fciohosting.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:5d:2c:31:2b:13:3c:a9:57:14:ad:f4:8a:43:b3:7e was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fciohosting.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:5d:2c:31:2b:13:3c:a9:57:14:ad:f4:8a:43:b3:7e
Serial Number (int): 15105287883011448922500477576160719742
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:74:47:97:2a:5f:2e:90:75:06:87:73:fb:cc:07:ff:bb:21:cb:fc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c8:28:e9:17:94:8e:d9:7f:d8:12:b5:ac:95:16:b2:28:f8:a4:dc:d9
Fingerprint (sha256): 6d:e3:30:e3:5c:9a:f5:ce:f2:28:1a:ea:dc:29:3d:46:37:e7:82:10:8d:1b:5b:18:90:3e:3d:25:ed:3e:27:51

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate fciohosting.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fciohosting.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fciohosting.com
resume.as
*.customs.as
aieats.as
*.resume.as
*.meaai.as
tala.as
meaai.as
*.aieats.as
*.freightplus.ws
faletech.com
*.faletech.com
*.ambulance.as
*.tala.as
meainu.as
*.roads.as
ambulance.as
freightplus.ws
*.meainu.as
vote.as
tautua.ws
*.fciohosting.com
*.health.as
*.vote.as
roads.as
customs.as
health.as
*.tautua.ws

Other certificates including the domain name fciohosting.com

(limited to 100 certificates)
fciohosting.com
fciohosting.com
fciohosting.com

Certificate

The complete raw certificate details for fciohosting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIQC10sMSsTPKlXFK30ikOzfjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDIyMjAwMDAwMFoXDTI1MDMyMjIzNTk1OVowGjEY
MBYGA1UEAxMPZmNpb2hvc3RpbmcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm0xGesCqelaYMOLnVPX6eSYgc3RORg3g+1f4Bn3IritXkVOcMoFE
PBft1sRg4Zvq1AgOh454C9pPY2nyaImVipEwVuBfJLz2PuWmS6DS4H7TP6Zcpfpp
eZttZRYs2Zuwq3KBJLK3VQGmxJTnZZvQmsHxIcCO6aTen7Z3Z8vhVfEmhSHa28ev
MJeUnMHB+K+JD+wCltxJiNlW/KOcDvggW2TFyHNfq2ogvW3RnZ9TwRSlrdkGXlRa
wqf+Z+Q6DVO2Bbg67A6K3yncvExRIxWPdkMfvVw6YrmyNb1AOmACYDhO/z9SH1CQ
aHMmlDXBPHC+pqXLhk1broJvLagX+G8JLwIDAQABo4IERDCCBEAwHwYDVR0jBBgw
FoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFD90R5cqXy6QdQaHc/vM
B/+7Icv8MIIBdQYDVR0RBIIBbDCCAWiCD2ZjaW9ob3N0aW5nLmNvbYIJcmVzdW1l
LmFzggwqLmN1c3RvbXMuYXOCCWFpZWF0cy5hc4ILKi5yZXN1bWUuYXOCCioubWVh
YWkuYXOCB3RhbGEuYXOCCG1lYWFpLmFzggsqLmFpZWF0cy5hc4IQKi5mcmVpZ2h0
cGx1cy53c4IMZmFsZXRlY2guY29tgg4qLmZhbGV0ZWNoLmNvbYIOKi5hbWJ1bGFu
Y2UuYXOCCSoudGFsYS5hc4IJbWVhaW51LmFzggoqLnJvYWRzLmFzggxhbWJ1bGFu
Y2UuYXOCDmZyZWlnaHRwbHVzLndzggsqLm1lYWludS5hc4IHdm90ZS5hc4IJdGF1
dHVhLndzghEqLmZjaW9ob3N0aW5nLmNvbYILKi5oZWFsdGguYXOCCSoudm90ZS5h
c4IIcm9hZHMuYXOCCmN1c3RvbXMuYXOCCWhlYWx0aC5hc4ILKi50YXV0dWEud3Mw
EwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3Js
LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBn
MC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20w
NgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy
bTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcA
dgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY3Q8ZgcAAAEAwBH
MEUCIHlCzBgH24JlxPNqd4J0Ef3rPuj9sQDfDTmcXeZpRskGAiEA0Diwlml1i8AZ
r//evMNQWR6sqYXp9MKaOXsY2eG3CWgAdgB9WR4S4XgqexxhZ3xe/fjQh1wUoE6V
nrkDL9kOjC55uAAAAY3Q8ZgBAAAEAwBHMEUCIQDScAuvMQnBGpSWU6h53gVxo+o/
C3IFt5KwaSqn/bN4sgIgcPSNGKN0f9ahl4oszgFWF7m5Lmr2AgS/na4lrr6bkxEA
dQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY3Q8ZgpAAAEAwBG
MEQCIEBBxSFqtLfLD5kTbF1Adrm1CdDNcAcdlzUfnuBPHgJaAiAk/edCSmmGyFCU
VzCn2hfzZG0BO69cceGRUn5bcquaojANBgkqhkiG9w0BAQsFAAOCAQEAOfQ8lXIC
NAf/3MYtcjVo/X1bwwss88OTHdZIltKK5jJUtHLXue/Fow9V7+HyUCnLyS6hr6TW
RVv89DtMxtXctOv+yHcP738RxW9HwsQHVGDy6rW6MW6bzXhIWZ9aP9EtdR6FwX64
bN9NaUaLz5C5fhG+pBYZOMdjFMOBQbDEiEHZ+Cm7m02NKbW2KVYYZTG4DIEaNnm0
gaYgRMzmi9lNReipO80hXUWhXAooDSdZV7+QspG2ERqNZYWtNMuD6h/4irZzb69Z
bM6NXuc/BmmxxGz4Vx5cGlOKkDVoNF4RTT9BUBfuMU2TRHBPNS28/n4yAUVZq8BA
/LD+JHS/vC0r6g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0xGesCqelaYMOLnVPX6
eSYgc3RORg3g+1f4Bn3IritXkVOcMoFEPBft1sRg4Zvq1AgOh454C9pPY2nyaImV
ipEwVuBfJLz2PuWmS6DS4H7TP6ZcpfppeZttZRYs2Zuwq3KBJLK3VQGmxJTnZZvQ
msHxIcCO6aTen7Z3Z8vhVfEmhSHa28evMJeUnMHB+K+JD+wCltxJiNlW/KOcDvgg
W2TFyHNfq2ogvW3RnZ9TwRSlrdkGXlRawqf+Z+Q6DVO2Bbg67A6K3yncvExRIxWP
dkMfvVw6YrmyNb1AOmACYDhO/z9SH1CQaHMmlDXBPHC+pqXLhk1broJvLagX+G8J
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15105287883011448922500477576160719742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fciohosting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19604550027220943707084384554619822707540255407721826724047968334020221342555249108600133415054957494664360575795490764479293655805504585878381509242875944409736506445207699365868715093040361843974506853255285241701405612984814534227096329876670047167916209367796149960767360412395270586895128141022374146922456155119389137352941675216665779862480183332898301602953001455345020421320075529795643852844822845723736714625711666695708346632760699876055136910581255062454812331543927748187612993544314110807904749248411184188836246179809992641717034986292320561779196391970218984907762808191353932267502253286654259169583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f7447972a5f2e9075068773fbcc07ffbb21cbfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fciohosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resume.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customs.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aieats.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resume.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meaai.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tala.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meaai.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aieats.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freightplus.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faletech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faletech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambulance.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tala.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meainu.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roads.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambulance.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freightplus.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meainu.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vote.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tautua.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fciohosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vote.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roads.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customs.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tautua.ws'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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