scrivito.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:38:87:54:0a:71:1d:75:e6:d4:c5:f9:17:14:02:cf was issued on by Amazon.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=scrivito.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:38:87:54:0a:71:1d:75:e6:d4:c5:f9:17:14:02:cf
Serial Number (int): 6939653386696271724788434457582633679
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 82:6b:23:ed:1c:ee:ba:fd:da:23:db:ec:9f:3b:f3:c6:4a:21:03:b0
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 02:41:5b:dd:c3:10:b2:19:1e:87:c3:21:f2:98:3c:24:92:c3:b2:0b
Fingerprint (sha256): ce:19:5b:45:78:12:48:d1:2b:2d:e3:9e:2b:08:0d:99:66:70:aa:c2:97:1b:1d:e3:cd:25:9a:43:65:3f:12:21

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate scrivito.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for scrivito.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

scrivito.com
*.scrivito.eu
*.scrivitojs.biz
scrivitojs.de
scrivito.de
*.scrivitojs.info
scrivito.net
*.scrivi.to
scrivito.org
*.scrivito.biz
scrivito.eu
*.scrivitojs.eu
*.scrivito.de
scrivitojs.eu
*.scrivitojs.net
scrivi.to
scrivitojs.com
scrivitojs.info
*.scrivito.com
*.scrivitojs.org
*.scrivitojs.io
*.scrivitojs.de
scrivitojs.io
scrivito.info
scrivito.io
scrivitojs.net
scrivito.me
*.scrivito.me
scrivitojs.biz
*.scrivitojs.com
*.scrivito.net
scrivito.biz
scrivitojs.org
*.scrivito.io
*.scrivito.info
*.scrivito.org

Other certificates including the domain name scrivito.com

(limited to 100 certificates)
scrivito.com
*.infopark.net
scrivito.com
*.infopark.net
*.scrvt.com
*.infopark.io
*.scrivito.com
scrivito.com
bbg-potential.citrusbyte.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
*.scrvt.com
scrivito.com
*.try.scrivito.com
scrivito.com
scrivito.com
scrivito.com
*.scrivito.com
scrivito.com
*.try.scrivito.com
*.scrivito.com
scrivito.com
scrivito.com
scrivito.com
*.scrivito.com
www.scrivito.com
scrivito.com
*.infopark.net
*.try.scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
*.infopark.net
*.scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
*.try.scrivito.com
scrivito.com
*.mailing.scrivito.com
scrivito.com
*.scrivito.com
scrivito.com
*.scrivito.com
*.scrivito.com
*.infopark.net
www.scrivito.com
*.scrivito.com
scrivito.com
scrivito.com
www.scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com
scrivito.com

Certificate

The complete raw certificate details for scrivito.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6DCCBtCgAwIBAgIQBTiHVApxHXXm1MX5FxQCzzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTAyNDAwMDAwMFoXDTI0MTExOTIzNTk1OVowFzEV
MBMGA1UEAxMMc2NyaXZpdG8uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+goIUj7KMon56EWCqcClZqkHTFZ76fLbDV5vShtlL6HWkweyjVsVWJIQ
ObGSt4EWEqbC5DXQqlO9cR7bRXkPozdmIFFqXQIi9NJfQmSJsMDmHOj+htNVJrY1
BJleTdrt7NaA2m289N+N1yme9kMAOJ7rlHeL6bOuQ7C28OD9eIICC6Dthsc/2Iyz
dchyO0/K4Tw2Z0BJooMYuD/ZKLHlsLDjMnPp4//rH6DE8h+YSzhhHjh9EV2AghEa
GXcuLLht7wKmLjmeHzCuHl3thMWCsfOzgFGVVf4M4+obPfvF/c4pCGxTnieY7QhK
hFBznteED3/t6TH2wpIjjxcscI/lawIDAQABo4IFCTCCBQUwHwYDVR0jBBgwFoAU
VdkYX9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFIJrI+0c7rr92iPb7J8788ZK
IQOwMIICOQYDVR0RBIICMDCCAiyCDHNjcml2aXRvLmNvbYINKi5zY3Jpdml0by5l
dYIQKi5zY3Jpdml0b2pzLmJpeoINc2NyaXZpdG9qcy5kZYILc2NyaXZpdG8uZGWC
ESouc2NyaXZpdG9qcy5pbmZvggxzY3Jpdml0by5uZXSCCyouc2NyaXZpLnRvggxz
Y3Jpdml0by5vcmeCDiouc2NyaXZpdG8uYml6ggtzY3Jpdml0by5ldYIPKi5zY3Jp
dml0b2pzLmV1gg0qLnNjcml2aXRvLmRlgg1zY3Jpdml0b2pzLmV1ghAqLnNjcml2
aXRvanMubmV0gglzY3JpdmkudG+CDnNjcml2aXRvanMuY29tgg9zY3Jpdml0b2pz
LmluZm+CDiouc2NyaXZpdG8uY29tghAqLnNjcml2aXRvanMub3Jngg8qLnNjcml2
aXRvanMuaW+CDyouc2NyaXZpdG9qcy5kZYINc2NyaXZpdG9qcy5pb4INc2NyaXZp
dG8uaW5mb4ILc2NyaXZpdG8uaW+CDnNjcml2aXRvanMubmV0ggtzY3Jpdml0by5t
ZYINKi5zY3Jpdml0by5tZYIOc2NyaXZpdG9qcy5iaXqCECouc2NyaXZpdG9qcy5j
b22CDiouc2NyaXZpdG8ubmV0ggxzY3Jpdml0by5iaXqCDnNjcml2aXRvanMub3Jn
gg0qLnNjcml2aXRvLmlvgg8qLnNjcml2aXRvLmluZm+CDiouc2NyaXZpdG8ub3Jn
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2Ny
bC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpvbnRydXN0LmNvbS9y
Mm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFo
AHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGLYLeMugAABAMA
RjBEAiAMuWY6vofqQHXAucOmYL9ehtIDzZZfzb4EnPJxWXtdoAIgRERiijkzZRoW
tYqIf9wUJGtQlXp8hKvEZZwn/OoDBD4AdwBIsONr2qZHNA/lagL6nTDrHFIBy1bd
LIHZu7+rOdiEcwAAAYtgt4y1AAAEAwBIMEYCIQCfs74fUsEGXhcacFUedskHxHjP
s0kNS5x1WGYhFdWnjAIhAMYZE+anRKdLGknfJh+enU5n8JHnd7/B4rFwjc2uTbjv
AHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLYLeMpQAABAMA
RzBFAiEAvN72YfneJVccPFe87iw+Vekk/k6HgRgVagibdKL62CYCIB3r6uEGhktg
Zo5wEByCzLSmiIFiofFOka8MJD+p8KKxMA0GCSqGSIb3DQEBCwUAA4IBAQADVQV3
RqVq8oaE7plQe0FCM9aTrTOEKLTU+htY4uGJW4BGp7mzlJ8qPWrl3zHUncBkILbH
KKcJ4FgAS0RgMqckDy6rngXZ2bYTDW71rVdDGwTiWn92NVMdLYslvH6Yi17+sZLc
vEfWlnVjwfb/MDsLcihxylCSEIkanZse5c93waiLwY4wD3YnNbOjDoUp9jCoc2ts
NKx+ygrPo7p02E2rP9uWkKgDKhC+3ZpAYJdGn96/O7gn+rw2vwqZ2Kyk3GH/iZRs
LXQ+X+3YrnOryqoe04xSu66t7AiUz5WJyFixD8TvnLw/hhEzu/nJ8kzhpNn59qmF
uKPozkYlijxPyjtl
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+goIUj7KMon56EWCqcCl
ZqkHTFZ76fLbDV5vShtlL6HWkweyjVsVWJIQObGSt4EWEqbC5DXQqlO9cR7bRXkP
ozdmIFFqXQIi9NJfQmSJsMDmHOj+htNVJrY1BJleTdrt7NaA2m289N+N1yme9kMA
OJ7rlHeL6bOuQ7C28OD9eIICC6Dthsc/2IyzdchyO0/K4Tw2Z0BJooMYuD/ZKLHl
sLDjMnPp4//rH6DE8h+YSzhhHjh9EV2AghEaGXcuLLht7wKmLjmeHzCuHl3thMWC
sfOzgFGVVf4M4+obPfvF/c4pCGxTnieY7QhKhFBznteED3/t6TH2wpIjjxcscI/l
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6939653386696271724788434457582633679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'scrivito.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31564523454097181467894855001254411908866394914101043069850705171845615410355799568566013914823073753569212596171145571937573829666721725504594820663724550612371677442391348593256530469896383924592899526675524243832714057192114921021897061702969764124150772454143303614176457583385045346301809515590622868541900536250325937899850352145926425220640265854846998004470907661785575800172185133026806173060877968968169327064895572754333210393715663745720307246142785949127666469923524232107315025377818280046081454379394014874982014525800670990759381483278195962805844791581728938951126953309696829931812072409757775816043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							826b23ed1ceebafdda23dbec9f3bf3c64a2103b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivi.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivi.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivitojs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivito.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrivitojs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrivito.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000355057746a56af28684ee99507b414233d693ad338428b4d4fa1b58e2e1895b8046a7b9b3949f2a3d6ae5df31d49dc06420b6c728a709e058004b446032a7240f2eab9e05d9d9b6130d6ef5ad57431b04e25a7f7635531d2d8b25bc7e988b5efeb192dcbc47d6967563c1f6ff303b0b722871ca509210891a9d9b1ee5cf77c1a88bc18e300f762735b3a30e8529f630a8736b6c34ac7eca0acfa3ba74d84dab3fdb9690a8032a10bedd9a406097469fdebf3bb827fabc36bf0a99d8aca4dc61ff89946c2d743e5fedd8ae73abcaaa1ed38c52bbaeadec0894cf9589c858b10fc4ef9cbc3f861133bbf9c9f24ce1a4d9f9f6a985b8a3e8ce46258a3c4fca3b65