avolin.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:46:5e:ac:47:91:f4:82:f4:9d:f3:8a:28:31:c6:38 was issued on by Amazon.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=avolin.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:46:5e:ac:47:91:f4:82:f4:9d:f3:8a:28:31:c6:38
Serial Number (int): 12328432938058261114901998593517930040
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:8a:ed:8c:8a:36:13:be:e4:60:ce:24:77:37:8f:04:81:e7:ae:e1
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 5c:b1:35:95:74:09:90:21:e8:8d:81:7f:f1:28:55:56:47:fd:c4:ad
Fingerprint (sha256): 80:43:af:55:27:20:ca:59:cb:60:9a:02:bc:39:75:7f:df:9f:26:7c:d1:02:fe:7d:54:3f:5c:6b:f8:a2:c2:85

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate avolin.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avolin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avolin.com
onescm.com
*.firm58.com
*.qaenv.projectbeckon.com
*.aclate.com
aclate.com
*.gfi.com
symphonycommerce.com
projectbeckon.com
*.onescm.com
firm58.com
acornsys.com
*.beckon.com
*.stage.projectbeckon.com
supportsoft.com
nuviewinc.com
*.dev.projectbeckon.com
*.projectbeckon.com
*.xinet.northplains.com
*.symphonycommerce.com
streetsmartmobile.com
*.uat.projectbeckon.com
*.objectstore.com
beckon.com
*.supportsoft.com
*.acornsys.com
*.telescope.northplains.com
*.streetsmartmobile.com
*.support.northplains.com
gfi.com
objectstore.com
*.nuviewinc.com
*.avolin.com

Other certificates including the domain name avolin.com

(limited to 100 certificates)
support.engineyard.com
classichelp.kayako.com
support.engineyard.com
support.cardinal-mark.com
support.engineyard.com
lp.avolin.com
aliases.ignitetech.com
email.avolin.com
avolin.com
avolin.com
support.infinio.com
aliases.ignitetech.com
aliases.ignitetech.com
support.engineyard.com
classichelp.kayako.com
avolin.com
classichelp.kayako.com
email.avolin.com
ssl954700.cloudflaressl.com
aliases.ignitetech.com
classichelp.kayako.com
supportsurvey.zephyrtel.com
email.avolin.com
ssl954701.cloudflaressl.com
avolin.com
support.cardinal-mark.com
aliases.ignitetech.com
avolin.com
email.avolin.com
support.engineyard.com
sni.cloudflaressl.com
supportsurvey.zephyrtel.com
support.engineyard.com
lp.avolin.com
aliases.ignitetech.com
*.avolin.com
dnnsupport.dnnsoftware.com
aliases.ignitetech.com
email.avolin.com
classichelp.kayako.com
aliases.ignitetech.com
support.engineyard.com
sni.cloudflaressl.com
supportsurvey.zephyrtel.com
support.cardinal-mark.com
classichelp.kayako.com
*.avolin.com
avolin.com
supportsurvey.zephyrtel.com
blog.avolin.com
email.avolin.com
classichelp.kayako.com
avolin.com
support.cardinal-mark.com
avolin.com
support.cardinal-mark.com
supportsurvey.zephyrtel.com
*.avolin.com
lp.avolin.com
support.engineyard.com
support.engineyard.com
classichelp.kayako.com
support.engineyard.com
supportsurvey.zephyrtel.com
www.avolin.com
sni.cloudflaressl.com
avolin.com
classichelp.kayako.com
lp.avolin.com
*.avolin.com
supportsurvey.zephyrtel.com
aliases.ignitetech.com
classichelp.kayako.com
avolin.com
avolin.com
supportsurvey.zephyrtel.com
aliases.ignitetech.com
support.engineyard.com
support.engineyard.com
blog.avolin.com
classichelp.kayako.com
lp.avolin.com
*.avolin.com
lp.avolin.com
aliases.ignitetech.com
support.engineyard.com
support.cardinal-mark.com
support.engineyard.com
supportsurvey.zephyrtel.com
avolin.com
support.engineyard.com
ssl954701.cloudflaressl.com
avolin.com
aliases.ignitetech.com

Certificate

The complete raw certificate details for avolin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIFjCCBv6gAwIBAgIQCUZerEeR9IL0nfOKKDHGODANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDUxODAwMDAwMFoXDTI1MDYxNjIzNTk1OVowFTET
MBEGA1UEAxMKYXZvbGluLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKT9Lg9GSfjdHTQnI6KVLGy6gmsf/fyym1b4d3gz6sQNBeRr0jeps0r8flaS
T9DhIN7FOnazpQMWIF0q++NW357zOTRtx5/SJHZyCg/JdjkDy6sENLKyMgVE/ram
Gu7KmgXQamRbe+93cjXFOSlzTR8X6gKX1mqoR2K/Y/1AnnpmbWf+5EVdyrk1Rihk
i6Ngqp2ltTt9UOuuEoEVWWWIS50wgrA5Ef0l4b4pDdiscu8TEf36Gt5L3Wfl+fUQ
jCdj3Cn2QGc12q6hKgO9m0jEm6KN7p28iYlF6ZknfQsZgxwkyrKlRLdDQpq60ExO
Nfjh2nrzIHuzYn0M4z5QaAJuH7kCAwEAAaOCBTkwggU1MB8GA1UdIwQYMBaAFMAx
Us1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBS5iu2MijYTvuRgziR3N48Egeeu
4TCCAmgGA1UdEQSCAl8wggJbggphdm9saW4uY29tggpvbmVzY20uY29tggwqLmZp
cm01OC5jb22CGSoucWFlbnYucHJvamVjdGJlY2tvbi5jb22CDCouYWNsYXRlLmNv
bYIKYWNsYXRlLmNvbYIJKi5nZmkuY29tghRzeW1waG9ueWNvbW1lcmNlLmNvbYIR
cHJvamVjdGJlY2tvbi5jb22CDCoub25lc2NtLmNvbYIKZmlybTU4LmNvbYIMYWNv
cm5zeXMuY29tggwqLmJlY2tvbi5jb22CGSouc3RhZ2UucHJvamVjdGJlY2tvbi5j
b22CD3N1cHBvcnRzb2Z0LmNvbYINbnV2aWV3aW5jLmNvbYIXKi5kZXYucHJvamVj
dGJlY2tvbi5jb22CEyoucHJvamVjdGJlY2tvbi5jb22CFyoueGluZXQubm9ydGhw
bGFpbnMuY29tghYqLnN5bXBob255Y29tbWVyY2UuY29tghVzdHJlZXRzbWFydG1v
YmlsZS5jb22CFyoudWF0LnByb2plY3RiZWNrb24uY29tghEqLm9iamVjdHN0b3Jl
LmNvbYIKYmVja29uLmNvbYIRKi5zdXBwb3J0c29mdC5jb22CDiouYWNvcm5zeXMu
Y29tghsqLnRlbGVzY29wZS5ub3J0aHBsYWlucy5jb22CFyouc3RyZWV0c21hcnRt
b2JpbGUuY29tghkqLnN1cHBvcnQubm9ydGhwbGFpbnMuY29tggdnZmkuY29tgg9v
YmplY3RzdG9yZS5jb22CDyoubnV2aWV3aW5jLmNvbYIMKi5hdm9saW4uY29tMBMG
A1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5y
Mm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAt
BggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYG
CCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0w
Mi5jZXIwDAYDVR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHUA
zxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGPitN5GgAABAMARjBE
AiB8pmm8nhAKDb5lKA88nDWiaWcbrjmtctpdEJsibPHWdwIgZPww1YuxFiKSQi+h
zrb5fVwddKgKPZPbxaQcvjibafsAdwB9WR4S4XgqexxhZ3xe/fjQh1wUoE6VnrkD
L9kOjC55uAAAAY+K03jbAAAEAwBIMEYCIQDzvxxzVH25XvkcZzSGxQ37GTZnI8rJ
pBF6hWlK4OMwtAIhAJHOAVRUXBSD2U17ZznVq7sGGOv7RTiYy7xq7IzWMqJCAHcA
5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGPitN48wAABAMASDBG
AiEA9158m+7aLfWez2lYIoZCZ2X3wRvKbsbzNdfbPAsuZSYCIQDcJfHV5G/2OE2E
c4vXjb1byTqV75RZOP3IC0HQnTXOCDANBgkqhkiG9w0BAQsFAAOCAQEAmayiN7Ea
pI/+jaVM3qzk7JSw+ZLwiOfUEJwYfHZ45iMPLpivr0W9s3dHXzZDOS3btyzx5xPi
hj0sQ+WRJaVpAsAReU2Gk0mh6UvROJe+66OCOVKSNXS/VNiYcHhHdjmRl6+LmI4y
pyjGimxiDTQmUfSpaQ0Lln0/Wc/qwObi8CpNmAUHn9y0Coy10OP97LIn/43sDNgX
A+umhISeHraG4COPtqKFvVfNRlpJyLGjFHpoO5LdKNnoHa4VxFhRNRaXaDeQmeeK
HNJAFOybx2ChrElERbe3ntD31KTiLJqbe5+PIsLjddDVg9ef34t7o/xwRLYM6anO
x7yg+k3yKXMH9g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP0uD0ZJ+N0dNCcjopUs
bLqCax/9/LKbVvh3eDPqxA0F5GvSN6mzSvx+VpJP0OEg3sU6drOlAxYgXSr741bf
nvM5NG3Hn9IkdnIKD8l2OQPLqwQ0srIyBUT+tqYa7sqaBdBqZFt773dyNcU5KXNN
HxfqApfWaqhHYr9j/UCeemZtZ/7kRV3KuTVGKGSLo2CqnaW1O31Q664SgRVZZYhL
nTCCsDkR/SXhvikN2Kxy7xMR/foa3kvdZ+X59RCMJ2PcKfZAZzXarqEqA72bSMSb
oo3unbyJiUXpmSd9CxmDHCTKsqVEt0NCmrrQTE41+OHaevMge7NifQzjPlBoAm4f
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12328432938058261114901998593517930040
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avolin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20827929686403820608787179335413484853570699691926841714995338999014776588820572285086333875878010726750199305335424758330891869072976210777283913475921483223018076545543877082915777027616334081296243763111599176810842508403481098224284938091826350337907613331899460780859152694826567152198033639515629517458216183676951021377676239074507291416409782901476028680694677609157256670902438209445431768861063014057387146901322993076590806351956415164494685371332012909584277018031210547870705961280689432177564313333101803267958776883360909376242148399365848471572138655656827515859980291584308761832868458431504211386297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b98aed8c8a3613bee460ce2477378f0481e7aee1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avolin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firm58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qaenv.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symphonycommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onescm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firm58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acornsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuviewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xinet.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symphonycommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.projectbeckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.objectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acornsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telescope.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetsmartmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.support.northplains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'objectstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuviewinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avolin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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