www.friendslife.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:fd:56:7c:68:c8:aa:ae:36:22:82:3b:fc:c7:d3:02 was issued on by Amazon.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.friendslife.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:fd:56:7c:68:c8:aa:ae:36:22:82:3b:fc:c7:d3:02
Serial Number (int): 10620001219650820514058379125194216194
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d3:f6:3d:0d:e3:d4:13:9e:ad:dc:45:a6:89:68:48:59:55:38:eb:07
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 5c:c7:00:38:de:4c:da:89:b5:f4:b0:6b:7c:ae:d8:61:58:e5:e1:23
Fingerprint (sha256): be:b5:d6:68:18:e7:5a:c6:85:b7:39:17:88:46:48:f2:6e:56:b9:80:94:92:14:b6:8b:7e:fe:1b:3d:ad:de:93

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.friendslife.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.friendslife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.friendslife.com
myhealthcounts.co.uk
www.getactive.aviva.co.uk
www.hibernian.ie
login.avivainvestors.com
www.myhealthcounts.co.uk
www.avivatraders.com
www.avivainvestors.nl
www.avivainvestors.be
www.partenaireaviva.ca
www.online.avivaservices.co.uk
www.vendor-lookup.aviva.ca
www.eserve.avivaservices.co.uk
www.avivainvestors.tel
www.avivainvestors.it
brand.avivainvestors.com
www.avivainvestors.es
www.avivainvestors.at
sg.avivainvestors.com
tw.avivainvestors.com
media.avivainvestors.com
www.avivainvestors.ca
www.szkolenia.aviva.pl
se.avivainvestors.com
cas-uat2.aviva.pl
insights.avivainvestors.com
withprofitsfunds.co.uk
www.dom.aviva.pl
www.chmura.aviva.pl
vendor-lookup.aviva.ca
www.avivahealthandwellbeing.co.uk
www.avivainvestors.sg
www.cutredtape.co.uk
www.avivainvestors.se
zycie-i-zdrowie.aviva.pl
aims.avivainvestors.com
www.avivainvestors.com.au
aviva.com.vn
www.aviva.com.vn
www.avivainvestors.de
us.avivainvestors.com
www.centrumfinansow.aviva.pl
www.avivainvestors.ch
www.withprofitsfunds.co.uk
stadium.aviva.ie
www.adviser.avivaservices.co.uk
www.agrupa.aviva.pl
www.avivapartner.ca
aimsti.avivainvestors.com
www.avivainvestors.co.uk
www.bcmotorcycle.aviva.ca
ustawienia-beta.aviva.com.pl
www.monaviva.avivainsurance.ca
www.aviva.com.sg
www.avivainvestors.ie
www2.aviva.pl
uk.avivainvestors.com
www.ofe.aviva.pl
www.myaviva.avivainsurance.ca
www.login.avivainvestors.com
www.member.avivaservices.co.uk
www.avivacanada.com
www.avivaavantage.com
www.controlyourpension.com
www.regs.avivaservices.co.uk
www.avivainvestors.lu
www.hibernianaviva.ie
avivamicrosite.co.uk

Other certificates including the domain name friendslife.com

(limited to 100 certificates)
friendslife.com
www.eserve.avivaservices.co.uk
friendslife.com
www.friendslife.com
*.friendslife.com

library.friendslife.com

www.avivainvestors.com

uat.aviva.co.uk
www.friendslife.com
uat.aviva.co.uk
no.avivainvestors.com
friendslife.com
*.friendslife.com
friendslife.com
uat.aviva.co.uk
www.friendslife.com
friendslife.com
services.friendslife.com
cert01.uk.aviva.com
www.friendslife.com
www.avivainvestors.com
friendslife.com
www.avivainvestors.com

uat.aviva.co.uk
uat.aviva.co.uk
library.friendslife.com

dgsamlsignature.friendslife.com
dgsamlsignature.friendslife.com
uat.aviva.co.uk
cutredtape.co.uk
friendslife.com
www.avivainvestors.com
avivainvestors.lu
cert01.uk.aviva.com
insights.avivainvestors.com
www.friendslife.com
www.avivainvestors.com
friendslife.com
friendslife.com
friendslife.com
www.avivainvestors.com
friendslife.com

friendslife.com
friendslife.com
friendslife.com
www.friendslife.com
uat.aviva.co.uk
www.avivainvestors.com
dgsamlsignature.friendslife.com
friendslife.com
friendslife.com
www.avivainvestors.com
services.friendslife.com
services.friendslife.com
avivacommunityfund.co.uk
friendslife.com
friendslife.com
avivacorporateplatform.co.uk
friendslife.com
login.avivainvestors.com
friendslife.com


friendslife.com
www.avivainvestors.com
friendslife.com

cert01.uk.aviva.com
uat.aviva.co.uk
www.friendslife.com
www.friendslife.com
www.avivainvestors.be
uat.aviva.co.uk
remoteapps.friendslife.com
www.avivainvestors.com
www.avivainvestors.be
uat.aviva.co.uk
cert01.uk.aviva.com
friendslife.com
friendslife.com
www.friendslife.com
uat.aviva.co.uk
salescloud-bg.aviva.pl
uat.aviva.co.uk
friendslife.com
friendslife.com
friendslife.com
cert01.uk.aviva.com
friendslife.com
friendslife.com
dgsamlsignature.friendslife.com
cert01.uk.aviva.com
cert01.uk.aviva.com
remoteapps.friendslife.com

Certificate

The complete raw certificate details for www.friendslife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx9c1pbT2MvJc6ezn6ix
1QQgIn44mfNUvl4RN+hK07987ckSH8oSn1nuBHaRzFaJqc5ekQt5BDHz51Rnuy1X
cPYuWq3qLBFOIxZtmmCCnSxTv9Y801mwfnGHihugsIBqxTS2vksNRQKktLtWno6Z
xE/nPLxMuWMclZ3S78fnpiqs6z+yM4E4joUdVXbWgbMZmaTX0GIDA5CSpibauuGr
9qTmG+YXKUUuQ8NcMkUlyY1PxeKl2xrPxmrQaQ9UUXW3K3GGRmRfQbjvQio+Jp+g
9FGpeoliVW9/RNDwRtObc/unoB1SVCtBbkQRJ9X6gJYM1pYgpQL5NjseRkyg9wNk
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10620001219650820514058379125194216194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.friendslife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19582402768550902010919744241163258741665895353458752772226014256424254414511068512155498078112420042237087587541756048384622412574987018244090210965343165288737271144215875530537467302484515881306995299138973252272831703094551898799559686275974144577389824989180220029852026559247104051541669997173397859666018725277579387451728383970038845312765889031882202229294341410200832339149338697580512609550293349983686558320348344873585437513508226857267211484882801805764860262871344348322802867691731612083560369223744741860127861993510614677919643309169931948926681844954892462667207432719136998699467548231517490865391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3f63d0de3d4139eaddc45a6896848595538eb07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1659 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthcounts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getactive.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hibernian.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhealthcounts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partenaireaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendor-lookup.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eserve.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.szkolenia.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-uat2.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withprofitsfunds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dom.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chmura.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor-lookup.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealthandwellbeing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutredtape.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zycie-i-zdrowie.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aims.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumfinansow.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.withprofitsfunds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadium.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adviser.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrupa.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapartner.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimsti.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustawienia-beta.aviva.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofe.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.member.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaavantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regs.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hibernianaviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamicrosite.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000184e8b4c0850000040300483046022100f4f39dc650547167b8ac3e25035d7740ccdf1d4b9b5eb5f02fdec3e03eb7573e022100b120c51854230aafb0e805ad46b2fac406312f8ae4479c25a027094673897e7e00750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000184e8b4c0eb000004030046304402200240aca232794544a0356cd1321b7a96c653374e2464161f3ef4679b05e41d0b0220271d77105af5625907d95a594e3f7141a05524f2c74109ef2003c0b43c42016000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000184e8b4c0c200000403004730450220661e0cdb5c88c09e8bbc3669ed8e70f0a769fa46eddb03e9c2ad0c6896e02327022100abd1df087521fc04ba7e5196d1ac7d504372fb4fedc67a60b5344cb651f0259c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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