prod7.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:86:4c:c4:76:7c:21:be:c7:fb:09:0d:4b:e0:6f:18:df was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod7.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:86:4c:c4:76:7c:21:be:c7:fb:09:0d:4b:e0:6f:18:df
Serial Number (int): 423489779600383498351426001929800959072479
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:e7:15:ec:aa:cb:bc:fd:5d:53:95:3e:74:df:86:2c:9d:50:51:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:c0:8c:46:b1:7f:30:de:1a:69:12:b7:a6:5b:74:61:af:53:57:5c
Fingerprint (sha256): 0a:5e:7f:19:7f:d4:8e:bd:94:4d:32:59:86:62:bf:01:28:43:81:18:6f:d7:0a:b6:f0:b6:e0:e6:8a:cf:87:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod7.edgeduck.io

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod7.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.petivity.com
archibus.nestleusa.com
boservices.ncare.net.au
boservices.nestlewatersegypt.com
boservices.nutricionesvida.es
dashboard.petivity.com
frontend.nestleatevoce.com.br
navigator.nestleusa.com
photo.nestle.ru
prod-m2.dolce-gusto.ie
prod.nestlewatersegypt.com
prod7.edgeduck.io
shop-ch.nespresso.com
sms.nespresso.fr
spike.justrightpetfood.com
www.dolce-gusto.at
www.dolce-gusto.be
www.dolce-gusto.bg
www.dolce-gusto.ch
www.dolce-gusto.cl
www.dolce-gusto.co.cr
www.dolce-gusto.co.id
www.dolce-gusto.co.kr
www.dolce-gusto.co.nz
www.dolce-gusto.co.th
www.dolce-gusto.co.uk
www.dolce-gusto.co.za
www.dolce-gusto.com.ar
www.dolce-gusto.com.au
www.dolce-gusto.com.co
www.dolce-gusto.com.ec
www.dolce-gusto.com.mt
www.dolce-gusto.com.mx
www.dolce-gusto.com.my
www.dolce-gusto.com.ph
www.dolce-gusto.com.py
www.dolce-gusto.com.sg
www.dolce-gusto.com.tr
www.dolce-gusto.com.tw
www.dolce-gusto.com.uy
www.dolce-gusto.com.ve
www.dolce-gusto.cz
www.dolce-gusto.de
www.dolce-gusto.dk
www.dolce-gusto.do
www.dolce-gusto.ee
www.dolce-gusto.es
www.dolce-gusto.fi
www.dolce-gusto.fr
www.dolce-gusto.gr
www.dolce-gusto.ie
www.dolce-gusto.it
www.dolce-gusto.lt
www.dolce-gusto.lv
www.dolce-gusto.nl
www.dolce-gusto.no
www.dolce-gusto.pe
www.dolce-gusto.pl
www.dolce-gusto.pt
www.dolce-gusto.ro
www.dolce-gusto.ru
www.dolce-gusto.se
www.dolce-gusto.sk
www.dolce-gusto.ua
www.dolce-gusto.us
www.douglaslabs.ca
www.douglaslabs.com
www.douglaslabs.es
www.douglaslabs.eu
www.douglaslabs.nl
www.dreyers.com
www.drumstick.com
www.educatie-atrium-innovations.nl
www.edys.com
www.espacocolaborador.com.br
www.expert-nutrition.ch
www.fancyfeast.co.nz
www.feedgoodness.com
www.felix-club.ru
www.fibermais.com.br
www.fpn.ch
www.friendforpet.ru
www.friskies.ru
www.garderielacase.ch

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io
prod3.edgeduck.io

Certificate

The complete raw certificate details for prod7.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugcgEakvvanorsmNCLqj
y/MOxfQsKiKkiwyUPhFjKeLd+iyev/YdYmSqipQX5xFOVZaWzIbZ/Ensy3s4fVd+
M9NbEhqIJL26YC1apr4QDob3i9lOLn4aoiT02I2j6GMI/mwKkgwIMopTOh6AJdHf
QfGzJEHlw/XYMIBe2H9cD9U8hhEuWVYgSbOTP3A1H9XOClPoSqq2UJDzdmeYoOlS
4V92bcZ6iTLM80An9iDfcz7BFO2cO0KomtcYksrdkEivKbjyd7Ex2PuCFIAcFFy7
sZRcbZkdLNJR6aJJN4BhvguwEu3GyCAArjIqBYmJvce2aVWYXT0IsnbrDxH58BQ9
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423489779600383498351426001929800959072479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-10 01:54:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-08 01:54:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod7.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23483838325023038549332656222582055409273081940046347547997626241556539756346386211780543220166883348709922986550716096970230952106330382157491191147468885789148241889435991870439201282016541941655950685540517004402684586385340932678769909457791159158895389288775844631334031583094600970383018996629938518914749124679159405417930200258971587392753632998215401723218824669603389320679123818874070595157342065459060349132312295878546199916500584821608123397293724637629222046546453555638975695695294865975312293640648063406379004438598304934996724173406753602647372979429263521466185433553420477812927745729059001482583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8e715ecaacbbcfd5d53953e74df862c9d505112
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.petivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.ncare.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.nestlewatersegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.nutricionesvida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.petivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontend.nestleatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigator.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2.dolce-gusto.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nestlewatersegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod7.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-ch.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.nespresso.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spike.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dolce-gusto.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglaslabs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drumstick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educatie-atrium-innovations.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espacocolaborador.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expert-nutrition.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fancyfeast.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feedgoodness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.felix-club.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibermais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpn.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendforpet.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friskies.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garderielacase.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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