*.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:d8:b7:39:6c:46:52:05:c1:71:71:4b:f4:3c:1d:d8 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:d8:b7:39:6c:46:52:05:c1:71:71:4b:f4:3c:1d:d8
Serial Number (int): 19734444292904469765473365266710404568
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 88:f9:74:50:88:4e:f7:ad:00:76:6d:6e:c1:56:75:e0:97:d6:10:99
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 0e:3d:b2:3d:59:de:97:c6:3b:df:14:25:81:20:0b:df:9c:d3:a0:b1
Fingerprint (sha256): 91:d0:7b:f4:24:04:51:65:d5:55:26:40:b1:72:84:e8:5e:9d:11:81:68:5a:22:8c:2e:82:46:e9:76:4b:b1:db

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.4yjciv.c3.kafka.cn-northwest-1.amazonaws.com.cn
skylight-cm.cn-northwest-1.amazonaws.com.cn
codedeploy-signer-cn-northwest-1.amazonaws.com.cn
*.gc-rc-sr-15867.xhwv4s.c1.kafka.cn-northwest-1.amazonaws.com.cn
hbn654jgaqpuftcce5yybvs2cy.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.cbo97l.c3.kafka.cn-northwest-1.amazonaws.com.cn
kms.cn-north-1.amazonaws.com.cn
*.canary-be1769827af.ejwa6m.c2.kafka.cn-north-1.amazonaws.com.cn
cloudtrail-corvidae-id.cn-northwest-1.amazonaws.com.cn
*.canary-a6e8f5c.xwhdqa.c2.kafka.cn-northwest-1.amazonaws.com.cn
aws-im-gamma-fe.cn-northwest-1.amazonaws.com.cn
*.canary-897e1c59c48.59luxe.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-ea2d61c.n0xazh.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-18fc302.4q7y91.c4.kafka.cn-northwest-1.amazonaws.com.cn
ecs.cn-northwest-1.amazonaws.com.cn
website-gamma.marketplace.cn-northwest-1.amazonaws.com.cn
*.canary-f58f349.2u0pow.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-b737b5b3428.m6pydk.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary-e0f3ce0.gte0fk.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-db5f60dfb51.brai9q.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-d7b546f.r73c5a.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.kafkatos3withs.nr1hpw.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-02ef04d1f03.l4ympk.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary-a75e137.o0jcpw.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.gc-rc-sr-15866.ilckiw.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.gc-rc-sr-158650888.91tbw7.c3.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.alqi44.c4.kafka.cn-northwest-1.amazonaws.com.cn
pjgxf6hmkflx52eupxlq63l2aq.cn-northwest-1.es.amazonaws.com.cn
*.regionbuild-bjs-ra.su6nui.c2.kafka.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-158837368.5xu9fx.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-4bf86d98497.aitljq.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-dfb9988651b.k9fk7c.c1.kafka.cn-north-1.amazonaws.com.cn
dynamodb.cn-northwest-1.amazonaws.com.cn
ygxkm6g4wb5jdha5umeeivi2jq.cn-north-1.es.amazonaws.com.cn
*.canarycc5991e7.7kxm7b.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-89740c5.8xxxk0.c2.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canary-07f4bc6.derz4x.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-e9172cb.fzh0e6.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-b3053ca.1om1hv.c3.kafka.cn-northwest-1.amazonaws.com.cn
sqs.cn-northwest-1.amazonaws.com.cn
*.canary-cee795c.eph1a2.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.4koxit.c4.kafka.cn-north-1.amazonaws.com.cn
tcp5spd3oxlbu2nguvj3wbd5ba.cn-northwest-1.es.amazonaws.com.cn
cn-north-1.queue.amazonaws.com.cn
pklf6p7qi4tibia3m4ew22y4cy.cn-north-1.es.amazonaws.com.cn
*.canary-1d9409b.p4g6x0.c3.kafka.cn-northwest-1.amazonaws.com.cn
naws-razorbill-deployment-service.cn-north-1.amazonaws.com.cn
u7f4eglycvasjstfbpyt7iskni.cn-north-1.es.amazonaws.com.cn
sns-cn-north-1.amazonaws.com.cn
p3ug4fg5xrcftn3ejta7l2av5e.cn-north-1.es.amazonaws.com.cn
mh5rijir7gfvo4j6kewibve3vq.cn-north-1.es.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
c0.prod.metadata.appsync-svcs.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-158663128.coi24q.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-3f18936c700.zl9he0.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-53bdbd75ff2.hcgkzi.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
sagemaker.pre-prod.cn-north-1.ml-platform.aws.a2z.org.cn
*.canary-3e7b6d5.emn45p.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-43250bd2e70.nizt67.c1.kafka.cn-north-1.amazonaws.com.cn
l6kwxtiqbtvpdqixuhadbjio6u.cn-north-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.3vw1zg.c3.kafka.cn-north-1.amazonaws.com.cn
*.kafkatos3withs.o44lm5.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadca.epce8w.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-cad7b01ce17.djzcp3.c1.kafka.cn-north-1.amazonaws.com.cn
ec2-recovery-api.cn-northwest-1.amazonaws.com.cn
autoscaling.cn-northwest-1.amazonaws.com.cn
cloudforge-build.zhy.aws-border.cn
*.canary-a2d26acea76.jou4ap.c2.kafka.cn-north-1.amazonaws.com.cn
cloudformation.cn-north-1.amazonaws.com.cn
*.canary-25d7a492ea5.app0pl.c4.kafka.cn-north-1.amazonaws.com.cn
*.test1.rvil6f.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
tk64zdk3wd6h3kdrjpzqe4x3hm.cn-northwest-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.03fs7a.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary-ff413e03fc2.d9eujm.c1.kafka.cn-north-1.amazonaws.com.cn
ecs-t.cn-north-1.amazonaws.com.cn
*.canary-39b09ce9630.27heac.c3.kafka.cn-north-1.amazonaws.com.cn
elasticbeanstalk-health.cn-north-1.amazonaws.com.cn
*.canary-8adce32.slqke0.c2.kafka.cn-northwest-1.amazonaws.com.cn
5zp4pmlrnw7qy4wsurtr4paiaa.cn-northwest-1.es.amazonaws.com.cn
*.canary-89c8300297e.8jygbk.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
as2-admin-gamma.cn-northwest-1.amazonaws.com.cn
*.canary-b2bac38.ntkn2e.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-3d50409.no3ozc.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.kafkatos3withs.pfpzua.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadca.2lbr0l.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-cdda688fbf8.oz41qi.c3.kafka.cn-north-1.amazonaws.com.cn
elasticfilesystem-fips.cn-northwest-1.amazonaws.com.cn
ibcgpuryjpahctih2m4fego66y.cn-northwest-1.es.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
*.canary-df97a024597.hae84b.c1.kafka.cn-north-1.amazonaws.com.cn

Certificate

The complete raw certificate details for *.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIQDti3OWxGUgXBcXFL9Dwd2DANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIwMTAwMDAwMFoXDTIzMTIzMDIzNTk1OVowSzFJ
MEcGA1UEAwxAKi5nY2NhbmFyeXNlcnZlcmxlc3MuYzVxNjl4LmMzLmthZmthLmNu
LW5vcnRoLTEuYW1hem9uYXdzLmNvbS5jbjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7tkbyZI9njj5LJYRDHPvTUUi4C6JdxEBQHgoXZ1VL6iH2yZS60
W53hNcLyE6vFnNvanOl+U+3FDzqk3uYmOO3kEjAuktpjUlaKfdE/egOLxrTs7XzZ
cM6Ym9avseP9MbCVTbxWRbam1q9b2sIJl9z4lqhoo+czw+KHcxBS82Hp2bFKgMqi
amQ4oH2njOyiGugMGWWh7GKkDepN2Y2gBhYj9L7dNW06MyJDhbhnuWtF/W5L1krF
5VJWJcS8M347XtN2Sr1ohjlhDWkRbnMqz8qFOPJwF35z7QWVn3w6SxT+m5wI8rkH
1xBX5BiKGG8wghx2kNfWaxKiWgVIBjw4Qn8CAwEAAaOCAawwggGoMB8GA1UdIwQY
MBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBSI+XRQiE73rQB2bW7B
VnXgl9YQmTBLBgNVHREERDBCgkAqLmdjY2FuYXJ5c2VydmVybGVzcy5jNXE2OXgu
YzMua2Fma2EuY24tbm9ydGgtMS5hbWF6b25hd3MuY29tLmNuMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw
oC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3Js
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw
AYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC
hipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYD
VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAphZseOFTztmmpQjP099h/b+8MoCJ5wH3vBRu2QmfpFeYiNfKW1wclVbziVjV
UOyzG4Zu/xM7pfXFMxTa5iX4klpxf8L6yIirjU7min+0YKwxplYtoFwsKnoDrV4z
sjUpkBGj6VUDSTkbJxKNP2R9FRfSuxl9cg19bBEHbdUBsKa7tdPbci3a2+WaIPSq
6kdNiApXgwRwAC0N2Miy200uX3tv5j81Nxl8o1PDQRXUF0mchEjB7fG7oBmXTljD
z5GPx1ZNEhf13qYrjSuH5qXucfAikCoBkQ1dSAyNvvDd15xVgpoZHxKXxHou4tCf
H4Q7kZo+Bubxe3GNCXHZQ6PTFg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu2RvJkj2eOPkslhEMc+
9NRSLgLol3EQFAeChdnVUvqIfbJlLrRbneE1wvITq8Wc29qc6X5T7cUPOqTe5iY4
7eQSMC6S2mNSVop90T96A4vGtOztfNlwzpib1q+x4/0xsJVNvFZFtqbWr1vawgmX
3PiWqGij5zPD4odzEFLzYenZsUqAyqJqZDigfaeM7KIa6AwZZaHsYqQN6k3ZjaAG
FiP0vt01bTozIkOFuGe5a0X9bkvWSsXlUlYlxLwzfjte03ZKvWiGOWENaRFucyrP
yoU48nAXfnPtBZWffDpLFP6bnAjyuQfXEFfkGIoYbzCCHHaQ19ZrEqJaBUgGPDhC
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19734444292904469765473365266710404568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26122240603195469918872121342506311513569059319896519845227800672779412880693127631485801811516153941767240314196621608023474279718223194956463041717485664888461291361854470716682776990662137178148464333963153824826128512140956600279423666245207911352042725401495461238906026089458251398999088712385603583799191005246631336086798685773439893346526125838941316282594448110822903278561036061367101903520857925183843965621349096498785412488340746356602169693884282650145532429009848801032183907642518914862741960446236965248901224976930092405409425826332993177254292765895956214265369886413245179848586628987518432330367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88f97450884ef7ad00766d6ec15675e097d61099
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gccanaryserverless.c5q69x.c3.kafka.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a6166c78e153ced9a6a508cfd3df61fdbfbc328089e701f7bc146ed9099fa4579888d7ca5b5c1c9556f38958d550ecb31b866eff133ba5f5c53314dae625f8925a717fc2fac888ab8d4ee68a7fb460ac31a6562da05c2c2a7a03ad5e33b235299011a3e9550349391b27128d3f647d1517d2bb197d720d7d6c11076dd501b0a6bbb5d3db722ddadbe59a20f4aaea474d880a57830470002d0dd8c8b2db4d2e5f7b6fe63f3537197ca353c34115d417499c8448c1edf1bba019974e58c3cf918fc7564d1217f5dea62b8d2b87e6a5ee71f022902a01910d5d480c8dbef0ddd79c55829a191f1297c47a2ee2d09f1f843b919a3e06e6f17b718d0971d943a3d316