aws-cf-rd16.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:7f:ea:c7:fa:65:f0:68:40:78:5b:f6:7b:8f:e5:7f was issued on by Amazon.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd16.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:7f:ea:c7:fa:65:f0:68:40:78:5b:f6:7b:8f:e5:7f
Serial Number (int): 16614919578198997667331623767533151615
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:20:a1:e4:ba:9c:fa:2b:bd:91:52:51:c9:cc:80:dd:66:99:76:07
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 20:55:99:bf:67:54:90:b0:e8:e7:29:55:65:db:24:27:dd:de:e7:ec
Fingerprint (sha256): 5e:4a:ed:2c:4c:8b:90:f4:b5:61:7b:5e:9c:99:9c:7c:cf:a0:5c:4b:d9:a7:dd:ed:90:7a:50:fb:0d:24:0c:db

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd16.mars-inc.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd16.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd16.mars-inc.com
marsgraduates.com.au
mmsmeilleurmelange.ca
mball.m-ms.ch
www.giveitup.extragum.com
cdn.weiboapp01.m-ms.com.cn
itms-stage.mars.com
cdn.weiboapp04.m-ms.com.cn
test.hungerithm.com
financemanual.mars.com
globalsign.galaxychocolate.co.uk
www.storefinder.m-ms.com
eclipsemints.wrigleyextra.com.au
chatbots.mars.com
consent.mars.com
bmsprod.web.rcad.net
ar.m-ms.com.au
fr.m-ms.ch
lamp.snickers.de
snickersfixtheworld.com
shop.royal-canin.ch
milkyway.ca
kitekat.nl
cdn.weiboapp03.m-ms.com.cn
oracle.snickers.com
cdn.klm.whiskas.com.cn
m-ms.eu
cdn.weiboapp02.m-ms.com.cn
review.starburst.com
engagement.mars.com
wuerdig.snickers.de
mylegal.mars.com
contact.snickers.com
car.mars.com
www.clean.orbitgum.com
orderpilot.mmmars.com
www.rockpaper.skittles.ca
cosmos.mars.com
signature.mars.com
www.dzielsieusmiechem.pl
reviews.starburst.com
ppm.mars.com
devops.mars.com
movieoffer.mms.com
amazon-orders.wrigleyshop.com
izazov.snickers.com.hr
support.sol.sitenka.ru
futbol.m-ms.es
eclipsemints.marsapps.com.au
breedingmanagementsupport.extranet.royalcanin.org
www.gumswap.extragum.com
cacaopathogenomics.com
www.walgreens.orbitgum.com
mentalhealthus.mars.com
chatbot.mars.com
blippsnickers.mars.com
cdn.weiboapp01.snickers.com.cn
icb.mars.com
de.m-ms.ch
mntest.mars.com
aribas2p.mars.com
mylegalteam.mars.com
boarding.royalcanin.co.nz
fr.mobile.cesar.com
sxbtalent.mars.com
spaceheroes.m-ms.dk
www.oralhealth.wrigley.com
nyeremenyjatek.royalcanin.hu
autravel.mars.com
digitalservicedesk.mars.com
learning.royalcanin.no
mmmworld.com
nutronaturalchoice.gr
dzielsieusmiechem.pl
mdmms.com
contact.twix.com
www.movie.orbitgum.com
cdn.www.m-ms.com.cn
marsriegel.de
cdn.weiboapp01.dovechocolate.com.cn
skittles-rainbowride-de.wrigleyfb.com
www.principlesinaction.wrigley.com
mmscinema.pt
library.mpa.mars.com
union.mms.com
cdn.weiboapp02.snickers.com.cn
pdhb.mars.com
www.walgreens.extragum.com
www.tradepromo.wrigley.com
www.spring.orbitgum.com
soutez.snickers.cz
milkyway.com.mx
kurs.royalcanin.no
ask.cesar.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd16.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINpjCCDI6gAwIBAgIQDH/qx/pl8GhAeFv2e4/lfzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA5MTQwMDAwMDBaFw0yMTEwMTQx
MjAwMDBaMCMxITAfBgNVBAMTGGF3cy1jZi1yZDE2Lm1hcnMtaW5jLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfsHRce2Emjwl4IrTlcxT4qT/v2
R3XyFqXf0s04J38B1DGe4YiwGehiQeB8jidmcXhfYDxqExG4rMMdXQ7CeCzezYpB
kiTh6gedXDFUFW8i7+/M/47sLTqCaWuW2MIlNEOaH/bnu8Fkzk5+Lpf2DO7aXV61
CswfO7OnnsUB4wujpAX2P7c9e5tT/gxtlUIRjO+6vECLDVr/NYtdMilehVss+FuW
aSJJfbIn/LjRY628k4ciBjxqfmp0z6iJAOVTsVygPW2PvuxGOJPPV7gOj78A/jDw
wN6CrZe0iI71xt+8d0p2kO73YYvDhQcCYMG94XnPMUj/fTDtK8O1TRv9JNECAwEA
AaOCCrEwggqtMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud
DgQWBBRUIKHkupz6K72RUlHJzIDdZpl2BzCCCEwGA1UdEQSCCEMwggg/ghhhd3Mt
Y2YtcmQxNi5tYXJzLWluYy5jb22CFG1hcnNncmFkdWF0ZXMuY29tLmF1ghVtbXNt
ZWlsbGV1cm1lbGFuZ2UuY2GCDW1iYWxsLm0tbXMuY2iCGXd3dy5naXZlaXR1cC5l
eHRyYWd1bS5jb22CGmNkbi53ZWlib2FwcDAxLm0tbXMuY29tLmNughNpdG1zLXN0
YWdlLm1hcnMuY29tghpjZG4ud2VpYm9hcHAwNC5tLW1zLmNvbS5jboITdGVzdC5o
dW5nZXJpdGhtLmNvbYIWZmluYW5jZW1hbnVhbC5tYXJzLmNvbYIgZ2xvYmFsc2ln
bi5nYWxheHljaG9jb2xhdGUuY28udWuCGHd3dy5zdG9yZWZpbmRlci5tLW1zLmNv
bYIgZWNsaXBzZW1pbnRzLndyaWdsZXlleHRyYS5jb20uYXWCEWNoYXRib3RzLm1h
cnMuY29tghBjb25zZW50Lm1hcnMuY29tghRibXNwcm9kLndlYi5yY2FkLm5ldIIO
YXIubS1tcy5jb20uYXWCCmZyLm0tbXMuY2iCEGxhbXAuc25pY2tlcnMuZGWCF3Nu
aWNrZXJzZml4dGhld29ybGQuY29tghNzaG9wLnJveWFsLWNhbmluLmNoggttaWxr
eXdheS5jYYIKa2l0ZWthdC5ubIIaY2RuLndlaWJvYXBwMDMubS1tcy5jb20uY26C
E29yYWNsZS5zbmlja2Vycy5jb22CFmNkbi5rbG0ud2hpc2thcy5jb20uY26CB20t
bXMuZXWCGmNkbi53ZWlib2FwcDAyLm0tbXMuY29tLmNughRyZXZpZXcuc3RhcmJ1
cnN0LmNvbYITZW5nYWdlbWVudC5tYXJzLmNvbYITd3VlcmRpZy5zbmlja2Vycy5k
ZYIQbXlsZWdhbC5tYXJzLmNvbYIUY29udGFjdC5zbmlja2Vycy5jb22CDGNhci5t
YXJzLmNvbYIWd3d3LmNsZWFuLm9yYml0Z3VtLmNvbYIVb3JkZXJwaWxvdC5tbW1h
cnMuY29tghl3d3cucm9ja3BhcGVyLnNraXR0bGVzLmNhgg9jb3Ntb3MubWFycy5j
b22CEnNpZ25hdHVyZS5tYXJzLmNvbYIYd3d3LmR6aWVsc2lldXNtaWVjaGVtLnBs
ghVyZXZpZXdzLnN0YXJidXJzdC5jb22CDHBwbS5tYXJzLmNvbYIPZGV2b3BzLm1h
cnMuY29tghJtb3ZpZW9mZmVyLm1tcy5jb22CHWFtYXpvbi1vcmRlcnMud3JpZ2xl
eXNob3AuY29tghZpemF6b3Yuc25pY2tlcnMuY29tLmhyghZzdXBwb3J0LnNvbC5z
aXRlbmthLnJ1gg5mdXRib2wubS1tcy5lc4IcZWNsaXBzZW1pbnRzLm1hcnNhcHBz
LmNvbS5hdYIxYnJlZWRpbmdtYW5hZ2VtZW50c3VwcG9ydC5leHRyYW5ldC5yb3lh
bGNhbmluLm9yZ4IYd3d3Lmd1bXN3YXAuZXh0cmFndW0uY29tghZjYWNhb3BhdGhv
Z2Vub21pY3MuY29tghp3d3cud2FsZ3JlZW5zLm9yYml0Z3VtLmNvbYIXbWVudGFs
aGVhbHRodXMubWFycy5jb22CEGNoYXRib3QubWFycy5jb22CFmJsaXBwc25pY2tl
cnMubWFycy5jb22CHmNkbi53ZWlib2FwcDAxLnNuaWNrZXJzLmNvbS5jboIMaWNi
Lm1hcnMuY29tggpkZS5tLW1zLmNogg9tbnRlc3QubWFycy5jb22CEWFyaWJhczJw
Lm1hcnMuY29tghRteWxlZ2FsdGVhbS5tYXJzLmNvbYIZYm9hcmRpbmcucm95YWxj
YW5pbi5jby5ueoITZnIubW9iaWxlLmNlc2FyLmNvbYISc3hidGFsZW50Lm1hcnMu
Y29tghNzcGFjZWhlcm9lcy5tLW1zLmRrghp3d3cub3JhbGhlYWx0aC53cmlnbGV5
LmNvbYIcbnllcmVtZW55amF0ZWsucm95YWxjYW5pbi5odYIRYXV0cmF2ZWwubWFy
cy5jb22CG2RpZ2l0YWxzZXJ2aWNlZGVzay5tYXJzLmNvbYIWbGVhcm5pbmcucm95
YWxjYW5pbi5ub4IMbW1td29ybGQuY29tghVudXRyb25hdHVyYWxjaG9pY2UuZ3KC
FGR6aWVsc2lldXNtaWVjaGVtLnBsggltZG1tcy5jb22CEGNvbnRhY3QudHdpeC5j
b22CFnd3dy5tb3ZpZS5vcmJpdGd1bS5jb22CE2Nkbi53d3cubS1tcy5jb20uY26C
DW1hcnNyaWVnZWwuZGWCI2Nkbi53ZWlib2FwcDAxLmRvdmVjaG9jb2xhdGUuY29t
LmNugiVza2l0dGxlcy1yYWluYm93cmlkZS1kZS53cmlnbGV5ZmIuY29tgiJ3d3cu
cHJpbmNpcGxlc2luYWN0aW9uLndyaWdsZXkuY29tggxtbXNjaW5lbWEucHSCFGxp
YnJhcnkubXBhLm1hcnMuY29tgg11bmlvbi5tbXMuY29tgh5jZG4ud2VpYm9hcHAw
Mi5zbmlja2Vycy5jb20uY26CDXBkaGIubWFycy5jb22CGnd3dy53YWxncmVlbnMu
ZXh0cmFndW0uY29tghp3d3cudHJhZGVwcm9tby53cmlnbGV5LmNvbYIXd3d3LnNw
cmluZy5vcmJpdGd1bS5jb22CEnNvdXRlei5zbmlja2Vycy5jeoIPbWlsa3l3YXku
Y29tLm14ghJrdXJzLnJveWFsY2FuaW4ubm+CDWFzay5jZXNhci5jb20wDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E
NDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex
Yi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUF
BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1
c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0
LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQYGCisGAQQB1nkCBAIEgfcE
gfQA8gB3APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABdI0mqPUA
AAQDAEgwRgIhANPO384uV5wbm/1cKXMwpk1fVGkcNS7o6WcJJ6M7bGe7AiEA/4aM
Zn8MXpK7EiwI9x+36vNm3JKoIc1jVlk5VWNm32cAdwBc3EOS/uarRUSxXprUVuYQ
N/vV+kfcoXOUsl7m9scOygAAAXSNJqk7AAAEAwBIMEYCIQCBOs6up5nO4hJU61/O
9SFFrIasVRTsFRfFQ8LGS/1xbAIhAKohZTCgX1fUd4vgUor019azadPlRd9bv2aF
pQdjacY/MA0GCSqGSIb3DQEBCwUAA4IBAQBJdnKFD83u3YHknil1wl6yDtuka/H6
6O/5nBM8/BGaOiljkiYSzubNO4v6+iIyxqCyqXZm7bR11gPx9DAvpKjsADqIEPo3
bVybiAQBwG4cdH19tb/91JjtZVHb1KHru11LjRREVW7+KXU+4OX+GxKQU8khWxz2
OeF2umgPNguQnq4fkqKq0ENsn5WBAXuY7QTA3VrFcKgGqXBAiIyMTmA4TdAc9tRz
jRRnzRvsYNev9ZlbPBk8pgqiBKCbRYviv4xgK+3RNUQwYABuFQVew2O0ByNk2ph7
WwZF1y1MUFtX9o6q7zydd2XBeGO8iz6r/n2TF3CnAaVwJxNBKl9dwpRq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+wdFx7YSaPCXgitOVzF
PipP+/ZHdfIWpd/SzTgnfwHUMZ7hiLAZ6GJB4HyOJ2ZxeF9gPGoTEbiswx1dDsJ4
LN7NikGSJOHqB51cMVQVbyLv78z/juwtOoJpa5bYwiU0Q5of9ue7wWTOTn4ul/YM
7tpdXrUKzB87s6eexQHjC6OkBfY/tz17m1P+DG2VQhGM77q8QIsNWv81i10yKV6F
Wyz4W5ZpIkl9sif8uNFjrbyThyIGPGp+anTPqIkA5VOxXKA9bY++7EY4k89XuA6P
vwD+MPDA3oKtl7SIjvXG37x3SnaQ7vdhi8OFBwJgwb3hec8xSP99MO0rw7VNG/0k
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16614919578198997667331623767533151615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd16.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19178416022299334197521438521805166784011266786351786256581537773624358410116133651520509127480725955821759200425876312066085680036173083471828709743914657289984164676281217121750811636977072264068586703543050607926154131778038531819543715357794023649538710636698456512898613091558705808746546619587839656491330061741542482232111263112664702452667403331557703032652676418136876999795328719829296618744107716935024126028031231960377558276626541103332100331859032672571429942508539230716179284957558701995760966376773149461218996130155371033400507870816570838950595116503367744385445819592593959145639839216018118223057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5420a1e4ba9cfa2bbd915251c9cc80dd66997607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd16.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsgraduates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsmeilleurmelange.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mball.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giveitup.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itms-stage.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp04.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.hungerithm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financemanual.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsign.galaxychocolate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storefinder.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsemints.wrigleyextra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbots.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsprod.web.rcad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.m-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamp.snickers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickersfixtheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.royal-canin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkyway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitekat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp03.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oracle.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.klm.whiskas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp02.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engagement.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuerdig.snickers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegal.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.snickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clean.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orderpilot.mmmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockpaper.skittles.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmos.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dzielsieusmiechem.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviews.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppm.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devops.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieoffer.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon-orders.wrigleyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izazov.snickers.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sol.sitenka.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futbol.m-ms.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclipsemints.marsapps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breedingmanagementsupport.extranet.royalcanin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gumswap.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacaopathogenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walgreens.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalhealthus.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blippsnickers.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icb.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mntest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aribas2p.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylegalteam.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boarding.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.mobile.cesar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxbtalent.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceheroes.m-ms.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralhealth.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyeremenyjatek.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autravel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalservicedesk.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmmworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutronaturalchoice.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzielsieusmiechem.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movie.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.www.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsriegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp01.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles-rainbowride-de.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.principlesinaction.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmscinema.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.mpa.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'union.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weiboapp02.snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdhb.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walgreens.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradepromo.wrigley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spring.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soutez.snickers.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkyway.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurs.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.cesar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001748d26a8f50000040300483046022100d3cedfce2e579c1b9bfd5c297330a64d5f54691c352ee8e9670927a33b6c67bb022100ff868c667f0c5e92bb122c08f71fb7eaf366dc92a821cd63565939556366df670077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001748d26a93b0000040300483046022100813aceaea799cee21254eb5fcef52145ac86ac5514ec1517c543c2c64bfd716c022100aa216530a05f57d4778be0528af4d7d6b369d3e545df5bbf6685a5076369c63f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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