aws-cf-rd14.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:0b:25:95:df:d4:3b:13:0f:22:52:09:2d:64:25:9d was issued on by Amazon.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd14.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:0b:25:95:df:d4:3b:13:0f:22:52:09:2d:64:25:9d
Serial Number (int): 16008613538286151751070910348691514781
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 29:23:9c:98:b8:28:c5:86:a4:48:a6:e4:b9:fc:ec:5f:58:26:43:eb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7f:38:c2:3f:35:b5:74:5b:3e:0a:7b:18:2f:bb:e2:d5:9b:61:ff:8c
Fingerprint (sha256): 3d:a9:75:32:7f:21:ce:e9:cc:2f:0c:a8:25:20:de:0e:12:a8:7b:41:3e:07:a3:f5:54:9e:58:35:67:8c:44:a0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-rd14.mars-inc.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd14.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd14.mars-inc.com
freedentpro.fr
5whatsnext.co.uk
mmmnm.com
www.ilspartentavecnous.org
www.cesar.ch
abcdogs.com.br
beginners.unclebens.gr
www.chappi.de
www.m-ms.com.cn
extra-flavorvote-us.wrigleyfb.com
bettergrabgum.com
halloween.mms.com
fb.doveicecream.com
5gum.de
kitekat.at
m-ms.com.au
www.bensbeginners.com
www.mmmnm.com
mms.com.mx
mandmcandies.com
ilspartentavecnous.org
cesar.ch
ariba.mars.com
bounty.sk
pedigree.me
maltesers.co.at
my-perfectfit.de
www.maltesers.at
www.dovechocolate.com.cn
www.marsinthecommunity.co.uk
kupujac-pomagasz.pl
marsinthecommunity.co.uk
www.mms.com.mx
www.marsmtd.com
marskariera.pl
brightideas.com
catboutique.whiskas.ch
ea.mymms.fr
www.m-ms.ch
www.m-ms.com.au
kupujacpomagasz.pl
m-ms.ch
agirpourladoption.com
www.marswrigleyfoundation.com
snickers.com.cn
grootseavonturen.nl
ebly.ch
m-ms.com.cn
customer.mars.com
itms.mars.com
marswrigleyfoundation.com
klm.whiskas.com.cn
commerce.m-ms.com
marsmtd.com
bens-beginners.unclebens.de
celebratethefunnerside.com
articles.greenies.com
marssweetretreat.com
www.marskariera.pl
www.mars-petcare-info.de
frolic.at
www.ebly.ch
api.m-ms.com
maltesers.at
www.mmsworld.com
chappi.de
www.my-perfectfit.de
www.abcdogs.com.br
buy.wrigleyshop.com
mmsworld.com
www.freedentpro.fr
multifunction.royalcanin.no
coachella.5gum.com
beginners.unclebens.co.uk
marsfinalsfever.com.au
cappm.mars.com
dentalmyths.marsfb.com
boarding.royalcanin.com.au
5xmutantgum.com
www.celebratethefunnerside.com
www.maltesers.co.at
www.beginners.unclebens.co.uk
www.brightideas.com
mars-petcare-info.de
cdn.www.dovechocolate.com.cn
wrigleytagwizard.com
bensbeginners.com
hallofcuriosity.com
juicytheories.com
50ansroyalcanin.com
www.kupujacpomagasz.pl

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd14.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE7UIzUd6Il5ARk1HPdA
EWE2i1rS2XPsL2jTiYuy8pchwlcIoLjD/fVSAgE0UTI5dYWFwQXAHiX8O2QtiYkk
6gDuWcWoJTVcjVAgQ1NTEhdGSlG903Ea7EM+ioi/+EXlCPPaf+qP69QbLe2ElFf+
hVUBYNyD930G2Fk56ozJiGwdPrL4sGZUZLo0IiPdAB8euRQTPq6hQP6sDn1R2dEO
9D4Cyu5mAsdWp7H0wSPoSJDT0D1UUXhEV3Sx1+RVuCH98nj0p+H02mqH9X3aphn0
VF8/ra2RoJDcXS6ijNM4+BesOPWM5hoxMQycbdjM83FCbdJdmiDA9mW9MbqqRNmU
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16008613538286151751070910348691514781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd14.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25286532855328336338496217719764884268667722920591376034641595967019103863380779038490256701745511072313660433252693679193753836422618498812708620044126923613324378868292233762776451095291088460817954346095298204161449092657495554173006707924119737219618897040060882945062383957477578195367762374766951521236812779397951216748208925282458614480503039241868637848817803530952948242539145421516149851453787665494185466852729049893903013436524657867196230558345808782811471474173656301949684249173541253910677663895051657671811794743031458544820583976656033600718016592148481975313013895267071071200113546534677363922039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29239c98b828c586a448a6e4b9fcec5f582643eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd14.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedentpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5whatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmmnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilspartentavecnous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beginners.unclebens.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chappi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extra-flavorvote-us.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettergrabgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloween.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.doveicecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitekat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensbeginners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmmnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandmcandies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilspartentavecnous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariba.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounty.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigree.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-perfectfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsinthecommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupujac-pomagasz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsinthecommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mms.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsmtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marskariera.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catboutique.whiskas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.mymms.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupujacpomagasz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agirpourladoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marswrigleyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grootseavonturen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itms.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marswrigleyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klm.whiskas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsmtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bens-beginners.unclebens.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratethefunnerside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.greenies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marssweetretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marskariera.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-petcare-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frolic.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chappi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-perfectfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.wrigleyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedentpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multifunction.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachella.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beginners.unclebens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsfinalsfever.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappm.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalmyths.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boarding.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5xmutantgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebratethefunnerside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beginners.unclebens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-petcare-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.www.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleytagwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensbeginners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofcuriosity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicytheories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50ansroyalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kupujacpomagasz.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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