dg-0070-c174270.client-tls.adestra.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:8b:2d:d5:68:55:44:91:ee:72:08:37:40:77:61:f4 was issued on by Amazon.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dg-0070-c174270.client-tls.adestra.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:8b:2d:d5:68:55:44:91:ee:72:08:37:40:77:61:f4
Serial Number (int): 20661078816430382526363490957892477428
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:63:a2:55:86:37:7d:ca:56:84:40:f6:57:9d:90:aa:29:98:70:52
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 6a:6b:9e:a7:5c:51:e9:25:6f:e4:aa:15:41:ee:0e:c0:fd:cb:00:a3
Fingerprint (sha256): 1c:19:31:31:6f:3b:da:ac:07:10:27:db:ef:70:f6:9b:17:b1:bf:4e:4f:3f:5e:99:8e:7f:ac:a8:51:18:08:df

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dg-0070-c174270.client-tls.adestra.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dg-0070-c174270.client-tls.adestra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dg-0070-c174270.client-tls.adestra.com
enquiries.prospectmagazine.co.uk
renewals.drapersonline.com
email.rossignolvip.co.uk
email.cruisemagazine.co.uk
email.uksausageweek.co.uk
renewals.hvnplus.co.uk
email.signuk.com
email.yplexhibitions.co.uk
email.anatomfootwear.co.uk
email.rossignolrace.co.uk
email.desalination.biz
email.evidencebaseonline.com
email.whoswhobuscoach.com
hjo.quadmailer.com
email.meatmanagement.com
emails.britishmuseum.org
email.foodmanagement.today
email.groupleisureandtravel.com
renewals.racplus.com
subsmail.dennis.co.uk
abu.quadmailer.com
email.womeninmeatawards.co.uk
email.neuro-central.com
enews.monogram.com
renewals.retail-jeweller.com
email.drakefoundation.org
fwe.quadmailer.com
email.rx-network.com
renewals.retail-week.com
email.grouptravelshow.com
email.piabijoux.fr
email.culturevulture.de
email.piajewellery.com
email.culturevulturedirect.co.uk
enews.geappliances.com
email.networks.online
email.museumselection.co.uk
email.3dmednet.com
email.fav-house.com
email.utilityweeklive.co.uk
fin.quadmailer.com
email.meatup.co.uk
renewals.nce.co.uk
email.future-science-group.com
opt.quadmailer.com
enews.haierappliances.com
email.biotechniques.com
enews.cafeappliances.com
renewals.nursingtimes.net
email.engerati.com
email.drakecallejatrust.org
email.oncology-central.com
email.amg-group.co
renewals.mrw.co.uk
news.water-retail.com
email.myapplianceplan.com
acibis.quadmailer.com
renewals.geplus.co.uk
broadcast.groupleisureandtravel.com
broadcast.schooltravelorganiser.com
renewals.architectural-review.com
renewals.cnplus.co.uk
email.regmednet.com
renewals.hsj.co.uk
email.schooltravelorganiser.com
email.bioanalysis-zone.com
email.concussionzone.com
email.museumselection.de
email.meatcontacts.com
renewals.architectsjournal.co.uk
email.edie.net
email.wef.org
email.id-hub.com
email.utilityweek.co.uk
email.tekoforlife.co.uk
email.vango.co.uk
broadcast.foodmanagement.today
chk.quadmailer.com
ega.quadmailer.com
email.womeninmeat.co.uk
email.imagine.design
broadcast.meatmanagement.com
service.lancet.com
email.museumselection.fr
news.bornfree.org.uk
ecn.quadmailer.com
email.blacksofgreenock.co.uk
abg.quadmailer.com
renewals.lgcplus.com
email.wwtonline.co.uk
enews.hotpoint.com

Other certificates including the domain name adestra.com

(limited to 100 certificates)
statuspage.io
www.adestra.com
adestra.com
*.adestra.com
statuspage.io
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
prostatus.whitepages.com
dg-0109-77cf551.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
dg-0070-c174270.client-tls.adestra.com
dg-0150-2354af7.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
apac-status.cayuse.com
statuspage.io
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0123-38b8329.client-tls.adestra.com
dg-0002-02ce7f1.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0004-127170c.client-tls.adestra.com
statuspage.io
dg-0085-edb0cc1.client-tls.adestra.com
statuspage.io
dg-0149-55938d1.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0087-960804b.client-tls.adestra.com
prostatus.whitepages.com
dg-0013-b3d7a9c.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0125-dc75dcd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0134-2e87d88.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
statuspage.io
prostatus.whitepages.com
prostatus.whitepages.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0102-ddf9d6b.client-tls.adestra.com
statuspage.io
dg-0026-6664b28.client-tls.adestra.com
dg-0109-77cf551.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0105-2d8a3ed.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0113-21a1b55.client-tls.adestra.com
statuspage.io
statuspage.io
prostatus.whitepages.com
dg-0031-fc95c30.client-tls.adestra.com
statuspage.io
statuspage.io
dg-0133-2f5a5bb.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0098-f0d9eae.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0144-e509e47.client-tls.adestra.com
statuspage.io
dg-0146-7cb0364.client-tls.adestra.com
statuspage.io
dg-0136-db9956e.client-tls.adestra.com
statuspage.io
dg-0126-1f17597.client-tls.adestra.com

Certificate

The complete raw certificate details for dg-0070-c174270.client-tls.adestra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28qCVG278mkYKX05Oxe6
DdQnuqsH431bZ2z1hd8YSbYZYfa1pQSM5POngpvkpFf1wcvAe5mCcShSILGbF8OU
KoLr4KIDJjBuMG52eQtfRD0za6i5ULfQmtD4bxQvb7MyOb+/vFuvsU6hk5N+5KIz
1yi6k2wdELX2V49qd58dVTOeVjzMh7Obu7NYlyILH/aP7+qC8AfNL+VV1f1dhK8R
/PS5wriUn+qPXm8eYcbicb5Wkb4/GSzlW0dQkgOvSjYxYAvAl5PEMwTafA9/PYF/
86BYyP4IN/2F5A3NQZkcqFRkvDpdpl41E4gOXXMKdDC6N+Y1mohHwczB/Jx5b+5g
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20661078816430382526363490957892477428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dg-0070-c174270.client-tls.adestra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27746049747029865827519402582184085488469408285488527321933911043958718252132725783500052969653737526433055543160456336016686300051652979405907559120420235871108653713347317613557993991861720786276334083419951047198885269934050031717663726567860737550327059084406390065609744487354533145683536337540035807143673278413999603003572134443641848417843971985629239309340828435016765971316436649565037225910103630592819196709713861515646985139777463484271426797009701337393887474230133024039600134497160733241368505428075926613897819982191230634267404311039680751000165164650738212922397992530291840172722460995939292045341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b363a25586377dca568440f6579d90aa29987052
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dg-0070-c174270.client-tls.adestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enquiries.prospectmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.drapersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.rossignolvip.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.cruisemagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.uksausageweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.hvnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.signuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.yplexhibitions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.anatomfootwear.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.rossignolrace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.desalination.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.evidencebaseonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.whoswhobuscoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjo.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.meatmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.britishmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.foodmanagement.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.groupleisureandtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.racplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subsmail.dennis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abu.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.womeninmeatawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.neuro-central.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.monogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.retail-jeweller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.drakefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwe.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.rx-network.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.retail-week.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.grouptravelshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piabijoux.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.culturevulture.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.piajewellery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.culturevulturedirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.geappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.networks.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.3dmednet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.fav-house.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.utilityweeklive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fin.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.meatup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.nce.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.future-science-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opt.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.haierappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.biotechniques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.cafeappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.nursingtimes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.engerati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.drakecallejatrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.oncology-central.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.amg-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.mrw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.water-retail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.myapplianceplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acibis.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.geplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcast.groupleisureandtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcast.schooltravelorganiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.architectural-review.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.cnplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.regmednet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.hsj.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.schooltravelorganiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.bioanalysis-zone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.concussionzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.meatcontacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.architectsjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.edie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.wef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.id-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.utilityweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.tekoforlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.vango.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcast.foodmanagement.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chk.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ega.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.womeninmeat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.imagine.design'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcast.meatmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.lancet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.museumselection.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.bornfree.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecn.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.blacksofgreenock.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abg.quadmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewals.lgcplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.wwtonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.hotpoint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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