aws-cf-rd18.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:2a:5c:cf:06:bf:6c:d8:f4:7d:a8:07:4a:ca:ba:cd was issued on by Amazon.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-rd18.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:2a:5c:cf:06:bf:6c:d8:f4:7d:a8:07:4a:ca:ba:cd
Serial Number (int): 18829150793048790295617221194748181197
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3a:42:af:65:b1:50:a5:1b:bd:e5:7b:95:65:16:39:94:93:70:87:58
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e5:b4:27:f4:ba:06:27:0d:07:22:0d:02:80:7a:2a:0d:07:59:3a:e4
Fingerprint (sha256): 9a:cc:15:3d:e7:36:d9:9f:2c:ce:fa:52:07:df:c3:fe:93:f6:d2:b4:12:ea:70:a5:d8:55:d6:36:5a:6d:5c:2c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aws-cf-rd18.mars-inc.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-rd18.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-rd18.mars-inc.com
www.dogsrule.com
www.m-ms.com
www.marspassion.ru
www.perfectfit.ch
chewchewbin.com
www.airwaves.cz
dogsrule.com
www.vetservices.royalcanin.nl
piper.marvel.mars.com
prescripcionplus.com
www.eukanubasportingdog.com
www.cesarbestiebowls.com
vetservice.royalcanin.dk
www.mmscinema.de
www.extragum.com
www.escapedbunnies.com
announcement.unclebens.com
onecommercial.mars.com
www.chewchewbin.com
tvmrequest.mars.com
www.maltesers.de
ci.mars.com
m-ms.at
www.skittles.ro
www.greeniesexperience.co.uk
brighthorizons.mars.com
pedigreeadoptame.mx
www.marsrecruit.jp
www.vetservices.royalcanin.se
www.starburst.com
www.unclebens.nz
globalmobility.mars.com
www.akademiawet.royalcanin.edu.pl
eukanubasportingdog.com
www.airwaves.sk
monespaceclub.royalcanin.fr
starburst.com
akademiawet.royalcanin.edu.pl
maltesers.de
www.piper.marvel.mars.com
www.skittles.sk
bewellincentive.mars.com
skittles.cz
www.prescripcionplus.com
cesarbestiebowls.com
www.vetservices.royalcanin.fr
vetservices.royalcanin.nl
orbitgum.com
content.dine.co.nz
airwaves.sk
unclebens.nz
www.unclebens.co.nz
www.twix.com
marspassion.ru
vetservices.royalcanin.fr
skittles.ro
www.vet-followup.royalcanin.co.uk
mars-icecream.de
www.tvmrequest.mars.com
vetservices.royalcanin.se
www.ci.mars.com
skittles.com
poautomation.mars.com
www.skittles.com
www.skittles.cz
vet-followup.royalcanin.co.uk
escapedbunnies.com
marsrecruit.jp
bakeagainstthemachine.co.uk
unclebens.co.nz
skittles.sk
perfectfit.ch
www.orbitgum.com
m-ms.com
greeniesexperience.co.uk
airwaves.cz
airwaves.hu
www.vetservice.royalcanin.dk
www.airwaves.hu
twix.com
digitalstandards.mars.com
mmscinema.de
extragum.com
www.m-ms.at
www.mars-icecream.de
www.bakeagainstthemachine.co.uk
www.digitalstandards.mars.com
opuscomplete.com
www.announcement.unclebens.com

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect18.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-rd18.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi63T9qqpIYONzRgHO2rK
3/4DB/CB2Kyn8w1NgVWnFk4IQIOitO2AJEJf7jevhZkMYkaxmGf1T9Al+Z0z3VWN
fC7Y0r/kv4cAvg7NCX1ZkZMc91nse++1UjXYAMyVAnSPe6NyKayJQZtXiza5Hm9a
eIjVeSJuPVpsMciW2FBwQxL2KcRdEUmTi7cRcgt1qtmO0bI6dUXYLJ+0CeZR7V96
tUGMsP+iW8LFw2nGlGUWo0QXSC0+JUlmCaEEIAhoJln+c5WxhZBBcwtdiIP0n6Ok
K1G/UBND54+7Hbj7ciM4nCrrkaGlsLkd8mVs+iL8sw/x7C3Kz53hfBHRh5JDt0NX
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18829150793048790295617221194748181197
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17632842163239604720887363157087157848706814471986053696230949368512206373125019805193151536514464581150226656806216642783862511262026768802337458467526901080326544176265760074528129554997250359165195465231182306473075979181318233556709583129734447494162769432082667087062355992175885280036935016065756986434070264017852795836344873215570683000339063504540873916315654366777091793138857194707773242141383129706873702666226218261803775356210439668679677488068568977956132140389740533375337271772741806538001499529284572772717017562261015145341395495815241179978474495282357103733753061834659812320889659946063553058757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a42af65b150a51bbde57b956516399493708758
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1889 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-rd18.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marspassion.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airwaves.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogsrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.escapedbunnies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'announcement.unclebens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecommercial.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chewchewbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighthorizons.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreeadoptame.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsrecruit.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalmobility.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanubasportingdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airwaves.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monespaceclub.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akademiawet.royalcanin.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltesers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piper.marvel.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewellincentive.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prescripcionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cesarbestiebowls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dine.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airwaves.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marspassion.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvmrequest.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetservices.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poautomation.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skittles.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vet-followup.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escapedbunnies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsrecruit.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebens.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skittles.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectfit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orbitgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-ms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeniesexperience.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airwaves.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airwaves.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetservice.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airwaves.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmscinema.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extragum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m-ms.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mars-icecream.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bakeagainstthemachine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalstandards.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opuscomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.announcement.unclebens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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