prod5.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 03:4b:0a:6e:ba:df:4f:79:81:83:59:68:52:25:1b:cb:8b:e5 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod5.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:0a:6e:ba:df:4f:79:81:83:59:68:52:25:1b:cb:8b:e5
Serial Number (int): 286871902537184075416692918511714528103397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:63:c7:a7:37:84:7a:b0:03:52:20:ad:85:0a:28:20:85:82:bd:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:b3:b1:f0:f2:3a:a8:94:e7:10:df:b3:87:aa:64:7b:63:fd:7f:35
Fingerprint (sha256): 0a:00:79:d2:8e:4a:a7:2e:ab:84:de:e3:8e:8d:9c:c6:ac:b3:be:54:ba:f6:7e:40:8a:bc:bc:90:da:81:b5:6d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod5.edgeduck.io

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod5.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.kitkatchocolatory.com.br
blog.kleanathlete.com
boservices-kw.buynespresso.com
boservices-sa.buynespresso.com
boservices.buyonline.nestlewaters.jo
boservices.kitkatchocolatory.com.br
boservices.optifast.com
business.gerber.com
cashier.shop-ch.nespresso.com
fr.douglaslabs.ca
fr.seroyal.ca
gis.apps.nestle.com
int1.justrightpetfood.com
int2.justrightpetfood.com
int3.justrightpetfood.com
jovenes.nestle.com
kitkat-cms.kitkatchocolatory.com.br
kitkat-print-service.kitkatchocolatory.com.br
lactogrow.nestlecrm.co.id
nymsaoa.nestle.com
portal.gis.apps.nestle.com
prod-ae.buynespresso.com
prod-kw.buynespresso.com
prod-m2.dolce-gusto.sk
prod-sa.buynespresso.com
prod.buyonline.nestlewaters.jo
prod.buyonline.nestlewaters.qa
prod5.edgeduck.io
qa1.justrightpetfood.com
qa2.justrightpetfood.com
qa3.justrightpetfood.com
sa.buynespresso.com
services.ernaehrungsstudio.nestle.de
services.herta.de
services.smarties.de
services.thomy.de
services.vittel.de
services.wagner-pizza.de
shop.vitaflo.de
taxmonitoring.nestle.ru
trade.nespresso.es
uat.business.gerber.com
vitalproteins.nutricaoatevoce.com.br
www.areyouspendingtoomuchoncma.co.uk
www.atrium-innovations.nl
www.biotherapeuticdrainage.com
www.coliquesdebebe.ca
www.cpwpromo.com
www.dysphagia.ru
www.kitkatchocolatory.com.br
www.klimcaribbean.com
www.naturesheartsuperfoods.co.uk
www.nhsprogramsrsvp.com
www.nhsspeakerprograms.com
www.nhsspeakerresources.com
www.optifast.com.au
www.optifast.com.tr
www.optifast.my
www.optifast.sg
www.phlogenzym.ru
www.plantiron.gardenoflifecanada.com
www.pureencapsulations.jp
www.setdoctors.ru
www.soporte.maquinanescafe.com.mx
www.w2b.nestle.ca
www.zenpep.com

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for prod5.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztW5BoaS95J3gZvP3ugR
c2SZYbEPw9vmIeqKmFIqCiMio13RMf+CDQAT0VmpgDh1iCCu31NNG8cfIn1It7k7
OZJxR/D69ZYl9J+oL3Ud2c/GsDlVPdDpvt6SqFW05XwD7Yb9oMx2lKT3IUnx+eR5
YZg9r9BBRkME06Cmjq65ggwd7p24CULAmVma2peEo3yPPd3+ezGc/DLqN19tfLQA
KxJAGKVLAzYt0sVnxyZgbBxRe1B+L/pU6GhsA1aIQIbferOwYepiDf2zPBLJDIay
Tams/0QOT6gGxeHSmZax1imAc8lcxi5wR60pnbhZr/05tl92sbT7gJ7GtliQooQY
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286871902537184075416692918511714528103397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-25 12:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 12:39:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod5.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26110481441867035033564965708440235223480083854575159712170835740378406684523845448235286534333558655633873839129277383769637592055782448743430845576064117397021881337622317659184875040076370949710111761644999084328675950904683773210688785190131429111649649557132672651938017719464589568638668539172535056148445518312634659316421114371280545078838313200867072604539678712727907767196613421702264729109315769157503128279351942350897095226922383139544392551114826129580582945406789680889745552552163117981082510450363460382930896206290722987727038283605337484302804212418728869743019924673648489474205373061715542153289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a63c7a737847ab0035220ad850a28208582bd83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1718 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.kleanathlete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-kw.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices-sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.buyonline.nestlewaters.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.optifast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashier.shop-ch.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.douglaslabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.seroyal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int1.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int2.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int3.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovenes.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat-cms.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitkat-print-service.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactogrow.nestlecrm.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymsaoa.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.gis.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-ae.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-kw.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2.dolce-gusto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.buyonline.nestlewaters.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.buyonline.nestlewaters.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod5.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.buynespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.ernaehrungsstudio.nestle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.herta.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.smarties.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.thomy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.vittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.wagner-pizza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.vitaflo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxmonitoring.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.nespresso.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.business.gerber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalproteins.nutricaoatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.areyouspendingtoomuchoncma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atrium-innovations.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biotherapeuticdrainage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coliquesdebebe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpwpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dysphagia.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkatchocolatory.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klimcaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturesheartsuperfoods.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsprogramsrsvp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsspeakerprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhsspeakerresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifast.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifast.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifast.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifast.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phlogenzym.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantiron.gardenoflifecanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setdoctors.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soporte.maquinanescafe.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w2b.nestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenpep.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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