*.dsoautomation.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:e6:bd:69:05:f4:a4:ad:dc:b9:48:f3:ce:4d:6e:5d was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.dsoautomation.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e6:bd:69:05:f4:a4:ad:dc:b9:48:f3:ce:4d:6e:5d
Serial Number (int): 18478033918882251490164513298803682909
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 31:81:80:dd:dd:67:f4:7a:3f:87:4f:e0:ff:1c:df:cf:65:f1:80:d3
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0e:25:71:30:28:40:5d:01:fa:71:cf:4c:0f:33:37:70:94:73:6e:b6
Fingerprint (sha256): 8f:6b:5f:d6:17:4e:0d:51:bc:d7:63:2d:2b:34:3b:8a:f2:df:47:9d:2f:97:91:fc:d5:fa:bc:87:d5:d5:7a:59

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.dsoautomation.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dsoautomation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dsoautomation.net
*.dev.eu-central-1.eks.dsoautomation.net
enrich.api.bcg.com
*.stg.eu-central-1.eks.dsoautomation.net
enrich-regional.api.bcg.com
*.prod.eu-central-1.eks.dsoautomation.net
qa.enrich.api.bcg.com
preprod.enrich.api.bcg.com
*.qa.eu-central-1.eks.dsoautomation.net
dev.enrich.api.bcg.com

Other certificates including the domain name dsoautomation.net

(limited to 100 certificates)
*.dsoautomation.net
*.dev.eu-central-1.eks.dsoautomation.net
*.dsoautomation.net
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
enrich-cms-docviz.bcg.com
*.dsoautomation.net
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
dev2.newnavigator.bcg.com
pages-qa.navigator.bcg.com
pages-dev.navigator.bcg.com
*.kbi-dev.eu-central-1.eks.dsoautomation.net
enrich-jarvis.api.bcg.com
tams-dev.bcg.com
*.dsoautomation.net
pages.navigator.bcg.com
dev1.newnavigator.bcg.com
*.dsoautomation.net
jarvis.dsoautomation.net
kbi-video-streaming-stg.dsoautomation.net
qa.newnavigator.bcg.com
prodnew-tier1.bcg.com
enrich-cms-docviz-qa.bcg.com
*.dsoautomation.net
qa.navigator.bcg.com
devnew-chargetrack.bcg.com
*.dsoautomation.net
profiles2-dev.navigator.bcg.com
pages.navigator.bcg.com
pages-stg.navigator.bcg.com
enrich-cms-docviz-stg.bcg.com
*.dsoautomation.net
*.dsoautomation.net
enrich-cms-materials-qa.bcg.com
*.dsoautomation.net
*.dsoautomation.net
enrich-jenkins.bcg.com
*.dev.eu-central-1.eks.dsoautomation.net
profiles2-stg.navigator.bcg.com
enrich-cms-materials-dev.bcg.com
enrich-jarvis.api.bcg.com
devnew-chargetrack.bcg.com
api-protected.integration.dsoautomation.net
dev-pacontacts-navigator.bcg.com
*.prod.ap-southeast-1.eks.dsoautomation.net
*.dsoautomation.net
newnavigator.bcg.com
*.dsoautomation.net
enrich-cms-docviz-dev.bcg.com
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
sinequa-test.dsoautomation.net
profiles.navigator.bcg.com
*.dsoautomation.net
newnavigator.bcg.com
pages.navigator.bcg.com
*.dsoautomation.net
profiles-stg.navigator.bcg.com
qanew-chargetrack.bcg.com
ktdashboard-dev.bcg.com
tams-qa.bcg.com
pipepack-dev.bcg.com
*.dsoautomation.net
pa-affiliation-dev.bcg.com
enrich-cms-materials.bcg.com
dev-pacontacts-navigator.bcg.com
*.dsoautomation.net
enrich-cms-materials-dev.bcg.com
sinequa-test.enrich.dsoautomation.net
*.dsoautomation.net
cfstools.bcg.com
*.dsoautomation.net
cfs-tools-stg.bcg.com
enrich.api.bcg.com
*.dsoautomation.net
cfs-tools-dev.bcg.com
cfs-tools-qa.bcg.com
*.dsoautomation.net
enrich-cms-materials-stg.bcg.com
enrich-cms-materials.bcg.com
enrich-cms-docviz.bcg.com
*.dsoautomation.net
enrich.api.bcg.com
*.eu-central-1.sitecore.internalstg.dsoautomation.net
stg.newnavigator.bcg.com
profiles2-qa.navigator.bcg.com
enrich-cms-materials.bcg.com
jarvis.dsoautomation.net
*.dsoautomation.net
dev5.newnavigator.bcg.com
pipepack-qa.bcg.com
testtemporary.dsoautomation.net
*.dsoautomation.net
profiles.navigator.bcg.com
newnavigator.bcg.com
*.eu-central-1.sitecore.internalstg.dsoautomation.net
enrich-cms-docviz-stg.bcg.com
enrich-cms-materials-stg.bcg.com
*.sitecore.dsoautomation.net

Certificate

The complete raw certificate details for *.dsoautomation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+zCCBeOgAwIBAgIQDea9aQX0pK3cuUjzzk1uXTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDIxMDAwMDAwMFoXDTI0MDExNTIzNTk1OVowHjEc
MBoGA1UEAwwTKi5kc29hdXRvbWF0aW9uLm5ldDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPHf6tz0pqjuM8MBqlZiBUFmxKYeFzwf5El5O5Z0ZMWWZS8r
C9k3PgJ3/5QlhL0bBnGXyI0vzbZuCMHIDPPIujRHm/N2X2HPS9z3mRm0kwz/8SKw
EfrGlmQ8qW3WV94Fmo0ilxT5o4x4QMsIVWGXoM0Ih7wdXhp8jJFyISP1rVegMr+m
0V8SwazkAL4pav+CfOJ7AbgXdZ2pYFZEP4cOvlg1pDnt7VY50NFw7jZIYca3zlLF
iC7yato9yTHJYzNROdA+TaG85EzaS7ZI+OpW/8qPpqJnolrwd+fpfrVh6Vy/HFuH
WpPmW9Hl5s/Qr1Ul0u/OXPS5uI3FaA+KZG0JJHUCAwEAAaOCBBUwggQRMB8GA1Ud
IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBQxgYDd3Wf0ej+H
T+D/HN/PZfGA0zCCAUYGA1UdEQSCAT0wggE5ghMqLmRzb2F1dG9tYXRpb24ubmV0
gigqLmRldi5ldS1jZW50cmFsLTEuZWtzLmRzb2F1dG9tYXRpb24ubmV0ghJlbnJp
Y2guYXBpLmJjZy5jb22CKCouc3RnLmV1LWNlbnRyYWwtMS5la3MuZHNvYXV0b21h
dGlvbi5uZXSCG2VucmljaC1yZWdpb25hbC5hcGkuYmNnLmNvbYIpKi5wcm9kLmV1
LWNlbnRyYWwtMS5la3MuZHNvYXV0b21hdGlvbi5uZXSCFXFhLmVucmljaC5hcGku
YmNnLmNvbYIacHJlcHJvZC5lbnJpY2guYXBpLmJjZy5jb22CJyoucWEuZXUtY2Vu
dHJhbC0xLmVrcy5kc29hdXRvbWF0aW9uLm5ldIIWZGV2LmVucmljaC5hcGkuYmNn
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1
c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcB
AQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0
LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5j
b20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSC
AWkBZwB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhjqlhbkA
AAQDAEcwRQIhAOIR6QHZBmL5bC/zboLTtWrfo9dLr0w2uo08lsf5x7q4AiB+XEQG
PiuCYEmKkLkoe7a2Th7yeQm1upFALf7UnxT0PgB2AHPZnokbTJZ4oCB9R53mssYc
0FFecRkqjGuAEHrBd3K1AAABhjqlhhIAAAQDAEcwRQIhAPKTkUURzjH7/mbxlYY5
RPMmo1njyyXixKa/8U9fnxVeAiAbazCHNjqiOB5b35fbqzt8AzXWkcQL/AqmtQU5
KGnJ7wB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABhjqlhdEA
AAQDAEYwRAIgFRczlGziUkhuwWse8mGN3hLe1EahTrR/ib3qx8tetOACIDygblwv
TvZYyaD0N3hxqfkkMtStMUdm96PgdTbKy4MvMA0GCSqGSIb3DQEBCwUAA4IBAQA2
Eg3oUcIcz44DjzRbv6IrJqr0ipJHwQ2yaj6b2GRMmi/ODhKXDwiL10+bgyaUH0CN
huByKHp5cMBJG8Q3RmhC+tciCFyvt/Owj7Tq79Qy4qwVfJ8mDgDUbrX5VjsBEWEL
jLDZrhggVDlUZplie01PSkiZArWsKIbp2WfjNJlouRujoXrxC8b4AeSlOOAO7M0V
ttYyVFeT0c0rWkZYBUFfSst7vURr/qUuii1GERrDtMYQUMXc3zVZIBNEpi+cIKUl
M5sAZTtxYirK62Go+qZ7GGzVcekrHTgQtFfyKKZuZu7aKvbG7qIXDcaD6ae2V+IF
zacXEGzDJMPv7VHVGM8B
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8d/q3PSmqO4zwwGqVmIF
QWbEph4XPB/kSXk7lnRkxZZlLysL2Tc+Anf/lCWEvRsGcZfIjS/Ntm4IwcgM88i6
NEeb83ZfYc9L3PeZGbSTDP/xIrAR+saWZDypbdZX3gWajSKXFPmjjHhAywhVYZeg
zQiHvB1eGnyMkXIhI/WtV6Ayv6bRXxLBrOQAvilq/4J84nsBuBd1nalgVkQ/hw6+
WDWkOe3tVjnQ0XDuNkhhxrfOUsWILvJq2j3JMcljM1E50D5NobzkTNpLtkj46lb/
yo+momeiWvB35+l+tWHpXL8cW4dak+Zb0eXmz9CvVSXS785c9Lm4jcVoD4pkbQkk
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18478033918882251490164513298803682909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dsoautomation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30533849298861223107955157062927561680227745275618233591477508213190089218527148942845514330034700161243374988487809632955830543025580546570069551139438467378168367488337190762649639959350634799024364790720294969949443861792402572182847434911585176664158025755022894955886956187249974123159217088906264868888357287125872429735380557010770871730771535429438634021343934769378831856062416395765449010743729867671220620022006507489804954693135056720531118879335997069323149378193686478669842875413973860394075667353006576043592994481228762567599126601062516116899015841577692394212736709129067067047470696832386764186741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							318180dddd67f47a3f874fe0ff1cdfcf65f180d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (317 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrich.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrich-regional.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.enrich.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.enrich.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.enrich.api.bcg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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