aws-cf-rd10.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:ff:e8:3f:7a:58:99:98:6e:3b:84:52:88:c9:9c:b7 was issued on by Amazon.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd10.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ff:e8:3f:7a:58:99:98:6e:3b:84:52:88:c9:9c:b7
Serial Number (int): 10633342217687359746043802010662837431
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0b:44:0b:00:fa:e9:58:0a:aa:57:68:01:71:ad:c3:5e:a7:71:4b:71
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b3:7f:d9:90:84:67:72:f2:5e:08:04:58:90:7c:91:d3:6f:d2:0d:44
Fingerprint (sha256): 1f:f6:8f:26:b4:ea:94:67:a9:32:e8:45:ff:49:c5:35:06:65:40:5d:35:9b:be:5f:b0:a8:9c:52:40:74:7a:93

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd10.mars-inc.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd10.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd10.mars-inc.com
rockpaper.skittles.ca
www.laporteskittles.com
5swerve.com
5winwhatsnext.co.uk
extratoothfairy.co.uk
wrigleysvroom.com
lifesaverssharering.com
www.extratoothfairy.co.uk
home.juicyfruit.com
5whatsnext.com
www.5whatsnext.com
gamemysummer.com
www.gamemysummer.com
5gumcoachella.com
rockpaperskittles.com
www.rockpaperskittles.ca
shareskittles.com
funnybunnygrams.com
www.laporteskittles.ca
www.5winwhatsnext.co.uk
www.wrigleysdriving.com
www.dvd.orbitgum.com
www.5gumcoachella.com
www.wrigleysracing.com
www.orbitparty.com
orbitparty.com
www.theorbitparty.com
www.reparelarcenciel.ca
fixtherainbow.ca
reparelarcenciel.com
www.promotion.excelgum.ca
clean.orbitgum.com
laporteskittles.com
www.wrigleysracingexperience.com
skittlesdoor.com
controlyourenergy.com
laporteskittles.ca
thesweetestseats.com
wrigleysracing.com
extra-soccer.com
wrigleyracetrack.com
wrigleysdriving.com
www.quierotiempoextra.com
wrigleysracingexperience.com
5gum.nl
orbitdirtyshorts.com
summerhuntforgold.com
www.funnybunnygrams.com
www.shareskittles.com
www.thesweetestseats.com
www.eclipsesecrets.com
www.rockpaperskittles.com
chewwiththecrew.com
www.orbitdirtyshorts.com
www.lifesaverssharering.com
createtherainbow.com
www.chewwiththecrew.com
eclipsesecrets.com
www.wrigleysvroom.com
www.summerhuntforgold.com
www.hallofcuriousity.com
www.createtherainbow.com
rockpaperskittles.ca
movie.orbitgum.com
walgreens.extragum.com
hallofcuriousity.com
www.skittlesdoor.com
www.fixtherainbow.com
www.reparelarcenciel.com
theorbitparty.com
fixtherainbow.com
www.wrigleyracing.com
www.controlyourenergy.com
www.5swerve.com
vivetumusica5.com
spring.orbitgum.com
www.extra-soccer.com
www.5gum.nl
www.fixtherainbow.ca
hallofcurious.com
dvd.orbitgum.com
swerve.5gum.com
www.hallofcurious.com
quierotiempoextra.com
wrigleyracing.com
www.vivetumusica5.com
www.wrigleyracetrack.com
reparelarcenciel.ca

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd10.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzOiNqYUaE3W7gAlE6x
WmmiYs37IRh6/jxNUpHSkja9Q5sFKIF1GSmbBgfErKXHCUDWhcG50TEGw2lmEMqo
L13dWp8LtrWsaHIdh379BBbqNq+XvIfcBh6eJYLC0VtNOY1Cu3R740scG2wk/Dp4
vcg7OlGp9haQVbaxUrXtw5W9zxSjNoMxIrczu6Yo+x7f3OcacM/24ZZzXlmGeboQ
eMbKsd2cq42dqNa9Pg19wU0NiFHvj5V2iGyI2OvMoV2JFbjr1/n4F2d6SFl7TsPW
HFTUchErW41EWXHcNJgDnKVoZhOfsYIl1SW5unh8B5uYxhJfni7BV16J+rpj5ZrA
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10633342217687359746043802010662837431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd10.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19707380725248151289915818008250508345711783756426827664491923032221263976248443857944450356050967356757792540846078731808372563221990399007609125055704432603849483177643870867879236036115640007684082651122664694897354327218039414303942202180156249625039205309944288070767988704401542024637224081212057735368970591035744286807385209901581563717340492397129690855937298829061003976414463563885882584379979162275988839990668145176744617467551181517012346820159968557719320331882060932221961012374285527871482764564201515434163693282627322542745894383969483717051585344862362519268510768677897462357583115670502386614443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b440b00fae9580aaa57680171adc35ea7714b71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1975 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd10.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockpaper.skittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laporteskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5swerve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5winwhatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extratoothfairy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysvroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifesaverssharering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extratoothfairy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.juicyfruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5whatsnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5whatsnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamemysummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamemysummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gumcoachella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockpaperskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockpaperskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funnybunnygrams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laporteskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5winwhatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysdriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dvd.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5gumcoachella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theorbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reparelarcenciel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtherainbow.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reparelarcenciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotion.excelgum.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laporteskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysracingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittlesdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlyourenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laporteskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesweetestseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extra-soccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleyracetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysdriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quierotiempoextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysracingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gum.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitdirtyshorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhuntforgold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funnybunnygrams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shareskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesweetestseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eclipsesecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockpaperskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewwiththecrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitdirtyshorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifesaverssharering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chewwiththecrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsesecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysvroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerhuntforgold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallofcuriousity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockpaperskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walgreens.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofcuriousity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittlesdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reparelarcenciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theorbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleyracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlyourenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5swerve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivetumusica5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spring.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extra-soccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5gum.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixtherainbow.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofcurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvd.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swerve.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallofcurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quierotiempoextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleyracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivetumusica5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleyracetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reparelarcenciel.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e9c8ed30388db24724bf7551ed34cd4a0da919d619860efe097ce8c5625a1944fdf0054bf609660bb709eb974d6218f39c6357e18ca936d08b2038246bf127ff5de73605e3a27eef914a95a918a1cb4cb78e77009d3c05cfc3ccefa1284be68007b8cc547e0bf63e6c38db9dd88a822d9194b7d65d8558525ce4d66396b6392b6b15e2432b73acca1bee066489a198add467b2ddce0c393318bd228b1bbd966e7222c638047f3729cd7ae3bbcd23f32f85eec1f693da3720dfe1ce2bf7bef513f51faa7b54edc37cc18f26600ccb44b7477c390cc758f4e43cb7c0315e59e6fda6e1a57144592085140ff92a611f4d0ca5249c14b3b6eebde16c76a78891f77