wp-mktg.prod.getty1.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:ea:5c:dc:ce:b3:9f:9b:6f:3b:2c:e0:d4:0f:22:b2 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wp-mktg.prod.getty1.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:ea:5c:dc:ce:b3:9f:9b:6f:3b:2c:e0:d4:0f:22:b2
Serial Number (int): 3875336932317333971156283772510347954
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ba:17:fa:e8:fd:79:1b:6c:4f:1c:1a:cd:54:bc:d4:bd:38:2a:5a:33
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ca:83:03:88:fd:51:86:20:a2:80:a9:55:91:10:35:68:5e:11:fb:45
Fingerprint (sha256): a6:2c:cd:dd:b8:ab:8e:34:9c:f0:da:d6:c0:7a:89:4e:12:d5:71:18:71:e4:31:f8:b2:6b:dc:fe:2b:fc:97:11

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate wp-mktg.prod.getty1.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wp-mktg.prod.getty1.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wp-mktg.prod.getty1.net
wherewestand.gettyimages.com
www.gettyimagesaffiliates.com
marketing.gettyimages.com
istockcontenthub.prod.getty1.net
company.gettyimages.com
affiliates.gettyimages.com
marketing.istockphoto.com

Other certificates including the domain name getty1.net

(limited to 100 certificates)
embed-cdn.gettyimages.com
embed-cdn.gettyimages.com
stage-gateway-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wireimage-origin-stage.nonprod.getty1.net
api.gettyimages.com
developer-portal.prod.getty1.net
origin-api.sandbox.getty1.net
wp-mktg.prod.getty1.net
istockcontenthub.lower.getty1.net
wildcard.lower.getty1.net
wp-mktg.prod.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
thinkstock-origin-production.prod.getty1.net
jake.sandbox.getty1.net
wildcard.prod.getty1.net
api.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
accountmanagement.sandbox.getty1.net
unisporkal.sandbox.getty1.net
developer-portal.prod.getty1.net
wildcard.prod.getty1.net
wp-mktg.prod.getty1.net
api.gettyimages.com
wp-istock-inspector.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
accountmanagement.sandbox.getty1.net
wildcard.prod.getty1.net
wildcard.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
wildcard.sandbox.getty1.net
wireimage-origin-production.prod.getty1.net
accountmanagement.sandbox.getty1.net
api.gettyimages.com
wp-mktg.prod.getty1.net
api.gettyimages.com
wildcard.sandbox.getty1.net
origin-api.gettyimages.com
wildcard.prod.getty1.net
accountmanagement.sandbox.getty1.net
wildcard.nonprod.getty1.net
wildcard.prod.getty1.net
embed.gettyimages.com
origin-api.gettyimages.com
wildcard.sandbox.getty1.net
musiccontrib-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.lower.getty1.net
embed-cdn.gettyimages.com
wildcard.lower.getty1.net
developer-portal.prod.getty1.net
wp-istock-inspector.prod.getty1.net
api.gettyimages.com
wp-mktg.sandbox.getty1.net
thinkstock-origin-stage.nonprod.getty1.net
developer-portal.prod.getty1.net
wildcard.nonprod.getty1.net
wildcard.lower.getty1.net
origin-api.nonprod.getty1.net
accountmanagement.sandbox.getty1.net
developer-portal.prod.getty1.net
jake.sandbox.getty1.net
wp-istock-inspector.prod.getty1.net
wp-mktg.prod.getty1.net
api.sandbox.getty1.net
wildcard.prod.getty1.net
wp-mktg.sandbox.getty1.net
wildcard.sandbox.getty1.net
embed.gettyimages.com
entmon-splunk-hec-firehose.shared.getty1.net
wp-mktg.prod.getty1.net
embed-test-cdn.lower.getty1.net
entmon-splunk-hec-firehose.shared.getty1.net
embed.gettyimages.com
*.nonprod.getty1.net
embed-test-cdn.lower.getty1.net
wildcard.lower.getty1.net
wildcard.prod.getty1.net
developer-portal.prod.getty1.net
api.gettyimages.com
entmon-splunk-hec-firehose.nonprod.getty1.net
wp-mktg.prod.getty1.net
wp-mktg.prod.getty1.net
gateway-api.prod.getty1.net
embed-cdn.gettyimages.com
wp-mktg.prod.getty1.net
wildcard.prod.getty1.net
wildcard.lower.getty1.net
gateway-api.prod.getty1.net

Certificate

The complete raw certificate details for wp-mktg.prod.getty1.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgIQAupc3M6zn5tvOyzg1A8isjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDUyMzAwMDAwMFoXDTI0MDYyMDIzNTk1OVowIjEg
MB4GA1UEAxMXd3AtbWt0Zy5wcm9kLmdldHR5MS5uZXQwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDCrbjOw3I4VEDQ+tKiHDhFdDZI2mijJ2aXn+rMtire
Wyvaxwu1ucWbYDAqbJxMFNtMpGLhmAYULt7cs2PTOTkw6GxgRWKdKV6n4CC1a6WC
WayOKytl0zrgGDIv4/9Y20oGvZ3yIXqvtKSObH0+ULvkFwTz/pjkZOKGRJEFGpW3
8uj01x6qf4PGKBF0bb5hjvCSxprSIM9WsCWY/cj+2gvgHO0anFnzQcOLIDFnuSvh
wfSxsTdF7ftZeJ89WJeKk7VaJgvwLKEFnmBSx6afVJ02ECz/BeCCasRlZ497hzvs
pBBDcT/D16bFH6c1shywGSMHcK3MNQX9mufHehrBurNpAgMBAAGjggO9MIIDuTAf
BgNVHSMEGDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUuhf66P15
G2xPHBrNVLzUvTgqWjMwge4GA1UdEQSB5jCB44IXd3AtbWt0Zy5wcm9kLmdldHR5
MS5uZXSCHHdoZXJld2VzdGFuZC5nZXR0eWltYWdlcy5jb22CHXd3dy5nZXR0eWlt
YWdlc2FmZmlsaWF0ZXMuY29tghltYXJrZXRpbmcuZ2V0dHlpbWFnZXMuY29tgiBp
c3RvY2tjb250ZW50aHViLnByb2QuZ2V0dHkxLm5ldIIXY29tcGFueS5nZXR0eWlt
YWdlcy5jb22CGmFmZmlsaWF0ZXMuZ2V0dHlpbWFnZXMuY29tghltYXJrZXRpbmcu
aXN0b2NrcGhvdG8uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w
MS5hbWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEu
YW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFt
YXpvbnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB
1nkCBAIEggFuBIIBagFoAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa
OnQAAAGIRmg39QAABAMASDBGAiEAxnncI7CWyBnf+fDuhdblx9Irp2UKpS8oUpAZ
XbLFLnACIQCf2yxkYQGFgIbCGLeOjvzewUkmm7Q+lHILHJSlcg/THwB2AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiEZoN+cAAAQDAEcwRQIgRhhu
8nJEmTiQs/F1p7S5Ix2U39Y90FKN+UHhBswjdoECIQCRWjCQJdZedxgs4Hlkhh/i
bhUfNz8tfZ+6fbiBlLTbMAB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI
1/urAAABiEZoN7EAAAQDAEYwRAIgXbMr5CTQ8l4YxNkJWz31F8LFKVQEfNBOPtKv
OHUkNL4CIBR80nWxEuH4q35dZmJA30EfGptkKeuhRKgRKxgDXUTzMA0GCSqGSIb3
DQEBCwUAA4IBAQBReFBoVMfkzlQ6GcTTUYft4YUGOX49MVqdXE1+Y8D8SbBaRMPl
LTwHdGWgx49BaKejv24THkhGAdqkanEk39Rzpor5MCv3nE5AwNziaA7V+tQOQ2bX
tceFP79y573k3qbV7hVhLG4RMBTIIfDLwMKwp+u6fhD4hKW/faAcOW5e4u8agoUK
kAEx+t9aRqDf7Q+uTDAkxBtyqILNVe9FyMf7Vxlas0siIG8gcvtQN9yt2HLBtwx4
/pJgN/ztYxu3abVKrsvqwJdbv/UmcjnPSsKG/4iY+CyyWS7JzMi6f1Ve4WtM+b4r
Ca4HRCr2dzaK0WpNqAXY8DoXMBHoKdFt4KLz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq24zsNyOFRA0PrSohw4
RXQ2SNpooydml5/qzLYq3lsr2scLtbnFm2AwKmycTBTbTKRi4ZgGFC7e3LNj0zk5
MOhsYEVinSlep+AgtWulglmsjisrZdM64BgyL+P/WNtKBr2d8iF6r7Skjmx9PlC7
5BcE8/6Y5GTihkSRBRqVt/Lo9Nceqn+DxigRdG2+YY7wksaa0iDPVrAlmP3I/toL
4BztGpxZ80HDiyAxZ7kr4cH0sbE3Re37WXifPViXipO1WiYL8CyhBZ5gUsemn1Sd
NhAs/wXggmrEZWePe4c77KQQQ3E/w9emxR+nNbIcsBkjB3CtzDUF/Zrnx3oawbqz
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3875336932317333971156283772510347954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wp-mktg.prod.getty1.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24575896627546743837059885739208136898803049417559752252616926146593986993218185083819701163566950429231247181492490101711886387162117232273212717414090676784599342954513889753989191547104524502143069238987858490711861949174153049914920669822429692868266546824290250047143506879861183374225588196823154405347315455323909468496199289621563425093613170158560218475201492718631254394580182073951380351019887338331155743964464586625691425955106437876848231234940683311715300519338224392883464330200092558635933460686395200281824724628740713243407749788639104449235051602868694128788987746366922156841967060527633793725289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba17fae8fd791b6c4f1c1acd54bcd4bd382a5a33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-mktg.prod.getty1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wherewestand.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gettyimagesaffiliates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istockcontenthub.prod.getty1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'company.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.istockphoto.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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