subscriber.agweek.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:9e:c6:7f:82:72:e6:05:8f:ff:15:ff:51:ba:4d:27 was issued on by Amazon.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscriber.agweek.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:c6:7f:82:72:e6:05:8f:ff:15:ff:51:ba:4d:27
Serial Number (int): 6141320906238283666349605896876346663
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 36:96:d7:88:37:df:6e:09:7d:3a:ad:8c:6a:a7:75:07:3c:85:7f:f8
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 56:23:cd:10:88:a0:44:37:0b:94:0b:b9:c6:1a:74:05:69:6e:7f:3b
Fingerprint (sha256): c4:d3:af:ed:fe:0c:e0:49:58:b2:31:69:87:75:e0:ad:91:44:06:05:59:a6:df:60:ba:9d:55:3d:83:43:4d:76

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate subscriber.agweek.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscriber.agweek.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscriber.agweek.com
subscriber.postbulletin.com
subscriber.pinejournal.com
subscriber.thedickinsonpress.com
subscriber.echopress.com
subscriber.pineandlakes.com
subscriber.superiortelegram.com
subscriber.jamestownsun.com
subscriber.blackduckamerican.com
subscriber.wadenapj.com
subscriber.dl-online.com
subscriber.bemidjipioneer.com
subscriber.wctrib.com
subscriber.dglobe.com
subscriber.inforum.com
subscriber.perhamfocus.com
subscriber.parkrapidsenterprise.com
subscriber.mitchellrepublic.com
subscriber.grandforksherald.com

Other certificates including the domain name agweek.com

(limited to 100 certificates)
kalamazooshopping.mlive.com
subscriber.agweek.com
link.agweek.com
subscriber.agweek.com
local.wahpetondailynews.com
local.daily-chronicle.com
local.newstribune.info
www.forumcomm.com
peterborough.mykawartha.com
epaper.agweek.com
local.ftimes.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
local.northjersey.com
www.forumcomm.com
local.cambstimes.co.uk
local.moodycountyenterprise.com
parrysoundnorth.parrysound.com
local.eastlondonadvertiser.co.uk
local.hertfordshirelife.co.uk
local.guymondailyherald.com
local.moorefieldexaminer.com
local.blueridgenow.com
impactousa.wanderful.ownlocal.com
admin.adforge.com
peterborough.mykawartha.com
web.production.forum-communications.brightspot.cloud
web.production.forum-communications.brightspot.cloud
kawarthalakes.mykawartha.com
origin.web.production.forum-communications.brightspot.cloud
link.agweek.com
origin.web.production.forum-communications.brightspot.cloud
local.thesiuslawnews.com
*.forum.cue.cloud
www.forumcomm.com
kawarthalakes.mykawartha.com
local.calgaryherald.com
web.production.forum-communications.brightspot.cloud
local.yourokmulgee.com
austinmetro.communityimpact.com
local.edp24.co.uk
eastyorkbeach.toronto.com
www.forumcomm.com
www.forumcomm.com
web.production.forum-communications.brightspot.cloud
cms.forumcomm.com
local.hertsad.co.uk
local.insidebiz.com
*.forum.cue.cloud
local.daily-chronicle.com
parrysoundbeacon.parrysound.com
www.forumcomm.com
www.forumcomm.com
www.forumcomm.com
local.cambstimes.co.uk
link.agweek.com
local.spokane.exchange
local.beloitdailynews.com
web.production.forum-communications.brightspot.cloud
subscriber.agweek.com
url6888.agweek.com
matamata-chronicle.origami.neighbourly.co.nz
cms.forumcomm.com
local.wnypapers.com
www.forumcomm.com
farmshow.agweek.com
web.production.forum-communications.brightspot.cloud
www.forumcomm.com
local.brainerddispatch.com
eastyorkbeach.toronto.com
local.yakimaherald.com
local.doverpost.com
web.production.forum-communications.brightspot.cloud
kg.local.kentonline.co.uk
subscriber.agweek.com
parrysoundnorth.parrysound.com

Certificate

The complete raw certificate details for subscriber.agweek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfDCCBWSgAwIBAgIQBJ7Gf4Jy5gWP/xX/UbpNJzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIyMTAwMDAwMFoXDTI0MDExOTIzNTk1OVowIDEe
MBwGA1UEAxMVc3Vic2NyaWJlci5hZ3dlZWsuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA1vMWVok89qiBozYQFoquq2f1t3o/MeP8GZjoD0Dyacfz
GWM4FXuw5h4HoDX3+RrMOm5JoC1nWFLCu25xgDNE07OCqxo3lrMeODeAb0dcc8OD
lr4Kznk8gG5GepEuCILmh90HMxkvHzBqBPbiBLhpdYWPNB/C6dIsLsktCle6J93m
iyuuO+Br3pt9CX6kxrWMc/mGhqo6e2ckXYnDiuSzg/KUagT0Q/krepPmQypwSdxI
CsqC6yRBQ+yitXD0nuRLewkyU9fHrB8r5Uuf7eQQesAHQP5OVq+Y2oTFeAPhz6KJ
HUA2d8hHKvSwDHm4H+RVuP2mbMP5LHglQ7/ahHD5kQIDAQABo4IDlDCCA5AwHwYD
VR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFDaW14g3324J
fTqtjGqndQc8hX/4MIICMQYDVR0RBIICKDCCAiSCFXN1YnNjcmliZXIuYWd3ZWVr
LmNvbYIbc3Vic2NyaWJlci5wb3N0YnVsbGV0aW4uY29tghpzdWJzY3JpYmVyLnBp
bmVqb3VybmFsLmNvbYIgc3Vic2NyaWJlci50aGVkaWNraW5zb25wcmVzcy5jb22C
GHN1YnNjcmliZXIuZWNob3ByZXNzLmNvbYIbc3Vic2NyaWJlci5waW5lYW5kbGFr
ZXMuY29tgh9zdWJzY3JpYmVyLnN1cGVyaW9ydGVsZWdyYW0uY29tghtzdWJzY3Jp
YmVyLmphbWVzdG93bnN1bi5jb22CIHN1YnNjcmliZXIuYmxhY2tkdWNrYW1lcmlj
YW4uY29tghdzdWJzY3JpYmVyLndhZGVuYXBqLmNvbYIYc3Vic2NyaWJlci5kbC1v
bmxpbmUuY29tgh1zdWJzY3JpYmVyLmJlbWlkamlwaW9uZWVyLmNvbYIVc3Vic2Ny
aWJlci53Y3RyaWIuY29tghVzdWJzY3JpYmVyLmRnbG9iZS5jb22CFnN1YnNjcmli
ZXIuaW5mb3J1bS5jb22CGnN1YnNjcmliZXIucGVyaGFtZm9jdXMuY29tgiNzdWJz
Y3JpYmVyLnBhcmtyYXBpZHNlbnRlcnByaXNlLmNvbYIfc3Vic2NyaWJlci5taXRj
aGVsbHJlcHVibGljLmNvbYIfc3Vic2NyaWJlci5ncmFuZGZvcmtzaGVyYWxkLmNv
bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3Qu
Y29tL3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRp
MGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNv
bTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20v
cjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBAFZaZmaCWGecwyZexmRLrwFAwEtLNKFV8NxKdDSDS5TF
u94eh3TmtLAuDZXaMaJjHb7rYxdKMgC4qawefuAy9PgdKZYmyUgGMR/907DnQ+Aq
IozXXGTbjIsHFOyrEDlMv7nqarlYsmhD9NMI24DC0msbCat9TPBiie8I3q/Pn8HV
aB+XjxZkpWSt30874xI+ot6vRU6t1acBObFkfgd82poCtHut01ZPFEEGDuL0Aroa
M7KNh7EgxZSNv3jsoqrbGuDbNw9HJz6uFLY8U47pLr2Y8upY4P6h1B+A5qEuy5Dn
oSRvrNT1CBAdUlHiVWQfBdEAWaC+slLaseOTDX5iSmQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vMWVok89qiBozYQFoqu
q2f1t3o/MeP8GZjoD0DyacfzGWM4FXuw5h4HoDX3+RrMOm5JoC1nWFLCu25xgDNE
07OCqxo3lrMeODeAb0dcc8ODlr4Kznk8gG5GepEuCILmh90HMxkvHzBqBPbiBLhp
dYWPNB/C6dIsLsktCle6J93miyuuO+Br3pt9CX6kxrWMc/mGhqo6e2ckXYnDiuSz
g/KUagT0Q/krepPmQypwSdxICsqC6yRBQ+yitXD0nuRLewkyU9fHrB8r5Uuf7eQQ
esAHQP5OVq+Y2oTFeAPhz6KJHUA2d8hHKvSwDHm4H+RVuP2mbMP5LHglQ7/ahHD5
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6141320906238283666349605896876346663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscriber.agweek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27134868057270427278535720179440475645268457776703075018842994844999331898966200073975189487585305603205298231499630140880751851121191421681818004130406464230504735765701113194472941104785918493315394888189029210320042109399207951324238563988639921638423481092108890009197134212178136111206780354671651238731327509898758786952287087145075806286423634120989650627119826757928146588230211976025761602361489418190636595385383208373346118556332918308268864639685714722027553629941374821264286581410147199919769647417419508110748616925581718404423067292341961587261987544626919459992367911958533263536348977377085528013201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3696d78837df6e097d3aad8c6aa775073c857ff8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.agweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.pineandlakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.blackduckamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.wctrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.grandforksherald.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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