aws-cf-rd18.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:e3:7c:a8:dd:bb:a2:0c:33:f6:4c:ee:eb:08:b3:92 was issued on by Amazon.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd18.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:e3:7c:a8:dd:bb:a2:0c:33:f6:4c:ee:eb:08:b3:92
Serial Number (int): 21119599721406320716035428085601448850
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:e5:f9:48:8a:49:41:c5:c6:69:b5:3d:14:e1:36:0c:a9:53:66:0b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 92:63:56:76:c0:ca:2c:75:a6:6e:34:ff:43:28:fc:5e:bb:bb:fd:e5
Fingerprint (sha256): 7f:d0:4d:99:c9:fd:4c:d5:6c:6c:35:e6:b7:01:84:d6:40:9c:62:94:6d:b4:96:1b:bc:6e:79:b5:55:7d:e8:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-rd18.mars-inc.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd18.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd18.mars-inc.com
www.m-ms.com
www.perfectfit.ch
dogsrule.com
www.vetservices.royalcanin.nl
www.cesarbestiebowls.com
www.eukanubasportingdog.com
vetservice.royalcanin.dk
www.extragum.com
onecommercial.mars.com
www.chewchewbin.com
tvmrequest.mars.com
m-ms.at
www.greeniesexperience.co.uk
pedigreeadoptame.mx
energy4life.mars.com
www.starburst.com
www.unclebens.nz
www.akademiawet.royalcanin.edu.pl
eukanubasportingdog.com
www.temptationstreats.com
akademiawet.royalcanin.edu.pl
maltesers.de
www.piper.marvel.mars.com
theadoptionmission.com
www.prescripcionplus.com
www.vetservices.royalcanin.fr
www.unclebens.co.nz
dk.bekindsnacks.com
www.tvmrequest.mars.com
vetservices.royalcanin.se
www.ci.mars.com
skittles.com
www.skittles.cz
temptationstreats.com
bakeagainstthemachine.co.uk
unclebens.co.nz
perfectfit.ch
www.orbitgum.com
m-ms.com
greeniesexperience.co.uk
www.vetservice.royalcanin.dk
2chances2win.de
twix.com
digitalstandards.mars.com
mmscinema.de
www.2chances2win.de
www.theadoptionmission.com
www.wrigleyextra.co.nz
www.m-ms.at
www.dogsrule.com
www.dk.bekindsnacks.com
digitaldemand.mars.com
chewchewbin.com
piper.marvel.mars.com
www.fr.bekindsnacks.com
prescripcionplus.com
wrigleyextra.co.nz
www.mmscinema.de
announcement.unclebens.com
www.maltesers.de
ci.mars.com
brighthorizons.mars.com
at.bekindsnacks.com
www.vetservices.royalcanin.se
globalmobility.mars.com
monespaceclub.royalcanin.fr
starburst.com
www.skittles.sk
bewellincentive.mars.com
skittles.cz
cesarbestiebowls.com
vetservices.royalcanin.nl
orbitgum.com
content.dine.co.nz
unclebens.nz
www.twix.com
skittles.com.au
www.at.bekindsnacks.com
vetservices.royalcanin.fr
www.vet-followup.royalcanin.co.uk
mars-icecream.de
www.skittles.com
poautomation.mars.com
vet-followup.royalcanin.co.uk
fr.bekindsnacks.com
skittles.sk
www.skittles.com.au
www.energy4life.mars.com
5gum.com.au
extragum.com
www.5gum.com.au
www.mars-icecream.de
www.bakeagainstthemachine.co.uk
www.digitalstandards.mars.com
opuscomplete.com
www.announcement.unclebens.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect18.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd18.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaw5l+7MPf3q0P2VZphn
FwWC/LUjTTnNi5hVkaEO+PGS4vKGpTFaP3/+/Aot2Vya+jnw+jgAia9x5QfNSp+x
82PgXoAjBbTxGMZ7n4hk6bbpJXcULfIHXo7dXn6G6tK6f0ej5X4KMBbiC6q73lh2
iMSr+7uEyd8uAwMn77tUyWIXjqzB/lGojHrVymSVKrYcpiEAUw7z9gsU95pnDuuw
k/Q0Z2cqU9yoolSWp10A5I9n3rAxK1/5sWOst1vnIlubtqe3Mcs8jiY+bmVK77Qc
TAu9F0LHfeABO1wbz/5sdUTxIwsBuGl8vczi7a4H/KhTqUly9PxQBe6rReLWeCAb
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21119599721406320716035428085601448850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20914247619639335511250199114872379380637132087203614566194373319365940571413454749604656770535888623795563032165510881926429974984085220466938973825744408703437574588538898540864296352596996881628161167049854748391190550807168226726090840593680579122347961125785608911917541689034759511787309884843424967717692817815779823329278354351122837922033420605581244936869567351793042860272667593045181185405397645823141386063920178490620201748009413601665929327386384345112924617176560919610844849840347417904114028279320511667874454347425842744984219282594675370546032855258637675465131372356278811346460575422456059140881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39e5f9488a4941c5c669b53d14e1360ca953660b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecommercial.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreeadoptame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy4life.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temptationstreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theadoptionmission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dk.bekindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temptationstreats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2chances2win.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2chances2win.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theadoptionmission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrigleyextra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dk.bekindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldemand.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fr.bekindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleyextra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'announcement.unclebens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighthorizons.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.bekindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmobility.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monespaceclub.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewellincentive.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dine.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.at.bekindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poautomation.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.bekindsnacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energy4life.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gum.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5gum.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opuscomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.announcement.unclebens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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