upsell-merchandising-services.nonprod9.us-east-1.tktm.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:3e:25:f4:3e:e4:7e:de:39:46:60:e8:18:3a:70:b4 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=upsell-merchandising-services.nonprod9.us-east-1.tktm.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:3e:25:f4:3e:e4:7e:de:39:46:60:e8:18:3a:70:b4
Serial Number (int): 6968832184445032083068633256908452020
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2a:84:44:d6:a6:08:e7:38:a0:47:72:5d:75:d5:a5:b8:db:33:85:92
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 25:59:02:f0:95:07:84:ff:58:c3:e5:de:3f:5e:ce:38:de:5f:0f:84
Fingerprint (sha256): ed:7c:20:15:7a:44:f9:2f:b2:97:a5:ed:b0:92:16:e9:e9:25:d6:57:74:16:06:3e:8b:6a:3f:af:39:60:74:de

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate upsell-merchandising-services.nonprod9.us-east-1.tktm.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for upsell-merchandising-services.nonprod9.us-east-1.tktm.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

upsell-merchandising-services.nonprod9.us-east-1.tktm.io
*.upsell-merchandising-services.nonprod9.us-east-1.tktm.io

Other certificates including the domain name tktm.io

(limited to 100 certificates)
*.cctm.dev1.nonprod3.us-east-1.tktm.io
*.nam.prd214.prodpci4.us-west-2.tktm.io
synthetics-monitoring-backend.prd214.prod9.us-east-1.tktm.io
fraud-3ds-service.prd115.preprodpci4.us-west-2.tktm.io
*.prd1688.prodpci9.us-east-1.tktm.io
app.shared-data.prod1.us-east-1.prod-tmaws.io
fraud-3ds-service.prd2279.qapci1.nonprod3.us-east-1.tktm.io
*.titan.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
thanos-query-devx.nonprod9.us-east-1.tktm.io
app.loyalty-service.preprod3.us-east-1.tktm.io
kiali.sandbox5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
prometheus-k8s.nonprod9.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.sandbox5.us-east-1.tktm.io
*.dev.amex-otl.develop.prd150.nonprod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.nam.prd214.nonprod5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
checkout.tmc.prd3392.prod10.us-west-2.tktm.io
ra.prd2269.preprodpci5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ra.prd2269.prodpci6.us-west-2.tktm.io
*.nam.prd214.prodpci4.us-west-2.tktm.io
app.parkwhiz-service.qa.prd235.nonprod3.us-east-1.tktm.io
fraud-3ds-service.prd115.prodpci4.us-west-2.tktm.io
ticketmaster6.map.fastly.net
*.checkout.nonprod5.us-east-1.tktm.io
ticketmaster6.map.fastly.net
k8s.prodpciconn2.us-west-2.tktm.io
*.titan.preprod3.us-east-1.tktm.io
*.prd1902.nonprod5.us-east-1.tktm.io
*.nam.prd214.nonprod3.us-east-1.tktm.io
*.nam.prd214.prodpci6.us-west-2.tktm.io
*.em.prd214.prod6.us-west-2.tktm.io
ticketmaster6.map.fastly.net
*.titan.prod4.us-west-2.tktm.io
*.titan.nonprod3.us-east-1.tktm.io
qa1-monoql.titan.nonprod-tmaws.io
fraud-3ds-service.preprodpci5.us-east-1.tktm.io
*.bdt.nonprod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.nam.prd214.prodpci3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
prometheus-hpa.nonprod9.us-east-1.tktm.io
k8s.nonprod9.us-east-1.tktm.io
inventory.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
*.prd1688.prodpci5.us-east-1.tktm.io
*.bdt.nonprod3.us-east-1.tktm.io
app.cors-proxy.prod.prd2166.prod5.us-east-1.tktm.io
querier.mimir.sandbox11.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.beta.ticketmaster.ae
prometheus-hpa.prodpciconn2.us-west-2.tktm.io
*.nam.prd214.preprodpci6.us-west-2.tktm.io
ticketmaster6.map.fastly.net
query.prodpciconn2.us-west-2.tktm.io
*.slas-service.prod.prd2166.prod5.us-east-1.tktm.io
*.nam.prd214.prodpci3.us-east-1.tktm.io
*.em.prd214.preprod6.us-west-2.tktm.io
fraud-3ds-service.prd2279.preprodpci3.us-east-1.tktm.io
ra.prd245.prodpci4.us-west-2.tktm.io
ticketmaster6.map.fastly.net
app.tmp-python-app.dev1.nonprod9.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.fraud-3ds-service.prd115.dev1.nonprod3.us-east-1.tktm.io
controller.prd1224.nonprod3.us-east-1.tktm.io
app.tmp-python-app.preprod.preprod9.us-east-1.tktm.io
*.prd124.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
*.prd146.preprod4.us-west-2.tktm.io
*.prod8.us-west-2.tktm.io
*.prd1688.prodpci3.us-east-1.tktm.io
*.fraud-3ds-service.prd2279.dev1.nonprod3.us-east-1.tktm.io
*.insurance-service.prd1721.prod6.us-west-2.tktm.io
fraud-3ds-service.prodpci6.us-west-2.tktm.io
*.nonprod7.us-east-1.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
dbdm.prd1688.prod3.us-east-1.tktm.io
ticketmaster6.map.fastly.net
synth-monitoring-stg-backend.prd214.prod9.us-east-1.tktm.io
alertmanager-main.sandbox14.us-east-1.tktm.io
app.shared-data.preprod1.us-east-1.prod-tmaws.io
*.slas-service.prod.prd2166.prod3.us-east-1.tktm.io
app.parkwhiz-service.qa.prd235.nonprod3.us-east-1.tktm.io
*.slas-service.qa.prd2166.nonprod5.us-east-1.tktm.io
*.shared-data-service.prd1865.prod.prod3.us-east-1.tktm.io
apis.blox.nonprod9.us-east-1.tktm.io
*.tm1-enterprise-data.nonprod9.us-east-1.tktm.io
*.nam.prd214.preprodpci5.us-east-1.tktm.io
vault2.dr.prd1954.sandbox.ash.tktm.io
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net

Certificate

The complete raw certificate details for upsell-merchandising-services.nonprod9.us-east-1.tktm.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIQBT4l9D7kft45RmDoGDpwtDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIyMTIwNjAwMDAwMFoXDTI0MDEwNDIzNTk1OVowQzFB
MD8GA1UEAxM4dXBzZWxsLW1lcmNoYW5kaXNpbmctc2VydmljZXMubm9ucHJvZDku
dXMtZWFzdC0xLnRrdG0uaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVD6vsXa4Ri4i/WSP9FkOb1ZUMpIhHlDPI5sv4nU7C4+mjHFzE5TxRuaLulDWI
DHzOMJreFVKCgl+O6H6hAaxtL9+riM1IBJfIaqrHNh7a3YMLFZ5ksXVG7VFXWaf2
LjImbmqzUOlJVSqmC3wpxbjhrYAG422zFwR6fTwxhZ5vHxELhxrn/y2WKnH2Wwgc
R0cSAVr0lVpGA/KIpyStgLuccXqJKoFkw0N6SE7r/Dtq3LSEHELJb5HbdVARyBzy
ttVvbj0hzJYwH65ILzSychjcT2brlTohUKJwCR3vA4NLdSy1MPaFymZLKYBC1DpY
5tcDa6KpH3x08E809wFexktdAgMBAAGjggHgMIIB3DAfBgNVHSMEGDAWgBTAMVLN
WlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUKoRE1qYI5zigR3JdddWluNszhZIw
fwYDVR0RBHgwdoI4dXBzZWxsLW1lcmNoYW5kaXNpbmctc2VydmljZXMubm9ucHJv
ZDkudXMtZWFzdC0xLnRrdG0uaW+COioudXBzZWxsLW1lcmNoYW5kaXNpbmctc2Vy
dmljZXMubm9ucHJvZDkudXMtZWFzdC0xLnRrdG0uaW8wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAs
hipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYD
VR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFo
dHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0
dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMB
Af8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAA
TpjHlqtTtXNJ1ACVYDC/D2hJdMv7/q0ZE0lkL1b1rfPI6Co+ad2gG06EaEqj/DPd
AbFyQ4KGhyEV3b6JYXUyZXT3pV78HSWpa44JlG3YFuvyfTBeJx24DrsI87dIdLNU
RTn6Xn4lIMA8SHg3swMiV3FeoLxhQHeXJSRLkH79PcNcPLE9sGqe0nEOswtQ263r
PdVXWwk94YJOjuN9kQJecX1ERNIRN/68TDCEt7chMm9wWhatnLYrEGBu30E6yQTK
kOdXxHIkKmyalsVF3j7N/AqX1biz7InznsizI2WFAkIidktlyp4tYDeEYh/NaIDV
rtvFD5peSzyl1ZNIuJn8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ+r7F2uEYuIv1kj/RZD
m9WVDKSIR5QzyObL+J1OwuPpoxxcxOU8Ubmi7pQ1iAx8zjCa3hVSgoJfjuh+oQGs
bS/fq4jNSASXyGqqxzYe2t2DCxWeZLF1Ru1RV1mn9i4yJm5qs1DpSVUqpgt8KcW4
4a2ABuNtsxcEen08MYWebx8RC4ca5/8tlipx9lsIHEdHEgFa9JVaRgPyiKckrYC7
nHF6iSqBZMNDekhO6/w7aty0hBxCyW+R23VQEcgc8rbVb249IcyWMB+uSC80snIY
3E9m65U6IVCicAkd7wODS3UstTD2hcpmSymAQtQ6WObXA2uiqR98dPBPNPcBXsZL
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6968832184445032083068633256908452020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upsell-merchandising-services.nonprod9.us-east-1.tktm.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18817235381800746683744000495226129791178801969436045881016371184232004546991532531280457626955348901966988398035397524665071281994314494711586890575939308379343840684966936636118055753341888091769717443438517627947168776736984430246129068093043962638484592808899897797335394621704637715331844723220939296442575415729918217391702667792055697785864428604766219017888050441334101536752095238242848686263778333629100311590967647433893554542389782367368157668167875360509474001130582403751028127727941709420596240416571918588648493821582490240650039215874760613265369252853357157092764260082325483978527159352930991491933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a8444d6a608e738a047725d75d5a5b8db338592
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upsell-merchandising-services.nonprod9.us-east-1.tktm.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upsell-merchandising-services.nonprod9.us-east-1.tktm.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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