aws-cf-rd14.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:36:69:58:f1:74:b7:55:f3:a4:8e:a4:4c:b1:a2:9b was issued on by Amazon.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd14.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:36:69:58:f1:74:b7:55:f3:a4:8e:a4:4c:b1:a2:9b
Serial Number (int): 16233256679593544388057938259428352667
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d5:ac:06:1a:a8:80:ef:14:2e:16:87:de:4c:5a:26:68:f2:bd:83:45
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ae:3c:45:af:83:c3:f6:19:3c:f5:34:3f:94:f2:28:2e:2e:28:fb:58
Fingerprint (sha256): 83:0b:75:14:49:7b:f3:9b:94:45:ba:4c:96:ef:2e:90:e4:76:00:b2:fb:fc:a6:d4:00:63:a8:69:4f:ae:5c:a4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-rd14.mars-inc.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd14.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd14.mars-inc.com
freedentpro.fr
5whatsnext.co.uk
mmmnm.com
www.ilspartentavecnous.org
www.cesar.ch
abcdogs.com.br
beginners.unclebens.gr
www.chappi.de
shebacat.co.kr
www.m-ms.com.cn
bettergrabgum.com
extra-flavorvote-us.wrigleyfb.com
fb.doveicecream.com
halloween.mms.com
5gum.de
kitekat.at
m-ms.com.au
www.bensbeginners.com
www.mmmnm.com
ilspartentavecnous.org
mandmcandies.com
cesar.ch
ariba.mars.com
bounty.sk
pedigree.me
maltesers.co.at
my-perfectfit.de
www.shebacat.co.kr
www.dovechocolate.com.cn
www.maltesers.at
www.marsinthecommunity.co.uk
kupujac-pomagasz.pl
marsinthecommunity.co.uk
www.marsmtd.com
marskariera.pl
support.sol.sitenka.ru
brightideas.com
catboutique.whiskas.ch
ea.mymms.fr
www.m-ms.ch
www.m-ms.com.au
m-ms.ch
kupujacpomagasz.pl
agirpourladoption.com
www.marswrigleyfoundation.com
snickers.com.cn
grootseavonturen.nl
m-ms.com.cn
ebly.ch
customer.mars.com
nutro.co.kr
itms.mars.com
marswrigleyfoundation.com
klm.whiskas.com.cn
bens-beginners.unclebens.de
marsmtd.com
commerce.m-ms.com
articles.greenies.com
celebratethefunnerside.com
marssweetretreat.com
www.marskariera.pl
www.mars-petcare-info.de
frolic.at
www.ebly.ch
api.m-ms.com
maltesers.at
www.mmsworld.com
chappi.de
www.my-perfectfit.de
www.abcdogs.com.br
buy.wrigleyshop.com
mmsworld.com
www.nutro.co.kr
multifunction.royalcanin.no
www.freedentpro.fr
coachella.5gum.com
beginners.unclebens.co.uk
marsfinalsfever.com.au
boarding.royalcanin.com.au
cappm.mars.com
dentalmyths.marsfb.com
www.maltesers.co.at
5xmutantgum.com
www.celebratethefunnerside.com
www.beginners.unclebens.co.uk
www.brightideas.com
cdn.www.dovechocolate.com.cn
mars-petcare-info.de
wrigleytagwizard.com
bensbeginners.com
juicytheories.com
50ansroyalcanin.com
hallofcuriosity.com
www.kupujacpomagasz.pl

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-rd01.mars-inc.com
aws-cf-rd01.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd14.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpxDVkt/BLO4wljr4cIg
UitQmQXGn60wHKH9xmbwZXNGCMpT4Z+zN+55kpfaxLmih1CZfNo+JL2iE9KZmql4
fkfG75t9YwxKfwOLJ0z2MH/naB9Ls7K+9QrZ8nVJ+ykX3b3eQwksCBIbSRm6DQMP
Ks+mfmOEsOMV569axTvwRV8n3cEhpUwznl2S6wCWUGFCYRH/Vl88eD87I+qyZM9/
NkSBPRacD3+7jAVTvO7KRm8PcQy7DRbYhAUuhMiG8SbpUURbcQeIBWBGBmHLkoRP
iU2l3aLxwrNXOxjpI1q7OGlYuOI/VMchwZ+4V8UTJ9J6ItIiDilZsA2GqECY5Qs6
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16233256679593544388057938259428352667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd14.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23052427678553532111135556719004517823762841071385831797901708910808996569500188884595745810827371236145821327620355479409262366405901471696071499336792008634950475491164557869790818004703842900575981900417845152302826980627971441107368378286738732390747194811715095429833819335108463919507037544513134186957411177434394842164443108519728261624399134477556735459888325393309480556800640320326275481902788346526545976254353438681617734081768530860006195726278566659458081653122951642166358482459950613368407735495304456135779126555372659352912148851798339969129065230061773063169146423665440914821361480970302296635993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5ac061aa880ef142e1687de4c5a2668f2bd8345
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd14.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedentpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5whatsnext.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmmnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilspartentavecnous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beginners.unclebens.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chappi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shebacat.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettergrabgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extra-flavorvote-us.wrigleyfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.doveicecream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halloween.mms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitekat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bensbeginners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmmnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilspartentavecnous.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandmcandies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesar.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariba.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounty.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigree.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-perfectfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shebacat.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsinthecommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupujac-pomagasz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsinthecommunity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsmtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marskariera.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sol.sitenka.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catboutique.whiskas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ea.mymms.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupujacpomagasz.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agirpourladoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marswrigleyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snickers.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grootseavonturen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutro.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itms.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marswrigleyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klm.whiskas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bens-beginners.unclebens.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsmtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.greenies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratethefunnerside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marssweetretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marskariera.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-petcare-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frolic.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebly.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chappi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-perfectfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcdogs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.wrigleyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutro.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multifunction.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freedentpro.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachella.5gum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beginners.unclebens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsfinalsfever.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boarding.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappm.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalmyths.marsfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.co.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5xmutantgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebratethefunnerside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beginners.unclebens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brightideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.www.dovechocolate.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-petcare-info.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrigleytagwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensbeginners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicytheories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50ansroyalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallofcuriosity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kupujacpomagasz.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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