s3.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:6a:9a:82:2e:cf:c6:a7:c9:47:e0:1f:fe:66:87:71 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:6a:9a:82:2e:cf:c6:a7:c9:47:e0:1f:fe:66:87:71
Serial Number (int): 17833481217436183508098676884691650417
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b6:ef:39:a4:11:10:71:81:86:31:25:21:02:84:6e:07:dd:e5:97:ee
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ff:c6:96:0f:65:bf:c7:61:eb:e7:2d:c9:81:4d:31:4b:98:ba:9c:4e
Fingerprint (sha256): 7f:17:c9:b4:ed:5f:1a:2f:38:ea:0d:75:c9:45:61:d6:f8:53:0e:85:84:93:fe:60:0f:60:8b:a1:15:0e:d7:90

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate s3.cn-north-1.amazonaws.com.cn

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.cn-north-1.amazonaws.com.cn
*.control.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3.cn-north-1.amazonaws.com.cn
*.bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
*.control.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for s3.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKezCCCWOgAwIBAgIQDWqagi7PxqfJR+Af/maHcTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIwMTAwMDAwMFoXDTIzMTIzMDIzNTk1OVowKTEn
MCUGA1UEAxMeczMuY24tbm9ydGgtMS5hbWF6b25hd3MuY29tLmNuMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRmAZ1+2FOrrd1xrGP6p3sA3f/ze+pEE
uHKQAwdNo696b6CBrJnhm0DtLldHv9wDKuJQhxHO0rPyyoK3zJqJsCulj786qWpy
Ut8n28Ztpl9mg2oZ4bJsWFbQ1HiC/6zRLccoHVThMYiHFZ6nHP2BBbMB46pLtxWG
21j5pgOnEs3HK5THSmQou4tPFbZZP4GUyt9zTccZH0DTNOxjVmuB1i4zigujTvHR
C1rWNU1F0FaVdyPMtMD5Igq2h+XtoKQbiYX0xIIkGLXN1DW1LYSmDKA+4ZFjiMva
du637yAfhceQDf4y9LyO7OU/zNxBqQyDNpBeV/BJ+A8QBzCFxQBNaQIDAQABo4IH
ijCCB4YwHwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYE
FLbvOaQREHGBhjElIQKEbgfd5ZfuMIIGJwYDVR0RBIIGHjCCBhqCHnMzLmNuLW5v
cnRoLTEuYW1hem9uYXdzLmNvbS5jboJNKi5jb250cm9sLnZwY2UtMDMzZDU0ODll
MzE3ZWI4NDItazZ2ZDlyYTEuczMuY24tbm9ydGgtMS52cGNlLmFtYXpvbmF3cy5j
b20uY26CVmJ1Y2tldC52cGNlLTAzM2Q1NDg5ZTMxN2ViODQyLWs2dmQ5cmExLWNu
LW5vcnRoLTFhLnMzLmNuLW5vcnRoLTEudnBjZS5hbWF6b25hd3MuY29tLmNugiAq
LnMzLmNuLW5vcnRoLTEuYW1hem9uYXdzLmNvbS5jboJYKi5idWNrZXQudnBjZS0w
MzNkNTQ4OWUzMTdlYjg0Mi1rNnZkOXJhMS1jbi1ub3J0aC0xYi5zMy5jbi1ub3J0
aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboJKYnVja2V0LnZwY2UtMDMzZDU0ODll
MzE3ZWI4NDItazZ2ZDlyYTEuczMuY24tbm9ydGgtMS52cGNlLmFtYXpvbmF3cy5j
b20uY26CVmJ1Y2tldC52cGNlLTAzM2Q1NDg5ZTMxN2ViODQyLWs2dmQ5cmExLWNu
LW5vcnRoLTFiLnMzLmNuLW5vcnRoLTEudnBjZS5hbWF6b25hd3MuY29tLmNugigq
LnMzLWNvbnRyb2wuY24tbm9ydGgtMS5hbWF6b25hd3MuY29tLmNuglkqLmNvbnRy
b2wudnBjZS0wMzNkNTQ4OWUzMTdlYjg0Mi1rNnZkOXJhMS1jbi1ub3J0aC0xYi5z
My5jbi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboIsKi5zMy1hY2Nlc3Nw
b2ludC5jbi1ub3J0aC0xLmFtYXpvbmF3cy5jb20uY26CXSouYWNjZXNzcG9pbnQu
dnBjZS0wMzNkNTQ4OWUzMTdlYjg0Mi1rNnZkOXJhMS1jbi1ub3J0aC0xYi5zMy5j
bi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboJRKi5hY2Nlc3Nwb2ludC52
cGNlLTAzM2Q1NDg5ZTMxN2ViODQyLWs2dmQ5cmExLnMzLmNuLW5vcnRoLTEudnBj
ZS5hbWF6b25hd3MuY29tLmNuglgqLmJ1Y2tldC52cGNlLTAzM2Q1NDg5ZTMxN2Vi
ODQyLWs2dmQ5cmExLWNuLW5vcnRoLTFkLnMzLmNuLW5vcnRoLTEudnBjZS5hbWF6
b25hd3MuY29tLmNugl0qLmFjY2Vzc3BvaW50LnZwY2UtMDMzZDU0ODllMzE3ZWI4
NDItazZ2ZDlyYTEtY24tbm9ydGgtMWQuczMuY24tbm9ydGgtMS52cGNlLmFtYXpv
bmF3cy5jb20uY26CWSouY29udHJvbC52cGNlLTAzM2Q1NDg5ZTMxN2ViODQyLWs2
dmQ5cmExLWNuLW5vcnRoLTFhLnMzLmNuLW5vcnRoLTEudnBjZS5hbWF6b25hd3Mu
Y29tLmNuglZidWNrZXQudnBjZS0wMzNkNTQ4OWUzMTdlYjg0Mi1rNnZkOXJhMS1j
bi1ub3J0aC0xZC5zMy5jbi1ub3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboJM
Ki5idWNrZXQudnBjZS0wMzNkNTQ4OWUzMTdlYjg0Mi1rNnZkOXJhMS5zMy5jbi1u
b3J0aC0xLnZwY2UuYW1hem9uYXdzLmNvbS5jboJZKi5jb250cm9sLnZwY2UtMDMz
ZDU0ODllMzE3ZWI4NDItazZ2ZDlyYTEtY24tbm9ydGgtMWQuczMuY24tbm9ydGgt
MS52cGNlLmFtYXpvbmF3cy5jb20uY26CWCouYnVja2V0LnZwY2UtMDMzZDU0ODll
MzE3ZWI4NDItazZ2ZDlyYTEtY24tbm9ydGgtMWEuczMuY24tbm9ydGgtMS52cGNl
LmFtYXpvbmF3cy5jb20uY26CXSouYWNjZXNzcG9pbnQudnBjZS0wMzNkNTQ4OWUz
MTdlYjg0Mi1rNnZkOXJhMS1jbi1ub3J0aC0xYS5zMy5jbi1ub3J0aC0xLnZwY2Uu
YW1hem9uYXdzLmNvbS5jbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJt
MDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAEC
ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAx
LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5h
bWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHW
eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKN5VJD+WCrHBidZ2WUVE0xD
AIllOGJfa0BYT7QRf+2Ba3vohNRPGB/+8fDw+CDeeKT/znaM43DlGv92dTTFTeR7
qeuDG5/zWwyIq7mFkF1NXJM8qybLqXl3FWUtVVvDv+ScIrFQgkfuNVKBR8tFzB0T
aTykWu14bej+2BSNQgXFfugNKfFNrSlRF6GOPTwc+1pfuYSY7XsF4hoXedTwbOPl
SlPYthcLw/FxRKPA/nGMZO/OwO23kHUPveCXFDLCZCu30E7QU2EVM/FZmE1OfnW1
XYR4r09pxQEjNOJK1spDOIh5cRLl5lvuH0Zc7RvETI5Xq6fTTq5TikxTT0GIOR0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRmAZ1+2FOrrd1xrGP6p
3sA3f/ze+pEEuHKQAwdNo696b6CBrJnhm0DtLldHv9wDKuJQhxHO0rPyyoK3zJqJ
sCulj786qWpyUt8n28Ztpl9mg2oZ4bJsWFbQ1HiC/6zRLccoHVThMYiHFZ6nHP2B
BbMB46pLtxWG21j5pgOnEs3HK5THSmQou4tPFbZZP4GUyt9zTccZH0DTNOxjVmuB
1i4zigujTvHRC1rWNU1F0FaVdyPMtMD5Igq2h+XtoKQbiYX0xIIkGLXN1DW1LYSm
DKA+4ZFjiMvadu637yAfhceQDf4y9LyO7OU/zNxBqQyDNpBeV/BJ+A8QBzCFxQBN
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17833481217436183508098676884691650417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22356755275476364276560912738414815157570791192281703890072606534326836367807894612686416927371062233296438252576556999804684960360432234665495693015899393300572648046066482307704737771722884818800670473922119628547281351693638766314307218219847408742568595020401962529657394237352546972859081135591760955024702717807996456713026712722276568644178701471447214295302999163618642901763852768901489999549172536006892555901261452896765143859960456986150531237010281233453746381713310594401738590040916387886128253586943330049777908129534146186867800158615560325058037439708298518924991910583417990960971855457398644821353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6ef39a4111071818631252102846e07dde597ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-033d5489e317eb842-k6vd9ra1.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-033d5489e317eb842-k6vd9ra1-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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