*.auth.bz-berlin.de

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 08:7c:63:12:05:1b:00:62:a4:bd:fe:ed:65:53:7e:1c was issued on by Amazon.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.auth.bz-berlin.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:7c:63:12:05:1b:00:62:a4:bd:fe:ed:65:53:7e:1c
Serial Number (int): 11279678162975400247186449531990670876
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:33:bd:12:3d:a8:be:f6:7d:b2:f6:a5:11:25:61:fb:49:16:b9:15
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): d4:8b:9c:b7:9b:31:47:e1:8c:25:2e:86:1e:29:6d:61:0a:bc:a5:e9
Fingerprint (sha256): 77:aa:8f:6c:cf:fc:c2:ab:1f:de:a7:ef:7d:3e:f7:84:b0:1a:b9:14:c1:d8:10:cc:34:d2:33:ea:01:64:c4:3e

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.auth.bz-berlin.de

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.auth.bz-berlin.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.auth.bz-berlin.de
*.beta.ps.bild.de
*.auth.axelspringer.de
*.prod.ps.bz-berlin.de
*.auth.welt.de
*.prod.ps.axelspringer.de
*.uat.auth.axelspringer.de
*.autobild.de
*.prod.auth.axelspringer.de
*.auth.autobild.de
*.uat.auth.mypass.de
*.bild.de
*.uat.ps.spring-media.de
*.uat.auth.sportbild.de
*.uat.ps.bild.de
*.uat.auth.autobild.de
*.prod.ps.mypass.de
*.uat.ps.axelspringer.de
*.prod.auth.bz-berlin.de
*.mypass.de
*.beta.ps.welt.de
*.prod.ps.welt.de
*.prod.auth.mypass.de
*.welt.de
*.prod.auth.autobild.de
*.uat.ps.welt.de
*.auth.computerbild.de
*.uat.auth.computerbild.de
*.prod.ps.bild.de
*.uat.auth.bz-berlin.de
*.uat.ps.bz-berlin.de
*.prod.auth.computerbild.de
*.auth.bild.de
*.auth.sportbild.de
*.prod.auth.sportbild.de
meinkonto.axelspringer.de
*.prod.ps.spring-media.de
*.uat.ps.mypass.de

Other certificates including the domain name bz-berlin.de

(limited to 100 certificates)
tortuga.cloud
image.bz-berlin.de
el-shop.welt.de
www.sonderthemen.bz-berlin.de
m.purmail.bz-berlin.de
tortuga.cloud
branchenbuch.bz-berlin.de
www.sonderthemen.bz-berlin.de
bz-berlin.de
branchenbuch.bz-berlin.de
link.mailer.bz-berlin.de
bz-berlin.de
m.purmail.bz-berlin.de
data-f943e74ec9.bz-berlin.de
aboservice.bz-berlin.de
bz-berlin.de
aboservice.bz-berlin.de
link.mailer.bz-berlin.de
cmp.autobild.de
bz-berlin.de
www.sonderthemen.bz-berlin.de
www.sonderthemen.bz-berlin.de
bz-berlin.de
consumer-api.prod.auth.bz-berlin.de
bz-berlin.de
bz-berlin.de
pur.bz-berlin.de
tortuga.cloud
image.bz-berlin.de
www.sonderthemen.bz-berlin.de
bz-berlin.de
el-shop.welt.de
www.sonderthemen.bz-berlin.de
branchenbuch.bz-berlin.de
bz-berlin.de
data-f943e74ec9.bz-berlin.de
stage.bz-berlin.de
www.sonderthemen.bz-berlin.de
cmp.autobild.de
www.sonderthemen.bz-berlin.de
link.mailer.bz-berlin.de
www.bz-berlin.de
tortuga.cloud
image.bz-berlin.de
cmp.autobild.de
cmp.autobild.de
bz-berlin.de
*.services.ps.axelspringer.de
bz-berlin.de
as.bz-berlin.de
m.purmail.bz-berlin.de
data-f943e74ec9.bz-berlin.de
*.bz-berlin.de
pur.bz-berlin.de
aboservice.bz-berlin.de
www.sonderthemen.bz-berlin.de
pur.bz-berlin.de
bz-berlin.de
stage.bz-berlin.de
www.aboservice.bz-berlin.de
www.sonderthemen.bz-berlin.de
branchenbuch.bz-berlin.de
cmp.autobild.de
data-3d61e29638.bz-berlin.de
www.sonderthemen.bz-berlin.de
bz-berlin.de
stage.bz-berlin.de
www.bz-berlin.de
singles.bz-berlin.de
branchenbuch.bz-berlin.de
aboservice.audiovideofotobild.de
data-f943e74ec9.bz-berlin.de
willy.bz-berlin.de
service.bz-berlin.de
bz-berlin.de
link.mailer.bz-berlin.de
aboservice.audiovideofotobild.de
bz-berlin.de
link.mailer.bz-berlin.de
*.bz-berlin.de
bz-berlin.de
data-f943e74ec9.bz-berlin.de
ast.myhomebook.de
bz-berlin.de
el-shop.welt.de
bz-berlin.de
www.bz-berlin.de
bz-berlin.de
stage.bz-berlin.de
*.bz-berlin.de
aboservice.bz-berlin.de
as.bz-berlin.de
stage.bz-berlin.de
data-f943e74ec9.bz-berlin.de
bz-berlin.de
*.bz-berlin.de
bz-berlin.de
link.mailer.bz-berlin.de
aboservice.bz-berlin.de
bz-berlin.de

Certificate

The complete raw certificate details for *.auth.bz-berlin.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e8gpwX4q5cbSia2hkgl
oCkwABP56y1DRzGhIGi2/9p2grqkAJkyHvvu1vJik7HhFvJlpb2+KoaEZQOrB84j
2dYxA6+Gy5RUt7sx0LwGCJ/R8Xf5a0vok9z7PUgFlEvgZKhHWy4TD9ptCjtmTyvR
tMYAKxtzTnRrnMrDwIekzFBzo7OyowMwA1vndBWVJmn3Z0ZQbndtAT5SFC7Vq6el
jwy57oCK8rHoRbZNIY6rhncl9+tlfNAcUp9mijAVXJriepS6tSX/VOwfoeRJk5xz
5Ozg5C/Nri5iHLD+fewOpCWm0cZNPIX2ET3b+CyG0bP6/SrYIk/trnmg/6R9YJpI
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11279678162975400247186449531990670876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.auth.bz-berlin.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27006677146843268069615543415460019949791492939906932503497740157942962816982585789116037492633081001476098931625844259285054050248623186294725317310842474477243215212782691641337853307937229030043578186956529920355579222030709299490840122789158815778944246796245824767359939605818728125361573014769072193442332903459210835918195425541320975469446984530783061579861895112881294819390823951111285636360895363682631595976454447684422648448904235095594901468528622223235366813713045660605981062938396229650121518947169562698423049614755207204632397177891776962956399759675109170460794504827819868566163096518440934590607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2633bd123da8bef67db2f6a5112561fb4916b915
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (839 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.ps.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.spring-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.ps.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.bz-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auth.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinkonto.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.spring-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.mypass.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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