aws-cf-rd14.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:1d:85:f3:32:55:5c:9e:77:78:ca:1a:67:90:41:11 was issued on by Amazon.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd14.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:1d:85:f3:32:55:5c:9e:77:78:ca:1a:67:90:41:11
Serial Number (int): 9457889407890144316599791503142830353
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:db:b2:42:a6:4c:f0:76:63:fc:42:b6:48:f2:b1:8d:55:b0:95:7a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9d:dc:5c:02:05:97:84:f1:07:ec:d0:25:7c:07:70:2e:dd:f9:49:d0
Fingerprint (sha256): 64:7f:28:ed:6a:f4:cf:4a:f3:0d:b3:73:c8:c0:30:51:f3:69:9a:97:ef:1f:57:bf:cd:35:d3:03:74:e9:53:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd14.mars-inc.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd14.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd14.mars-inc.com
freedentpro.fr
5whatsnext.co.uk
mmmnm.com
www.ilspartentavecnous.org
www.cesar.ch
abcdogs.com.br
beginners.unclebens.gr
www.chappi.de
www.m-ms.com.cn
extra-flavorvote-us.wrigleyfb.com
bettergrabgum.com
halloween.mms.com
fb.doveicecream.com
5gum.de
kitekat.at
m-ms.com.au
www.bensbeginners.com
www.mmmnm.com
mms.com.mx
mandmcandies.com
ilspartentavecnous.org
cesar.ch
ariba.mars.com
bounty.sk
pedigree.me
maltesers.co.at
my-perfectfit.de
www.maltesers.at
www.dovechocolate.com.cn
www.marsinthecommunity.co.uk
kupujac-pomagasz.pl
marsinthecommunity.co.uk
www.mms.com.mx
www.marsmtd.com
marskariera.pl
brightideas.com
catboutique.whiskas.ch
ea.mymms.fr
www.m-ms.ch
www.m-ms.com.au
kupujacpomagasz.pl
m-ms.ch
agirpourladoption.com
www.marswrigleyfoundation.com
snickers.com.cn
grootseavonturen.nl
ebly.ch
m-ms.com.cn
customer.mars.com
itms.mars.com
marswrigleyfoundation.com
klm.whiskas.com.cn
commerce.m-ms.com
marsmtd.com
bens-beginners.unclebens.de
celebratethefunnerside.com
articles.greenies.com
marssweetretreat.com
www.marskariera.pl
www.mars-petcare-info.de
frolic.at
www.ebly.ch
api.m-ms.com
maltesers.at
www.mmsworld.com
chappi.de
www.my-perfectfit.de
www.abcdogs.com.br
buy.wrigleyshop.com
mmsworld.com
www.freedentpro.fr
multifunction.royalcanin.no
coachella.5gum.com
beginners.unclebens.co.uk
marsfinalsfever.com.au
cappm.mars.com
dentalmyths.marsfb.com
boarding.royalcanin.com.au
5xmutantgum.com
www.celebratethefunnerside.com
www.maltesers.co.at
www.beginners.unclebens.co.uk
www.brightideas.com
mars-petcare-info.de
cdn.www.dovechocolate.com.cn
wrigleytagwizard.com
bensbeginners.com
hallofcuriosity.com
juicytheories.com
50ansroyalcanin.com
www.kupujacpomagasz.pl

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd14.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28K3N7ivgf9pBk5NWivC
TwO0cIR89HV8EuS0iObvRTKtYyP7zmvJzqfUlJDBKaecipKztpCUtizIgGE440w2
JEgruQ7H+P6a6QV7MHm1PHValZJJo798RMGxfcFyDuQJ9CVI6qMrYvoHDL78J/PG
o7jmD/LJSpZEhrjPlIYwmdPNNZrQ94E55r6oFFSJI5AcGuWyAxHY9yUW2A+1F3J+
V5mkIio7/9M6oeV9S0KFWNXLvwW+/7D6wiZ61SWc9CqFp2h2p/6HQzYAPyR41O7d
VNMqHFN0k11A7dEmzv4tka1AznAqMBV3Rh+kysdh1qBgcm0F7+1feuAXrWoFB3pr
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9457889407890144316599791503142830353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd14.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27742206674909724331508817424264493056857679471313267810530263402225066613386423130339217757094133691088868284417302391389068510884577183841804243166557528614357414632313843038674381388633368838171451724021514768496148368651797017923067251245684048363663455843586630583545850147429865000045371097507058839443984431270977499413046904539637204745809219588033983461329532786048035977235563133393532792372993426666074964449755119215697580889789705464233273195807403745500041389481783190859688506197416479675575322092467625556805286915089615435915994428521674837661198566894655864507737794911770006112120685704155282172881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83dbb242a64cf07663fc42b648f2b18d55b0957a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd14.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedentpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5whatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmmnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilspartentavecnous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beginners.unclebens.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chappi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extra-flavorvote-us.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettergrabgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloween.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.doveicecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitekat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensbeginners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmmnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandmcandies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilspartentavecnous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariba.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounty.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigree.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-perfectfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsinthecommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupujac-pomagasz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsinthecommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mms.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsmtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marskariera.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catboutique.whiskas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.mymms.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupujacpomagasz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agirpourladoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marswrigleyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grootseavonturen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itms.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marswrigleyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klm.whiskas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsmtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bens-beginners.unclebens.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratethefunnerside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.greenies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marssweetretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marskariera.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-petcare-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frolic.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chappi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-perfectfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.wrigleyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedentpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multifunction.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachella.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beginners.unclebens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsfinalsfever.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappm.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalmyths.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boarding.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5xmutantgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebratethefunnerside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beginners.unclebens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-petcare-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.www.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleytagwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensbeginners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofcuriosity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicytheories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50ansroyalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kupujacpomagasz.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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