aws-cf-rd13.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:57:f0:9d:1d:e4:b1:3b:79:25:23:9c:87:e1:1b:82 was issued on by Amazon.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd13.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:57:f0:9d:1d:e4:b1:3b:79:25:23:9c:87:e1:1b:82
Serial Number (int): 3115066044640290217538450156758834050
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: dc:0c:c9:67:ef:90:40:c1:d4:e0:c1:ba:24:2f:a8:94:28:ad:8e:b8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e0:86:be:cb:b8:47:86:fc:32:64:7e:6c:b6:7d:9e:f9:04:44:59:73
Fingerprint (sha256): 1c:3f:df:c3:ab:32:46:16:96:e2:21:4a:27:d8:46:d2:0e:8e:21:66:71:09:4d:00:82:bf:ba:11:35:7d:d0:ea

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-rd13.mars-inc.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd13.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd13.mars-inc.com
sayitindovechocolate.com
www.leftvsright.ca
www.yourtcecurator.com
www.mymms.name
hungerinnovations.com
rightvsleft.ca
my-mms.pl
gauchevsdroite.ca
the-cocoa-exchange.com
mymms.jp
celebratemms.com
my-mms.cz
facesonchocolate.com
my-mms.org
www.my-mms.org
mymms.name
www.facesonchocolate.com
my-mms.info
www.my-mms.name
www.my-mms.pl
www.mars-itr.us
smilenoseson.com
my-mms.ch
www.doveicecream.com
www.my-mms.cz
maltesers.com
yourtcecurator.com
mym-ms.com
moviecollectandget.com
www.my-mms.mobi
www.droitevsgauche.ca
www.dovechocolatediscoveries.com
www.bensbeginnerscontest.com
mars-itr.us
www.mymms.cz
bensbeginnerscontest.com
www.maltesers.com
hungerithm.com
innovatewithmars.com
3musketeers.mars.com
www.my-mms.ch
my-mms.name
my-mms.jp
www.marsretailgroup.com
droitevsgauche.ca
my-mms.no
www.bounty.hu
my-mms.net
www.moviecollectandget.com
amassezetrecevezcinema.com
www.my-mms.net
www.celebratemms.com
www.rightvsleft.ca
marsretailgroup.com
remixmms.com
www.amassezetrecevezcinema.com
my-mms.eu
www.my-mms.ru
dovechocolatejourney.com
my-mms.es
bakingwithmms.com
www.innovatewithmars.com
www.cocoaexchange.com
www.imageonchocolate.com
www.my-mms.jp
www.smilenoseson.com
www.my-mms.no
www.dovechocolatejourney.com
my-mms.mobi
www.mymms.jp
leftvsright.ca
mandms.ae
www.my-mms.biz
dovechocolatediscoveries.com
doveicecream.com
www.mmsretail.com
www.remixmms.com
www.bakingwithmms.com
www.my-mms.eu
www.dove-chocolate-discoveries.com
bounty.hu
www.my-mms.es
www.gauchevsdroite.ca
www.mym-ms.com
www.mandms.ae
my-mms.biz
www.my-mms.info
dove-chocolate-discoveries.com
www.sayitindovechocolate.com
www.the-cocoa-exchange.com
mymms.cz
www.hungerinnovations.com
imageonchocolate.com
mmsretail.com
cocoaexchange.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd13.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfZTzozA9TyV2oaKvncZ
jJWG3RZBJeprDswwas1oUyHnW46UBiZL9ML8/KJZ2hHOUhuzWeHomuLYVaZ7iaYe
BeRnaRb6wI1MifvBHLT6k8KLnPJffrWKjQeDH+69o7FGlo4dSJus+hi+QsENoUUR
aCbS0t6ZTVcUd1G3Eu6PTZLaWzsX0WG6IKgcjICz5J18vMgBrXPxAV03NK8kdbGe
+Ol9cQQFy5M9QiUX9Gf9+Ks2TPxQ09yiSCDZlctU52fEiahGrS7XJwjbGoIwBwHa
NZ/pDdwh84las7IG+MnEt01XswrsIy9b/9dQbOK7AqOnvqW8eoTJ8wLclbSTKn0j
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3115066044640290217538450156758834050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd13.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23980508192149024954964984757713552524036215783048178104055681138824132722295552324626834036053484985726146307507378872956933012774907878262792925742112637841495515975520905353718071792461787888459234147067982573468722702470874668738728393662483599724722689355411148117734667029010531782164919220586941956245963961333971775591959879149507053858410905986313860081139028838325350033882093472548151317402485401884279171360393046153696168414078040929247445209802702185058020606139437836157950452898217353557840584803449585020130397932227429711833903369976669233052864096413978967242349539612859379079768123212932881130469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc0cc967ef9040c1d4e0c1ba242fa89428ad8eb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1833 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd13.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayitindovechocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leftvsright.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourtcecurator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungerinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightvsleft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gauchevsdroite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-cocoa-exchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratemms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facesonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facesonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-itr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smilenoseson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doveicecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtcecurator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mym-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviecollectandget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.droitevsgauche.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovechocolatediscoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensbeginnerscontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-itr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensbeginnerscontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungerithm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovatewithmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3musketeers.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droitevsgauche.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bounty.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moviecollectandget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amassezetrecevezcinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebratemms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightvsleft.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsretailgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remixmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amassezetrecevezcinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dovechocolatejourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakingwithmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovatewithmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocoaexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imageonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smilenoseson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovechocolatejourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leftvsright.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandms.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dovechocolatediscoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doveicecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmsretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.remixmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakingwithmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dove-chocolate-discoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounty.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gauchevsdroite.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mym-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandms.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mms.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-mms.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dove-chocolate-discoveries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sayitindovechocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the-cocoa-exchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hungerinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageonchocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocoaexchange.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017f60eecf750000040300483046022100a98331297bf7eaa905cebe1ae998bd239921f3a71981c3b6dffa6124973a933d022100ff60909abb6a5f7d7b9c6889f2110afadeeddd65dabc1d42105970c1a48ccd2700770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017f60eecfaa0000040300483046022100be3b3cafc067c107096f46eafc413bb4209102bfaaeef50995afa911d9ed4f2f022100966876633d0de44ebcb94ff4d08bda1949ca98b6a6c268bcf7f168fd33db9830007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017f60eecfc70000040300473045022025a9935e5062427e28eed17edb9a5e052cecc9de1d4798420aecfae905efd755022100975e8fb0435878f679f0d08044468887c71bae1ba98fb92077336723d9d6d550
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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