZWZzZlCzNIUM4iVR/XQR0gVIf4Vn1vv5jb1VKv3y
MfrAHUrQrNiPTYHIomkZot7UJwVOPvB8gAlwR5LzxsFUCbKjf2FdtL3THnzKvLKb
L1E8KV7YFFZXmFnGmlyyP7zu4tswCfAalI8HF6IjYq1kZShC3gSQxzTaeYAtAI1A
E4KJdFz16IQMBG84
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZZ1k1zhYJtlPRJujVby
UOemIEfN7sJX3kPltMWp+qQutDSaiWEg3blEJlccmdP3nQKEChStSSP/0nTjgEEI
SG1lWHaJKbcBaJeR6WlxSmKl6JzHmAa9OKjUn665R7qiDkcNDExmbHIRImTV5gEY
lQMHkUe8SiLj5QqwS3W27DboOsoWzNP3q/jYXbC1444QIyqydbrYqksuTWZ8dQSV
GYUXTuQSiW0V1f3/wo3tlDO6nTG01ubgyysXZeSCPew9qyBCJd/K0t/dibk7qgtf
pa/itD4FeGy4B537Z3isvBbvchrmGVWnacC0aPPA/IX9j1Aod+vwVoDsNuJSxGoH
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8072158233716857387680562015302747265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi9cdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17873795236354549006145143904105999188253921152210121705155211690231427385406214402532569518942298923787626992306202383161526602972467345009627981401546838316699916660246158894507911225241712021977981133873776522763359522043993500183839404040726422505615971251514304947611142250549968781219458434365602664491657228868228651522148176819188225261960018176926308221661164360319348972748027035571565684909807098128771147168000252057054185523479019268314444580374459282958736855244998479261521285887285407086487191060934163615217024033450289927039868627658095240328702529162555460867437201560773586189358835931272608089913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dfbca21f41a188a354bfc8f08ded47f9149a25a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vms.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms-api.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi9cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9vms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.nine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video-preview.9now.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.9video.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vms-api.mi9cdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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