www.myspectrumsports.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:c8:58:f1:d2:f7:97:44:d7:63:cb:c7:63:72:36:b5 was issued on by Amazon.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.myspectrumsports.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c8:58:f1:d2:f7:97:44:d7:63:cb:c7:63:72:36:b5
Serial Number (int): 6357175366170087389189255874280044213
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7f:37:b4:6f:c7:66:c9:6a:39:e7:97:04:39:39:5e:6e:5c:db:0e:c3
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): c5:77:b6:41:d5:60:08:2d:b3:61:c2:1a:51:10:d2:70:35:3f:e5:ce
Fingerprint (sha256): c5:79:69:05:19:86:d7:c5:b8:ab:66:26:bb:3a:cf:cd:92:13:68:c8:a8:f3:8d:aa:14:ff:91:63:da:8f:b8:f8

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate www.myspectrumsports.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.myspectrumsports.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.myspectrumsports.com
spectrumcommunity.com
myspectrumsports.com
www.bhsn.com
spectrumsportsnet.com
www.oc16.tv
www.twsportsnet.com
twsportsnet.com
contentmanager.sportsnetla.com
www.kcmetrosports.com
www.ocsports.tv
oc16.tv
twcsportschannel.com
contentmanager.spectrumsportsnet.com
twcablesports.com
www.spectrumsportsnet.com
www.spectrumdeportes.com
contentmanager-sports-production.mediaportals.spectrum.net
twcsportsnet.com
twccommunity.com
www.twcablesports.com
bhsn.com
texaschannel.tv
sportsnetla.com
www.twccommunity.com
spectrumdeportes.com
contentmanager.twcsportsnet.com
www.sportsnetla.com
www.twcsportsnet.com
www.texaschannel.tv
www.twcsportschannel.com
ocsports.tv
www.spectrumcommunity.com
contentmanager.myspectrumsports.com
contentmanager.ocsports.tv
kcmetrosports.com

Other certificates including the domain name myspectrumsports.com

(limited to 100 certificates)
floridagames.myspectrumsports.com
www.twcsportsnet.com
contentmanager.myspectrumsports.com
contentmanager.myspectrumsports.com
contentmanager.myspectrumsports.com
contentmanager.myspectrumsports.com
floridagames.myspectrumsports.com
www.twcsportsnet.com
contentmanager.myspectrumsports.com
contentmanager.myspectrumsports.com
www.myspectrumsports.com
*.mediaportals-prod.spectrum.net

Certificate

The complete raw certificate details for www.myspectrumsports.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJATCCB+mgAwIBAgIQBMhY8dL3l0TXY8vHY3I2tTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDMyOTAwMDAwMFoXDTI0MDQyNjIzNTk1OVowIzEh
MB8GA1UEAxMYd3d3Lm15c3BlY3RydW1zcG9ydHMuY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEArQKwYUCJEKcZK6ia7HdnG10VovgeQu1CsrzSuf3a
IKUH4Ai9YgEtZZHgo6nFduhjLd4J6y1VN4nBjAUG2sfWg//lRQ7pFLsQUMKh/c/o
Gb7pQDHLpIW62/6pxLj2fckophitb3HqIUOXU3ZOIKAW6pPnpY5rcbshdz4nfziG
6FxdH64WnkXg9NdzcxOqSkdse1ZwmNkoDAR23YbG43YlB2BnS0vNMZgA2VqCPj2k
jU3XNEK2VZJLERVetVW2sNMlVxE8Ws9MpobhFe+YXjmY0Nk0j5mjDMeVWznfMDjS
x1/f51vIVoYVs1fl5HpXrjfOYCPgeKaxTSmjOMH20OrLqwIDAQABo4IGFjCCBhIw
HwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFH83tG/H
ZslqOeeXBDk5Xm5c2w7DMIIDRwYDVR0RBIIDPjCCAzqCGHd3dy5teXNwZWN0cnVt
c3BvcnRzLmNvbYIVc3BlY3RydW1jb21tdW5pdHkuY29tghRteXNwZWN0cnVtc3Bv
cnRzLmNvbYIMd3d3LmJoc24uY29tghVzcGVjdHJ1bXNwb3J0c25ldC5jb22CC3d3
dy5vYzE2LnR2ghN3d3cudHdzcG9ydHNuZXQuY29tgg90d3Nwb3J0c25ldC5jb22C
HmNvbnRlbnRtYW5hZ2VyLnNwb3J0c25ldGxhLmNvbYIVd3d3LmtjbWV0cm9zcG9y
dHMuY29tgg93d3cub2NzcG9ydHMudHaCB29jMTYudHaCFHR3Y3Nwb3J0c2NoYW5u
ZWwuY29tgiRjb250ZW50bWFuYWdlci5zcGVjdHJ1bXNwb3J0c25ldC5jb22CEXR3
Y2FibGVzcG9ydHMuY29tghl3d3cuc3BlY3RydW1zcG9ydHNuZXQuY29tghh3d3cu
c3BlY3RydW1kZXBvcnRlcy5jb22COmNvbnRlbnRtYW5hZ2VyLXNwb3J0cy1wcm9k
dWN0aW9uLm1lZGlhcG9ydGFscy5zcGVjdHJ1bS5uZXSCEHR3Y3Nwb3J0c25ldC5j
b22CEHR3Y2NvbW11bml0eS5jb22CFXd3dy50d2NhYmxlc3BvcnRzLmNvbYIIYmhz
bi5jb22CD3RleGFzY2hhbm5lbC50doIPc3BvcnRzbmV0bGEuY29tghR3d3cudHdj
Y29tbXVuaXR5LmNvbYIUc3BlY3RydW1kZXBvcnRlcy5jb22CH2NvbnRlbnRtYW5h
Z2VyLnR3Y3Nwb3J0c25ldC5jb22CE3d3dy5zcG9ydHNuZXRsYS5jb22CFHd3dy50
d2NzcG9ydHNuZXQuY29tghN3d3cudGV4YXNjaGFubmVsLnR2ghh3d3cudHdjc3Bv
cnRzY2hhbm5lbC5jb22CC29jc3BvcnRzLnR2ghl3d3cuc3BlY3RydW1jb21tdW5p
dHkuY29tgiNjb250ZW50bWFuYWdlci5teXNwZWN0cnVtc3BvcnRzLmNvbYIaY29u
dGVudG1hbmFnZXIub2NzcG9ydHMudHaCEWtjbWV0cm9zcG9ydHMuY29tMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJt
MDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr
BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsG
AQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5j
ZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHUA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGHL4kSNgAABAMARjBEAiA0
xyVt6tiJPbtCdeHmDMK7U9KutWO5amBYwK07N53FpAIgbpMFa83NlTjw9f2J0Dw9
OhIH1WkavzjIOLjoj9H9tuAAdgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6
wXdytQAAAYcviRKBAAAEAwBHMEUCIQDA2D3oX8mlot6dePpBhHA1Z+2ZfBSatQFd
eq45dtKy8QIgaTrT3HRdJQh7uQP7XTTmzxELGmuNaww4YOvCOSeEXqUAdgBIsONr
2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYcviRJHAAAEAwBHMEUCIQDR
F5c6bQnx0yMseXNVvBNC9OxfDLFaSG/3zfbz9TgJJQIgLrnbOTSZELxHRgy3AIbl
8T3DJynBFeQvuwB3QFflVekwDQYJKoZIhvcNAQELBQADggEBABQmE0uVWTJi9k5R
3bgPr3yY/Sf8bjz2M+pnRt1SPFEkLTPZE9vvQaGbY+H3wMBeGZ5OHMJKNpyGUzrK
YhNv8NJsISPRo7TI4N9PHr0yE5Q5CLGimegtdr6G08RDbD19dELyfBk/U4p65k7O
f/MaYs38gGfricBhnbVBcJAx3LByLP+/g4P/WPxxUy5Llnsw3S3xILCHG+Xc456s
WloNjQHSJ61Ts7zgFDovHjuo1YiA3ZWRkqVVUFRcDcrXjMCPJfgVtEu2z+TAsubX
ZeiNdrvUsgoSAooMQASeyLoOg36395eLtumOZQP2/TFjinwTp/8ht7Hn1ubyk/Oj
Ruj9058=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKwYUCJEKcZK6ia7Hdn
G10VovgeQu1CsrzSuf3aIKUH4Ai9YgEtZZHgo6nFduhjLd4J6y1VN4nBjAUG2sfW
g//lRQ7pFLsQUMKh/c/oGb7pQDHLpIW62/6pxLj2fckophitb3HqIUOXU3ZOIKAW
6pPnpY5rcbshdz4nfziG6FxdH64WnkXg9NdzcxOqSkdse1ZwmNkoDAR23YbG43Yl
B2BnS0vNMZgA2VqCPj2kjU3XNEK2VZJLERVetVW2sNMlVxE8Ws9MpobhFe+YXjmY
0Nk0j5mjDMeVWznfMDjSx1/f51vIVoYVs1fl5HpXrjfOYCPgeKaxTSmjOMH20OrL
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6357175366170087389189255874280044213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.myspectrumsports.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21840552746533694552644576323071255619131380538331611963866303956241553610675294039663609023021643983761207243154971626217726377586371689225572502203276103005312811296811608805851774947101326887745361120588747358734686950611487585826153786242049387100331303226318347120091488258554367801368019761692424572245922720432709682128614293614167987000433548317187258697381423760867373488328308718714993944935553190875156603717769440395739305341996637747043043070060245628508892980177917673056495902654175807523324147142283276751196612155266970447793712323706611945748160631035648743276153073997872183370567162146121004534699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f37b46fc766c96a39e7970439395e6e5cdb0ec3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (830 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myspectrumsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myspectrumsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oc16.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentmanager.sportsnetla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcmetrosports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocsports.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc16.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twcsportschannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentmanager.spectrumsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twcablesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spectrumsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spectrumdeportes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentmanager-sports-production.mediaportals.spectrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twcsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twcablesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texaschannel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsnetla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twccommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrumdeportes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentmanager.twcsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsnetla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twcsportsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texaschannel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twcsportschannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocsports.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spectrumcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentmanager.myspectrumsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentmanager.ocsports.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcmetrosports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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