ci-euw1.ireland.delivery.aimatch.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:dd:2b:3b:10:89:81:c7:28:a2:33:55:a5:ac:37:77 was issued on by Amazon.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ci-euw1.ireland.delivery.aimatch.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:dd:2b:3b:10:89:81:c7:28:a2:33:55:a5:ac:37:77
Serial Number (int): 15769882382562812724806310402393388919
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:ed:7a:c3:e5:fd:04:5a:73:90:7c:b8:f8:cb:a8:de:af:13:d0:27
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): cc:0d:db:1e:65:a8:d3:f8:4d:35:17:df:fe:28:ad:c4:b9:9f:08:83
Fingerprint (sha256): 33:1d:60:35:cb:86:07:03:e6:36:b1:c1:3e:15:e9:2c:7d:a7:2d:0a:03:23:55:bb:dd:06:57:72:6e:05:c9:40

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ci-euw1.ireland.delivery.aimatch.net

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-euw1.ireland.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-euw1.ireland.delivery.aimatch.net
delivery-ci360.frankfurt-airport.com
delivery-ci360.altibox.no
delivery-ci360.coopforsikringer.dk
delivery-ci360.meny.no
delivery-ci360.byadf.cz
delivery-ci360.paribucineverse.com
delivery-ci360.conrad.com
delivery-ci360.marketing.officedepot.eu
delivery-ci360.magazine.nl
delivery-ci360.yolo-insurance.com
qa-delivery-ci360.flypgs.com
delivery-ci360.elanyo.com
delivery-ci360.tfgtst.co.za
delivery-ci360.tim.it
delivery-coll-sas360.unipolsai.it
del.mm.dm.si
delivery360.kbinfo.cz
delivery.ci360.telekom.si
delivery-ci360.kiwi.no
delivery-ci360-p.post.ch
delivery-dev.ci360.tpp.commerzbank.de
delivery-ci360.knvb.nl
delivery-ci360.next.co.uk
delivery-ci360-i.post.ch
del.t.mm.dm.cz
delivery-ci360.hopi.com.tr
delivery.dma.huk.de
delivery-ci360.bidcompany.it
delivery-ci360.ah.nl
delivery-kclientd-ci360.wafasalaf.ma
delivery-ci360.fratellicarli.com
delivery-ci360.ruv.de
delivery-ci360-s.jyskebank.dk
del.mm.dm.cz
delivery-sas360.unipolsai.it
delivery-ci360.rbfa.be
del.mm.dm.pl
delivery-ci360.danskebank.dk
delivery-ci360.test.ah.nl
del.t.mm.dm.pl
del.mm.dm.de
delivery-ci360.trumf.no
del.t.mm.dm.de
delivery-ci360.baloise.ch
delivery-ci360.icabanken.se
delivery-ci360.pc-prod.marsgate.com.tr
del.mm.dm.hr
delivery-ci360-at3.altibox.no
del.mm.dm.hu
delivery-ci360.test.movistar.es
delivery-ci360.igapass.igairport.aero
delivery-kclientp-ci360.wafasalaf.ma
delivery-ci360.altinyildizclassics.com
delivery-ci360.topdanmark.dk
delivery-ci360.test.hopi.com.tr
delivery-ci360.rtest.ruv.de
del.mm.dm-drogeriemarkt.it
delivery-ci360.standrews.com
delivery-ci360.stage.money.com.tr
del.mm.dm.mk
del.mm.dm-drogeriemarkt.ba
delivery-tud.ci360.tpp.commerzbank.de
delivery-ci360.movistar.es
del.mm.dm-drogeriemarkt.ro
delivery-360.homecredit.cz
delivery-tuc.ci360.tpp.commerzbank.de
delivery-ci360.arcaplanet.it
del.mm.mojadm.sk
delivery-ci360.money.com.tr
del.t.mm.dm.at
delivery360.satur.sk
delivery-ci360.qa.fratellicarli.com
del.mm.dm.at
delivery-ci360.test.icabanken.se
delivery-ci360.pzu.pl
delivery.ci360.tpp.commerzbank.de
delivery-prod.isic.cz
delivery-ci360.igapass.com
delivery-ci360.flypgs.com
delivery-ci360.test.danskebank.com
del.mm.dm.rs
del.mm.dm-drogeriemarkt.bg
delivery-ci360.jyskebank.dk
delivery-ci360.generali.sk
delivery.isic.cz
delivery-ci360.footbelsite-acc.rbfa.be

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-euw1.ireland.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGcdOfTSMBvJJj+OKIJb
ReBr3zEuBSxRqnFKI4D0o+UGeWD3nNqFWFCz8con74/uRN80Mzud5fAcybhlm6Ew
AiOVR0DmRHaGkWmoxel3bsSocMHa+DJgAAlbLrtinEi/rZKuPJE4NI4v6V6uxIve
dFnBjWvRVoWJWKf4NPQ1lQHuX4TI6DtfqqH239LjtacKkwEMustoM6pD4kO6OlgT
3zPN8EqpU3nJ+G4seftykos8wo/yIvKPqLoZjAdO2w1M+1VSEcjG2QKct0e2aujB
aaPcblEBFdb5IIB14bTBaW3rL7sYzjp69zJbwnr+WBQRMe5blSmk/rKk0+rPCpGj
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15769882382562812724806310402393388919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25803461703241999440971587046304247485793352982234485870867290169387563111897991954056260390110141055725390492785349684087351244089507388609744807245434409231560803754945964247396856775962709023154702170612328078027855503065980697067741676282386052343502804680055617916232771283186105570519140529036755691627786659623622416005946682330705643534688925958754059830342416187633952426021115644800390624203333681153968742003014375384029075095060700932619042240443090731373646947822350623694291377940120216671248478887586939423005607863022711795946034923425677833498106542949297362433003860029377426581332900084196792443867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84ed7ac3e5fd045a73907cb8f8cba8deaf13d027
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coopforsikringer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.meny.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.byadf.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.paribucineverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.conrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.yolo-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.elanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.tfgtst.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.tim.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-coll-sas360.unipolsai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.kbinfo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ci360.telekom.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.kiwi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-p.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-dev.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.knvb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.next.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-i.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.hopi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.dma.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.bidcompany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.ah.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientd-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-s.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-sas360.unipolsai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.danskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.ah.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.trumf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.baloise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.icabanken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.pc-prod.marsgate.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-at3.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.igapass.igairport.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientp-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.altinyildizclassics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.hopi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rtest.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.standrews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.stage.money.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tud.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tuc.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.arcaplanet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.money.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.satur.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.qa.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.icabanken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.pzu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-prod.isic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.igapass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.danskebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.generali.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.isic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.footbelsite-acc.rbfa.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bb128da2e3c925fd6ca90afe6f5c94673dd9e3ed48f147584c27814d2a61391811cb517a7669d914a00038ef7d3f68c3ed76dc742ce2724c0a34ea210429a6ea71472dcbb3b2c2f62afb73fa09cb3d77c70d6028d65aa8b2fa1781be32a8bab68d849fccc2e13d1f88051cbf0508953e52b45a9ca4debee1883f4b7c80f7a53c12374a40854561377d99973180403bd6212e96deabc4dab0e31811e60136a6da86054cf734ba0a369ea0af57b78771a6e0c4b3bd71317493143c51be61494bd6fdafe27ad403426fa102c5da5cdbab828a6c413a1789368142aac39cc4e40d93cdd7b2e875b0b6ec88d472d08766d74ac5e38496358d52252894ac472fb4beb3