ci-euw1.ireland.delivery.aimatch.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:32:9f:1a:55:f1:a3:63:cb:b0:d8:99:aa:af:fd:8d was issued on by Amazon.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ci-euw1.ireland.delivery.aimatch.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:32:9f:1a:55:f1:a3:63:cb:b0:d8:99:aa:af:fd:8d
Serial Number (int): 16213577782003286386725691447154048397
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:72:59:ae:38:63:69:f8:15:bc:16:23:07:41:58:dc:c2:b1:3a:81
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d5:74:ce:b9:b7:85:db:14:ec:ca:ab:62:0b:27:1b:f8:08:e7:68:dc
Fingerprint (sha256): 02:60:42:4b:8e:e4:2c:42:79:18:fd:73:5d:fd:59:e9:be:35:b3:1d:0e:fd:ad:cb:53:5b:39:6a:db:04:c7:20

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate ci-euw1.ireland.delivery.aimatch.net

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-euw1.ireland.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-euw1.ireland.delivery.aimatch.net
delivery-ci360.altibox.no
delivery-ci360.cgifinance.fr
delivery-ci360.frankfurt-airport.com
del.t.mm.dm.si
delivery-ci360.coopforsikringer.dk
delivery-ci360.meny.no
delivery-ci360.marketing.officedepot.eu
delivery-ci360.eldorado.ru
delivery-ci360.magazine.nl
delivery-ci360-test.privetmir.ru
delivery-ci360-test.mvideo.ru
qa-delivery-ci360.flypgs.com
delivery-ci360.elanyo.com
delivery-ci360.inspiringbenefits.com
delivery-ci360.intertop.ua
delivery-ci360.tfgtst.co.za
delivery360.kbinfo.cz
del.mm.dm.si
delivery-ci360.kiwi.no
delivery-ci360-p.post.ch
delivery-ci360.knvb.nl
delivery-dev.ci360.tpp.commerzbank.de
delivery-ci360-dev.mvideo.ru
delivery-ci360.myspar.ru
delivery-ci360.next.co.uk
del.t.mm.dm.cz
delivery-ci360-i.post.ch
delivery-ci360.koton.com
delivery-kclientd-ci360.wafasalaf.ma
delivery-ci360.wcm2-jyskebank-dk-s.bdunet.dk
delivery-ci360.fratellicarli.com
delivery-ci360.ruv.de
delivery-ci360-s.jyskebank.dk
del.mm.dm.cz
delivery-ci360.stoloto.ru
del.t.mm.dm.hr
delivery-ci360.rbfa.be
del.mm.dm.pl
delivery-ci360.preprod.letu.ru
delivery-ci360.trumf.no
del.t.mm.dm.pl
del.mm.dm.de
delivery-ci360.esas67burda.com
del.t.mm.dm.de
delivery-ci360.baloise.ch
delivery-ci360.icabanken.se
del.mm.dm.hr
delivery-ci360.mvideo.ru
delivery-ci360-at3.altibox.no
del.t.mm.dm-drogeriemarkt.bg
del.mm.dm.hu
delivery-ci360.cosicomodo.it
delivery-ci360.test.movistar.es
delivery-kclientp-ci360.wafasalaf.ma
del.t.mm.dm.hu
delivery-ci360.topdanmark.dk
delivery-ci360.rtest.ruv.de
del.mm.dm-drogeriemarkt.it
del.mm.dm.mk
del.t.mm.mojadm.sk
delivery-tud.ci360.tpp.commerzbank.de
del.mm.dm-drogeriemarkt.ba
delivery-ci360.movistar.es
del.mm.dm-drogeriemarkt.ro
delivery-tuc.ci360.tpp.commerzbank.de
delivery-ci360.telia.ee
del.mm.mojadm.sk
delivery-ci360.santander.nl
delivery-ci360.letu.ru
del.t.mm.dm.at
delivery-ci360.qa.fratellicarli.com
del.mm.dm.at
delivery.ci360.tpp.commerzbank.de
delivery-ci360.privetmir.ru
delivery-ci360.flypgs.com
delivery-ci360.test.danskebank.com
del.mm.dm.rs
delivery-ci360-test.eldorado.ru
del.mm.dm-drogeriemarkt.bg
delivery-ci360.jyskebank.dk
delivery-ci360.generali.sk
delivery.isic.cz
delivery-ci360.footbelsite-acc.rbfa.be

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net

Certificate

The complete raw certificate details for ci-euw1.ireland.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtprmS4f1NCfZNlrM6zmN
VfMfiaH/EI7YHS8vXfwsnS1lG/Ph2nChvULgk9m9WxZ2LyE04ozhQgrxeslxfwQY
ccAlCffxad5GAcS4ZC83TBcPyU6xMmZTyIkppSE9hpUngWb30C95KFTExhreyGC2
sDdJ+e3f3jnyNt8IhMkjYeOU2oRWYC/27307hEaPnXTHnIS2QYe0pFcllHGbtIB7
3eRw3Z/yIVM5jonJbthCrJfdAWV4qLT8txqxsYe6zoa1UvFtDKAQ2+TAKFz7x5kl
lArPPfOxwLjtgOSwYNajgBD+UQJRtv40kXA7VqQzN+dLyHHoE18+xzT7/P2N1e4b
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16213577782003286386725691447154048397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23051755338522534976119615739514651930010624200147167096087416597969679013010367774452558494684541430343833691883914893582032555856458097497148476282893025223698726958029817045636131193460491632006096636206663557693373936795163281127413625884327036098022472524440329537933637106382515464130631025488381122621854219403381059727178046453707854938447529102347769517113349940077551225854421726629754306737474830934210260732315072311282928027922390492387915844156399182603546705410278405746159729644060246781552932799925174853873432704718062371864812916719687947646180593206117195608972007604402848030926043788083383376743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b7259ae386369f815bc1623074158dcc2b13a81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.cgifinance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coopforsikringer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.meny.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.eldorado.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-test.privetmir.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-test.mvideo.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.elanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.inspiringbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.intertop.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.tfgtst.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.kbinfo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.kiwi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-p.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.knvb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-dev.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-dev.mvideo.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.myspar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.next.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-i.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.koton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientd-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.wcm2-jyskebank-dk-s.bdunet.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-s.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.stoloto.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.preprod.letu.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.trumf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.esas67burda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.baloise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.icabanken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.mvideo.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-at3.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.cosicomodo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientp-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rtest.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tud.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tuc.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.telia.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.santander.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.letu.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.qa.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.privetmir.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.danskebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-test.eldorado.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.generali.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.isic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.footbelsite-acc.rbfa.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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