aws-cf-rd15.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:17:25:42:14:91:24:3b:1a:bb:ca:71:58:36:0e:d7 was issued on by Amazon.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd15.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:17:25:42:14:91:24:3b:1a:bb:ca:71:58:36:0e:d7
Serial Number (int): 20058598449099265718013936656685862615
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 45:d1:f4:7f:f5:39:6b:57:f1:6c:28:2c:ba:d4:38:6b:02:86:5a:50
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 39:69:e8:e3:02:78:5e:88:dc:7f:24:b7:0c:25:9e:65:e2:cc:5b:11
Fingerprint (sha256): 22:d5:e4:c0:e0:0a:ce:e6:7c:35:f4:d9:fa:a9:fe:49:4d:2e:6e:af:af:85:d4:94:57:87:31:f8:74:10:e7:d8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd15.mars-inc.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd15.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd15.mars-inc.com
www.unamourdechat.com
snickersfixedtheworld.com
unclebens.sk
www.winergy.de
vmp.mars.com
uk-starburst-basket.wrigleyfb.com
www.snickers.com
www.snickers.ba
r.5gum.com
www.oralcareeducation.com
saythankswithsnickers.com
www.vyhrajsesnickers.cz
www.twix.be
wrigley.co.uk
www.snickersbigmood.com
www.snickers.fi
snickers.com
petribbon.at
smarttreating.marsfb.com
www.wrigley.co.uk
whatsnext5.co.uk
www.unclebens.sk
www.unclebens-specials.gr
snickers.ba
www.cacaopathogenomics.com
royalcanin.tw
sweetprizes.com
www.twix.cz
www.marsgraduates.com.au
unamourdechat.com
www.m-ms.eu
weiboapp01.snickers.com.cn
unclebens-specials.gr
mymoms.net
wrigleys5whatsnext.com
wyborsmakoszy.pl
womenofmars.com
www.posilekdlaschroniska.pl
winergy.de
raisedmetocare.com
mynutro.com
twix.cz
whatsnext5.com
snickers.si
twix.sk
snickersbigmood.com
vyhrajsesnickers.cz
www.unclebens.hu
weiboapp01.dovechocolate.com.cn
spotlight.orbitgum.com
weiboapp04.m-ms.com.cn
snickers.fi
unclebens.hu
vyhrajsosnickers.sk
www.unclebens.cz
mymnds.com
weiboapp01.m-ms.com.cn
myxnm.com
unclebens.cz
nutro.pt
pedigreeloyalty.com
weiboapp03.m-ms.com.cn
www.vyhrajsosnickers.sk
snacklish.snickers.com
twix.be
www.mymms.eu
nutrostrd.marsfb.com
www.petribbon.at
www.mdmms.com
zasadywdzialaniu.pl
oralcareeducation.com
www.twix.co.uk
twix.co.uk
www.myxnm.com
mymms.eu
posilekdlaschroniska.pl
tuneout.altoids.com
www.abcdogs.com.br
wrigleys5whatsnext.co.uk

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd15.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+ipXIvZ1t/JmV7NWAA
uIsDKRpo7dRzl3+/iGpW9XxHZMglkYjDLSUlTH1RFtB3ubgQ98Wnl6h9QVUwj5B/
5UtfQ58iatb23uJXSC6XpoMQicJ7K8hmkYtTtn816Un8Gkxqd+bQou1/ZFzDjsMr
ujL7l0/GwnH4Ak2BfzFsogEhYijG0H1Zl6OIeEHwY6QsN+Qlv1w2l9MX3kwlhtBV
tLAIoc0Y0YHiTPYgUxasf4lmV3gYbjYro4YGPZ/+HnTrkfi3KxmGWLenH3lKrCgZ
ZanFKPM+HuLGvF4OKI3m1UYfsH//1+9qfj+HHMS4Pugn7wvslwwoX6IkkyBrcCzU
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20058598449099265718013936656685862615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd15.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23480144901662583526874570318449337958096604885094645789907513729410000775375444703633814689127858557746644048296856911526942109724406734382129683130881013886735422749123314359338668744036499739504177740345040457345106410651776336900620100754854353724024888391650552355802055309815004117194694181976682812705098119656424468350638386257959337812274907627752281481459268413042350164916381491982825712214871543934300193007649540861362457298071070614911984542884369979531090171499939322306269852736107439506520931842674529038171310101531870490811045517507722993293587851334932428995646626836390341195519201872381874066439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45d1f47ff5396b57f16c282cbad4386b02865a50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1517 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd15.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unamourdechat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersfixedtheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winergy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmp.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-starburst-basket.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralcareeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saythankswithsnickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyhrajsesnickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickersbigmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petribbon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarttreating.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext5.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens-specials.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacaopathogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetprizes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsgraduates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unamourdechat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens-specials.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymoms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleys5whatsnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyborsmakoszy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenofmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posilekdlaschroniska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winergy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisedmetocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynutro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersbigmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyhrajsesnickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlight.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp04.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyhrajsosnickers.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymnds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myxnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreeloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp03.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyhrajsosnickers.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snacklish.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrostrd.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petribbon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zasadywdzialaniu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oralcareeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myxnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posilekdlaschroniska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneout.altoids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleys5whatsnext.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001742742a73e0000040300473045022100b4e4b60786dcd8fb8aa4b7694086144033efd080a91836e05e98b6c86b86013402202e0608f4dded9d23ebfb6b4a88fb6693bb215f0bd703acffda752c0e679b717b0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001742742a7350000040300483046022100cc0e406b20cf0ba7be4a03b9d1a666acd57cd1b7bdc1fd9922dd5362d4adf7db022100c06e0318d4a4fc6163d6c41e06f76a861488435096d82daf9ca634a08260a9db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00abb19ca355ebcf9b9e03a06f49a5783a979d5acdb4ad4d74e26ad1b0ce0157fc74a819dd2b624c5fc49459f6d9a5d2f532c44b1e36bdb544f3c34c4a231cfd87b6ecfa3217664d35ed26539618cd1c4c100a0f7a5022ab7ddfe786547117fc0f8dff52409fc12979f5d472e55de787d70a9f93e47b15958a04a8bb02a3c3152ff50ca673d2e79f3c505d8ab93b00646244e6929effd2c934f667f1717acafb224b09bacfe20b32597ea170f6593c05b7a011bd44317a8a4c261dfcbb768d824d11550bbed5f41bae34d25cdfc330140041a71ab485521a0e78a8beaef1104ace87b286c7417339f7617768e49e71e8e3378d20602ce966436e9d75ea9b87694f