mars-com-redirect.mars-inc.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:ca:0a:62:67:4c:92:f0:23:cb:1a:6c:eb:27:ce:d5 was issued on by Amazon.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mars-com-redirect.mars-inc.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:ca:0a:62:67:4c:92:f0:23:cb:1a:6c:eb:27:ce:d5
Serial Number (int): 15670562539483600966707876382533734101
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:41:9a:8c:4f:a2:19:c1:1c:e9:09:4b:0b:b9:46:3e:03:55:02:33
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 25:b9:86:a0:66:83:28:6f:1d:ef:15:57:a7:60:43:d0:0a:80:d1:cf
Fingerprint (sha256): 10:13:ba:b4:96:70:df:75:ac:9f:80:23:d6:2b:b6:9a:79:09:88:1f:eb:7e:cd:93:66:8e:71:d4:26:e7:b8:f8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate mars-com-redirect.mars-inc.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mars-com-redirect.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mars-com-redirect.mars-inc.com
seedsofchange.com.au
www.marsoptin.com
www.schmackos.co.nz
schmackos.co.nz
greenies.it
www.munchbar.com
www.airwaves.cz
mms-voetbal.nl
orbitpro.es
kitekat.it
www.seedsofchange.com.au
peawee.co.uk
airwaves.ro
www.wejdzdogryzorbit.pl
pet-hamigaki.jp
block.mars.com
partnerplus.szkolenia.royalcanin.pl
www.mms.com.tw
www.orbitdental.ch
www.ro.bensoriginal.com
promotion.pedigree.de
www.skittles.ro
www.nutro.nl
football.m-ms.pt
twix.bg
mms.com.tw
www.promotion.miracoli.de
nuba.mars.com
ro.bensoriginal.com
www.extratotebags.co.uk
www.m-ms.pt
www.airwaves.sk
www.nuba.mars.com
www.peawee.co.uk
marsoptin.com
munchbar.com
www.stage.snickers.nl
www.twix.lt
www.airwaves.ro
m-ms.si
drivingchewns.com
www.mars-foodservice.co.uk
extratotebags.co.uk
www.tastybite.co.uk
airwaves.sk
seedsofchange.ca
www.orbitpro.es
balisto.fr
nutro.nl
orbitdental.ch
unclebens.com.br
nubaservice.mars.com
www.balisto.fr
stage.snickers.nl
skittles.ro
promotion.miracoli.de
www.promotion.pedigree.de
www.drivingchewns.com
www.nubaservice.mars.com
marswrigleyhalloween.com
mars-foodservice.co.uk
www.winwithextra.com
www.greenies.it
tastybite.co.uk
www.m-ms.si
twix.ba
airwaves.cz
twix.rs
frolic.at
twix.lt
www.petpositives.com.au
m-ms.pt
winwithextra.com
www.football.m-ms.pt
www.marswrigleyhalloween.com
www.sheba-cp.jp
www.twix.bg
www.kitekat.it
wejdzdogryzorbit.pl
www.mms-voetbal.nl
www.seedsofchange.ca
sheba-cp.jp
petpositives.com.au
www.frolic.at
www.twix.rs
www.pet-hamigaki.jp
www.twix.ba
www.unclebens.com.br

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for mars-com-redirect.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBdJ+u5cXO3aW3m9dJQ8
m7VFxqhblfV2QiILmriLapaP4sIzIRcZ2P+0eXGEEBxGnXN7knSnImHBa2Meu5ON
Aorwya95CwNWz2uZ7qm+HTiGYAJsW1wt527KPhZwDHeZJCYSS8TOPEbVEbBBZVFM
B552OZkQyep6fxlA89egk60qj/KwFnCWIbYsTxC7hqbkv//VVSsr2j3NGaDcDisc
SVKV4TKdH/J/IGPZryQBYau+hzxZ9jR7kCzVl1DKBiVKXefqvJh1vP13v7s5TBgv
9fEsrAly8b7Rq0PwRXn1htDy5xRe+I1XKItl7k0ogx/4btkdw4Yf9daWrkz5/o9s
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15670562539483600966707876382533734101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mars-com-redirect.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23744285560221778811688450449793848905957281661678466284507700055591287898137688303637400568756176832613615101607452431249160002762366680559356018919761606420277573567950825811847845405210477162124106696292319902137964686317949261050383800463543674123206435059515186187889795134859264382695085665400504586513043700206484686491410878882890918605577212978845699540187877921976490748650290583903917683090352937394896265056657916220237756832550317034168727124191500328403614106893423519632268890545155912162215007596517379965816527996997545819930238773381763364375681151094228940753031750860475618825505647079730782891133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23419a8c4fa219c11ce9094b0bb9463e03550233
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1615 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-com-redirect.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seedsofchange.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsoptin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schmackos.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmackos.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenies.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.munchbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airwaves.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms-voetbal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitpro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitekat.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seedsofchange.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peawee.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airwaves.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wejdzdogryzorbit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pet-hamigaki.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'block.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerplus.szkolenia.royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mms.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitdental.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ro.bensoriginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotion.pedigree.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutro.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.m-ms.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotion.miracoli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuba.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro.bensoriginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extratotebags.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airwaves.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nuba.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peawee.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsoptin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munchbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage.snickers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airwaves.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivingchewns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-foodservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extratotebags.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tastybite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airwaves.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seedsofchange.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitpro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balisto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutro.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitdental.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nubaservice.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balisto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.snickers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotion.miracoli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotion.pedigree.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drivingchewns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nubaservice.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marswrigleyhalloween.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-foodservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winwithextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenies.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tastybite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airwaves.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frolic.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petpositives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winwithextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.football.m-ms.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marswrigleyhalloween.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sheba-cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitekat.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wejdzdogryzorbit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mms-voetbal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seedsofchange.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheba-cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petpositives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frolic.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pet-hamigaki.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d1205b04b0000040300473045022100dc22bc14c2d1c215836f603b5db8ce9301678ad9f4b6d24b29257c49e9d09b4402204d949c47209029bed7373b9d52502b671cd72546a00bd79198e6b88f690985f50076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d1205b002000004030047304502206247a2a216d6b15e3b730d0ed23060d1612bbc14cdb7dd42735ac13ac75a46ec0221009c248c6e487188af33a9a99b2804be5ba07d4bc8ef460fd05ebc21c3efd0e8f8007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d1205b02f0000040300473045022068924e7c753f4fc15993a6b339af463b793ef204f91b3c8d9faf03fa7e0bf082022100b043c9bc4e6dc400a86d28e73163b89441768dfb7072a289fe43fa4c87465474
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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