aws-cf-rd15.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:99:bb:c7:eb:bf:30:14:e0:e7:c4:42:28:2e:07:be was issued on by Amazon.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd15.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:99:bb:c7:eb:bf:30:14:e0:e7:c4:42:28:2e:07:be
Serial Number (int): 3456686060885992772239921422558693310
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 9f:46:60:c3:25:a2:b0:02:17:45:5f:71:69:b6:69:89:d8:78:d2:d8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 35:a2:be:a7:b2:9f:e0:c0:fa:d5:13:d4:00:d1:13:2f:fa:72:45:06
Fingerprint (sha256): 35:41:bc:9c:86:4e:18:4c:10:c2:0d:4c:15:3c:95:6c:f1:b7:a5:2e:f0:5e:1a:39:62:c3:bc:bb:b1:78:40:ef

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd15.mars-inc.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd15.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd15.mars-inc.com
r.5gum.com
mynutro.com
www.twix.cz
royalcanin.tw
nutro.pt
snacklish.snickers.com
weiboapp01.dovechocolate.com.cn
www.pedigreeloyalty.com
www.posilekdlaschroniska.pl
twix.cz
raisedmetocare.com
www.marsgraduates.com.au
www.snickersbigmood.com
snickersfixedtheworld.com
snickers.ba
mymoms.net
snickers.fi
sweetprizes.com
www.snickers.fi
vmp.mars.com
oralcareeducation.com
winergy.de
www.snickers.com
marspetfood.com
www.petribbon.at
snickersbigmood.com
nutrostrd.marsfb.com
unclebens.sk
whatsnext5.co.uk
www.snickers.ba
www.winergy.de
mymms.eu
www.unclebens.sk
snickers.si
weiboapp04.m-ms.com.cn
twix.sk
petribbon.at
smarttreating.marsfb.com
weiboapp03.m-ms.com.cn
whatsnext5.com
www.twix.co.uk
weiboapp01.m-ms.com.cn
zasadywdzialaniu.pl
www.wildfrontier.com
www.cacaopathogenomics.com
saythankswithsnickers.com
www.myxnm.com
wyborsmakoszy.pl
womenofmars.com
www.unclebens-specials.gr
www.oralcareeducation.com
spotlight.orbitgum.com
unclebens.cz
weiboapp01.snickers.com.cn
www.mdmms.com
www.unclebens.cz
vyhrajsesnickers.cz
mymnds.com
myxnm.com
unamourdechat.com
twix.be
twix.co.uk
pedigreeloyalty.com
unclebens-specials.gr
unclebens.hu
www.unclebens.hu
www.abcdogs.com.br
posilekdlaschroniska.pl
vyhrajsosnickers.sk
wrigleys5whatsnext.com
uk-starburst-basket.wrigleyfb.com
snickers.com
wildfrontier.com
www.twix.be
www.vyhrajsesnickers.cz
tuneout.altoids.com
wrigleys5whatsnext.co.uk
www.mymms.eu
www.unamourdechat.com
wrigley.co.uk
www.vyhrajsosnickers.sk
www.wrigley.co.uk
www.m-ms.eu

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd15.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxubvgOEGwr5Az8l3q1L
SPa6POOhPl9ewn24XkNQwcD4kZ5n7hnsuE33aQh0OjS0jLwDiGBX+jY/9P9sm7Q3
+wKK/zRJoStJIbTvzUswrAXQD7kOSKe9dJArvRDU5vYoG/rpYUiuTLJJ43MhC1dk
IExf1l7rxiho+l2vUNqbAJSXHSH5mVlITNwRuVh8KO466P8FMuZ4JSwUd5Pb30pk
TBGSdMElJb0idJGLfgOlzSNIEngWkIJDjzdqGciWdRiR8CC0BHArLymVyssaOEHX
sSF8n3U/FjE938DQ7tNk7asLfSh0DRb2iG+cxBMWo78kHisJaCS+VYlyPBttfTFj
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3456686060885992772239921422558693310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd15.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18570645023743220142525449922836659159127490842634756958830873506158719986669975417698431500722288886725816877716897699019070558711669913046746318804348725766332026314821612672673003449567781488491224030304313056537727368471864411104656418831192674189299349674331040597822757082704229983695307839591773527231218770800777518054530104429006014022491687692502503958128452129214355655599001436391570606022294581905120937238243406058488714668169406208941277945979453778073929252679942282188437261778598754101801570929506333491750296229537528430750810128974266481249629988231328292146126610730498961803253453085671632757563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f4660c325a2b00217455f7169b66989d878d2d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1599 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd15.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynutro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutro.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snacklish.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pedigreeloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posilekdlaschroniska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raisedmetocare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsgraduates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickersbigmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersfixedtheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymoms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetprizes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmp.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oralcareeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winergy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marspetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petribbon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersbigmood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrostrd.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext5.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snickers.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winergy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp04.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petribbon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smarttreating.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp03.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsnext5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zasadywdzialaniu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacaopathogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saythankswithsnickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myxnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyborsmakoszy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenofmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens-specials.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralcareeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlight.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiboapp01.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyhrajsesnickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymnds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myxnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unamourdechat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreeloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens-specials.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posilekdlaschroniska.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyhrajsosnickers.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleys5whatsnext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-starburst-basket.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildfrontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyhrajsesnickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneout.altoids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleys5whatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unamourdechat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vyhrajsosnickers.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174c12bb4b10000040300473045022006cce1ea8eae226d5343772234ab6d62b62444739c524fddee17e778f0cfa66e022100f377831bf59d2d5b2a7d6899b800122c52419301633db8897e5661cd5cae03930077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174c12bb4fe00000403004830460221009fa6a77c2cdcbe40eadfc08aa37f1217f67d729813abb0963b45d41868f797c4022100b2eff2b0d6fd067a5c35ee211c5e7ac581e2f0a81b04b711e6814247d462c16f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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