ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:68:09:96:ea:70:be:ae:37:c1:37:42:af:d7:37:3c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:68:09:96:ea:70:be:ae:37:c1:37:42:af:d7:37:3c
Serial Number (int): 15161701325388299133367855547543926588
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 37:14:09:a4:4e:36:5b:f7:c4:5b:a0:a2:78:9d:ea:40:09:29:23:9e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b5:0b:54:ea:8b:b4:75:4e:4c:21:93:ce:2b:04:85:8d:9b:a4:3c:cc
Fingerprint (sha256): e7:f4:52:38:77:93:ef:63:f9:e2:68:1b:62:85:03:9c:10:e5:43:91:62:83:77:f8:a2:bf:64:90:d3:31:6a:36

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn
*.cn-north-1.es.amazonaws.com.cn

Other certificates including the domain name amazonaws.com.cn

(limited to 100 certificates)
*.test10.w2yetm.c2.kafka.cn-northwest-1.amazonaws.com.cn
c3pset6uu6psf5z6b7djkishha.cn-north-1.es.amazonaws.com.cn
*.canary-1e7d9f20e8d.now96m.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary8ca93964.e4yfol.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.3jua0u.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary-5bcd7f8b343.utol99.c2.kafka.cn-north-1.amazonaws.com.cn
*.gccanaryserver.4yjciv.c3.kafka.cn-northwest-1.amazonaws.com.cn
skylight-cm.cn-northwest-1.amazonaws.com.cn
codedeploy-signer-cn-northwest-1.amazonaws.com.cn
*.gc-rc-sr-15867.xhwv4s.c1.kafka.cn-northwest-1.amazonaws.com.cn
hbn654jgaqpuftcce5yybvs2cy.cn-north-1.es.amazonaws.com.cn
*.gccanaryserver.cbo97l.c3.kafka.cn-northwest-1.amazonaws.com.cn
kms.cn-north-1.amazonaws.com.cn
*.canary-be1769827af.ejwa6m.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary2c669bf2.jecmya.c4.kafka.cn-northwest-1.amazonaws.com.cn
cloudtrail-corvidae-id.cn-northwest-1.amazonaws.com.cn
*.canary-a6e8f5c.xwhdqa.c2.kafka.cn-northwest-1.amazonaws.com.cn
aws-im-gamma-fe.cn-northwest-1.amazonaws.com.cn
*.canary-897e1c59c48.59luxe.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-ea2d61c.n0xazh.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-18fc302.4q7y91.c4.kafka.cn-northwest-1.amazonaws.com.cn
ecs.cn-northwest-1.amazonaws.com.cn
website-gamma.marketplace.cn-northwest-1.amazonaws.com.cn
*.canary-f58f349.2u0pow.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-b737b5b3428.m6pydk.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary-e0f3ce0.gte0fk.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-db5f60dfb51.brai9q.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-d7b546f.r73c5a.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary7784e303fab0.3bt3xw.c1.kafka.cn-north-1.amazonaws.com.cn
*.kafkatos3withs.nr1hpw.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-02ef04d1f03.l4ympk.c3.kafka.cn-north-1.amazonaws.com.cn
*.canary-4589adf.sbh4j5.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-a75e137.o0jcpw.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.gc-rc-sr-15866.ilckiw.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.gc-rc-sr-158650888.91tbw7.c3.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.alqi44.c4.kafka.cn-northwest-1.amazonaws.com.cn
pjgxf6hmkflx52eupxlq63l2aq.cn-northwest-1.es.amazonaws.com.cn
*.canary3cb065cd.ltiwjd.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.regionbuild-bjs-ra.su6nui.c2.kafka.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-158837368.5xu9fx.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-4bf86d98497.aitljq.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-dfb9988651b.k9fk7c.c1.kafka.cn-north-1.amazonaws.com.cn
dynamodb.cn-northwest-1.amazonaws.com.cn
ygxkm6g4wb5jdha5umeeivi2jq.cn-north-1.es.amazonaws.com.cn
*.canarycc5991e7.7kxm7b.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-89740c5.8xxxk0.c2.kafka.cn-northwest-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.canary-07f4bc6.derz4x.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-e9172cb.fzh0e6.c1.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-b3053ca.1om1hv.c3.kafka.cn-northwest-1.amazonaws.com.cn
sqs.cn-northwest-1.amazonaws.com.cn
*.canary-cee795c.eph1a2.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.cfnlaunchpadcanary.4koxit.c4.kafka.cn-north-1.amazonaws.com.cn
tcp5spd3oxlbu2nguvj3wbd5ba.cn-northwest-1.es.amazonaws.com.cn
cn-north-1.queue.amazonaws.com.cn
pklf6p7qi4tibia3m4ew22y4cy.cn-north-1.es.amazonaws.com.cn
*.canary-1d9409b.p4g6x0.c3.kafka.cn-northwest-1.amazonaws.com.cn
naws-razorbill-deployment-service.cn-north-1.amazonaws.com.cn
u7f4eglycvasjstfbpyt7iskni.cn-north-1.es.amazonaws.com.cn
sns-cn-north-1.amazonaws.com.cn
p3ug4fg5xrcftn3ejta7l2av5e.cn-north-1.es.amazonaws.com.cn
mh5rijir7gfvo4j6kewibve3vq.cn-north-1.es.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
c0.prod.metadata.appsync-svcs.cn-north-1.amazonaws.com.cn
*.gc-rc-sr-158663128.coi24q.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-3f18936c700.zl9he0.c2.kafka.cn-north-1.amazonaws.com.cn
*.canary-53bdbd75ff2.hcgkzi.c2.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
sagemaker.pre-prod.cn-north-1.ml-platform.aws.a2z.org.cn
*.canary-3e7b6d5.emn45p.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-43250bd2e70.nizt67.c1.kafka.cn-north-1.amazonaws.com.cn
l6kwxtiqbtvpdqixuhadbjio6u.cn-north-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.3vw1zg.c3.kafka.cn-north-1.amazonaws.com.cn
*.kafkatos3withs.o44lm5.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-66d3bd8b8b1.ifovyy.c2.kafka.cn-north-1.amazonaws.com.cn
*.cfnlaunchpadca.epce8w.c4.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-cad7b01ce17.djzcp3.c1.kafka.cn-north-1.amazonaws.com.cn
*.canary-d3ecd2d.624vyc.c4.kafka.cn-northwest-1.amazonaws.com.cn
ec2-recovery-api.cn-northwest-1.amazonaws.com.cn
autoscaling.cn-northwest-1.amazonaws.com.cn
cloudforge-build.zhy.aws-border.cn
*.canary-a2d26acea76.jou4ap.c2.kafka.cn-north-1.amazonaws.com.cn
cloudformation.cn-north-1.amazonaws.com.cn
*.canary-25d7a492ea5.app0pl.c4.kafka.cn-north-1.amazonaws.com.cn
*.test1.rvil6f.c2.kafka.cn-northwest-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
tk64zdk3wd6h3kdrjpzqe4x3hm.cn-northwest-1.es.amazonaws.com.cn
*.cfnlaunchpadcanary.03fs7a.c4.kafka.cn-north-1.amazonaws.com.cn
*.canary-ff413e03fc2.d9eujm.c1.kafka.cn-north-1.amazonaws.com.cn
ecs-t.cn-north-1.amazonaws.com.cn
*.canary-39b09ce9630.27heac.c3.kafka.cn-north-1.amazonaws.com.cn
elasticbeanstalk-health.cn-north-1.amazonaws.com.cn
*.canary-8adce32.slqke0.c2.kafka.cn-northwest-1.amazonaws.com.cn
5zp4pmlrnw7qy4wsurtr4paiaa.cn-northwest-1.es.amazonaws.com.cn
*.canary-89c8300297e.8jygbk.c4.kafka.cn-north-1.amazonaws.com.cn
canary.s3.cn-north-1.vpce.amazonaws.com.cn
as2-admin-gamma.cn-northwest-1.amazonaws.com.cn
*.canary-b2bac38.ntkn2e.c3.kafka.cn-northwest-1.amazonaws.com.cn
*.canary-3d50409.no3ozc.c2.kafka.cn-northwest-1.amazonaws.com.cn
*.kafkatos3withs.pfpzua.c3.kafka.cn-northwest-1.amazonaws.com.cn

Certificate

The complete raw certificate details for ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4PlrmmW1jd8/mEd1Gtt
2bBtHeSBTLhDGG+BDrAAniGCn4eRYsENmMMBZSOpg3fPzpwLUtT1a1FalYzaBTQz
vzjpmgWoNJxXYmj1yRfsCQnEqGLUYhO2+fE+NW6Sj0g+86ocR1sgpGv5dJfra0Oj
Loxf1emblgy0VERKpON5dy3e1x1zeu4ZhsOIj8IDJEEeErcZerM2i6lIVJ6zB4Qn
7GI0ODScQZJO07RP47z6kHKUKg1NfnCOWX7eZ4eEZO7C+lwr4jJ2RIgakYH1mgKw
yMK2Sl628mp8pYZaKzg82vKViiszhAUfNt1wZ0LLat7+15GpoCdbEALewPJIv9D7
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15161701325388299133367855547543926588
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24176557178283545359911569904297064183887524830495438325928226524027726617728006523339977639725848737885713686347728263074675211685000372604755576722463762110392302239575186952957893064944855909421533768628891244025448202800607585887182311387375252079987599005188129283971921876161772635372634241723480034979896517759603115654428200126322979849662197120390303501220547823566227131045165219985176920558748639067481935761364210983777394360089291287345822163518536523875717668991073675139122933614760734353513862252925758072117021717916908875066393890260345925668946342964871785246581982715665462431982934006570035510253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							371409a44e365bf7c45ba0a2789dea400929239e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ed6gpcl2cvpslyetn2vjwtix7a.cn-north-1.es.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn-north-1.es.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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