prod3.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 03:75:6d:b3:82:5d:7d:61:e6:c4:4c:24:b7:8a:8a:76:9c:16 was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod3.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:75:6d:b3:82:5d:7d:61:e6:c4:4c:24:b7:8a:8a:76:9c:16
Serial Number (int): 301295712641829045299719798378008325561366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:3e:cf:c3:4d:7b:51:85:e4:b6:87:82:b6:cf:d8:cf:2a:03:a9:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:21:1c:b5:ed:10:9b:3e:cc:b1:c9:63:e1:ff:1e:85:8d:1e:39:5c
Fingerprint (sha256): 04:2e:2b:94:6d:42:34:18:72:05:db:36:fe:08:ed:dd:d8:16:3d:c3:16:aa:83:ad:be:34:c9:ab:bb:78:98:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod3.edgeduck.io

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod3.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amb-tools.nestle.com
app.nestlemilkmanagement.pk
asp-prod.inshelfmobile.nestle.com
autoconecta.nestledigital.com.br
boservices-eur.nestlebabyandme.com
boservices.buyonline.nestlewaters.com.lb
cm.cswebresources.com
cmt.cswebresources.com
cmtinternal.nestleusa.com
code-services.dolce-gusto.com
crm.nestle.ru
dac-tools.nestle.com
fidelidade.dev.it-digitalnewtech.com.br
fidelidade.hom.it-digitalnewtech.com.br
henniez.factory.nestlewaters.com
heparbe.factory.nestlewaters.com
heparfr.factory.nestlewaters.com
images.vitaminimages.com
kavleosem.osem.co.il
kr-product-registration.nespresso.com
mapeint.factory.nestlewaters.com
mrsmedia.nestleusa.com
perrierca.factory.nestlewaters.com
perrierfr.factory.nestlewaters.com
perrierint.factory.nestlewaters.com
prod.direct.backoffice.nestle.jp
prod2-m2-boservices-lite.dolce-gusto.com
prod3.edgeduck.io
promotheus.nestle.de
return.nestle.jp
s2.croquonslavie.fr
s3.croquonslavie.fr
scan.gardengourmet.dk
t.guigoz.fr
www.cerelac.co.id
www.cerelacironcalculator.com
www.deshkeliye.maggi.in
www.kitkat.co.th
www.lactoclub.co.id
www.mynestle.in
www.nespresso.mq
www.nestleagustoconlavida.com
www.nestleprofessional.in
www.optifibre.at
www.optifibre.be
www.optifibre.ch
www.optifibre.co.uk
www.optifibre.com.mx
www.optifibre.fr
www.orgainprotein.nl
www.promocion.purina.cl
www.recetasnestlecam.com
www.sisu.com
www.smarties.at
www.vitafriendsmsud.com

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for prod3.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIuF6fymMmTm0DuENFWw
P1tkKf7gHWrjNuTmugqmSL6nxypN/f5WIi+egCIMlN5N9dfpcawuKdPZp3JQGWi1
MS15gxOMYgpq1HLebgUL9kx/tRclEppNvsNBut1hFox3Ta0fRYT6yAQ8mS+BzQIo
/TtEc0t9PlPBkI6gBbpPMW/vbuF5xX8yPwJmDTkcidcA6ov/VQjsvAekapg8Y5gx
kG5PqzaE4FpvQLXVy35RBw0hjDZXn8JkF4VrubpmCJPxo9NsN78fHl0o8/eRujtF
hD+8ae0xBFsAcCBDB4lxbLZD38RfGxWbdwC5b9W8rKvdQ+YIYlZtNRqUNOEqaxVB
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301295712641829045299719798378008325561366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 13:29:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 13:29:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod3.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23296649519420663328461376422442008616020122779974735841408471120205926938112967951467135246662359336045594491004550688183135775850094509592393251689799045615986869552532256340244613545995211410276996344907585339443536995355822572025393164533709532886768572939518789104570398929331748300874994139425555942036187497784695187083911809876903524324999388732964907113463592641606134044977498551380946282726709636030798282263968779441469372422596209833019489060860718483341046911687423621524251552322425444025940485139387119414427646744163818568389619569628175756601448968755719890697180887471420738956162703019173291049361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							253ecfc34d7b5185e4b68782b6cfd8cf2a03a9bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amb-tools.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nestlemilkmanagement.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asp-prod.inshelfmobile.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoconecta.nestledigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-eur.nestlebabyandme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.buyonline.nestlewaters.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.cswebresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmt.cswebresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmtinternal.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code-services.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dac-tools.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelidade.dev.it-digitalnewtech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelidade.hom.it-digitalnewtech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henniez.factory.nestlewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heparbe.factory.nestlewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heparfr.factory.nestlewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.vitaminimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kavleosem.osem.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-product-registration.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapeint.factory.nestlewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmedia.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrierca.factory.nestlewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrierfr.factory.nestlewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrierint.factory.nestlewaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.direct.backoffice.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod2-m2-boservices-lite.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod3.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotheus.nestle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'return.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.croquonslavie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.croquonslavie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scan.gardengourmet.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.guigoz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerelac.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerelacironcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deshkeliye.maggi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkat.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lactoclub.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynestle.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nespresso.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestleagustoconlavida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestleprofessional.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgainprotein.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promocion.purina.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recetasnestlecam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smarties.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitafriendsmsud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e805079dd0000040300463044022020aeaf81d572b0fff95028150cc01ce569eb767e13d099e72cab783fe0f7f63c0220060f2cdca64383ae6ef5a008ee721be8d07eea30b6c568a6de9bbbdb2c0d026f007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e80507a270000040300483046022100cf4a9bfa0d87d2871f9d4a970c5aa0606d8f4ec8616d2800c53f41146a5fba51022100fa137890b9e66ca3ee2119c69e96e057883f0885c6ca7f9e5820337a9c07eddf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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