editions.geo.hosted.abcotvs.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:3a:98:dc:84:29:53:eb:de:37:e7:27:00:94:14:ec was issued on by Amazon.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=editions.geo.hosted.abcotvs.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:3a:98:dc:84:29:53:eb:de:37:e7:27:00:94:14:ec
Serial Number (int): 5621165598292175248565913115050644716
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 68:81:d2:a8:ee:54:9b:d8:d2:4d:6b:e7:bf:2b:05:57:e4:db:f1:52
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 3d:73:3d:5e:9b:02:ec:14:d6:30:12:a4:1a:15:99:4e:8b:27:e9:24
Fingerprint (sha256): de:3e:c7:a9:96:12:49:7c:30:b0:3f:7b:ec:c5:36:06:21:7e:b7:43:60:60:c6:16:9e:06:be:9b:e0:27:e4:07

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate editions.geo.hosted.abcotvs.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for editions.geo.hosted.abcotvs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

editions.geo.hosted.abcotvs.com
r.abc11.com
preview.kids.nationalgeographic.com
abc11.com
abcnews.com
*.us-east-1.aws.hosted.abcotvs.com
www.abc7news.com
natgeo.com
preview.6abc.com
r.abc7ny.com
r.abc7chicago.com
*.natgeo.com
preview.abc11.com
preview.abc7ny.com
r.abc7news.com
preview.goodmorningamerica.com
r.abc30.com
www.6abc.com
www.goodmorningamerica.com
r.abc7.com
abc7.com
www.abc13.com
r.abc13.com
nationalgeographic.com
abc7ny.com
*.video.nationalgeographic.com
abc7chicago.com
abcnews.go.com
abc13.com
*.abcnews.com
*.geo.hosted.abcotvs.com
abc30.com
*.nationalgeographic.com
*.natgeofe.com
ouramericaabc.com
natgeofe.com
www.abc7.com
*.abcotvs.net
*.abcnews.go.com
www.abc30.com
player.goodmorningamerica.com
*.goodmorningamerica.com
www.abc7chicago.com
preview.abc13.com
preview.abc7chicago.com
*.abcotvs.com
abc7news.com
www.abc11.com
*.ouramericaabc.com
preview.abc7news.com
preview.abc7.com
r.6abc.com
preview.abc30.com
6abc.com

Other certificates including the domain name abcotvs.com

(limited to 100 certificates)
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
abcotvs.com
cdn1.edgedatg.com
qa.static.abcotvs.com
cdns.abclocal.go.com
editions.geo.hosted.abcotvs.com
sweepstakes.abc.go.com
dev2.breakingnews.abcotvs.com
qa.siteeditor.abcotvs.com
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
static.abcotvs.com
api.abcotvs.com
dev.sweepstakes.abc.com
clips.abcotvs.com
dev.sweepstakes.abc.go.com
static.abcotvs.com
preview.api.abcotvs.com
sweepstakes.abc.go.com
editions.geo.hosted.abcotvs.com
editions.geo.hosted.abcotvs.com
sweepstakes.abc.go.com
qa.static.abcotvs.com
static.abcotvs.com
api.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.siteeditor.abcotvs.com
preview.api.abcotvs.com
sweepstakes.abc.go.com
editions.geo.hosted.abcotvs.com
qa.cdn.abcotvs.com
geo.hosted.abcotvs.com
geo.hosted.abcotvs.com
sweepstakes.abc.com
dev.static.abcotvs.com
editions.geo.hosted.abcotvs.com
static.abcotvs.com
api.abcotvs.com
abcotvs.com
qa.api.abcotvs.com
preview.api.abcotvs.com
preview.static.abcotvs.com
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
cdn1.edgedatg.com
editions.geo.hosted.abcotvs.com
qa.api.abcotvs.com
qa.simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.cms.abcotvs.com
cms.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.api.abcotvs.com
qa.api.abcotvs.com
qa.breakingnews.abcotvs.com
api.abcotvs.com
qa.breakingnews.abcotvs.com
qa.api.abcotvs.com
cdn1.edgedatg.com
dev.cdn.abcotvs.com
cms.abcotvs.com
qa.api.abcotvs.com
api.abcotvs.com
dev2.cms.abcotvs.com
dev.sweepstakes.abc.go.com
dev2.cms.abcotvs.com
7online.com
siteeditor.abcotvs.com
jenkins.cd.prod.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
dev.cdn.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
api.abcotvs.com
cdn1.edgedatg.com
siteeditor.abcotvs.com
preview.api.abcotvs.com
editions.geo.hosted.abcotvs.com
static.abcotvs.com
geo.hosted.abcotvs.com
siteeditor.abcotvs.com
static.abcotvs.com
abcotvs.com
api.abcotvs.com
qa.simplepost.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
breakingnews.abcotvs.com
geo.hosted.abcotvs.com
geo.hosted.abcotvs.com
qa.images.cms.abcotvs.com
breakingnews.abcotvs.com
sweepstakes.abc.go.com
qa.api.abcotvs.com
dev2.breakingnews.abcotvs.com
dev.cdn.abcotvs.com
cdns.abclocal.go.com
dev.api.abcotvs.com

Certificate

The complete raw certificate details for editions.geo.hosted.abcotvs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QE4/4gTTGJQQd7PJwTS
WnQCInMrzZ8aw6woWuMgYGgBvq744q7Y0VG2nJHt9JaKDGqZh+M836JneGyK/nCK
tFTRjnaZz0ZpT5Jz4VaiFJLpE9MAnVQpz1NvC3/M9uBqy+Q8JU/L15WkUkEBcWMC
OukLoNhuM+GTintol+B0lL5KfspeLYGys+UeoIHr2laF7xej1Zr9hJpFibAoRwTs
Du4jLTQojYGS1r1JJ3ZjUj6RbeR1XyBQW7VkO7GUJyCQ+GBfuvZiHTeernXpy8nY
2sxko2EzgpgcvcDFdNl+w1yNmDb+v3wg4m58P6KMbOBQm9Qh/HXBI0/xEvzgvQ5F
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5621165598292175248565913115050644716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'editions.geo.hosted.abcotvs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26889361868513442243651078828511483495911621869207459193273825098295938727388045443151863471700425427910889191570628794218345118647385673260555396907663226837286499351308683454918352656985551754239851376346914640396652823888356375766495341123309622024644673224727217969178954749935064190492022431678382500641180222310630659231502208391082809194991480913434800551908195775105189452131024189195005565303100548288266724490290900909635644568455487410308222162224290322871457785509732622780784090930621679907035720563544036297774852246752873117157282102038196624357513753722686862759979677556753694610950816413184443696541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6881d2a8ee549bd8d24d6be7bf2b0557e4dbf152
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1003 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editions.geo.hosted.abcotvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.abc11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.kids.nationalgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.aws.hosted.abcotvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc7news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natgeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.6abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.abc7ny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.abc7chicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natgeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.abc11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.abc7ny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.abc7news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.goodmorningamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.abc30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.6abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmorningamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.abc7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.abc13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc7ny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.nationalgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc7chicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcnews.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.abcotvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natgeofe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouramericaabc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natgeofe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcotvs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcnews.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'player.goodmorningamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodmorningamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc7chicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.abc13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.abc7chicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcotvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc7news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abc11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ouramericaabc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.abc7news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.abc7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.6abc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.abc30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6abc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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