*.rfksrv.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:f5:23:75:65:f7:a0:d7:62:41:29:8f:2a:5d:c5:8f was issued on by Amazon.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.rfksrv.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:f5:23:75:65:f7:a0:d7:62:41:29:8f:2a:5d:c5:8f
Serial Number (int): 15894339869563599569492071984393995663
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:2c:76:39:8a:59:a3:a5:a9:fb:41:28:90:ef:03:a9:db:bc:e4:cf
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 60:71:94:fa:5d:0b:af:02:a0:c1:ff:b5:20:1d:77:63:e5:75:ed:53
Fingerprint (sha256): c2:44:ef:00:4e:aa:d1:7f:3c:8c:0b:b8:cb:d0:60:b9:1b:cc:6f:af:0d:fb:be:d9:74:5b:09:55:8d:8b:c4:58

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.rfksrv.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rfksrv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rfksrv.com
initjs.rfk.ticketsatwork.com
initjs.rfk.hankypanky.com
initjs.rfk.zennioptical.com
initjs.rfk.levistrauss.com
initjs.rfk.bradycanada.ca
initjs.rfk.chicos.com
initjs.rfk.tumi.com
initjs.rfk.magidglove.com
initjs.rfk.electronicexpress.com
initjs.rfk.flexshopper.com
initjs.rfk.roguefitness.com
initjs.rfk.louandgrey.com
initjs.rfk.tylertool.com
initjs.rfk.denniskirk.com
initjs.rfk.cpomilwaukee.com
initjs.rfk.roguesupplyco.com
initjs.rfk.bostonproper.com
initjs.rfk.workingadvantage.com
initjs.rfk.bradyid.com
initjs.rfk.roomandboard.com
initjs.rfk.loft.com
initjs.rfk.cpopowertools.com
initjs.rfk.whbm.com
initjs.rfk.roguecanada.ca
*.prod.rfksrv.com
initjs.rfk.alexisbittar.com
initjs.rfk.plumbenefits.com
initjs.rfk.roughcountry.com
initjs.rfk.domyown.com
initjs.rfk.cpooutlets.com
initjs.rfk.rogueaustralia.com.au
initjs.rfk.kegworks.com
initjs.rfk.chicosofftherack.com
initjs.rfk.soma.com
initjs.rfk.rogueapo.com
initjs.rfk.biglots.com
initjs.rfk.rogueeurope.eu
initjs.rfk.anntaylor.com
initjs.uat-rfk.magidglove.com
initjs.rfk.lsco-b2b.com
initjs.rfk.whbmofftherack.com
initjs.rfk.zenniaws.com
initjs.rfk.signaturehardware.com
*.prod-euc1.rfksrv.com
initjs.rfk.verabradley.com

Other certificates including the domain name rfksrv.com

(limited to 100 certificates)
*.uat.rfksrv.com
*.staging.rfksrv.com
*.prod.rfksrv.com
*.prod.rfksrv.com
*.uat.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.prod.rfksrv.com
*.dev.rfksrv.com
*.prod-euc1.rfksrv.com
*.staging-euc1.rfksrv.com
*.rfksrv.com
*.staging.rfksrv.com
*.rfksrv.com
initjs-dev.gcp.rfksrv.com
*.rfksrv.com
*.aws.rfksrv.com
*.staging.rfksrv.com
*.canary.rfksrv.com
*.prod-euc1.rfksrv.com
riggsandporter.com
*.prod-euc1.rfksrv.com
*.rfksrv.com
riggsandporter.com
*.aws.rfksrv.com
*.rfksrv.com
*.staging.rfksrv.com
*.uat.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.dev.rfksrv.com
*.rfksrv.com
*.staging-euc1.rfksrv.com
*.aws.rfksrv.com
*.dev.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.rfksrv.com
riggsandporter.com
*.rfksrv.com
riggsandporter.com
*.staging-euc1.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.prod.rfksrv.com
*.aws.rfksrv.com
riggsandporter.com
*.rfksrv.com
*.rfksrv.com
*.uat.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.prod-euc1.rfksrv.com
*.prod.rfksrv.com
*.rfksrv.com
*.prod-euc1.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.staging.rfksrv.com
*.prod-euc1.rfksrv.com
riggsandporter.com
*.staging.rfksrv.com
*.prod-apse2.rfksrv.com
*.rfksrv.com
*.rfksrv.com
*.staging-euc1.rfksrv.com
*.sitecore-staging.cloud
*.prod.rfksrv.com
*.rfksrv.com

Certificate

The complete raw certificate details for *.rfksrv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjPlPde6zGkMiLjAecHi
aBVqhqLi+vIqDCUkf4+ek3Mgfyqx8HHAQDN4glYrUckO6mc2E530jq0l8vs/87Vc
yxC2YuHaQXDb3GJvziQ1PmMACR5rY94OqwBojEIpz33UacYgihMWOiQ1v3MsJ/56
ErDBw87/OQ8c67ZOUab417b8w64crfd4AuWkZdOkjVl0ZxSe73OXSOFZsY/XJmdh
fgYoCX+a5NNoMj0SF7CbS6VL0J1bn4ce3acjLSu2G0cVorMs5ekC217vue3oAnm7
HpKIV9jP2AK2/S+oYagXRWr6IHwLYkNcHneLm62c5r72Jt5nexEdW9zg0q9DQXVI
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15894339869563599569492071984393995663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rfksrv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20981149236811457720000774375668859402361142114226098229700621306455863132719866017557056874631966456508342362104834436788573311932326443174832861305875654668107268758662494570622092868851149994761803779285841006046184268011203013767518489183942940166230210347888777885813644239087931229536269082413189164882365706134291912211071685454449011885281409698434137095807729206306183413728544810876096796839699455527450088547771038664652727442055047840747628185410067861405614626416136217628066299354246135535546238164886217849055428506442058706847044093420766518674368778880911014793817695095977438444168347199970779416817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c72c76398a59a3a5a9fb412890ef03a9dbbce4cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rfksrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.ticketsatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.hankypanky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.zennioptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.levistrauss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.bradycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.chicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.tumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.magidglove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.electronicexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.flexshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.roguefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.louandgrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.tylertool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.denniskirk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.cpomilwaukee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.roguesupplyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.bostonproper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.workingadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.bradyid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.roomandboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.cpopowertools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.whbm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.roguecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.rfksrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.alexisbittar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.plumbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.roughcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.domyown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.cpooutlets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.rogueaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.kegworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.chicosofftherack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.soma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.rogueapo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.biglots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.rogueeurope.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.anntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.uat-rfk.magidglove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.lsco-b2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.whbmofftherack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.zenniaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.signaturehardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod-euc1.rfksrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initjs.rfk.verabradley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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