nonprod14.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 04:60:a6:fa:09:68:81:62:26:04:4e:e4:a2:c1:50:fe:f4:ae was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nonprod14.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:a6:fa:09:68:81:62:26:04:4e:e4:a2:c1:50:fe:f4:ae
Serial Number (int): 381338201063787466375663923765369865434286
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:8d:4a:a8:1c:ed:0c:63:9e:c7:e9:b9:e6:bf:a0:a0:02:b9:3e:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:e9:78:b1:33:f4:26:5d:4c:72:f0:0f:f5:fd:d4:fb:b9:0e:50:2c
Fingerprint (sha256): 03:3e:d2:5d:45:1f:91:f5:c7:6a:0c:f8:9e:a1:92:75:09:66:fb:45:f6:e9:1e:01:49:da:4c:c3:b8:b1:e3:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nonprod14.edgeduck.io

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nonprod14.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int.boservices.nestlecoffeepartnerssl.com
nonprod14.edgeduck.io
preprod-boservices.kitkatchocolatory.com.br
qa.boservices.nestlecoffeepartnerssl.com
qareadyrefresh.costcowaterdelivery.com
readyrefresh.costcowaterdelivery.com
smartdata-pp.nestle.com
stag.academy.alimentarium.org
stag.alimentarium.org
stag.api.milo.com.au
stag.app.kitkat.com.au
stag.app.milo.co.nz
stag.app.nestlemilo.com.vn
stag.apps.nestle.com
stag.apps.nestlebaby.es
stag.apps.smababy.co.uk
stag.arrowheaddelivery.com
stag.babycare.nestle.it
stag.babyclub.smababy.ie
stag.bakerschoice.nestle.com.au
stag.bbexpo.wyethnutrition.com.hk
stag.beneficios.purina.com.mx
stag.beneful.de
stag.biziipad.nestle.com
stag.bonka.es
stag.boost.com.ar
stag.buitoni.it
stag.buyonline.nestlewaters.bh
stag.buyonline.nestlewaters.com.lb
stag.buyonline.nestlewaters.jo
stag.buyonline.nestlewaters.pk
stag.buyonline.nestlewaters.qa
stag.buyonline.nestlewaters.sa
stag.calculator.nestleprofessional.com.au
stag.capacitacionenlace.com.mx
stag.coffee-mate.com
stag.coffeemate.com
stag.coffeetogo.co.uk
stag.comecarsaudavel.com.br
stag.cswebresources.com
stag.deerparkdelivery.com
stag.dreyers.com
stag.x5.maggi.ru
stag1.purina.ru
stag1.ruchoco.ru
stag1.sanpellegrino-corporate.it
stag1.stouffers.com
stag1.teatro-nescafe-delasartes.cl
stag1.vetdirect.com.ar
stag1.wholeearthfarms.com.ar
stag1.zoegas.se
stag2.app.milo.com.au
stag2.arrowheaddelivery.com
stag2.cailler.ch
stag2.deerparkdelivery.com
stag2.goodnes.com
stag2.maggi.in
stag2.nestlepurelifedelivery.com
stag2.nido.do
stag2.polandspringdelivery.com
stag2.zephyrhillsdelivery.com
stag3.clubnestlepro.re
stage.api.ckmk.com
stage.auproducts.nestle.com.au
staging.nestle-produktdatenbank.de
staging.pureencapsulationspro.com

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for nonprod14.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PfayEAguDWM3IKxB4BE
TDowta4ydkH9/xqskMiml4iCIDaXtBv2IlOSkjAUZ5Z7xyafxpjXsdQGmFqDjHgO
Ua3mrnylYDr/f6ePpTtzkoky9KsAQ4H6E+Hkq3JH8ykv6PpZu+a7tLTGvhcRhv2E
UlENJEf6XwgiSvRV83jkxjHLF4hGPT72Rx/qCNjCrdQhfQVPp214aEQDy/t6y9Lo
saqmFbd/+gwtfxkfBiq2fTxvJAehl7KtijOUKYBuClhsZu+SbNJi/Lb33FltaelE
dQqNyStSvyY7FuO9gS0kLAvZ9X3q4VqYmTnPKQxKkveCYGQCQ36HpUylcvimWca5
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381338201063787466375663923765369865434286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 09:27:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-08 09:27:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprod14.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28399601979836370337269901194232796456015242717983921748612059337724118332504237575467346506466141524492504280472282398960291563649365881248836186078813742046254543100068038623488124672702596598203729332382916170504503615984034351609918143228189732654477642226832457283100702483742311777293807911331875670540628966988543826173571430039949849209927149469819304920384952673331446226643073123913412402442272947864540201722422440217773773457730222249433053865903801141444434912947500263045406898702910830540706064298507780597945626813684959829726977513750823410125342571528438827319664693681060353225023210882421857106239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a88d4aa81ced0c639ec7e9b9e6bfa0a002b93e42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1796 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.boservices.nestlecoffeepartnerssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod14.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-boservices.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.boservices.nestlecoffeepartnerssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qareadyrefresh.costcowaterdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readyrefresh.costcowaterdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdata-pp.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.academy.alimentarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.alimentarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.api.milo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.app.kitkat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.app.milo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.app.nestlemilo.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.apps.nestlebaby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.apps.smababy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.arrowheaddelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.babycare.nestle.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.babyclub.smababy.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.bakerschoice.nestle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.bbexpo.wyethnutrition.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.beneficios.purina.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.beneful.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.biziipad.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.bonka.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.boost.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.buitoni.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.buyonline.nestlewaters.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.buyonline.nestlewaters.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.buyonline.nestlewaters.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.buyonline.nestlewaters.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.buyonline.nestlewaters.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.buyonline.nestlewaters.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.calculator.nestleprofessional.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.capacitacionenlace.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.coffee-mate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.coffeemate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.coffeetogo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.comecarsaudavel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.cswebresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.deerparkdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.dreyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.x5.maggi.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.purina.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.ruchoco.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.sanpellegrino-corporate.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.stouffers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.teatro-nescafe-delasartes.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.vetdirect.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.wholeearthfarms.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.zoegas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.app.milo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.arrowheaddelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.cailler.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.deerparkdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.goodnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.maggi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.nestlepurelifedelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.nido.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.polandspringdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag2.zephyrhillsdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag3.clubnestlepro.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.ckmk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.auproducts.nestle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.nestle-produktdatenbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pureencapsulationspro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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