aws-cf-rd16.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:8f:b4:07:9e:bd:66:53:fc:f6:ff:e2:81:85:6e:86 was issued on by Amazon.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd16.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:8f:b4:07:9e:bd:66:53:fc:f6:ff:e2:81:85:6e:86
Serial Number (int): 3404605879793708759582883240047111814
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4e:a9:2b:38:5b:1e:4c:6b:c8:06:ce:c7:86:9f:80:35:52:0d:41:d1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 35:da:03:68:54:7e:9f:75:5d:65:f5:f9:7e:71:ff:ef:3a:8a:ca:2b
Fingerprint (sha256): 23:f3:6a:e6:71:e7:f6:5c:87:61:33:ed:a8:03:22:0a:09:6e:0d:22:e8:45:60:5f:e8:ff:c4:69:6e:ea:11:c7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-rd16.mars-inc.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd16.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd16.mars-inc.com
marsgraduates.com.au
mmsmeilleurmelange.ca
mball.m-ms.ch
cdn.weiboapp01.m-ms.com.cn
www.giveitup.extragum.com
itms-stage.mars.com
cdn.weiboapp04.m-ms.com.cn
test.hungerithm.com
financemanual.mars.com
globalsign.galaxychocolate.co.uk
eclipsemints.wrigleyextra.com.au
www.storefinder.m-ms.com
chatbots.mars.com
consent.mars.com
bmsprod.web.rcad.net
ar.m-ms.com.au
fr.m-ms.ch
lamp.snickers.de
snickersfixtheworld.com
shop.royal-canin.ch
milkyway.ca
kitekat.nl
oracle.snickers.com
cdn.weiboapp03.m-ms.com.cn
cdn.klm.whiskas.com.cn
m-ms.eu
cdn.weiboapp02.m-ms.com.cn
wuerdig.snickers.de
engagement.mars.com
review.starburst.com
mylegal.mars.com
contact.snickers.com
www.clean.orbitgum.com
car.mars.com
orderpilot.mmmars.com
cosmos.mars.com
www.rockpaper.skittles.ca
signature.mars.com
www.dzielsieusmiechem.pl
reviews.starburst.com
ppm.mars.com
devops.mars.com
movieoffer.mms.com
amazon-orders.wrigleyshop.com
izazov.snickers.com.hr
futbol.m-ms.es
eclipsemints.marsapps.com.au
breedingmanagementsupport.extranet.royalcanin.org
cacaopathogenomics.com
www.gumswap.extragum.com
www.walgreens.orbitgum.com
mentalhealthus.mars.com
blippsnickers.mars.com
chatbot.mars.com
cdn.weiboapp01.snickers.com.cn
icb.mars.com
de.m-ms.ch
mntest.mars.com
aribas2p.mars.com
mylegalteam.mars.com
boarding.royalcanin.co.nz
fr.mobile.cesar.com
spaceheroes.m-ms.dk
sxbtalent.mars.com
www.oralhealth.wrigley.com
nyeremenyjatek.royalcanin.hu
digitalservicedesk.mars.com
autravel.mars.com
learning.royalcanin.no
mmmworld.com
nutronaturalchoice.gr
dzielsieusmiechem.pl
contact.twix.com
mdmms.com
cdn.www.m-ms.com.cn
www.movie.orbitgum.com
marsriegel.de
cdn.weiboapp01.dovechocolate.com.cn
skittles-rainbowride-de.wrigleyfb.com
www.principlesinaction.wrigley.com
mmscinema.pt
library.mpa.mars.com
union.mms.com
pdhb.mars.com
cdn.weiboapp02.snickers.com.cn
www.tradepromo.wrigley.com
www.walgreens.extragum.com
www.spring.orbitgum.com
soutez.snickers.cz
milkyway.com.mx
kurs.royalcanin.no
ask.cesar.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd16.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwztUkrgomU5OjLP8dBQD
IR8KsashqWurQO7O4rI7kwGnpUMsviv5x93TcjQ3TiOwCoZmN92LJIG4pCfVoTIZ
hn4Mxas/RMHdMQ+YMrRlMsGU70eT0jXKdtpfEuXkabzOirQOI+DICe/Et8oyz9ys
H1r+j6qBAOGUpx5JIkBF4rU01FxjIPm7cfbiB4K2zFvAbNTNu1GMoscmLRfgfgXY
bhp3iHAFxLAa4UmO4abR74ZAt6rZyH93EXIVAW5cZhwoMeA8rDNOTbpsTRxoN83n
FJGJchqLAMMaddCYcO3TNRwFmld2Cpkf02meHk0ofguuy7mgWdXcDY/tUdd4YgO3
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3404605879793708759582883240047111814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd16.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24645726361170770264702109178073864072792698945867973254810438808250199029639378437321270705470787364701597472639051508778531522546896251361349210054540668966858738095214627815425265252033298363708358895779951068237329133039571854411902668209512488304950772319406805477635444082567336316468339851801934789915698590378436929118471065830773279482144837386086630130400229553103886291959744832941856441716315973482230481661101756621147189482394320170411765518283305775695512336112918589049522416615018987686916638303989162043756881432325017788586027025099337677024645083311553144552070070153613245837484660369433139853259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ea92b385b1e4c6bc806cec7869f8035520d41d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2091 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd16.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsgraduates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsmeilleurmelange.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mball.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveitup.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itms-stage.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp04.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.hungerithm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financemanual.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsign.galaxychocolate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsemints.wrigleyextra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storefinder.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbots.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsprod.web.rcad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.m-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamp.snickers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersfixtheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.royal-canin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkyway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitekat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oracle.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp03.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.klm.whiskas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp02.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuerdig.snickers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagement.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegal.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clean.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderpilot.mmmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockpaper.skittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dzielsieusmiechem.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppm.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devops.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieoffer.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-orders.wrigleyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izazov.snickers.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futbol.m-ms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsemints.marsapps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breedingmanagementsupport.extranet.royalcanin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacaopathogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gumswap.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walgreens.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalhealthus.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blippsnickers.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icb.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mntest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aribas2p.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegalteam.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boarding.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.mobile.cesar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceheroes.m-ms.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxbtalent.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralhealth.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyeremenyjatek.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicedesk.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autravel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmmworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutronaturalchoice.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzielsieusmiechem.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.www.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movie.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsriegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles-rainbowride-de.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.principlesinaction.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmscinema.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.mpa.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'union.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdhb.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp02.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradepromo.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walgreens.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soutez.snickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkyway.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurs.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.cesar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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