prod3.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 04:05:59:31:04:d0:dd:14:58:e7:35:34:20:60:f9:71:8e:2e was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod3.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05:59:31:04:d0:dd:14:58:e7:35:34:20:60:f9:71:8e:2e
Serial Number (int): 350269111373494121626148563436331747872302
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 72:ad:13:f5:54:85:09:4b:e4:ba:ba:b7:1d:58:1f:6f:46:41:4f:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2b:a8:38:94:9a:16:14:6a:a5:b1:12:29:77:b1:02:3d:e2:85:96:7c
Fingerprint (sha256): 07:31:17:fa:a4:ae:70:76:8f:fe:de:a5:47:5b:29:f0:89:cb:63:24:82:89:01:2e:f0:be:e4:c0:a9:9b:57:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod3.edgeduck.io

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod3.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amb-tools.nestle.com
app.nestlemilkmanagement.pk
asp-prod.inshelfmobile.nestle.com
boservices-eur.nestlebabyandme.com
boservices.buyonline.nestlewaters.com.lb
cmtinternal.nestleusa.com
code-services.dolce-gusto.com
crm.nestle.ru
dac-tools.nestle.com
fidelidade.dev.it-digitalnewtech.com.br
fidelidade.hom.it-digitalnewtech.com.br
kavleosem.osem.co.il
kr-product-registration.nespresso.com
mrsmedia.nestleusa.com
prod.direct.backoffice.nestle.jp
prod.nestlenan.com
prod2-m2-boservices-lite.dolce-gusto.com
prod3.edgeduck.io
promotheus.nestle.de
rdaccelerator.nestle.com
return.nestle.jp
s2.croquonslavie.fr
s3.croquonslavie.fr
scan.gardengourmet.dk
stag.nestlenan.com
t.guigoz.fr
wellness.nestle.co.th
www.cerelac.co.id
www.cerelacironcalculator.com
www.deshkeliye.maggi.in
www.kitkat.co.th
www.lactoclub.co.id
www.mynestle.in
www.nangrow.in
www.nespresso.mq
www.nestleagustoconlavida.com
www.nestlenan.com
www.nestleprofessional.in
www.optifibre.at
www.optifibre.ch
www.optifibre.co.uk
www.optifibre.com.mx
www.optifibre.fr
www.promocion.purina.cl
www.recetasnestlecam.com
www.resourcehighprotein.in
www.sisu.com
www.smarties.at
www.vitafriendsmsud.com

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for prod3.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwywpeYeVhNWDWs26W6PT
LPWGChKEGKysb0stnczeZCF6SGcbdmNwEjo/nYno6SGOzcDYf0MrDJ/pL3nB0YI7
24pSOeIk5LwjGnEJT9oaOCt0vn567ez+HMVOdmnHvZ4VcrT1td+E+YtcXmB1w5hz
+51GP1JuYkACBiTfX3XheH+7bdyHqWre2BdSCZR/eN3AL335P1LVRAEZSsseQhvo
/8/bX6G9sy1YFiO5/q3MHSAexYxKOhJ6v8aGXu+YoPSASUBRp0WI7Ztyt235afLe
9Bj6zYffbBdW7nRTNdQA0FRo9kfzbpKgzjd4oNuOl7SuhwJHu8UWoGrrKlrBqxoX
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350269111373494121626148563436331747872302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-26 12:19:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-24 12:19:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod3.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24638246567474037813311778096169852936410286025133773751463352570296030460958533417570757596076469895714204757520346041840129054937057578428393506621099038836038368567660248185934116095907787869227024340166611217864080518940234836191769360647433580327130487416793199284669961206710904736274131435226038664537802584425275099863305020049758964037706688779442421166806752977456742444585343552309580141604369795601207514892469845444379549015875723028827396056917424697100816064629471278157125047741956914770926949933306598078464042124329877719846818270996696878825537958698599003466804804789374960557423007686328279767011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72ad13f55485094be4babab71d581f6f46414f9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amb-tools.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nestlemilkmanagement.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asp-prod.inshelfmobile.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-eur.nestlebabyandme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.buyonline.nestlewaters.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmtinternal.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'code-services.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dac-tools.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelidade.dev.it-digitalnewtech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidelidade.hom.it-digitalnewtech.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kavleosem.osem.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-product-registration.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsmedia.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.direct.backoffice.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nestlenan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod2-m2-boservices-lite.dolce-gusto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod3.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotheus.nestle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdaccelerator.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'return.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.croquonslavie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.croquonslavie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scan.gardengourmet.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stag.nestlenan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.guigoz.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellness.nestle.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerelac.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cerelacironcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deshkeliye.maggi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkat.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lactoclub.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynestle.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nangrow.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nespresso.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestleagustoconlavida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestlenan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestleprofessional.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifibre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promocion.purina.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recetasnestlecam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcehighprotein.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sisu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smarties.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitafriendsmsud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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