prod12.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 03:60:21:ec:92:53:ac:5e:20:0b:17:db:5c:33:ab:da:ca:27 was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod12.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:21:ec:92:53:ac:5e:20:0b:17:db:5c:33:ab:da:ca:27
Serial Number (int): 294049057893471433709346317400395822582311
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:12:b6:d4:d0:6e:5e:df:0a:5d:bc:98:49:a1:17:55:9d:ce:a0:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): eb:a4:97:f3:3b:cf:9b:d4:e8:1d:fd:5b:29:5c:23:54:ac:b4:64:38
Fingerprint (sha256): 0a:49:6e:06:41:a8:5d:19:c6:1a:a0:84:2f:da:55:70:e7:c6:44:9a:ed:af:61:7b:12:4a:39:9a:3e:ab:2b:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod12.edgeduck.io

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod12.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.alm.niotp.com
boservices.emporionestle.com.br
line.s-momclub.com
ma-global-loadbalancer-prod.nestle.com
microbiome.ernaehrungsstudio.de
mypractice.puregenomics.com
petfinder.trypurina.com
pki-crl.nestle.com
prod-m2-boservices.dolce-gusto.cz
prod-m2-boservices.dolce-gusto.pl
prod-m2.dolce-gusto.com.ve
prod.emporionestle.com.br
prod.mynestle.in
prod.orgainprotein.nl
prod.purinashelterchampions.com
prod.vitalproteins.es
prod12.edgeduck.io
rdaccelerator.nestle.com
refapp.solgar.fr
registration.nestle.jp
services.nestle-produkttests.de
services.purina.com
shop.petivity.com
siebel.nestle.jp
smartdata.nestle.com.gh
smartdata.wyethnutrition.com.my
televendasvitalproteins.nutricaoatevoce.com.br
tienda.nestlebebe.es
us.nescafe.com
www.admissaodpa.com.br
www.cocinamalher.com
www.elmejornido.com
www.emporionestle.com.br
www.goodnes.com
www.gotujsienazmiany.pl
www.keeplifedelicious.com
www.kitkat.cz
www.kitkat.nl
www.nescnt.com.br
www.nestle-produktdatenbank.de
www.nestle.co.id
www.optifast.de
www.orioncokolada.cz
www.purinavetacademy.com.au
www.vernostniprogram.proplan.cz
www.verybestbaking.com
www.vetdirect.com.ar
www.za.buynespresso.com

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io

Certificate

The complete raw certificate details for prod12.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5neZjukk4q2HQBKpX3Sd
Le4pv7iDPIk782mf3nEZJiVla1scMhI01b/2SOR6vC0cYliZCwzeqErzDCQohOow
fODXR3ZVrt2s72+sGq9+gCq7wBe3Q6xUbtJd6gcdkdRlFK0c2vlr16vQ6m2yuv+T
Fi9gxuVJ7gpMsbpnX/FgyeZq0Eg+h/RgD6MBPMjTrBBZ2gZuOuFizjx9S6fg9KNC
GnJUxsnbCQO2HdcUnW+I+5OjDhBiX3ccqA7aNmFnDDv4gPnyvZzYX6BDa20HCivC
9e4VHn1IardZdoZh9elze5mb1nsacT3/hmqcMh+7DjLA43XNDt9o7UTWpyo/fcmV
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294049057893471433709346317400395822582311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 22:15:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 22:15:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod12.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29093787019864502373648065179288426539800268736244570997192569797837956333159432880973407666711805584938570635865518784651943854987025195972025829847663169548474688796921441247531627739646210666094742922760548072318067425151759886537490129881790173543168714676666043896291855666971233903721099677960176056926189730166718046443255079613793518350690551117608034994874507220907426417741629786712529623751916949960037313086403220671117636869071560542489108676129437861215413009568131913772818026225643488913915408238125021875778471839067373241649022204776735340539137693403191559704114420726792321846224056104681860601117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:20|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.alm.niotp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.emporionestle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'line.s-momclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-global-loadbalancer-prod.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbiome.ernaehrungsstudio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypractice.puregenomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petfinder.trypurina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pki-crl.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2-boservices.dolce-gusto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2-boservices.dolce-gusto.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2.dolce-gusto.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.emporionestle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mynestle.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.orgainprotein.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.purinashelterchampions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.vitalproteins.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod12.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdaccelerator.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refapp.solgar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.nestle-produkttests.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.purina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.petivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siebel.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdata.nestle.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdata.wyethnutrition.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televendasvitalproteins.nutricaoatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienda.nestlebebe.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.nescafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.admissaodpa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocinamalher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elmejornido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emporionestle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodnes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotujsienazmiany.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keeplifedelicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkat.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nescnt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestle-produktdatenbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestle.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifast.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orioncokolada.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purinavetacademy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vernostniprogram.proplan.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verybestbaking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetdirect.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.za.buynespresso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a93cbb1f16f2d60ccd64ddefb1c8aada4fc6b0d6e958c04a6d61c0c8b687808b9d3e72a7ebb61d14ff7b0c99f830b97132e0dc50230ac814dfc15b038a4cae8bad2341b7ba2e50d249b306ed66642b5076ce073437698d148140e9bd0f898e648b29e1271ce27cffc6b45bfbe0b508c55f56e7bba1a814e91645911f99f13fe5dcaf17f7279e000056d753eb9e1807c59b3a9914d1c9f985edd8807861df50ccf38d92ab4d2effe458a3e7aff40d0d093be684fafe1fbd81ab98c91c048acc82b3fc4587a957d7cc4a3d61fa005428acda517c7b9d9594149c356a28773377ac18b1640219917ec4ad9e4b1a1d60054d4a3cc0b231992468ef0bd1112317bc02