*.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:2c:71:c2:3e:78:91:b5:da:84:86:8a:37:88:cf:af was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:2c:71:c2:3e:78:91:b5:da:84:86:8a:37:88:cf:af
Serial Number (int): 18839960304646924847371741196607606703
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 20:79:65:fc:58:0d:97:d4:83:7c:1a:bf:7a:80:c4:3d:c6:c4:87:e0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5f:29:69:49:60:95:06:f9:ef:a8:8d:61:a9:f5:30:a4:71:63:3f:3e
Fingerprint (sha256): 8f:ea:84:7c:31:22:17:ad:24:76:6f:60:57:22:06:f6:77:83:11:25:4f:cb:fa:3c:fa:13:7e:16:d1:e9:32:3e

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn
*.iam.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn
*.tls.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn
*.iam2.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn
*.tls2.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn
*.scram.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn
*.scram2.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
s3.cn-northwest-1.amazonaws.com.cn
*.canary3496f720.utknk1.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary2f55c250.6yywj3.c3.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary97dcd0c61386.gooyfy.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary1f8805e087c3.tu6a4r.c1.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.58m43m.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.chrometbcreate1703.5awsyh.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary7374d83ea2cf.nhuta2.c1.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary1435d203.akst80.c4.kafka.cn-northwest-1.amazonaws.com.cn
xnnqhxxbhbkngeq47r66snxgom.cn-north-1.es.amazonaws.com.cn
oixtqojaaezwrajvftk22eou2a.cn-north-1.es.amazonaws.com.cn
*.canaryc15b02e9.t88y5i.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.privatelinkcan.tug0hx.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1670079290cell.lvov73.c2.kafka.cn-north-1.amazonaws.com.cn
abfvgdrqnxej4cdwib3leslsli.cn-north-1.es.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canarydc0870343556.cdq0tp.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary63f394b8d86d.ycius9.c2.kafka.cn-north-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
*.crossaccountplcana.e2nooy.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.privatelinkcanary0.yc7ect.c2.kafka.cn-north-1.amazonaws.com.cn
3oqjxm3v6abfqofsvceu252dhq.cn-northwest-1.es.amazonaws.com.cn
*.canary6e808f40ba73.d1i490.c1.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.viojmz.c4.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canary91431378.29adbf.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.gtbmcn.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
pu6msc3skx4xf3f3ugsephy42m.cn-northwest-1.es.amazonaws.com.cn
*.kafkatos3withs.xyuei8.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary113cbf75.nxxp2r.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.kafkatos3withsasls.cg17o4.c3.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.y34xci.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canaryf335d056.0x21ts.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary5e3b98ead0b9.p9kn5h.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary3798f5fd6a8a.osvwjs.c2.kafka.cn-north-1.amazonaws.com.cn
*.testmskcluster2023.cazo8h.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.b090ce.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canarydac7370c.kzmcqq.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary979ee1beda56.ozltwf.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary863b7f14.tq5129.c4.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.firefoxtbcreat.ik596e.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.gccanaryserverless.zsh5cr.c3.kafka.cn-north-1.amazonaws.com.cn
*.canaryc8f71fae.39zivb.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserverless.on59qh.c2.kafka.cn-north-1.amazonaws.com.cn
lrzaa5a42vhrigxno2r3eughse.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
nuithftiwwp2qkselfzchnyqt4.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
3licg3hwbasqh2s3mbaa43e44i.cn-northwest-1.es.amazonaws.com.cn
*.canary862e4293447c.6fmord.c3.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.canary5da44687.qdje6s.c1.kafka.cn-northwest-1.amazonaws.com.cn
lklzik6phoiqqnfjjl4ozb4m7e.cn-northwest-1.es.amazonaws.com.cn
*.gcsr1702011513.w5u9ni.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.gcsr1686507279cell.0hev4r.c1.kafka.cn-north-1.amazonaws.com.cn
*.testmskcluster2023.a264cu.c4.kafka.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
e3s4mcykgdqwskjt4yfnjcvplm.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
zp33ldehjurut56qpvvyignwcu.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-northwest-1.vpce.amazonaws.com.cn
*.gccanaryserverless.nmd5kv.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary57d54d81.adfjg6.c4.kafka.cn-northwest-1.amazonaws.com.cn
plqhkzwvsorvp6jvchirqsebia.cn-northwest-1.es.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary585a67e44339.hwmtxa.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary2b9a8106.sfhicu.c4.kafka.cn-northwest-1.amazonaws.com.cn
jc4rvosh5vnnes2pabacahvbli.cn-northwest-1.es.amazonaws.com.cn
*.canary5fc6bdd5.5wd2pd.c1.kafka.cn-northwest-1.amazonaws.com.cn
4tic3t7yfpelpk42gr3s4k2fc4.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary704b544ec27a.hx12kg.c3.kafka.cn-north-1.amazonaws.com.cn
*.canaryfabf5ba8.7qy9lg.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.testmskcluster2023.wwunyz.c4.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.luyjcw.c2.kafka.cn-northwest-1.amazonaws.com.cn
aprqoszpo23njrp2gjiblqginu.cn-northwest-1.es.amazonaws.com.cn
*.canary102fc44a.ht1r7v.c2.kafka.cn-northwest-1.amazonaws.com.cn
hdxrqop5oozqbdquillvdwbege.cn-northwest-1.es.amazonaws.com.cn
*.canary125b55277948.jiwgs2.c4.kafka.cn-north-1.amazonaws.com.cn
*.execute-api.cn-north-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn

Certificate

The complete raw certificate details for *.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0I4BZ0mQnZt4iD244SL
CoYNefEr5DQMGRG/y2ZqrJUGufgQjIl83ZdBu9Pxd5vcZVbPT3WjMmtPxVzPDIrh
enQpmsk2dZDD9/+d7xHgwSd/XcRAkTEPuImc9ewc9/wkx6mHTSeyhzK6L9JGpege
JLkX5N5ZQfyXOS1vdJvsoQhWIwU9VzOjI5XbPX/fcKRJFPWZPOfjzEQxe5mlbQZE
67AXlKJ/r6swhOiFemhDkXw6mg++RlkpUlwrnD6JCtKXdACk2AtEN1/pCxjaCPZp
Um7dpoMv5zrRFGBb6bN74ZFbtNK+IOv62UqQYRD02iWpzHcR018unyxXsFwJe5La
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18839960304646924847371741196607606703
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19599590994624411397260434947456108620942287512263533238215102289267057250280933791130674756590098040464083732699968796381637490510724629337729342831942553133736719589186567026961780811127369069821375469583516138479898137513326218327445932194661878558007104353477520855258743115648461717737307807967964163468614910978886624128269384563360751055467218291643317496404144633804296503009866022641227314698003447834740650413780784998275659199696463948773559860220592708276925103754566502635530188431696716686681057216990823934395146938625727995440705003558009470137302108001821768936752261172396153784278591556114172795429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							207965fc580d97d4837c1abf7a80c43dc6c487e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (497 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam2.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tls2.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scram2.canary7819dbc1f45f.azuemw.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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