aol.amazon.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:4b:de:30:9d:1c:19:21:60:b2:40:8a:38:7e:d2:0e was issued on by Amazon.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aol.amazon.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:4b:de:30:9d:1c:19:21:60:b2:40:8a:38:7e:d2:0e
Serial Number (int): 15015436764531113169376699783791432206
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1c:5b:6d:7c:2e:9c:ab:fc:22:24:c8:53:71:01:f8:80:ac:27:c7:b6
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 3b:a0:10:85:1a:3e:43:08:bd:db:31:21:33:87:7f:94:80:9e:f1:1a
Fingerprint (sha256): a7:43:5b:0b:32:31:a5:65:9d:30:0f:4d:16:fd:72:d9:36:04:15:ad:1a:e5:5e:f6:d6:8e:1a:6f:36:33:61:98

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate aol.amazon.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aol.amazon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aol.amazon.com
gpi-inventory-pool-goggles.amazon.com
posters.amazon.com
utaustin.amazon.com
amazon-blogs.com
www.amazonprimenow.delivery
www.primenow.xyz
www.sbu.amazon.com
www.davis.amazon.com
projectkuiper.amazon.com
www.stonybrook.amazon.com
www.imdb.de
www.upenn.amazon.com
videodirectpublishing.amazon.com
videopublishing.amazon.de
videodirectpublishing.amazon.co.jp
videodistribution.amazon.co.jp
www.videodirect.amazon.co.jp
avd.amazon.co.jp
www.amazonstorywriter.com
videodirectpublishing.amazon.co.uk
georgiainstituteoftechnology.amazon.com
amazonpublisherservices.amazon.com
www.amazon-blogs.com
m.imdb.es
amazonprimenow.delivery
www.kindlepost.com
imdb.de
www.primenow.delivery
videopublishing.amazon.co.jp
www.gt.amazon.com
videodistribution.amazon.co.uk
www.georgiainstituteoftechnology.amazon.com
primenow.delivery
influencer.amazonmusic.com
imdb.es
www.a.co
primenow.restaurant
davis.amazon.com
amazonblogs.com
www.smallbusiness.amazon.com
avd.amazon.com
www.amazonblog.net
smallbusiness.amazon.com
videodistribution.amazon.com
www.imdb.it
m.imdb.de
videodirectpublishing.amazon.de
vdp.amazon.co.uk
imdb.fr
amazonprimenow.com
primenow.xyz
amazonblog.net
www.primenow.express
www.amazonblog.com
www.imdb.fr
bankone.amazon.com
www.stonybrookuniversity.amazon.com
amazon.primenow.com
www.primenow.vegas
videodistribution.amazon.de
m.imdb.fr
storywriter.amazon.com
videopublishing.amazon.co.uk
gpi-inventory-pool-goggles.integ.amazon.com
vdp.amazon.de
primenow.com
www.amazonblogs.com
texas.amazon.com
msft.amazon.com
stonybrookuniversity.amazon.com
www.videodirect.amazon.com
m.imdb.it
amazon-blog.com
primenow.express
avd.amazon.co.uk
primenow.vegas
www.utaustin.amazon.com
www.amazon-blog.com
dpreview.new
avd.amazon.de
forecasting.amazon.com
sbu.amazon.com
gatech.amazon.com
www.primenow.restaurant
videopublishing.amazon.com
amazonblog.com
gt.amazon.com
appstoreposts.com
upenn.amazon.com
imdb.it
amazonstorywriter.com
mobile.amazon.com
stonybrook.amazon.com
www.imdb.es
www.gatech.amazon.com
www.bankone.amazon.com
www.texas.amazon.com
adobe.amazon.com
www.asucstudentunion.amazon.com

Other certificates including the domain name amazon.com

(limited to 100 certificates)
fresh.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
routingtools-jlb-l-dub.dub.proxy.amazon.com
us-west-1.awsc-integ.aws.amazon.com
aea-console-canary.aea.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
aea-console-canary.aea.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
aea-console-canary.aea.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
emf-operator-console-prod-sin-cell2.corp.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
ap-east-1.signin.aws
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
edge-customer-troubleshooting.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
foxhound.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
emf-operator-console-prod-sin-cell3.corp.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com

Certificate

The complete raw certificate details for aol.amazon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoUjyaZvlL/1YpKcaJKM
XTfWfDuK6PfVWU9aS+DEOysgSxghWdCrtdmw6N6OXsHXajurRvgEzzPz7R2J2kTi
/HGPeBq7AhUVczwZEIRp0bX6M0bJXAbRaB2HuGpKxUAlcnScB1PxxZljr8M2BwvB
unn3rKQoMCwzwviF81LyKnQzKcDzceUldNQoVpJq4cNtE4qNSDqVmHtSEBOUqXBd
y3bmwoBehYv2J1aucuwSBrMDthGNmz0EWpWbATOZX5s/WgY62Cp2pljk+Rq/nIYS
/mDQXk4DcJQ6Vl/FxJrF102Eg+pN+kj7t0NGYNhPgIiGDJid9HT1jWT922pGYVF3
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15015436764531113169376699783791432206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aol.amazon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25060838063479014215337776930485036101773425875816917594089920556521216067328071835147243166601946331185132646200973212406344791154782475982807503629392630564379788863388248023035440268489872881517100658581829516658373645526655920541391031899998221364902347378301907747237371980456111992345512877098601327020236816190050377396030403667100710660280366257826181379043186049906560702682051220113262921392375479131149902862219757506696948394412026797108172036904021694225605688603447002326151496388144257725458949391327189008095957789573608094472051550666822026460805371552904194169948853867477811653427053834508375783419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c5b6d7c2e9cabfc2224c8537101f880ac27c7b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aol.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi-inventory-pool-goggles.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posters.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utaustin.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-blogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonprimenow.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primenow.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbu.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davis.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectkuiper.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stonybrook.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imdb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upenn.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodirectpublishing.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videopublishing.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodirectpublishing.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodistribution.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videodirect.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avd.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonstorywriter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodirectpublishing.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiainstituteoftechnology.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonpublisherservices.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon-blogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.imdb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonprimenow.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kindlepost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imdb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primenow.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videopublishing.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gt.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodistribution.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiainstituteoftechnology.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primenow.delivery'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'influencer.amazonmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imdb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primenow.restaurant'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davis.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smallbusiness.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avd.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonblog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbusiness.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodistribution.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imdb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.imdb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodirectpublishing.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdp.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imdb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonprimenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primenow.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonblog.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primenow.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imdb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankone.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stonybrookuniversity.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.primenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primenow.vegas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videodistribution.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.imdb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storywriter.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videopublishing.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi-inventory-pool-goggles.integ.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdp.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msft.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonybrookuniversity.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videodirect.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.imdb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primenow.express'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avd.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primenow.vegas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utaustin.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpreview.new'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avd.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forecasting.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbu.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatech.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primenow.restaurant'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videopublishing.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gt.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appstoreposts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upenn.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imdb.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonstorywriter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonybrook.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imdb.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatech.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankone.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texas.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adobe.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asucstudentunion.amazon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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