kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:55:78:8b:18:86:36:ba:28:0c:af:19:e5:a2:e3:42 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:55:78:8b:18:86:36:ba:28:0c:af:19:e5:a2:e3:42
Serial Number (int): 4431474129787130387641301158211019586
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c2:c6:38:b9:e0:f6:63:67:93:ff:9e:34:6a:70:ca:62:87:7c:c6:7f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): af:8c:c0:9e:2b:9b:2c:74:f5:a2:71:17:12:b7:92:ef:f6:27:15:87
Fingerprint (sha256): b4:60:a7:9c:ce:8b:40:c6:73:40:31:17:76:01:1e:5f:07:ff:e2:28:54:3f:a3:74:84:0b:51:ee:42:9a:02:63

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io
kibana-aws.nonprod.maintenance.abovecloud.io

Other certificates including the domain name abovecloud.io

(limited to 100 certificates)
guest-self-service.sg.asia.dev02.development.abovecloud.io
reservations.de.europe.atest.dev.development.abovecloud.io
kafkaui.de.eu1.slp-nonprod.deployment.abovecloud.io
oauth2-gateway.fr.test01.maintenance.abovecloud.io
oauth2-gateway.de.uat02.maintenance.abovecloud.io
web.fr.europe.test01.development.abovecloud.io
configuration.de.europe.uat02.development.abovecloud.io
guest-self-service.fr.europe.test01.development.abovecloud.io
housekeeping.fr.europe.test01.development.abovecloud.io
api-gateway.sg.asia.uat03.development.abovecloud.io
reservations.de.europe.devops01.development.abovecloud.io
identity.de.europe.cicd.dev.development.abovecloud.io
system-maintenance.de.europe.cicd.dev.development.abovecloud.io
oauth2-gateway.de.pre02.maintenance.abovecloud.io
guest-self-service.de.europe.uat02.development.abovecloud.io
rate-manager.de.europe.atest.dev.development.abovecloud.io
task-management.fr.europe.test01.development.abovecloud.io
housekeeping.de.europe.cicd.dev.development.abovecloud.io
accounts-receivable.de.europe.pre02.development.abovecloud.io
rate-manager.de.europe.pre02.development.abovecloud.io
identity.de.europe.demo01.development.abovecloud.io
grafana.de.pre02.maintenance.abovecloud.io
reservations.de.europe.uat02.development.abovecloud.io
api-gateway.fr.europe.test01.development.abovecloud.io
grafana.de.prod02.maintenance.abovecloud.io
grafana.de.dev.maintenance.abovecloud.io
meetings-and-events.de.europe.cicd.dev.development.abovecloud.io
identity.sg.asia.uat03.development.abovecloud.io
guest-self-service.sg.asia.uat03.development.abovecloud.io
ssot.core.int.abovecloud.io
api-gateway.de.europe.cicd.dev.development.abovecloud.io
reservations.de.europe.demo01.development.abovecloud.io
user-documentation.fr.europe.test01.development.abovecloud.io
web.de.europe.cicd.dev.development.abovecloud.io
web.de.europe.uat02.development.abovecloud.io
configuration.sg.asia.dev02.development.abovecloud.io
vault.sandbox.abovecloud.io
configuration.fr.europe.test01.development.abovecloud.io
reports.de.europe.uat02.development.abovecloud.io
identity.de.europe.pre02.development.abovecloud.io
accounts-receivable.fr.europe.test01.development.abovecloud.io
changelog.de.europe.devops01.development.abovecloud.io
identity.sg.asia.dev02.development.abovecloud.io
oauth2-gateway.de.prod02.maintenance.abovecloud.io
reservations.de.europe.cicd.dev.development.abovecloud.io
task-management.de.europe.uat02.development.abovecloud.io
oauth2-gateway.de.prod02.maintenance.abovecloud.io
oauth2-gateway.sg.uat03.maintenance.abovecloud.io
reports.de.europe.uat02.development.abovecloud.io
www.uat.development.abovecloud.io
rate-manager.de.europe.uat02.development.abovecloud.io
oauth2-gateway.de.dev.maintenance.abovecloud.io
api-gateway.de.europe.cicd.dev.development.abovecloud.io
changelog.fr.europe.test01.development.abovecloud.io
base-components.de.europe.cicd.dev.development.abovecloud.io
reports.sg.asia.dev02.development.abovecloud.io
changelog.de.europe.uat02.development.abovecloud.io
kibana.fr.test01.maintenance.abovecloud.io
kibana.sg.uat03.maintenance.abovecloud.io
guest-self-service.de.europe.devops01.development.abovecloud.io
housekeeping.de.europe.pre02.development.abovecloud.io
meetings-and-events.de.europe.uat02.development.abovecloud.io
identity.de.europe.uat02.development.abovecloud.io
healthcheck.shared.remote.abovecloud.io
cross-components.de.europe.cicd.dev.development.abovecloud.io
oauth2-gateway.de.eu1.slp-nonprod.deployment.abovecloud.io
accounts-receivable.fr.europe.test01.development.abovecloud.io
changelog.de.europe.pre02.development.abovecloud.io
housekeeping-mobile.de.europe.devops01.development.abovecloud.io
api-gateway.de.europe.uat02.development.abovecloud.io
housekeeping.de.europe.atest.dev.development.abovecloud.io
reservations.sg.asia.uat03.development.abovecloud.io
rate-manager.sg.asia.uat03.development.abovecloud.io
rate-manager.fr.europe.test01.development.abovecloud.io
user-documentation.de.europe.pre02.development.abovecloud.io
oauth2-gateway.de.uat02.maintenance.abovecloud.io
accounts-receivable.sg.asia.dev02.development.abovecloud.io
accounts-receivable.sg.asia.dev02.development.abovecloud.io
workflows.de.europe.cicd.dev.development.abovecloud.io
changelog.de.europe.demo01.development.abovecloud.io
grafana.de.pre02.maintenance.abovecloud.io
api-gateway.de.europe.devops01.development.abovecloud.io
configuration.de.europe.uat02.development.abovecloud.io
rate-manager.sg.asia.dev02.development.abovecloud.io
identity.fr.europe.test01.development.abovecloud.io
k8s-api.de.eu1.devops.deployment.abovecloud.io
housekeeping-mobile.de.europe.pre02.development.abovecloud.io
k8s-api.de.eu1.devops.deployment.abovecloud.io
housekeeping.de.europe.uat02.development.abovecloud.io
meetings-and-events.fr.europe.test01.development.abovecloud.io
accounts-receivable.de.europe.devops01.development.abovecloud.io
housekeeping.de.europe.demo01.development.abovecloud.io
identity.de.europe.cicd.dev.development.abovecloud.io
rate-manager.de.europe.uat02.development.abovecloud.io
reports.de.europe.devops01.development.abovecloud.io
reports.de.europe.demo01.development.abovecloud.io
system-maintenance.de.europe.uat02.development.abovecloud.io
identity.de.europe.uat02.development.abovecloud.io
configuration.sg.asia.uat03.development.abovecloud.io
reports.de.europe.cicd.dev.development.abovecloud.io

Certificate

The complete raw certificate details for kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIQA1V4ixiGNrooDK8Z5aLjQjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDUyMjAwMDAwMFoXDTI0MDYyMDIzNTk1OVowQTE/
MD0GA1UEAxM2a2liYW5hLWF3cy5kZS5ldTEuc2xwLW5vbnByb2QuZGVwbG95bWVu
dC5hYm92ZWNsb3VkLmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
vu0zFGPwFxjJHFm9NUdDl/UlQWUu4YhH8vLK81IFnuTCEhTYHJVxkd+2lF2PGC9W
54ICOEUb+xXzQtIQ2dRx7LXyXcecbP0aF1XkpNkCTTFzLdy5SRMf4u7wHPAT9kVq
bNuuTptFw2it1zBnxJpkZWmVFxtLlTP7rACV2tZ/5Rq1PeFz7ehRIuhaQ8XNBSyZ
lBOcXe+PGx75vvyegnrGn2/GzH9+k0ewSre9uXPufjS/UKp9VDpL25AplJ01/P39
z7tNQqyHpfY6gpQXzKu8BK8Py8sjwOCTMHRR97rom1s+vbhZ7MRtvO3t03bhiu3e
HPgc52mGP7Rnqg3khBH86QIDAQABo4IB0DCCAcwwHwYDVR0jBBgwFoAUwDFSzVpQ
w4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFMLGOLng9mNnk/+eNGpwymKHfMZ/MG8G
A1UdEQRoMGaCNmtpYmFuYS1hd3MuZGUuZXUxLnNscC1ub25wcm9kLmRlcGxveW1l
bnQuYWJvdmVjbG91ZC5pb4Isa2liYW5hLWF3cy5ub25wcm9kLm1haW50ZW5hbmNl
LmFib3ZlY2xvdWQuaW8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAy
LmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEw
dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5h
bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1h
em9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkC
BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0BreOqlWJYk9ZYUf+77l5JnQZ
o0AJVYnUuJHnGqd2oqtYuuht4eU9JaQwTxJ9jZtdX9cDMi0kdrKMFqCZ03wPYUeB
Gqs6keFG4V7Itfa2I2ZP9G4stfM3RbVcdxykvgVv2PulI8IDqSS4wHmRv9W8bJOR
At4lfWAcNqpyZk4NUEmmKbjO7wN/2IFNRwIHAeK1EzatKNWBScwl2mQxCcgVaAAZ
7fS4Hg8AwImX32yjC75tQgFs4qaOD5M0AFhXlimdIicgj3ZHVYiU7ibI/5h0B1D7
IcUJ2m/Hbbcsa1BX/7SNFS3sb9UrumBp02VSuWNU2XN0xyGp386zuYx9ZHeD
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu0zFGPwFxjJHFm9NUdD
l/UlQWUu4YhH8vLK81IFnuTCEhTYHJVxkd+2lF2PGC9W54ICOEUb+xXzQtIQ2dRx
7LXyXcecbP0aF1XkpNkCTTFzLdy5SRMf4u7wHPAT9kVqbNuuTptFw2it1zBnxJpk
ZWmVFxtLlTP7rACV2tZ/5Rq1PeFz7ehRIuhaQ8XNBSyZlBOcXe+PGx75vvyegnrG
n2/GzH9+k0ewSre9uXPufjS/UKp9VDpL25AplJ01/P39z7tNQqyHpfY6gpQXzKu8
BK8Py8sjwOCTMHRR97rom1s+vbhZ7MRtvO3t03bhiu3eHPgc52mGP7Rnqg3khBH8
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4431474129787130387641301158211019586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24102245391172692926703493942091313413262230676953175237272561675317247172855243906967562536060694131969374171133964050684876232524361854416978740477550194442433804750623835954847196987388999446381274680699170502576055127706032278025239575734710335182053716284943688904485035477095229143244334346421439610912434416038430803339093639125010356012038418535576385964356229299634348652251840736010947193155490928439838664224719655380523698506975859553386014057531313474677576163650743993520864247331556241072686108612959304172193632581541547669495761380313142747245809577757111381737053257628436743991547682890336724712681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2c638b9e0f6636793ff9e346a70ca62877cc67f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana-aws.de.eu1.slp-nonprod.deployment.abovecloud.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kibana-aws.nonprod.maintenance.abovecloud.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003406b78eaa5589624f596147feefb979267419a340095589d4b891e71aa776a2ab58bae86de1e53d25a4304f127d8d9b5d5fd703322d2476b28c16a099d37c0f6147811aab3a91e146e15ec8b5f6b623664ff46e2cb5f33745b55c771ca4be056fd8fba523c203a924b8c07991bfd5bc6c939102de257d601c36aa72664e0d5049a629b8ceef037fd8814d47020701e2b51336ad28d58149cc25da643109c815680019edf4b81e0f00c08997df6ca30bbe6d42016ce2a68e0f933400585796299d2227208f7647558894ee26c8ff98740750fb21c509da6fc76db72c6b5057ffb48d152dec6fd52bba6069d36552b96354d97374c721a9dfceb3b98c7d647783