prod5.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 04:be:11:fe:1d:f1:d5:37:89:4f:52:a3:f3:8b:e6:38:9c:0c was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod5.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:be:11:fe:1d:f1:d5:37:89:4f:52:a3:f3:8b:e6:38:9c:0c
Serial Number (int): 413126709768699559178869413652895314254860
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:50:3a:b2:68:04:53:d7:84:59:1f:38:3b:61:7b:2a:dc:ed:fb:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:6e:56:0d:52:ac:dc:6b:2f:be:30:8c:a9:84:a9:a7:ac:a2:86:72
Fingerprint (sha256): 00:ee:f1:0a:a8:66:c2:be:1a:c0:3c:d7:57:9c:5c:eb:e9:78:96:3e:a8:85:69:90:b7:98:35:6e:3c:65:72:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod5.edgeduck.io

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod5.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.kitkatchocolatory.com.br
blog.kleanathlete.com
boservices-kw.buynespresso.com
boservices-sa.buynespresso.com
boservices.buyonline.nestlewaters.jo
boservices.kitkatchocolatory.com.br
boservices.optifast.com
business.gerber.com
cashier.shop-ch.nespresso.com
fr.douglaslabs.ca
fr.seroyal.ca
gis.apps.nestle.com
int1.justrightpetfood.com
int2.justrightpetfood.com
int3.justrightpetfood.com
jovenes.nestle.com
kitkat-cms.kitkatchocolatory.com.br
kitkat-print-service.kitkatchocolatory.com.br
lactogrow.nestlecrm.co.id
nymsaoa.nestle.com
portal.gis.apps.nestle.com
prod-ae.buynespresso.com
prod-kw.buynespresso.com
prod-m2.dolce-gusto.sk
prod-sa.buynespresso.com
prod.buyonline.nestlewaters.jo
prod.buyonline.nestlewaters.qa
prod5.edgeduck.io
qa1.justrightpetfood.com
qa2.justrightpetfood.com
qa3.justrightpetfood.com
sa.buynespresso.com
services.ernaehrungsstudio.nestle.de
services.herta.de
services.smarties.de
services.thomy.de
services.vittel.de
services.wagner-pizza.de
shop.vitaflo.de
taxmonitoring.nestle.ru
trade.nespresso.es
uat.business.gerber.com
vitalproteins.nutricaoatevoce.com.br
www.areyouspendingtoomuchoncma.co.uk
www.atrium-innovations.nl
www.biotherapeuticdrainage.com
www.coliquesdebebe.ca
www.cpwpromo.com
www.dysphagia.ru
www.kitkatchocolatory.com.br
www.klimcaribbean.com
www.naturesheartsuperfoods.co.uk
www.nhsprogramsrsvp.com
www.nhsspeakerprograms.com
www.nhsspeakerresources.com
www.phlogenzym.ru
www.plantiron.gardenoflifecanada.com
www.pureencapsulations.jp
www.setdoctors.ru
www.solutions.nestleprofessional.ca
www.soporte.maquinanescafe.com.mx
www.w2b.nestle.ca

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for prod5.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXPJ60EydEbzBYNMbve0
EGKrXUZrRzK1ezWpThtaoq0n5vzaXXXec3Fc9xO8Oq9T5/O5zHKacsdjzS462SwI
iwPD5olLz0daJmDOH+7tP5aX61V25nFoh21QxKNwoIYHd0qtSVTlzIwmGJqL6vHc
EislBJVz0Mfzn66ggwUgmTeBrqCZnrNs6uq3vrzb0eb6v2GWNQ70fh8G2xmlL6lm
HM2b+mJ9Tta0s0E+Ea303mSu8xIY0T2hnDqOYGloB9Cw8ehg8BiWkFys/jJMVsh4
SWCAYFoAzMOZNPS2V2nzRWQ0D3L9FbRVVir8HNlvlHlvLLQu64sgIxuPNEQGEarc
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413126709768699559178869413652895314254860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-08 11:34:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 11:34:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod5.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22401277537676205348294452228383356321343046369644656443923314487092922262459842125312381289470161437941069067533590831058649780004442922788064067702031837924142804374220570538473738706030882351713644519723052852224830332094764439411225376068482367421432721396739879460107897041815498582272460719203842044163045552723550250503827139011485584203390641264671202679832424822902284363057139406994844733524192552982593768715951304654219807994241100158413957652845467155686140319726469027092963890658031075658512552328619013313988832896371637026197370165798229591811951313621755911799125528754414025477179931950607523044413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07503ab2680453d784591f383b617b2adcedfb91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1663 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.kleanathlete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-kw.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.buyonline.nestlewaters.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.optifast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashier.shop-ch.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.douglaslabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.seroyal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int1.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int2.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int3.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovenes.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat-cms.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat-print-service.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactogrow.nestlecrm.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymsaoa.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.gis.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ae.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-kw.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2.dolce-gusto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.buyonline.nestlewaters.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.buyonline.nestlewaters.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod5.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ernaehrungsstudio.nestle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.herta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.smarties.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.thomy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.vittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.wagner-pizza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vitaflo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxmonitoring.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.nespresso.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.business.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalproteins.nutricaoatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.areyouspendingtoomuchoncma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atrium-innovations.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biotherapeuticdrainage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coliquesdebebe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpwpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dysphagia.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klimcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturesheartsuperfoods.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsprogramsrsvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsspeakerprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsspeakerresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phlogenzym.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantiron.gardenoflifecanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setdoctors.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solutions.nestleprofessional.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soporte.maquinanescafe.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w2b.nestle.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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