prod5.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 04:b1:b8:0b:ae:1e:27:ad:49:b7:a6:c1:4f:a5:2e:84:bc:4d was issued on by Let's Encrypt.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod5.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b1:b8:0b:ae:1e:27:ad:49:b7:a6:c1:4f:a5:2e:84:bc:4d
Serial Number (int): 408923761270065358341720050931084978076749
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:a1:1a:3f:24:cd:88:60:5e:99:29:33:c8:15:85:9a:dd:55:99:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:e0:89:3e:87:4b:3c:b5:3e:61:0c:17:72:1b:f8:b8:0d:8f:79:b6
Fingerprint (sha256): 00:7a:bf:46:20:eb:4c:36:aa:00:4c:dc:ff:cc:c0:63:a3:74:30:cf:b3:8a:6d:11:f0:ae:1e:3c:eb:22:90:c1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod5.edgeduck.io

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod5.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.kitkatchocolatory.com.br
blog.kleanathlete.com
boservices-kw.buynespresso.com
boservices-sa.buynespresso.com
boservices.buyonline.nestlewaters.jo
boservices.kitkatchocolatory.com.br
boservices.optifast.com
business.gerber.com
cashier.shop-ch.nespresso.com
fr.douglaslabs.ca
fr.seroyal.ca
gis.apps.nestle.com
int1.justrightpetfood.com
int2.justrightpetfood.com
int3.justrightpetfood.com
jovenes.nestle.com
kitkat-cms.kitkatchocolatory.com.br
kitkat-print-service.kitkatchocolatory.com.br
lactogrow.nestlecrm.co.id
nymsaoa.nestle.com
portal.gis.apps.nestle.com
prod-ae.buynespresso.com
prod-kw.buynespresso.com
prod-m2.dolce-gusto.sk
prod-sa.buynespresso.com
prod.buyonline.nestlewaters.jo
prod.buyonline.nestlewaters.qa
prod5.edgeduck.io
qa1.justrightpetfood.com
qa2.justrightpetfood.com
qa3.justrightpetfood.com
sa.buynespresso.com
services.ernaehrungsstudio.nestle.de
services.herta.de
services.smarties.de
services.thomy.de
services.vittel.de
services.wagner-pizza.de
shop.vitaflo.de
taxmonitoring.nestle.ru
trade.nespresso.es
uat.business.gerber.com
vitalproteins.nutricaoatevoce.com.br
www.areyouspendingtoomuchoncma.co.uk
www.atrium-innovations.nl
www.biotherapeuticdrainage.com
www.coliquesdebebe.ca
www.cpwpromo.com
www.dysphagia.ru
www.kitkatchocolatory.com.br
www.klimcaribbean.com
www.naturesheartsuperfoods.co.uk
www.nhsprogramsrsvp.com
www.nhsspeakerprograms.com
www.nhsspeakerresources.com
www.phlogenzym.ru
www.plantiron.gardenoflifecanada.com
www.pureencapsulations.jp
www.setdoctors.ru
www.soporte.maquinanescafe.com.mx
www.w2b.nestle.ca

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for prod5.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypCcs6CfmLN53DhmE3QJ
sWrxuMKmQRvnYX7xMxk8QCMHtBJ6OOcr4RhtXne4uWcrymGiUV1VfpqHkk7S0kbm
7SS1nEPEWVm1bmKZNGhZjNjQ0irIjSXacdoZU0Mt7nJ9eHk41mjX4Ul8I+eGKYfJ
0FkLDVKUyt0vYBUYE/oTWTYl21pPk1/MVMPbXeb1nEDz7AnMARWEASF0VCa3gGmD
Xj8IIsWfGTvFb2LW+IFBUHOxbPF/YUDOmGsYCZs99+Ja/8XfOtNAsn6Eu8cq19co
0UiVmmNLUe2SpRg7T7/Im31LyTE8tlIggsjJktqacadIpu8ZkD6JbxCtKndvCgVl
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408923761270065358341720050931084978076749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 23:06:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 23:06:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod5.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25571448495286071061183861249720575158171911303166746861361875610575266867423837493398004627035123534845545036037634536747171710406473731932119025503452729953146881945593527141184081120953079030910221585178490605850504969427665029108204492736000805962212826549242270362079353608049353695311989194723226449919120475097185605120655739419025197273276218527126331799029608670349710275460353768455141050199500263585908207819348062757473455313087412299769199546771283060579571225424798524652741030375113874323356042206472788835626615446650228041961375047231305536564513362540770833094096180689393673509633360487084179416527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17a11a3f24cd88605e992933c815859add5599a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.kleanathlete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-kw.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.buyonline.nestlewaters.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.optifast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashier.shop-ch.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.douglaslabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.seroyal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int1.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int2.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int3.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovenes.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat-cms.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat-print-service.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactogrow.nestlecrm.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymsaoa.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.gis.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ae.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-kw.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2.dolce-gusto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.buyonline.nestlewaters.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.buyonline.nestlewaters.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod5.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ernaehrungsstudio.nestle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.herta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.smarties.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.thomy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.vittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.wagner-pizza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vitaflo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxmonitoring.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.nespresso.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.business.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalproteins.nutricaoatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.areyouspendingtoomuchoncma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atrium-innovations.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biotherapeuticdrainage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coliquesdebebe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpwpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dysphagia.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klimcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturesheartsuperfoods.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsprogramsrsvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsspeakerprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsspeakerresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phlogenzym.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantiron.gardenoflifecanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setdoctors.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soporte.maquinanescafe.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w2b.nestle.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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