aws-cf-rd18.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:a1:4e:ca:b6:36:d9:93:3f:c0:95:cb:ab:1c:a8:8a was issued on by Amazon.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd18.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:4e:ca:b6:36:d9:93:3f:c0:95:cb:ab:1c:a8:8a
Serial Number (int): 4825241870009348830130083224883079306
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 55:9d:e1:56:34:dd:a6:57:1b:10:e4:1d:d4:08:50:cd:20:15:cd:40
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e4:42:7f:be:b4:04:ef:00:4c:18:7e:cd:fe:d9:58:32:7a:e0:29:15
Fingerprint (sha256): 2a:1b:e6:85:98:f0:c2:81:9a:ef:c6:fd:0e:ab:45:c1:48:3b:67:25:c4:e1:7d:b6:54:68:3d:bc:1b:3e:56:36

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-rd18.mars-inc.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd18.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd18.mars-inc.com
www.dogsrule.com
www.m-ms.com
digitaldemand.mars.com
www.perfectfit.ch
chewchewbin.com
dogsrule.com
www.vetservices.royalcanin.nl
piper.marvel.mars.com
prescripcionplus.com
www.eukanubasportingdog.com
www.cesarbestiebowls.com
vetservice.royalcanin.dk
www.extragum.com
www.mmscinema.de
announcement.unclebens.com
onecommercial.mars.com
www.chewchewbin.com
www.maltesers.de
tvmrequest.mars.com
ci.mars.com
m-ms.at
brighthorizons.mars.com
www.greeniesexperience.co.uk
pedigreeadoptame.mx
energy4life.mars.com
www.vetservices.royalcanin.se
www.starburst.com
www.unclebens.nz
www.akademiawet.royalcanin.edu.pl
globalmobility.mars.com
eukanubasportingdog.com
monespaceclub.royalcanin.fr
starburst.com
akademiawet.royalcanin.edu.pl
maltesers.de
www.piper.marvel.mars.com
www.skittles.sk
bewellincentive.mars.com
theadoptionmission.com
skittles.cz
cesarbestiebowls.com
www.prescripcionplus.com
www.vetservices.royalcanin.fr
vetservices.royalcanin.nl
orbitgum.com
content.dine.co.nz
www.unclebens.co.nz
unclebens.nz
www.twix.com
skittles.com.au
vetservices.royalcanin.fr
www.vet-followup.royalcanin.co.uk
mars-icecream.de
www.tvmrequest.mars.com
www.ci.mars.com
vetservices.royalcanin.se
skittles.com
www.skittles.com
poautomation.mars.com
www.skittles.cz
vet-followup.royalcanin.co.uk
bakeagainstthemachine.co.uk
skittles.sk
unclebens.co.nz
perfectfit.ch
www.orbitgum.com
m-ms.com
greeniesexperience.co.uk
www.skittles.com.au
www.energy4life.mars.com
www.vetservice.royalcanin.dk
twix.com
digitalstandards.mars.com
mmscinema.de
www.theadoptionmission.com
extragum.com
www.m-ms.at
www.mars-icecream.de
www.bakeagainstthemachine.co.uk
www.digitalstandards.mars.com
opuscomplete.com
www.announcement.unclebens.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd18.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovfVk+1AHi+j5Wg42JZx
QzLe3HQRloBUEDrf3fMpSZXn+NW/booASaPDH5ZBg4rMqwIkmO6Dh+nCnYiMqvzW
/ao91kO+zw7bXEm0E55LNGgZJ24fhITyDUEByo0mqe2OHgbcDGc8FrC2BtKDOiSc
PeRkTs4T0zqwupGmUYGczydcKA6Moobivdb7xttiXJWuPA0Iatsq72oSaeRfXj5v
gquWMc7fPfjkoykGShyRShpoYeEI3nZi4zDgfyDb6NoY1aPdSX3Z/AMDFKfj4lad
aghrLF8fHPmXqY5U0rt2QiPxetiKLLUHTFyQtqLf7QwfF6QSwIiI6hTruN3BKS0V
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4825241870009348830130083224883079306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20572817047018212296203078977294731189284761706592882543865690887918540941719490599608585081658470230913432101003709491333197963107945113209269301678504038555647039132403426648842731634907395226833306544962955186646112403547564182545616850316264430053441588608166728795308794196970190615331552048550924182832036303974880273583743603891941400593394071324505776584657834444232896847619003932400110507600498896415049599022388989588029638749388208356083311209455693975181194414120765890871578605448514015754978476687839736163345526323578384187304090721990713494031264929739486409317814620447427599989790770545123664926157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							559de15634dda6571b10e41dd40850cd2015cd40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1815 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldemand.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'announcement.unclebens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecommercial.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighthorizons.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreeadoptame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy4life.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmobility.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monespaceclub.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewellincentive.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theadoptionmission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dine.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poautomation.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energy4life.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theadoptionmission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opuscomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.announcement.unclebens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018128a35bd40000040300473045022025a07fe403229b3926b35df19b401361f51e72afdd20295ce391445064061c32022100de41ce37cf9aef1a31082d1bc47ff325aec0c5a5c059a72aea7df0a221945aaf00760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000018128a35bf10000040300473045022100a3e078ec0c5975271f5cf813de013836639b7749414a59bdf8f633b0a69d886e02202b95903d6c121b7decf68ed0921aaf9317dc104f4c026660f9e529d56da3ac4e007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018128a35c22000004030047304502210087e9c9e6b32b38a60fcd92b54cffc941d7957ade350f814acf1cbb395914552f022031c628b57b39a6bdd7cec74f92fe22fccdb308148357e16b8d4b1f13a522ddef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00328eaf03ae8a3c0452b122149bda606bc22cbf131b94948c12d6da448f1ded4e8bf482d83b4cabe00abaf69568c2249c7d55c3e27f6560537bd18eb0e9a81f3af1a26f8b29b9187bdd61ae4c5d7f277919183f3688d002080b02df86068b2bc38b9b7929ca5cc3e3148d1f9372fefc2f611a06fec93494659419aeac1263ed4086fa82ebd9381a71d526a0126adf9b4e556299eef1e517df8fc50230e875c416c521004bbf0374565712db7c437c2a9e038c8ea33c1dc0ffc13a16b400c4878c57681c5df1f7c1ad0e40205e4763f3453ac623f624455d01d0c7f378449435d6a4ac434e254f1695167f431a2214fba3ae59edba028189f9add1809b5736beec