prod7.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 03:e8:38:e2:8d:e4:95:ec:d7:c6:e8:7b:f2:23:01:77:b2:3d was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod7.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:38:e2:8d:e4:95:ec:d7:c6:e8:7b:f2:23:01:77:b2:3d
Serial Number (int): 340357980025722622383373878127969298788925
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:0e:37:e2:f2:54:53:bc:05:00:e3:3e:00:52:6c:3e:eb:a4:34:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:12:52:03:84:d1:88:ea:7e:fd:90:c2:0a:4f:c6:a8:c3:9b:85:b2
Fingerprint (sha256): 08:16:44:f5:57:da:97:02:08:28:db:ae:72:f1:6d:51:35:67:5a:f1:e1:d3:4d:2b:2d:27:f3:52:19:be:fc:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod7.edgeduck.io

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod7.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.deskovery.nestle.com
api.petivity.com
boservices.ncare.net.au
boservices.nestlewatersegypt.com
boservices.nutricionesvida.es
dashboard.petivity.com
deskovery.nestle.com
frontend.nestleatevoce.com.br
navigator.nestleusa.com
ndgapp-web.nestle.jp
photo.nestle.ru
prod-m2.dolce-gusto.se
prod.nestlewatersegypt.com
prod7.edgeduck.io
sbd-legacy.nestle.jp
shop-ch.nespresso.com
sonar.azure.dsudevops.nestle.biz
spike.justrightpetfood.com
token.nestpay.nestle.com
www.dolce-gusto.at
www.dolce-gusto.be
www.dolce-gusto.bg
www.dolce-gusto.ch
www.dolce-gusto.cl
www.dolce-gusto.co.cr
www.dolce-gusto.co.id
www.dolce-gusto.co.kr
www.dolce-gusto.co.nz
www.dolce-gusto.co.th
www.dolce-gusto.co.uk
www.dolce-gusto.co.za
www.dolce-gusto.com.ar
www.dolce-gusto.com.au
www.dolce-gusto.com.co
www.dolce-gusto.com.ec
www.dolce-gusto.com.gt
www.dolce-gusto.com.hn
www.dolce-gusto.com.mt
www.dolce-gusto.com.mx
www.dolce-gusto.com.my
www.dolce-gusto.com.pa
www.dolce-gusto.com.ph
www.dolce-gusto.com.py
www.dolce-gusto.com.sg
www.dolce-gusto.com.sv
www.dolce-gusto.com.tw
www.dolce-gusto.com.uy
www.dolce-gusto.com.ve
www.dolce-gusto.cz
www.dolce-gusto.de
www.dolce-gusto.dk
www.dolce-gusto.do
www.dolce-gusto.ee
www.dolce-gusto.es
www.dolce-gusto.fi
www.dolce-gusto.fr
www.dolce-gusto.gr
www.dolce-gusto.ie
www.dolce-gusto.it
www.dolce-gusto.lt
www.dolce-gusto.lv
www.dolce-gusto.nl
www.dolce-gusto.no
www.dolce-gusto.pe
www.dolce-gusto.pl
www.dolce-gusto.pt
www.dolce-gusto.ro
www.dolce-gusto.se
www.dolce-gusto.sk
www.dolce-gusto.ua
www.douglaslabs.com
www.douglaslabs.es
www.douglaslabs.eu
www.douglaslabs.nl
www.espacocolaborador.com.br
www.fpn.ch
www.mychildwithcerebralpalsy.com
www.nestleacw.pk

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io
prod3.edgeduck.io

Certificate

The complete raw certificate details for prod7.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFR+M1g/+J8MYsnQBqim
kNCvTBrOpf4j5RQ+DgJamKzLummMxtMEHfmIKK/aetZ9CKRpv+uXs4plcmsCbzG/
rG2sCL4+n/CBd/90+I9hB8iSB2HK/7jGT55+6Y4LQTe1252dKWQ2G2gpKf6RSDRs
2Ja7ff0u1diioJze4QnHvX5dLfw41i8CEmS7WpsSzV2dv+YGfyxY26iHF0QEf0Um
J8hJ3Cl4+M7WPLzz3BNJuxnVtCfJk2dV9rOyYyGhdMpuyBQGYM6ZmmbfoDB8T79e
87mXnscgAKEI5B4IJTED3uFnWD3JCyYimkU+y4UQ/8lNnNCTsoT23MxhICzXEXhU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340357980025722622383373878127969298788925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 09:48:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 09:48:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod7.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23269513150611536256308230377100276092340067751184992887045581743731319431858078106077924898098304254467330227870874729037639221779608384270982905030898272784382283245486620419795062047147535850224865379614459026711699829933474054018305009134995880498554411330257786164398676675907184149315697936526904083507625190369892189813016732258631151431232376345976738417266750608686579119323187345800537719715874733881390596060435773937076519938806983630378565068527130428923908219561934936371736333394934738572878730382622026567392616401094873802452581612515138410763242323348603637757757776371554509012208616577218742080597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							260e37e2f25453bc0500e33e00526c3eeba434a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1767 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.deskovery.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.petivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.ncare.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.nestlewatersegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.nutricionesvida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.petivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deskovery.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontend.nestleatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigator.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndgapp-web.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2.dolce-gusto.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nestlewatersegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod7.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbd-legacy.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-ch.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonar.azure.dsudevops.nestle.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spike.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'token.nestpay.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espacocolaborador.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpn.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mychildwithcerebralpalsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestleacw.pk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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