*.cmk.iqdigital.de

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:0b:2b:89:e5:6a:f8:af:d4:d1:c6:16:87:b5:5b:17 was issued on by Amazon.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.cmk.iqdigital.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:0b:2b:89:e5:6a:f8:af:d4:d1:c6:16:87:b5:5b:17
Serial Number (int): 19996418271090230449883813419072969495
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:b5:97:f8:c7:86:3b:d0:ee:a8:c4:26:8a:e5:4e:29:5e:8e:a5:3e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 91:22:cd:d8:fd:b8:27:19:9e:58:a3:06:e0:12:15:f4:4d:50:37:51
Fingerprint (sha256): e9:7f:60:50:2e:7b:65:3e:3c:f4:2c:d9:3b:ef:68:b1:ee:83:18:a4:f1:f8:36:2a:20:fe:d6:2f:ee:9b:0b:da

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.cmk.iqdigital.de

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cmk.iqdigital.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cmk.iqdigital.de
cmk.wissenschaft.de
cmk.11freunde.de
cmk.sz-magazin.sueddeutsche.de
cmk.forschung-und-wissen.de
campus.cmk.zeit.de
cmk.btc-echo.de
cmk.sueddeutsche.de
zeit-magazin.cmk.zeit.de
cmk.jetzt.de
cmk.theeuropean.de
cmk.monopol-magazin.de
cmk.handelsblatt.com
cmk.manager-magazin.de
cmk.ariva.de
cmk.cicero.de
zett.cmk.zeit.de
cmk.hamburg-airport.de
cmk.wirtschaftskurier.de
cmk.wiwo.de
cmk.iq.client.avenga.cloud
cmk.wissen.de
cmk.tagesspiegel.de
cmk.spiegel.de
cmk.dus.com
cmk.emotion.de
cmk.marktundmittelstand.de
cmk.faz.net
cmk.zeit.de
cmk.spektrum.de
cmk.scinexx.de
cmk.boerse-am-sonntag.de

Other certificates including the domain name iqdigital.de

(limited to 100 certificates)
cmp.channelpartner.de
consent.iqdigital.de
zcz.cmk-dev.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
cmk.iqdigital.de
iqdigital.de
mum.cmk-stage.iqdigital.de
arr.cmk-dev.iqdigital.de
emo.cmk-dev.iqdigital.de
consent.iqdigital.de
iqdigital.de
tag.cmk-dev.iqdigital.de
zol.cmk-stage.iqdigital.de
faz.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
mms.sp-prod.net
cmp.channelpartner.de
tep.cmk-stage.iqdigital.de
cmk.iqdigital.de
default.cmk-stage.iqdigital.de
sz.cmk-dev.iqdigital.de
cmk.iqdigital.de
tep.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
jet.cmk-dev.iqdigital.de
*.cmk.iqdigital.de
btc.cmk-dev.iqdigital.de
zol.cmk-dev.iqdigital.de
www.iqdigital.de
cmk.iqdigital.de
fuw.cmk-stage.iqdigital.de
zcz.cmk-stage.iqdigital.de
www.iqdigital.de
tag.cmk-dev.iqdigital.de
ccz.cmk-dev.iqdigital.de
consent.iqdigital.de
wis.cmk-stage.iqdigital.de
wis.cmk-stage.iqdigital.de
zmz.cmk-dev.iqdigital.de
sci.cmk-dev.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
cmp.academics.at
default.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
byron-dev.iqdigital.de
fuw.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
datenschutz.iqdigital.de
byron-dev.iqdigital.de
sz.cmk-dev.iqdigital.de
jet.cmk-dev.iqdigital.de
cmp.academics.at
wiwo.cmk-stage.iqdigital.de
zol.cmk-dev.iqdigital.de
faz.cmk-dev.iqdigital.de
cmp.academics.at
cmk.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
www.iqdigital.de
mms.sp-prod.net
ccz.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
byron-stage.iqdigital.de
cmp.academics.at
sz.cmk-dev.iqdigital.de
admin.qa.iqdigital.de
default.cmk-stage.iqdigital.de
iqdigital.de
iqdigital.de
default.cmk-dev.iqdigital.de
sz.cmk-stage.iqdigital.de
cmk.iqdigital.de
wisd.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
iqdigital.de
cmp.academics.at
arr.cmk-dev.iqdigital.de
wisd.cmk-dev.iqdigital.de
ccz.cmk-stage.iqdigital.de
wis.cmk-dev.iqdigital.de
emo.cmk-stage.iqdigital.de
cmp.channelpartner.de
www.iqdigital.de
mum.cmk-dev.iqdigital.de
www.iqdigital.de
hb.cmk-dev.iqdigital.de
consent.iqdigital.de
www.iqdigital.de
cmp.channelpartner.de
zmz.cmk-dev.iqdigital.de
btc.cmk-stage.iqdigital.de
cmp.channelpartner.de
wis.cmk-stage.iqdigital.de
consent.iqdigital.de
zmz.cmk-stage.iqdigital.de

Certificate

The complete raw certificate details for *.cmk.iqdigital.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lSHyMvdSxE6Geao0C5I
K2n/gb7OHGsTLWaMdKwHuEBUWL4z9DPSodbHR0m02wpjmhT21C07GRAF0sBM5bjL
i+IxcUd4p+ApNVx8DeYhBTmfhWImJR5oFfkjdnpiuQxPKZbNAmY95MkNcnEyArWp
ebc2LP4ln1tO5k/lXETYc1yq6OdKtjXf83814jbbCyGemk/L5Cqx8jABFV67TpmQ
JeASftqFsgyB/XEHPLLd6FV6NnSo56LUAhavB++Uw30Qx0qR871KHtpiFLYYKQmD
RwS0IRrys+j/oWofymsLvjFF+xNxBX/+LoTTdGauRFnoJONnwL/VA8pDVzpO6FgG
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19996418271090230449883813419072969495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cmk.iqdigital.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27056680760318467438822171293799463329654552240270889234739155272454530882173789063355604714699704453432792418057003688101076202662687214063996441210133238174670716826623362054325103348758125706852775885898196839224738954827903726813076059960341028986628839911813943039172165548959347423134262019339687844173701644476650258784923878495120067380814763494929551174775028155290496944659632109993860816906723545748303359611669036121089093298781482221126282797826724149888913085962190324903471401402076256619711802234919326467360104543720867556998673940454119388263524088216137001066354065200719395967382174255465474033313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2b597f8c7863bd0eea8c4268ae54e295e8ea53e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (644 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmk.iqdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wissenschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.11freunde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.sz-magazin.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.forschung-und-wissen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.cmk.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.btc-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeit-magazin.cmk.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.jetzt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.theeuropean.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.monopol-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.handelsblatt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.ariva.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.cicero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zett.cmk.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.hamburg-airport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wirtschaftskurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wiwo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.iq.client.avenga.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.wissen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.tagesspiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.dus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.emotion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.marktundmittelstand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.faz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.spektrum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.scinexx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmk.boerse-am-sonntag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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