aws-cf-rd13.mars-inc.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:e1:66:5a:21:f1:26:ef:40:26:0d:0e:a0:14:24:c9 was issued on by Amazon.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd13.mars-inc.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e1:66:5a:21:f1:26:ef:40:26:0d:0e:a0:14:24:c9
Serial Number (int): 17121078689408065755390764422157051081
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dc:2d:5c:ea:14:a3:00:27:a1:81:12:54:90:39:15:68:58:b9:ac:85
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 31:31:13:e7:dd:0b:91:ed:df:44:44:e2:2c:1f:ee:84:ac:0e:2b:f5
Fingerprint (sha256): 1b:c5:53:45:ff:20:73:ee:79:b5:6b:6c:82:79:21:51:f6:d9:13:13:78:63:a6:d4:3c:49:8b:21:1d:07:0c:45

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate aws-cf-rd13.mars-inc.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd13.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd13.mars-inc.com
www.leftvsright.ca
sayitindovechocolate.com
www.mymms.name
www.yourtcecurator.com
hungerinnovations.com
rightvsleft.ca
gauchevsdroite.ca
my-mms.pl
the-cocoa-exchange.com
mymms.jp
celebratemms.com
facesonchocolate.com
my-mms.cz
my-mms.org
www.my-mms.org
mymms.name
www.facesonchocolate.com
my-mms.info
www.my-mms.name
www.mars-itr.us
www.my-mms.pl
my-mms.ch
smilenoseson.com
www.doveicecream.com
www.my-mms.cz
maltesers.com
moviecollectandget.com
mym-ms.com
yourtcecurator.com
www.my-mms.mobi
www.droitevsgauche.ca
www.dovechocolatediscoveries.com
www.bensbeginnerscontest.com
mars-itr.us
www.mymms.cz
bensbeginnerscontest.com
www.maltesers.com
hungerithm.com
innovatewithmars.com
3musketeers.mars.com
www.my-mms.ch
my-mms.name
my-mms.jp
www.marsretailgroup.com
droitevsgauche.ca
my-mms.no
www.bounty.hu
my-mms.net
www.moviecollectandget.com
amassezetrecevezcinema.com
www.my-mms.net
www.celebratemms.com
marsretailgroup.com
www.rightvsleft.ca
remixmms.com
www.amassezetrecevezcinema.com
my-mms.eu
dovechocolatejourney.com
my-mms.es
bakingwithmms.com
www.cocoaexchange.com
www.innovatewithmars.com
www.my-mms.jp
www.imageonchocolate.com
www.smilenoseson.com
www.my-mms.no
www.dovechocolatejourney.com
my-mms.mobi
leftvsright.ca
www.mymms.jp
mandms.ae
www.my-mms.biz
dovechocolatediscoveries.com
doveicecream.com
www.mmsretail.com
www.bakingwithmms.com
www.remixmms.com
www.my-mms.eu
bounty.hu
www.dove-chocolate-discoveries.com
www.my-mms.es
www.gauchevsdroite.ca
www.mym-ms.com
www.mandms.ae
my-mms.biz
www.my-mms.info
dove-chocolate-discoveries.com
www.sayitindovechocolate.com
www.the-cocoa-exchange.com
mymms.cz
www.hungerinnovations.com
imageonchocolate.com
mmsretail.com
cocoaexchange.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd13.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QLuCteIQx1Q11+EfXxc
65Zi8JL59z+iXUyMgdvoGSJp1Yn6uSPWLRqJxt1Ylpg3pdBndkQWWddbl+r044GW
kqtnxo4Lfl+6+0cuPRap9SWnfnBrzr4JuxCV6VRWDD9rU/6qp3b9zRq5mpnrPExQ
W+i0UAGYQ1QLDUo1nLJZaYx824A/CsX5I6qYAKkCtePPHyPgZRUNe5+fo1lIjgJr
QMnC7UJ7ww/R0gp389ixFbSwB7ik/BtxIDtqeaMU6EnxXBM0jxnQ8x0f5UZjBygC
kzEgb9o69K9tHdlUmTdYgGkQmIyLwURswP0og4w3zwe7dlRktUb1KUEQ6ssCLte8
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17121078689408065755390764422157051081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd13.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31434782700877759690720740892759257829150103288503589681061218314492469855659642196862555757548660388170123579100093961003940370167393625050149566131751631116440500129172463469425280619132076835675227447185904480156751831900705245950967765771810368555136030401286329868094042661423695828258366457300690170105728596852414437415555922834960118651042143292876431537791092015950314126376066325379751374294016069740459464919583665422410058396777655576670014890044195620813988585714854831664496961405135711359691993245306934901088633460859791148302189394716567468511304282564901029269465722425461430390245373957267833470001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc2d5cea14a30027a18112549039156858b9ac85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd13.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftvsright.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayitindovechocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourtcecurator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungerinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightvsleft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gauchevsdroite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-cocoa-exchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratemms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facesonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facesonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-itr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smilenoseson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doveicecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviecollectandget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mym-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtcecurator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.droitevsgauche.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovechocolatediscoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensbeginnerscontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-itr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensbeginnerscontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungerithm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovatewithmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3musketeers.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droitevsgauche.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bounty.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moviecollectandget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amassezetrecevezcinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebratemms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightvsleft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remixmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amassezetrecevezcinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dovechocolatejourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakingwithmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocoaexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovatewithmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imageonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smilenoseson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovechocolatejourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftvsright.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandms.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dovechocolatediscoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doveicecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmsretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakingwithmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remixmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounty.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dove-chocolate-discoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gauchevsdroite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mym-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandms.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dove-chocolate-discoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sayitindovechocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-cocoa-exchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hungerinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocoaexchange.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018691fb7a83000004030047304502200415ab4689905640a10e16586ea02ac98fd835e6c9b95d65cc58804afb5fd0bc0221009af476bea2b05739f467c6cef540e9c2548b7eecb8872ec6460e82a767bfdd0700750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018691fb7a57000004030046304402205f1ad9866f607e30afe6ba9672222fd885475922353e8a1eea1898aff007477202205283db02826daf6a84ced5ed8fac7b33095ec4bddc15a950658c89a94e60e8a20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018691fb7a6c00000403004830460221008d20ccf05070a7b8544092ebe5cb3e711c62d19ed5bc4e11107f17e6fcc27b21022100a0e1dc19e2d933d5aacf508f35c964734451cc020f6982c42eb1b0a4ed8b80d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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