aws-cf-rd16.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:3c:af:43:2d:79:a3:38:a5:84:60:e6:c0:fd:de:df was issued on by Amazon.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd16.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3c:af:43:2d:79:a3:38:a5:84:60:e6:c0:fd:de:df
Serial Number (int): 5632004538693156904176905917334150879
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 49:bb:20:2a:7d:21:4e:b3:3f:7b:c7:db:84:fe:49:dd:85:9b:1e:94
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a9:07:28:c8:ff:fb:f4:2c:ac:bc:77:a8:2c:60:3d:f6:a5:b8:d0:5c
Fingerprint (sha256): 55:4b:68:32:68:4b:b3:82:4d:79:90:96:b4:88:ab:9e:ca:bb:7a:57:7a:c2:8b:73:e7:9a:f8:e2:b7:47:d9:22

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd16.mars-inc.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd16.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd16.mars-inc.com
cacaopathogenomics.com
cdn.weiboapp02.m-ms.com.cn
shop.royal-canin.ch
kitekat.nl
www.gumswap.extragum.com
signature.mars.com
marsriegel.de
fr.m-ms.ch
icb.mars.com
wuerdig.snickers.de
devops.mars.com
www.movie.orbitgum.com
mntest.mars.com
milkyway.ca
nyeremenyjatek.royalcanin.hu
cdn.weiboapp01.snickers.com.cn
car.mars.com
izazov.snickers.com.hr
www.walgreens.extragum.com
futbol.m-ms.es
digitalservicedesk.mars.com
www.principlesinaction.wrigley.com
fr.mobile.cesar.com
contact.twix.com
cdn.weiboapp01.m-ms.com.cn
ppm.mars.com
boarding.royalcanin.co.nz
cdn.klm.whiskas.com.cn
www.rockpaper.skittles.ca
cdn.weiboapp01.dovechocolate.com.cn
mmsmeilleurmelange.ca
chatbots.mars.com
eclipsemints.marsapps.com.au
www.giveitup.extragum.com
cdn.weiboapp03.m-ms.com.cn
mentalhealthus.mars.com
mylegal.mars.com
amazon-orders.wrigleyshop.com
dzielsieusmiechem.pl
mmmworld.com
bmsprod.web.rcad.net
www.clean.orbitgum.com
cdn.weiboapp02.snickers.com.cn
itms-stage.mars.com
www.tradepromo.wrigley.com
soutez.snickers.cz
oracle.snickers.com
globalsign.galaxychocolate.co.uk
www.walgreens.orbitgum.com
marsgraduates.com.au
nutronaturalchoice.gr
ask.cesar.com
contact.snickers.com
financemanual.mars.com
breedingmanagementsupport.extranet.royalcanin.org
engagement.mars.com
movieoffer.mms.com
spaceheroes.m-ms.dk
autravel.mars.com
lamp.snickers.de
blippsnickers.mars.com
de.m-ms.ch
milkyway.com.mx
cdn.weiboapp04.m-ms.com.cn
cosmos.mars.com
test.hungerithm.com
sxbtalent.mars.com
m-ms.eu
ar.m-ms.com.au
review.starburst.com
chatbot.mars.com
mball.m-ms.ch
pdhb.mars.com
www.spring.orbitgum.com
aribas2p.mars.com
mmscinema.pt
learning.royalcanin.no
eclipsemints.wrigleyextra.com.au
mdmms.com
library.mpa.mars.com
orderpilot.mmmars.com
www.oralhealth.wrigley.com
mylegalteam.mars.com
union.mms.com
www.storefinder.m-ms.com
skittles-rainbowride-de.wrigleyfb.com
reviews.starburst.com
cdn.www.m-ms.com.cn
consent.mars.com
snickersfixtheworld.com
support.sol.sitenka.ru
kurs.royalcanin.no

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd16.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eKj40rm9zSh7UD5H4sq
EiZMITmDG2IygPR9+cNCPyjx0QYgN3qoBTuB4W2CjFw7p6vmcbwD0IPtxOt2iiRD
/hYKQeZbFfc5XiHsF4exCkyMsvZXADB+isjd63LWsdHGuWUHPcIUhHYLc2gmWuEM
7yUHWGskIoUFQ/X03iheo9QgSj3Z8g0Rxuygp2XI0W3TVgi/HmEWtMxQ+3tUuH0s
zT0m8m63p37yjCRhMEMhaCctSFrrTH9F09hL41W811+Utz6izapSMacLjDEfgIux
bk6Gxf09dFi44lreMJX6TxOYK0nhyGB7KdOqp96muyxNkwuLzfQaw+4vTN9pvV91
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5632004538693156904176905917334150879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd16.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29020332278785921259103665306183028674865658525879551702859038785018818539427820231553556532327033716369686843032815504464019375372646742748953062305176166800483513668166721448798650521715130834577584546512220016765196194397664182210602388978998911550545799587604940964144250740933251073484901194677110627087058431372820407827504453002047731315876985093011165167599246009871488167204678944071097278355628266700271637491699011855659588967532137486674187580116778072587331234807130822430721006615743665902887833121251773436720462057452685100070577771161031259993372321791622323619724616984311203518411919766735422453037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49bb202a7d214eb33f7bc7db84fe49dd859b1e94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2089 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd16.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacaopathogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp02.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.royal-canin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitekat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gumswap.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsriegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icb.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuerdig.snickers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devops.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movie.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mntest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkyway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyeremenyjatek.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izazov.snickers.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walgreens.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futbol.m-ms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicedesk.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.principlesinaction.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.mobile.cesar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppm.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boarding.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.klm.whiskas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockpaper.skittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsmeilleurmelange.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbots.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsemints.marsapps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveitup.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp03.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalhealthus.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegal.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-orders.wrigleyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzielsieusmiechem.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmmworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsprod.web.rcad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clean.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp02.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itms-stage.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradepromo.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soutez.snickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oracle.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsign.galaxychocolate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walgreens.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsgraduates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutronaturalchoice.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.cesar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financemanual.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breedingmanagementsupport.extranet.royalcanin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagement.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieoffer.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceheroes.m-ms.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autravel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamp.snickers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blippsnickers.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkyway.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp04.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.hungerithm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxbtalent.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.m-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mball.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdhb.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aribas2p.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmscinema.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsemints.wrigleyextra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.mpa.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderpilot.mmmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralhealth.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegalteam.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'union.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storefinder.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles-rainbowride-de.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.www.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersfixtheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sol.sitenka.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurs.royalcanin.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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