aws-cf-rd18.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:15:1f:dc:c8:fc:fe:fb:8c:28:f5:58:6a:c1:e1:76 was issued on by Amazon.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd18.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:1f:dc:c8:fc:fe:fb:8c:28:f5:58:6a:c1:e1:76
Serial Number (int): 4097368468480300730978878160652853622
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ba:e0:92:91:06:6f:77:1e:f5:df:aa:c5:a7:c4:07:90:4a:5b:6e:b2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 5e:10:2e:ea:02:78:b3:38:3e:cc:91:66:91:c3:47:76:35:35:ef:ca
Fingerprint (sha256): 99:e0:5a:f5:ac:06:02:4d:2b:60:0a:14:37:3e:87:ea:bb:61:c9:1e:7c:6b:62:2b:a0:69:4d:cc:18:61:5a:5d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-rd18.mars-inc.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd18.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd18.mars-inc.com
www.dogsrule.com
www.m-ms.com
digitaldemand.mars.com
www.perfectfit.ch
chewchewbin.com
dogsrule.com
www.vetservices.royalcanin.nl
piper.marvel.mars.com
prescripcionplus.com
www.eukanubasportingdog.com
www.cesarbestiebowls.com
vetservice.royalcanin.dk
www.mmscinema.de
www.extragum.com
announcement.unclebens.com
onecommercial.mars.com
www.chewchewbin.com
www.maltesers.de
tvmrequest.mars.com
ci.mars.com
m-ms.at
brighthorizons.mars.com
www.skittles.ro
www.greeniesexperience.co.uk
pedigreeadoptame.mx
energy4life.mars.com
www.vetservices.royalcanin.se
www.starburst.com
www.unclebens.nz
globalmobility.mars.com
www.akademiawet.royalcanin.edu.pl
eukanubasportingdog.com
monespaceclub.royalcanin.fr
starburst.com
akademiawet.royalcanin.edu.pl
maltesers.de
www.piper.marvel.mars.com
www.skittles.sk
theadoptionmission.com
bewellincentive.mars.com
skittles.cz
cesarbestiebowls.com
www.prescripcionplus.com
www.vetservices.royalcanin.fr
vetservices.royalcanin.nl
orbitgum.com
content.dine.co.nz
unclebens.nz
www.unclebens.co.nz
www.twix.com
skittles.com.au
vetservices.royalcanin.fr
skittles.ro
mars-icecream.de
www.vet-followup.royalcanin.co.uk
www.tvmrequest.mars.com
www.ci.mars.com
vetservices.royalcanin.se
skittles.com
www.skittles.cz
poautomation.mars.com
www.skittles.com
vet-followup.royalcanin.co.uk
bakeagainstthemachine.co.uk
unclebens.co.nz
skittles.sk
perfectfit.ch
m-ms.com
www.orbitgum.com
greeniesexperience.co.uk
www.energy4life.mars.com
www.skittles.com.au
www.vetservice.royalcanin.dk
twix.com
digitalstandards.mars.com
mmscinema.de
www.theadoptionmission.com
extragum.com
www.m-ms.at
www.mars-icecream.de
www.bakeagainstthemachine.co.uk
www.digitalstandards.mars.com
opuscomplete.com
www.announcement.unclebens.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect18.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd18.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgCfzpvq2z4N6j1jpTmM
vGZAu3udO8nL/z6p/yWO9pba8+vqgk9fedzrKVQfmnQ8y6qaHh9P9+jqEdV4PzPT
6pw4gIs2+qoJWZAHIzqAn4By0FyJZ8eihyjRt2d9+1Go28Z24Bsw8mCSDYKs1NIJ
sLzMy2bpoyZao57ACeD+Gw0Ap+3Ar6PzCCz4+qUXpQ1wVd8VamswyMXYF+JMF44J
3fj4Eg4ay4cJzGJdsPNxG4oNbNh2XaFjM04R6OfOR3HoYnQ/+Q1U+1r1Ef6/pgIq
4K40uPpl7+t/oSByas4FcSUGrjCLKw1/I1Ln3zJ94z9cS6irYEXRZHgeNj4idxaF
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4097368468480300730978878160652853622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21460819671579980284545801790660215880326696131210922333238426403819154852149852341530625140901313986103358793227350124864941705564460387775619431516459141574284499502803795655424373972202421553321715165276525785636178003323637017415938805155013435218834929264671673681061352196369928572400323281440732910633818355671695417891543409673578561637623834612108551929179383922521153431405561473208768357561599102449335510856135259735452407497230342685597205872312243920470767798962796857663222207128716239850936917995135427663510352725379708626926551715452849181449449900216820881861068860986861226526885638632974243497221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bae09291066f771ef5dfaac5a7c407904a5b6eb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1845 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldemand.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'announcement.unclebens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecommercial.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighthorizons.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreeadoptame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy4life.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmobility.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monespaceclub.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theadoptionmission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewellincentive.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dine.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poautomation.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energy4life.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theadoptionmission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opuscomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.announcement.unclebens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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