dg-0066-5dceb1a.client-tls.adestra.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:c6:a7:62:b8:bd:7e:5a:2a:0b:7c:00:e5:67:59:0b was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dg-0066-5dceb1a.client-tls.adestra.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:c6:a7:62:b8:bd:7e:5a:2a:0b:7c:00:e5:67:59:0b
Serial Number (int): 15652977715562032167704916580704409867
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1a:62:99:b2:85:5b:cb:4d:91:45:61:de:35:e5:1e:cf:e4:14:60:46
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 31:8e:9a:ea:61:c7:36:72:24:81:a7:c6:1d:4e:74:35:b9:b7:6a:0c
Fingerprint (sha256): 57:ff:d2:0b:b9:12:3c:95:78:15:aa:06:dc:a6:93:83:8c:64:0a:e4:a7:8c:f0:ed:f3:40:95:60:da:ae:a0:cd

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate dg-0066-5dceb1a.client-tls.adestra.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dg-0066-5dceb1a.client-tls.adestra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dg-0066-5dceb1a.client-tls.adestra.com
email.ifa.org.uk
e-news.fm-world.co.uk
event.cipfaannualconference.org.uk
email.publicfinance.co.uk
event.cqiconference.org
email.thechemicalengineer.com
event.publicfinanceawards.co.uk
mail.iemaawards.net
mail.rcmconference.org.uk
email.theactuaryjobs.com
email.cpoagenda.com
mail.iwfmimpactawards.co.uk
event.rec-awards.com
email.theactuary.com
event.publicfinancelive.org
email.redactive.co.uk
e-news.facilitatemagazine.com
e-news.thebiomedicalscientist.net
recruitment-matters.rec.uk.com
jobsemail.cibsejournal.com
email.ioshmagazine.com
email.recruiter.co.uk
newsletter.iema-transform.net
e-news.theactuary.com
email.theplanner.co.uk
event.rcmawards.com
email.ifst.org

Other certificates including the domain name adestra.com

(limited to 100 certificates)
statuspage.io
www.adestra.com
adestra.com
*.adestra.com
statuspage.io
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
prostatus.whitepages.com
dg-0109-77cf551.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
dg-0070-c174270.client-tls.adestra.com
dg-0150-2354af7.client-tls.adestra.com
dg-0067-b4f0d23.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
dg-0008-7ca737e.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0085-edb0cc1.client-tls.adestra.com
apac-status.cayuse.com
statuspage.io
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0123-38b8329.client-tls.adestra.com
dg-0002-02ce7f1.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0004-127170c.client-tls.adestra.com
statuspage.io
dg-0085-edb0cc1.client-tls.adestra.com
statuspage.io
dg-0149-55938d1.client-tls.adestra.com
dg-0114-cba5df0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0087-960804b.client-tls.adestra.com
prostatus.whitepages.com
dg-0013-b3d7a9c.client-tls.adestra.com
dg-0148-917b0d1.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0072-d73c216.client-tls.adestra.com
statuspage.io
dg-0125-dc75dcd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0134-2e87d88.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
statuspage.io
prostatus.whitepages.com
prostatus.whitepages.com
statuspage.io
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0102-ddf9d6b.client-tls.adestra.com
statuspage.io
dg-0026-6664b28.client-tls.adestra.com
dg-0109-77cf551.client-tls.adestra.com
dg-0140-62ed5ac.client-tls.adestra.com
dg-0105-2d8a3ed.client-tls.adestra.com
dg-0116-e68f716.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0113-21a1b55.client-tls.adestra.com
statuspage.io
statuspage.io
prostatus.whitepages.com
dg-0031-fc95c30.client-tls.adestra.com
statuspage.io
statuspage.io
dg-0133-2f5a5bb.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
statuspage.io
dg-0098-f0d9eae.client-tls.adestra.com
dg-0154-9db8122.client-tls.adestra.com
dg-0037-9b515dd.client-tls.adestra.com
dg-0144-e509e47.client-tls.adestra.com
statuspage.io
dg-0146-7cb0364.client-tls.adestra.com
statuspage.io

Certificate

The complete raw certificate details for dg-0066-5dceb1a.client-tls.adestra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIvDCCB6SgAwIBAgIQC8anYri9floqC3wA5WdZCzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDQyNTAwMDAwMFoXDTI1MDUyNDIzNTk1OVowMTEv
MC0GA1UEAxMmZGctMDA2Ni01ZGNlYjFhLmNsaWVudC10bHMuYWRlc3RyYS5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNe8Q2OXnnzF01V9TAeOUF
RT0S2ncl75fjzHeV1e1BJ6SKaVahWDlIsavjwKMbbMKghdxUP8eDuqJJJ4M2rGGL
4/fIdFujWmcRqVfDZVqLDLDkQ9Df6Ul06WTuueYDmHLMQjyZH2aUBX6uoXO8isXw
tXAVEY5Ol6XFhIWsgO4udTgk5FBEAe6LH5FCDE5VYi+drNjoVdpbYQaZ3mp4Wagm
BFUxw2hPvm1X1TlEPmtPHddgMcSa0fbA07Vfb4Al7hyEO7X18IaJaOLnPqkoyufW
/+AKR88DL7eqnms/6AT7Ew7eh5jMHxrWJeO13ZFjmFTdtO9oPvXOzI7G7eNvtJAR
AgMBAAGjggXDMIIFvzAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAd
BgNVHQ4EFgQUGmKZsoVby02RRWHeNeUez+QUYEYwggLyBgNVHREEggLpMIIC5YIm
ZGctMDA2Ni01ZGNlYjFhLmNsaWVudC10bHMuYWRlc3RyYS5jb22CEGVtYWlsLmlm
YS5vcmcudWuCFWUtbmV3cy5mbS13b3JsZC5jby51a4IiZXZlbnQuY2lwZmFhbm51
YWxjb25mZXJlbmNlLm9yZy51a4IZZW1haWwucHVibGljZmluYW5jZS5jby51a4IX
ZXZlbnQuY3FpY29uZmVyZW5jZS5vcmeCHWVtYWlsLnRoZWNoZW1pY2FsZW5naW5l
ZXIuY29tgh9ldmVudC5wdWJsaWNmaW5hbmNlYXdhcmRzLmNvLnVrghNtYWlsLmll
bWFhd2FyZHMubmV0ghltYWlsLnJjbWNvbmZlcmVuY2Uub3JnLnVrghhlbWFpbC50
aGVhY3R1YXJ5am9icy5jb22CE2VtYWlsLmNwb2FnZW5kYS5jb22CG21haWwuaXdm
bWltcGFjdGF3YXJkcy5jby51a4IUZXZlbnQucmVjLWF3YXJkcy5jb22CFGVtYWls
LnRoZWFjdHVhcnkuY29tghtldmVudC5wdWJsaWNmaW5hbmNlbGl2ZS5vcmeCFWVt
YWlsLnJlZGFjdGl2ZS5jby51a4IdZS1uZXdzLmZhY2lsaXRhdGVtYWdhemluZS5j
b22CIWUtbmV3cy50aGViaW9tZWRpY2Fsc2NpZW50aXN0Lm5ldIIecmVjcnVpdG1l
bnQtbWF0dGVycy5yZWMudWsuY29tghpqb2JzZW1haWwuY2lic2Vqb3VybmFsLmNv
bYIWZW1haWwuaW9zaG1hZ2F6aW5lLmNvbYIVZW1haWwucmVjcnVpdGVyLmNvLnVr
gh1uZXdzbGV0dGVyLmllbWEtdHJhbnNmb3JtLm5ldIIVZS1uZXdzLnRoZWFjdHVh
cnkuY29tghZlbWFpbC50aGVwbGFubmVyLmNvLnVrghNldmVudC5yY21hd2FyZHMu
Y29tgg5lbWFpbC5pZnN0Lm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAz
LmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIy
bTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0w
My5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwGA1UdEwEB/wQCMAAwggF/Bgor
BgEEAdZ5AgQCBIIBbwSCAWsBaQB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6
ZLFimjnfAAABjxSTMdAAAAQDAEcwRQIhAKlJHOm7DZZTMUmP6qba6ChNZ6qW9NHw
SNxSxYrSOSlaAiAMVjwHrXpEFZV45l2YrYFVxfTNwK+4VRvBfnxxa7d6xQB3AH1Z
HhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjxSTMUkAAAQDAEgwRgIh
ANZB2l+moY8VBF6HoeEdCmfCyvfse2CcnoaenHXfbcIoAiEA7dCy/szX1wlJSUWU
o+cwQMCXiYdsekQd4NMu+Cif9yAAdgDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qH
Mh39HjeOUAAAAY8UkzFhAAAEAwBHMEUCIQDZEcGKozsUlE5HoxmXE95MdO3+x1Wp
5XVoUFqBASYHzAIgN3slTaRDW6EhI2KZU4j0iEuk4yTvKl3x3oYkF/6sL2gwDQYJ
KoZIhvcNAQELBQADggEBAJjNX3wCycPUadVxC5510GTCGDrIQ0HRQB6XO1o78OnV
mjEJ5K7R5AtF6WV96F7DENkA2dJX7yjlmmETVcSJi1tHsjwcxoWRh8lhsVlKYqmr
hhkyqBJKJbtkdXMcdTst0ZyuMtiqOrG7x+ERrx5hNY80Wpv9VANNuZVWOtSbMQ7E
2fDy1NP9WMlka+EFLjNfhuq6dnpqiZJy/mn3dYb5sgyOqs6k4A+EhSOFPSCs00Ep
vQNX69k97U+dzPS38pGe92ZXX0cJnUdnfMyH+IlJW2hNfMFsdqhTiN8CezBmwLVY
V3ng9eR61vmfO6k32bJoYOeRp6S4XxuHXasPas/dals=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXvENjl558xdNVfUwHjl
BUU9Etp3Je+X48x3ldXtQSekimlWoVg5SLGr48CjG2zCoIXcVD/Hg7qiSSeDNqxh
i+P3yHRbo1pnEalXw2Vaiwyw5EPQ3+lJdOlk7rnmA5hyzEI8mR9mlAV+rqFzvIrF
8LVwFRGOTpelxYSFrIDuLnU4JORQRAHuix+RQgxOVWIvnazY6FXaW2EGmd5qeFmo
JgRVMcNoT75tV9U5RD5rTx3XYDHEmtH2wNO1X2+AJe4chDu19fCGiWji5z6pKMrn
1v/gCkfPAy+3qp5rP+gE+xMO3oeYzB8a1iXjtd2RY5hU3bTvaD71zsyOxu3jb7SQ
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15652977715562032167704916580704409867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dg-0066-5dceb1a.client-tls.adestra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25939884030396299308607531739771014040875057824227017910220635101531189249141767835046247446016534192670143240482238180904287294929535244888236416556995529042528985979317973538644271398446260365977747130434729073052432572752438999313238983568371008840794411316449918753526624541900152228664941366793647879951794870488261156467527731976498777660401746022151103862592265255414389633473635036860663596232432516625957676909200236298624585362579938488703328712331014664182474501038735156016910022890199969150244147160564789949517439542873410518558260100940998850403893659804325939892532967758575786124298982106763296542737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a6299b2855bcb4d914561de35e51ecfe4146046
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (745 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dg-0066-5dceb1a.client-tls.adestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.ifa.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.fm-world.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cipfaannualconference.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.publicfinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.cqiconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thechemicalengineer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.publicfinanceawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iemaawards.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rcmconference.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.theactuaryjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.cpoagenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iwfmimpactawards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.rec-awards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.theactuary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.publicfinancelive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.redactive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.facilitatemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.thebiomedicalscientist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment-matters.rec.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsemail.cibsejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.ioshmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.recruiter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.iema-transform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-news.theactuary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.theplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.rcmawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.ifst.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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