aws-cf-www-royalcanin-com-rd01.mars-inc.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:f1:49:29:a4:6f:69:bb:9a:16:ee:ae:70:5a:ff:9a was issued on by Amazon.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aws-cf-www-royalcanin-com-rd01.mars-inc.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f1:49:29:a4:6f:69:bb:9a:16:ee:ae:70:5a:ff:9a
Serial Number (int): 3911283449622686546865235790543912858
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: b7:82:42:9a:4a:d5:48:d7:0b:bd:92:99:ad:8f:6a:f1:23:4e:48:53
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 93:de:00:bb:ee:27:d3:65:e0:38:92:7e:2e:64:75:b9:34:23:87:f5
Fingerprint (sha256): d1:65:d7:c6:2c:10:d0:ed:46:eb:c9:ab:79:4c:f1:0e:21:11:f2:a7:c0:07:fc:46:7c:46:02:a3:36:65:70:81

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aws-cf-www-royalcanin-com-rd01.mars-inc.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aws-cf-www-royalcanin-com-rd01.mars-inc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aws-cf-www-royalcanin-com-rd01.mars-inc.com
royalcanin.lv
www.royalcanin.ro
royalcanin.lt
www.royalcanin.com.co
www.royalcanin.co.nz
royalcanin.co.th
www.royalcanin.bg
royal-canin.ee
royalcanin.dk
royal-canin.de
www.royalcanin.com.tr
royalcanin.co.kr
www.royalcanin.si
www.royalcanin.com.tw
www.royalcanin.se
royalcanin.com.ar
www.royalcanin.ca
royalcanin.cl
royalcanin.com.au
www.royalcanin.com.ua
royalcanin.co.uk
www.royalcanin.sk
royalcanin.co
www.royalcanin.ch
royalcanin.ch
www.royalcanin.co
www.royalcanin.cl
royalcanin.cz
www.royal-canin.at
royalcanin.com.br
www.royalcanin.com.mx
www.royal-canin.ee
www.royalcanin.pl
www.royalcanin.ph
royalcanin.fr
royalcanin.fi
royalcanin.no
www.royalcanin.pt
www.royalcanin.hk
www.royalcanin.pr
www.royalcanin.co.uk
www.royalcanin.hu
www.eng.royalcanin.gr
www.royal-canin.de
royalcanin.mx
www.royalcanin.co.kr
royalcanin.es
royalcanin.my
www.royalcanin.in
www.royalcanin.co.th
royalcanin.co.nz
www.royalcanin.it
royalcanin.nl
royalcanin.com.hr
www.royalcanin.nl
eng.royalcanin.gr
royalcanin.hu
royalcanin.hk
royalcanin.pr
www.royalcanin.fi
www.royalcanin.no
royalcanin.pt
www.royalcanin.fr
royalcanin.com.mx
royalcanin.gr
www.royalcanin.com.hr
www.royalcanin.co.za
royalcanin.co.id
www.royalcanin.gr
royalcanin.ph
royalcanin.pl
www.royalcanin.co.jp
www.royalcanin.com.ar
www.royalcanin.cz
www.royalcanin.com.au
royalcanin.bg
royalcanin.sk
www.royalcanin.lv
royalcanin.ca
www.royalcanin.co.id
www.royalcanin.lt
royalcanin.co.za
www.royalcanin.dk
royalcanin.se
royalcanin.com.co
royalcanin.si
royalcanin.it
royal-canin.at
www.royalcanin.com.br
royalcanin.com.tr
royalcanin.in
www.royalcanin.es
www.royalcanin.my
royalcanin.com.tw
www.royalcanin.mx
royalcanin.co.jp
royalcanin.ro
royalcanin.com.ua

Other certificates including the domain name mars-inc.com

(limited to 100 certificates)
aws-cf-rd21.mars-inc.com
lambda-redirect24.mars-inc.com
aws-cf-rd17.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd25.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect21.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd09.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
aws-cf-rc-rd02.mars-inc.com
lambda-redirect8.mars-inc.com
aws-cf-rd25.mars-inc.com
mars-com-redirect.mars-inc.com
lambda-redirect6.mars-inc.com
www.domino.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect4.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect20.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd08.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd24.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect18.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect28.mars-inc.com
aws-cf-rd03.mars-inc.com
aws-cf-www-mars-com-rd01.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd13.mars-inc.com
aws-cf-rd13.mars-inc.com
royalcanin-com-redirect.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect16.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd08.mars-inc.com
lambda-redirect22.mars-inc.com
aws-cf-rd14.mars-inc.com
aws-cf-rd15.mars-inc.com
aws-cf-acquia-rd01.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd11.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd16.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect5.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd10.mars-inc.com
lambda-redirect26.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd21.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd19.mars-inc.com
lambda-redirect5.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd15.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd22.mars-inc.com
aws-cf-rd23.mars-inc.com
lambda-redirect1.mars-inc.com
aws-cf-rd23.mars-inc.com
aws-vpn-useast1.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect26.mars-inc.com
aws-cf-rd12.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd17.mars-inc.com

Certificate

The complete raw certificate details for aws-cf-www-royalcanin-com-rd01.mars-inc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AhQMTC5Rd4UZ3GUQDa5
TSL9fSnQnkkx5lXHVX7SoJRDlRj/RsY3evGt6K3R3n64FnYnGDI6n2ExXSRl1GOm
eO9LmBRXCZ6TKWwv+h06U2WHroch4PeobPOB2thxCs9+OqOgwptGnJ5OoMcF/TEn
IoRe4lq56Jz73iEIeIo9Ti68wLcFdT5pgFPtXlLlaf22wswcTGaI2JbPTbi93fId
7fFUwQMbBUnyaZ8QVMaj0VZf7M2pLWmrYtjea0G60KAq5+3UUQCVuKP8NS7z4DtB
eSZW/unAv3I5Xh8udqQ0EtBzJvJ2oqL419ZYiDlXKwdv5R72WAXeHXojhXPTwUeX
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3911283449622686546865235790543912858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aws-cf-www-royalcanin-com-rd01.mars-inc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26261666849590921188463253408372154211272793432849909579119474727961849815675391642971357800357391947943721815679343079457290143178857779862036353268664419895762836550522085187811315624871820017380565711293661933951692662867786142051273278193394592611381444647710721430841711829227973597070134703228713671838773465560372024253487973264161892850878487684739938515974681923545740418480298650524021834096391532628767328882678068265863888100572992862805588628177728165722028794400999108191272943281841945643706782500141094234949618659049015155545068705789683207042452018874144797328732862787292913442314192465471014934393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b782429a4ad548d70bbd9299ad8f6af1234e4853
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1843 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-cf-www-royalcanin-com-rd01.mars-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ua'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b8f6a96dc764b1f07845c3b20346b7f0da4c28d5f8445455588c3eff48d6797d53528ed598000bc6b6e8b2ae1970582822b6c0a9a13b6bde0fae19262712019eb241862abb0245d42f277e206a09c9589d2d57bf639a84a074cc35700e7befcae1c636727e7065de2e8f558e69d57b3152abcdfa9b81f26377f4ec6bc7a7ecaee68193f7c92c7aba141af51faf955b1dc0e90416b26c185e9b51c306a71ef54df446bb60e7b99b9ce1486bc5c45ca539acf7289793e4a10280c6c2ace407c9295d48a2b2b49ca6abb7a528e725dc54668a96e7075a641618770fe4ae883fff0d2335fed58d6c1d92d84f2e5f5472e3a6c79a4e7fe1c6abb88fa67c389b422c8c