nonprod1.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 04:50:f2:e7:80:da:8e:c6:9a:d5:20:3f:2a:d1:a5:74:a5:a1 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nonprod1.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:50:f2:e7:80:da:8e:c6:9a:d5:20:3f:2a:d1:a5:74:a5:a1
Serial Number (int): 375994608289734690515396751487526411478433
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 59:42:8a:72:b6:7b:e6:11:57:4c:85:1b:e5:99:7d:ec:bd:ec:4e:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:75:e4:bc:32:3e:02:ff:5f:2b:bd:f8:c6:76:5f:7c:b4:67:f0:73
Fingerprint (sha256): 05:f7:fa:0f:e5:54:e5:cf:ab:6d:e2:3f:e4:68:8c:24:8f:96:40:93:49:41:90:6d:24:69:0c:27:c6:1f:9d:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nonprod1.edgeduck.io

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nonprod1.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

authoring.nestleprofessional.com
dev.nestlepromotions.com.au
int-api.special-t.com
int-boservices.special-t.com
int-m2-ar.dolce-gusto.com
int.dolcegusto-me.com
int.hk.apac.boservices.dolce-gusto.com
int.middleeast.emea.boservices.dolce-gusto.com
int.special-t.com
madcapws-pp.nestle.com
nonprod1.edgeduck.io
nwid.staging.nespresso.com
pluckstage.purina.nestle-family.com
preprod-api.special-t.com
preprod-m2-boservices.dolce-gusto.com.ar
preprod-m2.dolce-gusto.com.ar
preprod.dolcegusto-me.com
preprod.hk.apac.boservices.dolce-gusto.com
preprod.kitkat.de
preprod.middleeast.emea.boservices.dolce-gusto.com
preprod.nescafe.de
preprod.shop.optifast.com
preprod.special-t.com
preprod.wagner-pizza.de
prod.accupure.com
prod.agustoconlavida.es
prod.bamba.osem-nestle.co.il
prod.menuplanner.gerber.com
prod.nescafe.ru
prod.nescafemycafe.com
prod.nestle.es
prod.nestleprofessional.ru
prod.productguide.nestle-nutrition.com
prod.sellbottledwater.com
prod.ww1.nestle.es
prod2.hepar.fr
pub-staging.test1.nestleprofessional.com
stag.accupure.com
stag.bamba.osem-nestle.co.il
stag.bishulim.co.il
stag.gourmet-cat.ru
stag.hepar.fr
stag.herta.co.uk
stag.hub.purinaone.ru
stag.menuplanner.gerber.com
stag.nescafe.ru
stag.nescafemycafe.com
stag.nesquik.it
stag.nestle.es
stag.nestleprofessional.ru
stag.nestletravelretail.com
stag.perroton.dogchow.com.pe
stag.prav-pit.ru
stag.productguide.nestle-nutrition.com
stag.purina-arabia.com
stag.purina-dentalife.ru
stag.purina-proplan.it
stag.purina.it
stag.sellbottledwater.com
stag.ww1.nestle.es
stag1.beneful.nl
stag1.buonalavita.it
stag1.gourmet-gatto.it
stag1.jiveiaktivno.bg
stag1.korpi.gr
stag1.nestle-family.com
stag1.nestle.es
stag1.nestlenido.com
stag1.productosdelcafe.com
stag1.sellbottledwater.com
stage.agustoconlavida.es
stage.leisi.ch
stage.nestledreyersfoodservice.com
stage.nestletravelretail.com
stage.privacy.nestleusa.com
stage.termsandconditions.nestleusa.com

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for nonprod1.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oVnCwmDbNxSHkE2iHNC
YDOJZ9+ea9pxg0jUDv8UGTiK99sr6shNQvTuT2fdWu6buLPi7LMdjyRBErLkixBG
FCfoqEIDbMV24QvDoY2qKQuhBcNuH1D4W1ABosp/zB1S/EDKYZEjEdanieSP9cDi
A4B6W7Zi0AHhibMVu/IAwgdhxjqZua8WOhSyX1ETUMTaOLKBR6ZFyCiUh0uLMcII
9VVBMJmN0h4WpzX2R4OMg06S5NFA1cD2qEIWyrz2AfHlBsVLGS1BREmp11XmMmFz
v6LclyWXsNm6O8TYignkEeixp+cU0n5rCqZ6uSJquLPsz4JFO1BEf+/6nhB9Tnhf
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375994608289734690515396751487526411478433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-23 10:31:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-22 10:31:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprod1.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29605546592580226188875922509716159169809802335576459793490067848033757838232449630625235043309604501695148962482269649705507841301671463561282462469121758471748278802109524464293765158719437750756052085072949453177657485760496294120698876678481921201505020084366489154325807312178647966829893804792859575577168509829568801988142386302238168482050935954742343538604888205432111467847638521104816061799879539427251177661162673826992024426823179494502995653094730659605897351435395284072704295583514670101025265240625245750784160056129120574888726104413729282757319234796726212003868988181107288255558293333262651121553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59428a72b67be611574c851be5997decbdec4eff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authoring.nestleprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nestlepromotions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-api.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-boservices.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-m2-ar.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.dolcegusto-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.hk.apac.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.middleeast.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madcapws-pp.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod1.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwid.staging.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pluckstage.purina.nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-api.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-m2-boservices.dolce-gusto.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-m2.dolce-gusto.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.dolcegusto-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.hk.apac.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.kitkat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.middleeast.emea.boservices.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.nescafe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.shop.optifast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.special-t.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wagner-pizza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.accupure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.agustoconlavida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.bamba.osem-nestle.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.menuplanner.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nescafe.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nescafemycafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nestle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nestleprofessional.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.productguide.nestle-nutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.sellbottledwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.ww1.nestle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod2.hepar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pub-staging.test1.nestleprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.accupure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.bamba.osem-nestle.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.bishulim.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.gourmet-cat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.hepar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.herta.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.hub.purinaone.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.menuplanner.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.nescafe.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.nescafemycafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.nesquik.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.nestle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.nestleprofessional.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.nestletravelretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.perroton.dogchow.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.prav-pit.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.productguide.nestle-nutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.purina-arabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.purina-dentalife.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.purina-proplan.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.purina.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.sellbottledwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.ww1.nestle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.beneful.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.buonalavita.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.gourmet-gatto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.jiveiaktivno.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.korpi.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.nestle-family.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.nestle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.nestlenido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.productosdelcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag1.sellbottledwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.agustoconlavida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.leisi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nestledreyersfoodservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nestletravelretail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.privacy.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.termsandconditions.nestleusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017c126cd7c0000004030046304402200b51e35f0e14b248b886c66daaef8db2d3744c284bb67cdc4952f1d5c4e526cb0220143ecd026b074b513f9b0ce62c6ecc1037aa8912bb594df143587bab39a921a6007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c126cd7a80000040300473045022100d0cdde83d08b71343a54ae6f660cb0b76e877174aafd97d0d341fae50f23ed0a02203c73287e00e2a4bda3803b3c0ad1731ae01a4bc8d3770e2b90a7c7d5d38dba44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e015eb5c0fe486916205832d6d12edd5f991b433fce4a876445f808218bc31e31de6b696b18d84a9c31ea056deb1ee2465f201cef17225cc47e30c95e8c8d6a83c443ea9982b29addd441efa230af51ad0bc9385552aa7bfb80ee440c0c0b9c7f210d16e0f33bf7d3ceb299f9a605534d9c853a502361080e86372635202320be1ab70650adf708266c4632fb1d5ee5ad9ba363b54178f805761158b9fd6939fdd968ed8e33fca1a66506490cca151c3b79bd6f312ad4adcc96eba7f2c142356a85886fa4b2f3299512e764f88d71edce56712071f83fea8dbcef1c9b7b4bcfa9b1ef56683a5a72171ce863a58655ab7c2bdc5bdfdc9aeeec029cde189d2aab