ci-euw1.ireland.delivery.aimatch.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:27:a2:66:0a:e7:66:89:98:ab:05:87:7c:45:6d:10 was issued on by Amazon.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ci-euw1.ireland.delivery.aimatch.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:27:a2:66:0a:e7:66:89:98:ab:05:87:7c:45:6d:10
Serial Number (int): 2864249404055654231021930896463064336
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3a:4c:6d:01:a3:03:58:c2:2e:cf:cc:04:27:bc:97:9a:39:32:a9:64
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8d:83:5e:22:f4:f2:da:a0:c5:59:41:49:d3:37:e5:16:e0:8b:df:15
Fingerprint (sha256): 1a:20:6b:b4:92:e1:ea:5e:62:f3:54:fa:1c:e7:cc:49:9a:64:a2:82:48:2e:8b:c7:58:58:84:a8:82:b3:f5:49

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ci-euw1.ireland.delivery.aimatch.net

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-euw1.ireland.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-euw1.ireland.delivery.aimatch.net
delivery-ci360.altibox.no
delivery-ci360.frankfurt-airport.com
delivery-ci360.coopforsikringer.dk
delivery-ci360.meny.no
delivery-ci360.byadf.cz
delivery-ci360.paribucineverse.com
delivery-ci360.conrad.com
delivery-ci360.marketing.officedepot.eu
delivery-ci360.magazine.nl
delivery-ci360.yolo-insurance.com
qa-delivery-ci360.flypgs.com
delivery-ci360.elanyo.com
delivery-ci360.tim.it
delivery-ci360.tfgtst.co.za
delivery-coll-sas360.unipolsai.it
delivery360.kbinfo.cz
del.mm.dm.si
delivery.ci360.telekom.si
delivery-ci360.kiwi.no
delivery-ci360-p.post.ch
delivery-ci360.knvb.nl
delivery-dev.ci360.tpp.commerzbank.de
delivery-ci360.next.co.uk
del.t.mm.dm.cz
delivery-ci360-i.post.ch
delivery-ci360.hopi.com.tr
delivery.dma.huk.de
delivery-ci360.bidcompany.it
delivery-ci360.ah.nl
delivery-kclientd-ci360.wafasalaf.ma
delivery-ci360.fratellicarli.com
delivery-ci360.ruv.de
delivery-ci360-s.jyskebank.dk
del.mm.dm.cz
delivery-sas360.unipolsai.it
delivery-ci360.rbfa.be
del.mm.dm.pl
delivery-ci360.danskebank.dk
delivery-ci360.test.ah.nl
delivery-ci360.trumf.no
del.mm.dm.de
del.t.mm.dm.pl
del.t.mm.dm.de
delivery-ci360.baloise.ch
delivery-ci360.icabanken.se
del.mm.dm.hr
delivery-ci360.pc-prod.marsgate.com.tr
delivery-ci360-at3.altibox.no
del.mm.dm.hu
delivery-ci360.test.movistar.es
delivery-kclientp-ci360.wafasalaf.ma
delivery-ci360.igapass.igairport.aero
delivery-ci360.altinyildizclassics.com
delivery-ci360.topdanmark.dk
delivery-ci360.test.hopi.com.tr
delivery-ci360.rtest.ruv.de
del.mm.dm-drogeriemarkt.it
delivery-ci360.standrews.com
delivery-ci360.stage.money.com.tr
del.mm.dm.mk
del.mm.dm-drogeriemarkt.ba
delivery-tud.ci360.tpp.commerzbank.de
delivery-ci360.movistar.es
del.mm.dm-drogeriemarkt.ro
delivery-360.homecredit.cz
delivery-tuc.ci360.tpp.commerzbank.de
delivery-ci360.arcaplanet.it
del.mm.mojadm.sk
delivery-ci360.money.com.tr
delivery360.satur.sk
del.t.mm.dm.at
delivery-ci360.qa.fratellicarli.com
delivery-ci360.test.icabanken.se
del.mm.dm.at
delivery-ci360.pzu.pl
delivery.ci360.tpp.commerzbank.de
delivery-prod.isic.cz
delivery-ci360.igapass.com
delivery-ci360.flypgs.com
delivery-ci360.test.danskebank.com
del.mm.dm.rs
del.mm.dm-drogeriemarkt.bg
delivery-ci360.jyskebank.dk
delivery-ci360.generali.sk
delivery.isic.cz
delivery-ci360.footbelsite-acc.rbfa.be

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-euw1.ireland.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfVy08U19cz0OA/bg5cU
0YWx8Cg9+8J1W/m9eFeBxKBZdOZiNI6xbVUvWBXVLmzr4IPaXNr5gX6Pa6K43LOf
fFfzZVdHyzP5qN+jmhp0mSqFXa7fWFn29LXbgE7QULGJYgcEIqaO6kAkLUu0ieq7
TGNWfNgKIpiSiw6PIp/e/1ImAErga37zCw2thwT4pzbq6AVBYeHV0xB1P24sBF4q
kiC3XitccPwncQgJJyrhma8ti1VFPeKAWXNJWvyJsHJaYVWVhDpuLAJTZykoSCYh
dr5LsVTvM9nZ8DwsTigAqBBkdxT4FAvPx9Z+f81ZWkPIZhWd9l+Yry6zkb8R50lj
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2864249404055654231021930896463064336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21960261947148333125401226827675216820006072040875329383981331245563803836880952415311216652551160781512614330399427772599054344020346001769647508681038841758174370057956042165292217679914259324194242571355667006220729169008983755890184156100573984316640916269810257681961605752859592278747043939501182020919329332845324385790204736504733114325875337868460228464814060672846091017838582437985587408946126689361076186712641625294107770318317695503772815351644545006661821864691287143379694139973431956593507488986684466123969301186401502380424837081803500923409183236913598448398412274553047572104079758221724845958037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a4c6d01a30358c22ecfcc0427bc979a3932a964
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coopforsikringer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.meny.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.byadf.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.paribucineverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.conrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.yolo-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.elanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.tim.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.tfgtst.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-coll-sas360.unipolsai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.kbinfo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ci360.telekom.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.kiwi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-p.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.knvb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-dev.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.next.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-i.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.hopi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.dma.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.bidcompany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.ah.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientd-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-s.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-sas360.unipolsai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.danskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.ah.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.trumf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.baloise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.icabanken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.pc-prod.marsgate.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-at3.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientp-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.igapass.igairport.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.altinyildizclassics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.hopi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rtest.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.standrews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.stage.money.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tud.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tuc.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.arcaplanet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.money.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.satur.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.qa.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.icabanken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.pzu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-prod.isic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.igapass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.danskebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.generali.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.isic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.footbelsite-acc.rbfa.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00573720507d7c85e1e02cb245205f042e02efb8a291d0bd903f942994de375334bbae3eac5466eb2d5d93defef2374ed9492ea6bed65f1b111e9d4bc085eaa8728c1982df1119433ff5a1c70a3c72c94fa60bc533c10d6e9cea6d80c3909fea82b249bc4d75de0081262eaccd3162c94f229e38c3b6aac7832148fe29e7ee9b5390492c920619bed6f5d1ae0b1026b545b5263a38fbdb57a11933132d94ab95df3c1d8f9a5deef90382f6680cc10ca2dfaf6352b842463d5aba1f430c4a1e3eb35d5aa9b5869187f69aa0e4bf5e5466a34438b94379b609f839bf55839aaa834110252840c6d9b6fbcb151bfb560dd6d33b1abdd498672cb368d650925750cd11