ci-euw1.ireland.delivery.aimatch.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:1a:22:b2:a3:17:c9:e9:90:bf:66:1a:df:2d:f8:c4 was issued on by Amazon.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ci-euw1.ireland.delivery.aimatch.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:1a:22:b2:a3:17:c9:e9:90:bf:66:1a:df:2d:f8:c4
Serial Number (int): 2794159464906004358910889056271202500
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 17:ab:2b:65:03:0a:34:c7:79:7c:2f:b2:e5:ee:c6:84:4b:f4:38:a7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d2:bb:e0:b0:3b:0e:a9:b6:0b:7a:ad:d6:ac:2e:b2:37:18:cb:db:e4
Fingerprint (sha256): 43:28:6e:aa:7e:94:c0:f2:d2:b6:3d:09:6c:9b:99:9f:a4:e5:cf:01:43:57:09:42:8e:75:8d:1f:2a:d1:25:d3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ci-euw1.ireland.delivery.aimatch.net

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-euw1.ireland.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-euw1.ireland.delivery.aimatch.net
delivery-ci360.frankfurt-airport.com
delivery-ci360.altibox.no
delivery-ci360.coopforsikringer.dk
delivery-ci360.byadf.cz
delivery-ci360.meny.no
delivery-ci360.conrad.com
delivery-ci360.paribucineverse.com
delivery-ci360.marketing.officedepot.eu
qa-delivery-ci360.flypgs.com
delivery-ci360.yolo-insurance.com
delivery-ci360.elanyo.com
delivery-ci360.tfgtst.co.za
delivery-ci360.tim.it
delivery-coll-sas360.unipolsai.it
del.mm.dm.si
delivery360.kbinfo.cz
delivery.ci360.telekom.si
delivery-ci360.kiwi.no
delivery-ci360-p.post.ch
delivery-dev.ci360.tpp.commerzbank.de
delivery-ci360.knvb.nl
delivery-ci360.next.co.uk
delivery-ci360-i.post.ch
del.t.mm.dm.cz
delivery-ci360.hopi.com.tr
delivery.dma.huk.de
delivery-ci360.bidcompany.it
delivery-ci360.ah.nl
delivery-kclientd-ci360.wafasalaf.ma
delivery-ci360.fratellicarli.com
delivery-ci360.ruv.de
delivery-ci360-s.jyskebank.dk
del.mm.dm.cz
delivery-sas360.unipolsai.it
delivery-ci360.rbfa.be
del.mm.dm.pl
delivery-ci360.danskebank.dk
delivery-ci360.test.ah.nl
delivery-ci360.trumf.no
del.t.mm.dm.pl
del.mm.dm.de
del.t.mm.dm.de
delivery-ci360.baloise.ch
delivery-ci360.icabanken.se
del.mm.dm.hr
delivery-ci360.pc-prod.marsgate.com.tr
delivery-ci360-at3.altibox.no
del.mm.dm.hu
delivery-ci360.test.movistar.es
delivery-ci360.igapass.igairport.aero
delivery-kclientp-ci360.wafasalaf.ma
delivery-ci360.altinyildizclassics.com
delivery-ci360.topdanmark.dk
delivery-ci360.test.hopi.com.tr
delivery-ci360.rtest.ruv.de
del.mm.dm-drogeriemarkt.it
delivery-ci360.standrews.com
delivery-ci360.stage.money.com.tr
del.mm.dm.mk
delivery-tud.ci360.tpp.commerzbank.de
del.mm.dm-drogeriemarkt.ba
delivery-ci360.movistar.es
del.mm.dm-drogeriemarkt.ro
delivery-360.homecredit.cz
delivery-tuc.ci360.tpp.commerzbank.de
delivery-ci360.arcaplanet.it
del.mm.mojadm.sk
delivery-ci360.money.com.tr
delivery360.satur.sk
del.t.mm.dm.at
delivery-ci360.test.icabanken.se
del.mm.dm.at
delivery-ci360.qa.fratellicarli.com
delivery-ci360.pzu.pl
delivery.ci360.tpp.commerzbank.de
delivery-prod.isic.cz
delivery-ci360.igapass.com
delivery-ci360.flypgs.com
delivery-ci360.test.danskebank.com
del.mm.dm-drogeriemarkt.bg
del.mm.dm.rs
delivery-ci360.generali.sk
delivery-ci360.jyskebank.dk
delivery.isic.cz
delivery-ci360.footbelsite-acc.rbfa.be

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-euw1.ireland.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmllZ+dScJlty1NefKU2E
7QqRmok6AcAg1ztR81ckXOXJy+Sv63+SvDsioV1ZzAyAFyeH3+gBHfH5jQOilq5K
toPv7+P/mv0eMCL4cbYhlL4HUk0sIGAPEdpCXFBug2MIidfgPXSxfSgPfD3SNMOZ
sYloZwFf9mSAzV9Wm6+x93WzK0PAaf4sK2LNwS4BdDe3LSHAYgS3CyL+3czw9q0y
/yLMhe5eSLTPHA7DQUl2+/QjUXmkKAWMZikPLvgoIERk7Wc1ZKi4THk+wzAympTM
+fZusWuDsD1YUfjRM9S8tWeXC4YpEuel/iDs00NVerLQGRDoh56nKo+fgXkVxLno
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2794159464906004358910889056271202500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19484759815992259443528566841244208993836321212349661413327320705368610306899606843225648637540132506711599573607391349956837066168287491863886400132602639980680870988419462424458614638244512727338616396177602489228883902511853631610866915033221936366473408149683633762154136791615321303818539932088944911205393352586585237681761079704573025275769206811274079507632937533269524285566676690323025092956928646373450934020926519789206778061869905217982710819886305611610337688586162078371902127499456163266360005841990744872331679649620536631606281606668133781671260533354439852778402727482586202848342890360481957669087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17ab2b65030a34c7797c2fb2e5eec6844bf438a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2381 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-euw1.ireland.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.coopforsikringer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.byadf.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.meny.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.conrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.paribucineverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.yolo-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.elanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.tfgtst.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.tim.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-coll-sas360.unipolsai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.kbinfo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ci360.telekom.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.kiwi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-p.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-dev.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.knvb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.next.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-i.post.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.hopi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.dma.huk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.bidcompany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.ah.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientd-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-s.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-sas360.unipolsai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.danskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.ah.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.trumf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.baloise.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.icabanken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.pc-prod.marsgate.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360-at3.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.igapass.igairport.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-kclientp-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.altinyildizclassics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.hopi.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.rtest.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.standrews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.stage.money.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tud.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.movistar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-360.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-tuc.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.arcaplanet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.money.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.satur.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.t.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.icabanken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.qa.fratellicarli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.pzu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.ci360.tpp.commerzbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-prod.isic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.igapass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.flypgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.test.danskebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'del.mm.dm.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.generali.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.isic.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.footbelsite-acc.rbfa.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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