lambda-redirect22.mars-inc.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 02:bc:0f:e0:6a:d2:d8:a1:ac:b2:cf:31:12:aa:90:0c was issued on by Amazon.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lambda-redirect22.mars-inc.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:bc:0f:e0:6a:d2:d8:a1:ac:b2:cf:31:12:aa:90:0c
Serial Number (int): 3634929817287145786951309245238906892
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cc:2c:15:9c:63:b9:f4:04:3b:51:f2:9f:c2:89:fb:b1:60:fa:64:ef
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): b0:f0:b4:9d:44:2a:37:77:35:7b:ff:b6:c3:29:ae:84:05:aa:c7:70
Fingerprint (sha256): 22:48:af:b3:38:ba:a1:07:30:9b:7d:a4:0c:b8:2a:df:e7:16:cd:30:2f:44:e7:55:65:99:55:db:81:31:0a:01

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate lambda-redirect22.mars-inc.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lambda-redirect22.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lambda-redirect22.mars-inc.com
mynutro.com
www.twix.cz
royalcanin.tw
nutro.pt
weiboapp01.dovechocolate.com.cn
snacklish.snickers.com
www.pedigreeloyalty.com
twix.cz
www.posilekdlaschroniska.pl
www.womenofdigitalmars.com
www.getacat.com.au
raisedmetocare.com
www.marsgraduates.com.au
www.snickersbigmood.com
nutrition.advancepet.com.au
snickersfixedtheworld.com
snickers.ba
mymoms.net
www.snickers.fi
sweetprizes.com
snickers.fi
vmp.mars.com
oralcareeducation.com
winergy.de
www.marspetfood.com
www.petribbon.at
marspetfood.com
nutrostrd.marsfb.com
snickersbigmood.com
www.premiumnatural.com.au
whatsnext5.co.uk
www.snickers.ba
www.winergy.de
mymms.eu
snickers.si
twix.sk
weiboapp04.m-ms.com.cn
petribbon.at
smarttreating.marsfb.com
weiboapp03.m-ms.com.cn
whatsnext5.com
womenofdigitalmars.com
zasadywdzialaniu.pl
weiboapp01.m-ms.com.cn
www.wildfrontier.com
www.cacaopathogenomics.com
saythankswithsnickers.com
www.myxnm.com
wyborsmakoszy.pl
womenofmars.com
www.unclebens-specials.gr
www.oralcareeducation.com
spotlight.orbitgum.com
weiboapp01.snickers.com.cn
www.mdmms.com
vyhrajsesnickers.cz
nutrition.advancepetfoods.com.au
mymnds.com
myxnm.com
twix.be
pedigreeloyalty.com
unclebens.hu
unclebens-specials.gr
www.unclebens.hu
getacat.com.au
posilekdlaschroniska.pl
wrigleys5whatsnext.com
vyhrajsosnickers.sk
uk-starburst-basket.wrigleyfb.com
wildfrontier.com
www.twix.be
brandsiteguide.mars.com
www.vyhrajsesnickers.cz
tuneout.altoids.com
wrigleys5whatsnext.co.uk
www.mymms.eu
premiumnatural.com.au
wrigley.co.uk
www.vyhrajsosnickers.sk
www.wrigley.co.uk
www.m-ms.eu

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for lambda-redirect22.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz6fs59cGLB8haVt/Ce2
3fCz0tiVR5lTlgysOfshV4D3crR85APwwkbiMu1msE2OFRDM+jABz3cW7S+71z2g
Gzbc79RnLNKSS22StSzFvM7JN6ZcGzXgYD4AZQm7gvVumHRtItdO2+jzh4ruXUNh
MTdME9q6w8F6hOSwoxNuh4tnWhiBp/WETFbf+g8e6v1ejxqsHoFs0jFvK6iribAK
wiLgpedgHd4K1tkGQ8uDDEYA6wLAGoa7G3K9TWsXDcTiXsU4g5X8xNJRKcvDU7gs
9koafmlzFqe/Qy3Xb1984R5mfUDH4TK073/4lXat00b/3uYqpQlrqiZhtjjVD4L5
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3634929817287145786951309245238906892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lambda-redirect22.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19597818233515734382797473006115968816559564692500234666305299866156352900331534901917975992465256969490578777796268684899750588361619609649393138075551207137049793477253793867822548912101233466085345715656210643738890672625297801604911987601297996229283067342164425429338419681233978291481607648738677324049304443606162152082062278902289895310813772762660785247249327069357266876890502552711235349053825910521128572046586639170649384637357773568108110478400383704095893253537872504427589826328062321547274244421215906850493130427302208938930202516114910423061301221593052530517803028306046164108654547847543519377679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc2c159c63b9f4043b51f29fc289fbb160fa64ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1654 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda-redirect22.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynutro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snacklish.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedigreeloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posilekdlaschroniska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womenofdigitalmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getacat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisedmetocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsgraduates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickersbigmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrition.advancepet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersfixedtheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymoms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetprizes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmp.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oralcareeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winergy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marspetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petribbon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marspetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrostrd.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersbigmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiumnatural.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext5.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winergy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp04.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petribbon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarttreating.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp03.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenofdigitalmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zasadywdzialaniu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacaopathogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saythankswithsnickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myxnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyborsmakoszy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenofmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens-specials.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralcareeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlight.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyhrajsesnickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrition.advancepetfoods.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymnds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myxnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreeloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens-specials.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getacat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posilekdlaschroniska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleys5whatsnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyhrajsosnickers.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-starburst-basket.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandsiteguide.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyhrajsesnickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneout.altoids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleys5whatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumnatural.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyhrajsosnickers.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c5df062760000040300473045022067ef5c7c4c2fcf0483dc7d192edb1334a98666481e3d23f4d7f09e5b491b26c6022100d9b6691100cfbb553f5e26b817d977b38646777dd88c9f99a1b2e26f108a02df0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c5df06295000004030046304402205dcdf599ea781b47758f862300888fdc098f2ba4438d607cf7fb6314c2629240022063bd230d67ffe3b90b3620dbe34ba10dd9332bad0589b7218db195ebe09c480e0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018c5df0627a0000040300473045022100a8a72caac9464e39023508df0365a28010ebe93bfa4d209d8b6b8b4f5d72525702203091b511e6894172c7d7b567881e9ac03ce9d97efa11d5052434d42ff8db6ed4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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