aws-cf-rd10.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:dd:c3:fa:a0:2e:fb:29:b0:a6:37:d1:3b:bd:87:f9 was issued on by Amazon.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd10.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:dd:c3:fa:a0:2e:fb:29:b0:a6:37:d1:3b:bd:87:f9
Serial Number (int): 9126840506933431027295264160069027833
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:7a:ce:2d:56:30:60:ec:df:84:72:c5:b6:d4:ec:46:e2:b0:d4:f1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ca:ea:c2:d5:ff:3f:60:5e:02:c4:cb:43:ed:34:37:fd:90:ff:36:16
Fingerprint (sha256): 28:3d:22:74:3f:69:28:81:9c:95:bc:99:ee:bb:75:f7:17:10:b7:80:c1:3d:6c:28:66:c6:39:c0:77:d7:cd:48

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd10.mars-inc.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd10.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd10.mars-inc.com
extratoothfairy.co.uk
home.juicyfruit.com
hallofcurious.com
www.swerve.5gum.com
skittlesdoor.com
lifesaverssharering.com
rockpaper.skittles.ca
www.laporteskittles.com
reparelarcenciel.ca
shareskittles.com
5gumcoachella.com
promotion.excelgum.ca
fixtherainbow.ca
laporteskittles.com
www.rockpaperskittles.ca
www.summerhuntforgold.com
gamemysummer.com
www.wrigleysracingexperience.com
www.wrigleysracing.com
5whatsnext.com
www.dvd.orbitgum.com
www.laporteskittles.ca
www.5winwhatsnext.co.uk
funnybunnygrams.com
clean.orbitgum.com
www.chewwiththecrew.com
www.orbitparty.com
5swerve.com
www.lifesaverssharering.com
www.rockpaperskittles.com
www.wrigleysdriving.com
orbitdirtyshorts.com
reparelarcenciel.com
www.shareskittles.com
wrigleysracingexperience.com
www.wrigleyracetrack.com
eclipsesecrets.com
www.hallofcurious.com
walgreens.extragum.com
controlyourenergy.com
extra-soccer.com
www.extra-soccer.com
laporteskittles.ca
www.createtherainbow.com
chewwiththecrew.com
www.hallofcuriousity.com
thesweetestseats.com
orbitparty.com
www.quierotiempoextra.com
wrigleyracetrack.com
dvd.orbitgum.com
wrigleysracing.com
www.fixtherainbow.ca
www.eclipsesecrets.com
www.thesweetestseats.com
www.reparelarcenciel.ca
www.5gumcoachella.com
summerhuntforgold.com
vivetumusica5.com
spring.orbitgum.com
www.promotion.excelgum.ca
www.wrigleyracing.com
rockpaperskittles.com
www.5whatsnext.com
swerve.5gum.com
www.controlyourenergy.com
wrigleyracing.com
www.theorbitparty.com
theorbitparty.com
www.extratoothfairy.co.uk
hallofcuriousity.com
www.vivetumusica5.com
www.skittlesdoor.com
www.gamemysummer.com
movie.orbitgum.com
rockpaperskittles.ca
quierotiempoextra.com
fixtherainbow.com
www.wrigleysvroom.com
wrigleysvroom.com
www.fixtherainbow.com
www.orbitdirtyshorts.com
5winwhatsnext.co.uk
createtherainbow.com
wrigleysdriving.com
www.home.juicyfruit.com
www.reparelarcenciel.com
www.5gum.nl
5gum.nl
www.5swerve.com
www.funnybunnygrams.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd10.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMajCCC1KgAwIBAgIQBt3D+qAu+ymwpjfRO72H+TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA3MjkwMDAwMDBaFw0yMTA4Mjkx
MjAwMDBaMCMxITAfBgNVBAMTGGF3cy1jZi1yZDEwLm1hcnMtaW5jLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMgQLr2JpQtN3eKQ0TgUyAjC7+sR
epiXc7VPrtqhqdaw/HrEdDB/nGSL5hzoOo5Y1uzSEowY0AT8nslBwUKoK533YjWF
AOvqmqOayiz9CSk6PUBlQLGr+cyMxBac6FSZ7RPIJ1OCjdg6kNO5D5JvGHcqCVHo
pYbywPB5UEusi5kCdUE4NlYZ+i/KOoVSCXvJl2KgqGyUfHgyDuQo6CLzrQFwblGz
IUXL2a2/Kbbq1lUFSUFhbrwo9Qj5KtNvlU9QkCAfyIVDVTqnQAXt7ThnjKiRdzAc
jtUNS1PAlhTp3iGSdUAeden9/OlWhw8ppep4BSKKIcRVMeAg0gpmefw+PVMCAwEA
AaOCCXUwgglxMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud
DgQWBBTWes4tVjBg7N+EcsW21OxG4rDU8TCCCAUGA1UdEQSCB/wwggf4ghhhd3Mt
Y2YtcmQxMC5tYXJzLWluYy5jb22CFWV4dHJhdG9vdGhmYWlyeS5jby51a4ITaG9t
ZS5qdWljeWZydWl0LmNvbYIRaGFsbG9mY3VyaW91cy5jb22CE3d3dy5zd2VydmUu
NWd1bS5jb22CEHNraXR0bGVzZG9vci5jb22CF2xpZmVzYXZlcnNzaGFyZXJpbmcu
Y29tghVyb2NrcGFwZXIuc2tpdHRsZXMuY2GCF3d3dy5sYXBvcnRlc2tpdHRsZXMu
Y29tghNyZXBhcmVsYXJjZW5jaWVsLmNhghFzaGFyZXNraXR0bGVzLmNvbYIRNWd1
bWNvYWNoZWxsYS5jb22CFXByb21vdGlvbi5leGNlbGd1bS5jYYIQZml4dGhlcmFp
bmJvdy5jYYITbGFwb3J0ZXNraXR0bGVzLmNvbYIYd3d3LnJvY2twYXBlcnNraXR0
bGVzLmNhghl3d3cuc3VtbWVyaHVudGZvcmdvbGQuY29tghBnYW1lbXlzdW1tZXIu
Y29tgiB3d3cud3JpZ2xleXNyYWNpbmdleHBlcmllbmNlLmNvbYIWd3d3LndyaWds
ZXlzcmFjaW5nLmNvbYIONXdoYXRzbmV4dC5jb22CFHd3dy5kdmQub3JiaXRndW0u
Y29tghZ3d3cubGFwb3J0ZXNraXR0bGVzLmNhghd3d3cuNXdpbndoYXRzbmV4dC5j
by51a4ITZnVubnlidW5ueWdyYW1zLmNvbYISY2xlYW4ub3JiaXRndW0uY29tghd3
d3cuY2hld3dpdGh0aGVjcmV3LmNvbYISd3d3Lm9yYml0cGFydHkuY29tggs1c3dl
cnZlLmNvbYIbd3d3LmxpZmVzYXZlcnNzaGFyZXJpbmcuY29tghl3d3cucm9ja3Bh
cGVyc2tpdHRsZXMuY29tghd3d3cud3JpZ2xleXNkcml2aW5nLmNvbYIUb3JiaXRk
aXJ0eXNob3J0cy5jb22CFHJlcGFyZWxhcmNlbmNpZWwuY29tghV3d3cuc2hhcmVz
a2l0dGxlcy5jb22CHHdyaWdsZXlzcmFjaW5nZXhwZXJpZW5jZS5jb22CGHd3dy53
cmlnbGV5cmFjZXRyYWNrLmNvbYISZWNsaXBzZXNlY3JldHMuY29tghV3d3cuaGFs
bG9mY3VyaW91cy5jb22CFndhbGdyZWVucy5leHRyYWd1bS5jb22CFWNvbnRyb2x5
b3VyZW5lcmd5LmNvbYIQZXh0cmEtc29jY2VyLmNvbYIUd3d3LmV4dHJhLXNvY2Nl
ci5jb22CEmxhcG9ydGVza2l0dGxlcy5jYYIYd3d3LmNyZWF0ZXRoZXJhaW5ib3cu
Y29tghNjaGV3d2l0aHRoZWNyZXcuY29tghh3d3cuaGFsbG9mY3VyaW91c2l0eS5j
b22CFHRoZXN3ZWV0ZXN0c2VhdHMuY29tgg5vcmJpdHBhcnR5LmNvbYIZd3d3LnF1
aWVyb3RpZW1wb2V4dHJhLmNvbYIUd3JpZ2xleXJhY2V0cmFjay5jb22CEGR2ZC5v
cmJpdGd1bS5jb22CEndyaWdsZXlzcmFjaW5nLmNvbYIUd3d3LmZpeHRoZXJhaW5i
b3cuY2GCFnd3dy5lY2xpcHNlc2VjcmV0cy5jb22CGHd3dy50aGVzd2VldGVzdHNl
YXRzLmNvbYIXd3d3LnJlcGFyZWxhcmNlbmNpZWwuY2GCFXd3dy41Z3VtY29hY2hl
bGxhLmNvbYIVc3VtbWVyaHVudGZvcmdvbGQuY29tghF2aXZldHVtdXNpY2E1LmNv
bYITc3ByaW5nLm9yYml0Z3VtLmNvbYIZd3d3LnByb21vdGlvbi5leGNlbGd1bS5j
YYIVd3d3LndyaWdsZXlyYWNpbmcuY29tghVyb2NrcGFwZXJza2l0dGxlcy5jb22C
End3dy41d2hhdHNuZXh0LmNvbYIPc3dlcnZlLjVndW0uY29tghl3d3cuY29udHJv
bHlvdXJlbmVyZ3kuY29tghF3cmlnbGV5cmFjaW5nLmNvbYIVd3d3LnRoZW9yYml0
cGFydHkuY29tghF0aGVvcmJpdHBhcnR5LmNvbYIZd3d3LmV4dHJhdG9vdGhmYWly
eS5jby51a4IUaGFsbG9mY3VyaW91c2l0eS5jb22CFXd3dy52aXZldHVtdXNpY2E1
LmNvbYIUd3d3LnNraXR0bGVzZG9vci5jb22CFHd3dy5nYW1lbXlzdW1tZXIuY29t
ghJtb3ZpZS5vcmJpdGd1bS5jb22CFHJvY2twYXBlcnNraXR0bGVzLmNhghVxdWll
cm90aWVtcG9leHRyYS5jb22CEWZpeHRoZXJhaW5ib3cuY29tghV3d3cud3JpZ2xl
eXN2cm9vbS5jb22CEXdyaWdsZXlzdnJvb20uY29tghV3d3cuZml4dGhlcmFpbmJv
dy5jb22CGHd3dy5vcmJpdGRpcnR5c2hvcnRzLmNvbYITNXdpbndoYXRzbmV4dC5j
by51a4IUY3JlYXRldGhlcmFpbmJvdy5jb22CE3dyaWdsZXlzZHJpdmluZy5jb22C
F3d3dy5ob21lLmp1aWN5ZnJ1aXQuY29tghh3d3cucmVwYXJlbGFyY2VuY2llbC5j
b22CC3d3dy41Z3VtLm5sggc1Z3VtLm5sgg93d3cuNXN3ZXJ2ZS5jb22CF3d3dy5m
dW5ueWJ1bm55Z3JhbXMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5z
Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZI
AYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB
/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAK1w
z5EjBXrU5fnGQ7pwQ8G28Ps7JHNdDCgUb2aVsixJBMyyI3GqSIK1mqQgYKymP/jr
gr9I6FUU33QeyEM66pcA0Vo2wGLXMv1A4FuRITSDOHl7L4NrYEHGFYL2sxiM6fQo
UddlM08ItyX1tpPcVVjME3e/26/ekHEgxESk8E0TLz4yNW6T4Il2GXkvZ8tonCVg
c8A6lGEo4cwUin7bH66YsBlq3C/95AJz/qysWOgibtrGg4RD0U6/LDfVzt4+mnQd
Ns3lRvuuZVkET2MFsP2eoF6nFqX3MeZx24KIPqsB4OUp/GGetY+0Gm4PJDnNVnN5
JEnzOiK96iW/5tzAgIo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBAuvYmlC03d4pDROBTI
CMLv6xF6mJdztU+u2qGp1rD8esR0MH+cZIvmHOg6jljW7NISjBjQBPyeyUHBQqgr
nfdiNYUA6+qao5rKLP0JKTo9QGVAsav5zIzEFpzoVJntE8gnU4KN2DqQ07kPkm8Y
dyoJUeilhvLA8HlQS6yLmQJ1QTg2Vhn6L8o6hVIJe8mXYqCobJR8eDIO5CjoIvOt
AXBuUbMhRcvZrb8pturWVQVJQWFuvCj1CPkq02+VT1CQIB/IhUNVOqdABe3tOGeM
qJF3MByO1Q1LU8CWFOneIZJ1QB516f386VaHDyml6ngFIoohxFUx4CDSCmZ5/D49
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9126840506933431027295264160069027833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd10.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25255640920636044551328633597003067716176469260841447207820441127278956258227270167061911108812933451651273032403714842717782955274004868896314084898064888035597752850713057596216185721683392438818991749519693116599461046905484457839457304751081357731479110149183130165727905566467736489695953706532608463379909323224527286996478771584372860888216519969555892758154809540070383069572808960477624365834040557683633189162003893158586481797964349214824405880626815279945244017249363592401826344292321981483205598425811895034117322265269157611598472645322461371459204944293294439414011399723624999293731813254212188257619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d67ace2d563060ecdf8472c5b6d4ec46e2b0d4f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2044 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd10.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extratoothfairy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.juicyfruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofcurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swerve.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittlesdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifesaverssharering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockpaper.skittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laporteskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reparelarcenciel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gumcoachella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotion.excelgum.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtherainbow.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laporteskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockpaperskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerhuntforgold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamemysummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysracingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5whatsnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dvd.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laporteskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5winwhatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funnybunnygrams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clean.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chewwiththecrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5swerve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifesaverssharering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockpaperskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysdriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitdirtyshorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reparelarcenciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shareskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysracingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleyracetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsesecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallofcurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walgreens.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlyourenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extra-soccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extra-soccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laporteskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.createtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewwiththecrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallofcuriousity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesweetestseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quierotiempoextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleyracetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvd.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixtherainbow.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eclipsesecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesweetestseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reparelarcenciel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5gumcoachella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhuntforgold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivetumusica5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spring.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotion.excelgum.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleyracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockpaperskittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5whatsnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swerve.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlyourenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleyracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theorbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theorbitparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extratoothfairy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofcuriousity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivetumusica5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittlesdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamemysummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockpaperskittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quierotiempoextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleysvroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysvroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fixtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitdirtyshorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5winwhatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createtherainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleysdriving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.home.juicyfruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reparelarcenciel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5gum.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gum.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5swerve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funnybunnygrams.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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