greatbritishlife.co.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:ac:e9:3b:03:f2:81:f5:dc:05:88:a0:91:6d:bf:e1 was issued on by Amazon.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=greatbritishlife.co.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:e9:3b:03:f2:81:f5:dc:05:88:a0:91:6d:bf:e1
Serial Number (int): 6214717519928521822920763334359629793
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 93:64:56:9d:69:1c:94:0b:0c:3f:d8:69:7f:a6:75:01:d7:3a:0d:f8
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 58:f7:2d:51:c7:c0:93:11:b4:ad:41:e8:40:39:14:24:4a:22:cc:fb
Fingerprint (sha256): a5:cc:9f:16:f1:24:43:f9:7e:bb:97:aa:fe:50:e2:3e:bc:a9:9d:52:34:aa:e7:52:b3:bc:a7:bb:89:42:6a:b3

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate greatbritishlife.co.uk

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for greatbritishlife.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greatbritishlife.co.uk
*.hampshire-life.co.uk
*.livingedge.co.uk
*.essexlifemag.co.uk
kent-life.co.uk
*.yorkshirelife.co.uk
somerset-life.co.uk
cotswoldlife.co.uk
*.surreylife.co.uk
lancashirelife.co.uk
hertfordshirelife.co.uk
sussexlife.co.uk
westessexlife.co.uk
*.cheshirelife.co.uk
*.sussexlife.co.uk
cheshirelife.co.uk
*.hertfordshirelife.co.uk
*.lancashirelife.co.uk
dorsetmagazine.co.uk
suffolkmag.co.uk
cornwalllife.co.uk
*.derbyshirelife.co.uk
surreylife.co.uk
*.kent-life.co.uk
*.norfolkmag.co.uk
*.greatbritishlife.co.uk
*.westessexlife.co.uk
hampshire-life.co.uk
essexlifemag.co.uk
*.devonlife.co.uk
*.cotswoldlife.co.uk
livingedge.co.uk
*.suffolkmag.co.uk
*.dorsetmagazine.co.uk
*.somerset-life.co.uk
yorkshirelife.co.uk
derbyshirelife.co.uk
devonlife.co.uk
norfolkmag.co.uk
*.cornwalllife.co.uk

Other certificates including the domain name greatbritishlife.co.uk

(limited to 100 certificates)
mercadoone.com
mercadoone.com
consent.mediakit.greatbritishlife.co.uk
*.schoolreportonline.com
mercadoone.com
mercadoone.com
local.wahpetondailynews.com
*.advertiser24.co.uk
local.daily-chronicle.com
nor-west-news.origami.neighbourly.co.nz
*.schoolreportonline.com
a02342.alloaadvertiser.com
mercadoone.com
local.clintonnc.com
portperry.durhamregion.com
*.theresident.co.uk
admin.adforge.com
mediakit.greatbritishlife.co.uk
local.kent-life.co.uk
theresident.co.uk
greatbritishlife.co.uk
parrysoundnorth.parrysound.com
greatbritishlife.co.uk
local.thetfordandbrandontimes.co.uk
consent.mediakit.greatbritishlife.co.uk
*.greatbritishlife.co.uk
admin.adforge.com
*.theresident.co.uk
local.thetfordandbrandontimes.co.uk
greatbritishlife.co.uk
consent.mediakit.greatbritishlife.co.uk
*.greatbritishlife.co.uk
greatbritishlife.co.uk
a02342.alloaadvertiser.com
consent.enjoysudburymore.co.uk
*.advertiser24.co.uk
local.thesiuslawnews.com
*.advertiser24.co.uk
mercadoone.com
local.stcatharinesstandard.ca
local.cotswoldlife.co.uk
local.devonlife.co.uk
*.advertiser24.co.uk
greatbritishlife.co.uk
*.greatbritishlife.co.uk
local.lincolncourier.com
greatbritishlife.co.uk
fk.local.kentonline.co.uk
local.halifaxcourier.co.uk
consent.mediakit.greatbritishlife.co.uk
local.daily-chronicle.com
greatbritishlife.co.uk
a02342.alloaadvertiser.com
local.beloitdailynews.com
shop.afflecks.com
local.newsdemocratleader.com
theresident.co.uk
*.advertiser24.co.uk
matamata-chronicle.origami.neighbourly.co.nz
local.eastlondonadvertiser.co.uk
theresident.co.uk
mercadoone.com
local.wnypapers.com
shopping.nj.com
local.fenlandcitizen.co.uk
*.schoolreportonline.com
local.brainerddispatch.com
consent.mediakit.greatbritishlife.co.uk
greatbritishlife.co.uk
consent.mediakit.greatbritishlife.co.uk
*.schoolreportonline.com
local.carrickfergustimes.co.uk
consent.mediakit.greatbritishlife.co.uk
greatbritishlife.co.uk
parrysoundnorth.parrysound.com
flintshopping.mlive.com
flintshopping.mlive.com
a02342.alloaadvertiser.com
a02342.alloaadvertiser.com

Certificate

The complete raw certificate details for greatbritishlife.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxejroWWAg4phzpQAqz7E
lAK3Ae8BC4zWyy0ONBSGxZh5fyJgVng+pn1lqFWRUhve0iWIL+rjft+0VRmK6ng9
3IXgwZcvJ0xuhLC5Ha11KqbVCt/tZ3JRlfdXcojwGVNMPzzMIT/ex1k1l27JXh14
M4K4K8QcXNmLtVdui1dpCNoZN+uvYp7UIlRFU0UpgcUKUQs40vChfIKxYrrFkwMZ
bFT8NtYwaQBI9j4gy2sl88aICzJrwcoS9KdS5k6D4rhHzetmhRiSk+ies9vrlg5O
HDHl1P/HORkxh4BapeUGl/OdV/QsYG3ppkCT53MT2Q8Q126UBWmrW6Ywal2nm96g
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6214717519928521822920763334359629793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greatbritishlife.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24983803423860847147952514492994630014213523343050556409273176563033284767051157205359375854055757219564160117088322681355313430295305827314962753815692578488131420665512212063432411879320580987160068902217769855501646255539000671635756142464336834870023644396643946221191557184128282302847901407632618322400481956034955490219367736815075999169969747632344953960143318574223477598093648223115115144105771831164148318835006702552496580499796785180871509829475261713285760528081593045482025699933846618339456746958649652028940334064396942008025025791319560104115939243987189615923665767753536082296554324100183723253791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9364569d691c940b0c3fd8697fa67501d73a0df8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (852 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatbritishlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kent-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somerset-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sussexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hertfordshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lancashirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorsetmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suffolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwalllife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surreylife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kent-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatbritishlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westessexlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampshire-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essexlifemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cotswoldlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingedge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suffolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dorsetmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somerset-life.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derbyshirelife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cornwalllife.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018695df80ad0000040300473045022100a4b1393dc9022df4c8c4ca5e5aea269a2cf2a16bc801b58d5bdd936d01403011022058f8f7d06ba23723095d3bfc69ba8c520e19398be0eb3d582c2469e8184bfc50007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018695df80d80000040300463044022018954952eeb1b3757a860184bca171adec23d82e9e6a127482339913995bb680022002f991c82b0f81b1d6ce604e5f62173642f7e161d589b417500ddbc62e904346007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018695df809400000403004730450221008d9fb5a9afa7c5f9e7487ec558538ee077462e30f0d329ad551f13cdb538350e02203b75cbc915fde4ba27f6dfe0009dc58b25a8167b79652675b281d0e2962af51d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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