dg-0012-ac62e95.client-tls.adestra.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:f6:e9:35:b2:4c:e6:1b:ac:bb:9e:d7:ff:a8:aa:15 was issued on by Amazon.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dg-0012-ac62e95.client-tls.adestra.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f6:e9:35:b2:4c:e6:1b:ac:bb:9e:d7:ff:a8:aa:15
Serial Number (int): 17232771032330118931972859692289927701
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2f:46:8c:fd:8e:71:3d:cb:43:04:f1:fb:01:be:8d:17:e2:7a:9d:e2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): be:2e:53:ba:59:6b:6b:77:25:84:75:bc:05:71:f5:fc:82:2b:fa:1d
Fingerprint (sha256): 17:4f:77:e7:b2:cf:53:ce:8a:45:fa:0c:df:33:e6:9a:9d:8d:ed:63:20:3b:e0:b2:93:44:5a:1a:30:de:29:b7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate dg-0012-ac62e95.client-tls.adestra.com

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dg-0012-ac62e95.client-tls.adestra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dg-0012-ac62e95.client-tls.adestra.com
e.lonelyplanet.com
e.historyrevealed.com
e.madeformums.com
e.cross-stitching.com
e.knit-today.com
e.buysubscriptions.com
e.todaysquilter.com
e.mbuk.com
e.lovepatchworkandquilting.com
e.cyclingplus.co.uk
e.whodoyouthinkyouaremagazine.com
e.molliemakes.com
e.girltalkmagazine.com
e.motdmag.com
e.gardenersworld.com
e.loveyourhair.com
e.cardmakingandpapercraft.com
e.juniormagazine.co.uk
email.bikeradar.com
e.knowledgemagazine.com
e.countryfile.com
e.craftbubble.com
e.gathered.how
e.discoverwildlife.com
e.sciencefocus.com
e.babyexpert.com
e.simplyknitting.co.uk
e.thinkbaby.co.uk
e.topgear.com
e.planyourperfectwedding.com
e.immediate.co.uk
e.craft-seller.com
e.giggly.co.uk
e.simplycrochetmag.co.uk
e.220triathlon.com
e.olivemagazine.co.uk
e.bbcgoodfood.com
e.historyextra.com
e.classical-music.com
e.theyarnloop.com
e.whatmtb.com
e.clothmagazine.co.uk
e.olivemagazine.com
e.ekbbmagazine.co.uk
e.calmmoment.com
e.5minutefun.com
e.theknitter.co.uk
e.simplysewingmag.com
e.gardensillustrated.com
e.golfmagic.com
e.yourhomestyle.uk
e.homesandantiques.com
e.youandyourwedding.co.uk
e.radiotimes.com
e.skyatnightmagazine.com
e.kbbdaily.com
e.procycling.com
e.abrandnewyou.co.uk

Other certificates including the domain name adestra.com

(limited to 100 certificates)
statuspage.io
www.adestra.com
adestra.com
*.adestra.com
statuspage.io
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
prostatus.whitepages.com
dg-0109-77cf551.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
dg-0070-c174270.client-tls.adestra.com
dg-0150-2354af7.client-tls.adestra.com
dg-0067-b4f0d23.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dg-0008-7ca737e.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
apac-status.cayuse.com
statuspage.io
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0123-38b8329.client-tls.adestra.com
dg-0002-02ce7f1.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0004-127170c.client-tls.adestra.com
statuspage.io
dg-0085-edb0cc1.client-tls.adestra.com
statuspage.io
dg-0149-55938d1.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0087-960804b.client-tls.adestra.com
prostatus.whitepages.com
dg-0013-b3d7a9c.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0125-dc75dcd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0134-2e87d88.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
statuspage.io
prostatus.whitepages.com
prostatus.whitepages.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0102-ddf9d6b.client-tls.adestra.com
statuspage.io
dg-0026-6664b28.client-tls.adestra.com
dg-0109-77cf551.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0105-2d8a3ed.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0113-21a1b55.client-tls.adestra.com
statuspage.io
statuspage.io
prostatus.whitepages.com
dg-0031-fc95c30.client-tls.adestra.com
statuspage.io
statuspage.io
dg-0133-2f5a5bb.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0098-f0d9eae.client-tls.adestra.com
dg-0154-9db8122.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0144-e509e47.client-tls.adestra.com
statuspage.io
dg-0146-7cb0364.client-tls.adestra.com
statuspage.io

Certificate

The complete raw certificate details for dg-0012-ac62e95.client-tls.adestra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQwotePs1Ie2EEO6VHVg
f9QyZTT6PlfcRD4jvvhS3etnc8hSIAtdby9iiXbaEdteEIvwt4rKVmYFPbLzjxNG
SwgvpCOrhegGsvc8bqhHzDJz6KM2NfnuVXXx/1GENHriwb6NTaUyu3hlmwHF7tpj
xUi6sD8hs/ltfM08Vp1VhoYzx+R7fNyOZsa5bfn0f6voAC8xDx6QX9WIph3EwbTT
3mS8ENhzFOvFo5Kqox4QC0Ttx4TnDm4bfbna+ExBryfPpfzNfTTJWOag2FUy3Qzh
P3CtSUcgdjh0bSNtzeJilRvsYxVLqKh4M238X6QcCR/wK/3OM8Cb+rrdRlCx7Kar
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17232771032330118931972859692289927701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dg-0012-ac62e95.client-tls.adestra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25884848356947660989880130650086390835599267863889244439099701284267401314080744147753813489642295375856741692655272891279073403377658634885342426833748338290788823018908460590644199717688380503926045957758641633711423131025028938105247980761946001536013433224647603987199428445049924311166716787397874430204811106886403815068125636704031692699462578676734596484670249648071334187261272183916391159520973413518151221250263828943117113209181279334138065086626610705326179064344034282090293294181821422211402874692706211686629788613212962471692458436012379456994933586997867504020518441960323069197972782638281943067629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f468cfd8e713dcb4304f1fb01be8d17e27a9de2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dg-0012-ac62e95.client-tls.adestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.lonelyplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.historyrevealed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.madeformums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.cross-stitching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.knit-today.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.buysubscriptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.todaysquilter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.mbuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.lovepatchworkandquilting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.cyclingplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.whodoyouthinkyouaremagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.molliemakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.girltalkmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.motdmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.gardenersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.loveyourhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.cardmakingandpapercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.juniormagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.bikeradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.knowledgemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.countryfile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.craftbubble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.gathered.how'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.discoverwildlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.sciencefocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.babyexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.simplyknitting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.thinkbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.topgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.planyourperfectwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.immediate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.craft-seller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.giggly.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.simplycrochetmag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.220triathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.olivemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.bbcgoodfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.historyextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.classical-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.theyarnloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.whatmtb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.clothmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.olivemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.ekbbmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.calmmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.5minutefun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.theknitter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.simplysewingmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.gardensillustrated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.golfmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.yourhomestyle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.homesandantiques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.youandyourwedding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.radiotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.skyatnightmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.kbbdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.procycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.abrandnewyou.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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