*.health.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:b5:6e:92:8b:9f:aa:5b:90:5d:3b:7b:bc:de:3f:98 was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.health.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b5:6e:92:8b:9f:aa:5b:90:5d:3b:7b:bc:de:3f:98
Serial Number (int): 8917416381683867866370810308038901656
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 24:0b:70:6c:30:08:20:64:c1:4f:de:6c:26:a7:99:b5:93:0a:7c:ea
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 9b:53:ec:1f:6a:33:ec:9f:86:ee:5b:ba:ab:6a:8b:b3:7c:31:bb:14
Fingerprint (sha256): 72:93:28:c4:df:d0:95:dc:5a:06:b8:c7:ff:22:c7:ea:91:ff:94:c9:53:29:bd:f0:40:c3:f3:56:35:9d:4e:05

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.health.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.health.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.health.com
*.dailypaws.com
*.shape.com
*.allrecipes.com
*.woodmagazine.com
*.ew.com
*.parenting.com
*.allpeoplequilt.com
*.people.com
*.mywedding.com
*.southernliving.com
*.realsimple.com
*.midwestliving.com
*.peopleenespanol.com
*.instyle.com
*.myrecipes.com
*.eatingwell.com
*.foodandwine.com
*.cookinglight.com
*.agriculture.com
*.bhg.com
*.parents.com
*.marthastewart.com

Other certificates including the domain name health.com

(limited to 100 certificates)
*.allyou.com
office.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
qa-subscription.ecommerce.timeinc.com
accounts.bhg.com
*.secure.meredith.com
secure.meredith.com
www.timeinclistrental.com
qa-subscription.ecommerce.timeinc.com
qa-subscription.ecommerce.timeinc.com
smetrics.health.com
*.health.com
sli.dailypaws.com
sli.dailypaws.com
office.timeinc.com
sli.health.com
qa-subscription.ecommerce.timeinc.com
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
subscription.timeinc.com
app.dreader.timeinc.net
www.meredith.com
health.com
specialoffers.meredith.com
*.meredithperformancemarketing.com
smetrics.health.com
qa-profiles-uat.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
sli.dailypaws.com
www.timeinclistrental.com
rails.timeinc.net
sli.dailypaws.com
xid.coastalliving.com
*.meredithperformancemarketing.com
xid.coastalliving.com
prod-dcms.www.timeinc.net
xid.coastalliving.com
sli.dailypaws.com
*.health.com
www.reference.dcms-sa.timeinc.net
news.health.com
secure.meredith.com
*.health.com
pages.email.coastalliving.com
accounts.bhg.com
office.timeinc.com
xid.coastalliving.com
subscription.timeinc.com
accounts.bhg.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
health.com
www.timeinclistrental.com
health.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
www.meredith.com
dev-dcms.www.timeinc.net
subscription.timeinc.com
qa-profiles.timeinc.net
secure.meredith.com
accounts.bhg.com
www.timeinclistrental.com
recipes-admin.health.com
amp.health.com
health.com
secure.meredith.com
*.allyou.com
subscription-assets.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
www.reference.dcms-sa.timeinc.net
*.health.com
a-ue1.dotdash.com
smetrics.health.com
health.com
sli.dailypaws.com
dev-app.dreader.timeinc.net
rails.timeinc.net
rails.timeinc.net
subscription.timeinc.com
*.health.com
sli.dailypaws.com
*.health.com
pages.email.time.com
*.health.com
www.timeinclistrental.com
subscription.timeinc.com
links.allrecipes.com
sli.dailypaws.com
*.health.com
office.timeinc.com
smetrics.health.com
www.timeinclistrental.com
pages.email.coastalliving.com
subscription.timeinc.com
secure.meredith.com
subscription.timeinc.com
subscription.timeinc.com

Certificate

The complete raw certificate details for *.health.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4DCCBMigAwIBAgIQBrVukoufqluQXTt7vN4/mDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDQwMzAwMDAwMFoXDTI0MDUwMTIzNTk1OVowFzEV
MBMGA1UEAwwMKi5oZWFsdGguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo628+AggBETNUExU8Wqu0vN4oxH3LHCsnSmKCq24kh4unvCHjmi5CLY4
1lYL1gTjBamGphBBJ4IVpwbDaNIJsiEnzHsST6OlhSsZAvXBO7y8OkfDy86iwNHr
GchdlRxy0J4tY2FkhoS8Lmu4PwZfiibhA917f48FaefQtdsuYJp2xMWvAbe1c4a7
2QnQtiR5f3fWwsqI0nBTpmecRKozW6be6l2SANCKtelRqvEDo1Q8bqlJR9aX/sar
jt87b2JD8svJDtYQLs/dUf3uCPUGuSRq2XfSBPuTQmEMtptG6OPegbM4cYE3coHG
28A1k0nm6DbV3aBLWGDixkzNDE17RQIDAQABo4IDATCCAv0wHwYDVR0jBBgwFoAU
wDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFCQLcGwwCCBkwU/ebCanmbWT
CnzqMIIBngYDVR0RBIIBlTCCAZGCDCouaGVhbHRoLmNvbYIPKi5kYWlseXBhd3Mu
Y29tggsqLnNoYXBlLmNvbYIQKi5hbGxyZWNpcGVzLmNvbYISKi53b29kbWFnYXpp
bmUuY29tgggqLmV3LmNvbYIPKi5wYXJlbnRpbmcuY29tghQqLmFsbHBlb3BsZXF1
aWx0LmNvbYIMKi5wZW9wbGUuY29tgg8qLm15d2VkZGluZy5jb22CFCouc291dGhl
cm5saXZpbmcuY29tghAqLnJlYWxzaW1wbGUuY29tghMqLm1pZHdlc3RsaXZpbmcu
Y29tghUqLnBlb3BsZWVuZXNwYW5vbC5jb22CDSouaW5zdHlsZS5jb22CDyoubXly
ZWNpcGVzLmNvbYIQKi5lYXRpbmd3ZWxsLmNvbYIRKi5mb29kYW5kd2luZS5jb22C
EiouY29va2luZ2xpZ2h0LmNvbYIRKi5hZ3JpY3VsdHVyZS5jb22CCSouYmhnLmNv
bYINKi5wYXJlbnRzLmNvbYITKi5tYXJ0aGFzdGV3YXJ0LmNvbTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw
MKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNy
bDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH
MAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw
AoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwG
A1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAG3RwmDircrhGLnwJDtwYL+VF8Ue2oMKchOvSoZP0OUTwvgPSyvxwhZ256fj
1l3gWfrpLFqW8hoYgUa7ArPd/7XLBDpW7eG/3KQEMzQ8ditKqKxOUVUp2l/Jd8Ab
c7Cwc+sUtiGSvIv3b7AkmNrgXM3TziUhVWMYvRlDfHYg0Kl6/mYcRQUgbAGov0n2
wguFJaW+dgfM5hD/FAALYPK5pBM9pZrx0q6d8tk3WVB+w4Rhox2SetHlP6PmzQ1M
vIFXv5Tw6WUWEpP1gA2vohB310KQZCSiRiXUB5NaKIAF3xfN9gUbfM+dbVO8uYY9
vG1z8p8pLcOQ/mGdHPwRp4M40yI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo628+AggBETNUExU8Wqu
0vN4oxH3LHCsnSmKCq24kh4unvCHjmi5CLY41lYL1gTjBamGphBBJ4IVpwbDaNIJ
siEnzHsST6OlhSsZAvXBO7y8OkfDy86iwNHrGchdlRxy0J4tY2FkhoS8Lmu4PwZf
iibhA917f48FaefQtdsuYJp2xMWvAbe1c4a72QnQtiR5f3fWwsqI0nBTpmecRKoz
W6be6l2SANCKtelRqvEDo1Q8bqlJR9aX/sarjt87b2JD8svJDtYQLs/dUf3uCPUG
uSRq2XfSBPuTQmEMtptG6OPegbM4cYE3coHG28A1k0nm6DbV3aBLWGDixkzNDE17
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8917416381683867866370810308038901656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.health.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20662517189092177231758823283803803890339763402288085345623834432626267122231727688883993374047019608237053406877605006887517610774440455949115460620320130474241572713519728777297178946977838290417142726904937094647159624192234264855373565192248890350735954159348462807131148467798973973104200526537075017626971227169738745638973905923163624044809973441500903197432628258028507385883362559413872612467086867924696078054567022051483860193163983733916467607727997765468466862426239202565854206512923217542217574472743526729250260547368080175894788829868142292184120633438897340855949545282414518777381848658482664667973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							240b706c30082064c14fde6c26a799b5930a7cea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailypaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parenting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allpeoplequilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realsimple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwestliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleenespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatingwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodandwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookinglight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marthastewart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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