prod10.edgeduck.io

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:ed:26:c7:8f:37:eb:52:9b:70:da:a1:99:53:8e:71:ad was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod10.edgeduck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:ed:26:c7:8f:37:eb:52:9b:70:da:a1:99:53:8e:71:ad
Serial Number (int): 379730067506674480676422200693077180314029
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: eb:41:20:f9:a1:50:df:5f:9c:a3:00:3c:da:9b:c3:a8:07:0d:83:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:ab:56:0e:cd:8e:33:55:05:38:ce:c7:f3:48:f4:6d:de:fa:ff:f6
Fingerprint (sha256): 0f:14:13:09:48:ee:7d:05:2b:e9:42:45:2a:89:6e:8e:c6:39:33:1a:9b:66:d5:fb:d7:b5:d8:a6:36:da:ca:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod10.edgeduck.io

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod10.edgeduck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archibus.nestleusa.com
boservices.laviewater.com
cat.apps.nestle.com
customer.nestle.ru
demandsensing.nestle.com
eretailer.nespresso.com
iag.nestle.biz
member.s-momclub.com
nesternship.nestle.com
nestleatevoce.com.br
npd365.nestle.com
prod-m2-boservices.dolce-gusto.co.uk
prod-m2-boservices.dolce-gusto.com.ar
prod-m2-boservices.dolce-gusto.com.mx
prod-m2-boservices.dolce-gusto.fr
prod.nutricionesvida.es
prod.puritan.com
prod.shop.celltrient.com
prod10.edgeduck.io
shop.celltrient.com
static.nesternship.nestle.com
static.nestlemarketonline.es
wso.it.nestle.com
www.bearbrand.co.id
www.buyonline.nestlewaters.bh
www.buyonline.nestlewaters.com.lb
www.chocollabo.com
www.esterc.com
www.fdgard.com
www.hbgard.com
www.ibgard.com
www.kitkat.com.vn
www.kitkat.de
www.kitkat.gr
www.kitkatarabia.com
www.milo.co.id
www.minamihealth.co.uk
www.momandme.nestle.com
www.mychildnutrition.com
www.nestlecocina.es
www.nestlepurelifedelivery.com
www.nestlewatersegypt.com
www.nestsf.com.br
www.newbynestle.com
www.nqacdublin.com
www.nqaclabs.com
www.nutricaoatevoce.com.br
www.nutricionesvida.es
www.nutrition.personanutrition.com
www.optifastcanada.ca
www.pediatraonline.com.br
www.personanutrition.com
www.photo.nestle.ru
www.pl.classoft.net
www.polandspringdelivery.com
www.portalpurina.pt
www.productoresnestle.cl
www.promonestle.com.br
www.promozionitaliane.it
www.proplanvetdirect.com
www.pureencapsulations.com.tr
www.pureencapsulations.es
www.pureencapsulations.fr
www.pureencapsulations.it
www.pureencapsulations.pt
www.purina.kz
www.sundownnutrition.com
www.thickenupclear.com
www.vitaflo.ca
www.vitaflousa.com
www.wobecare.cz
www.wobenzym.at

Other certificates including the domain name edgeduck.io

(limited to 100 certificates)
nonprod4.edgeduck.io
nonprod.edgeduck.io
prod1.edgeduck.io
prod2.edgeduck.io
prod7.edgeduck.io
prod5.edgeduck.io
prod5.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
prod5.edgeduck.io
nonprod.edgeduck.io
prod3.edgeduck.io
prod5.edgeduck.io
nonprod7.edgeduck.io
prod10.edgeduck.io
nonprod9.edgeduck.io
prod5.edgeduck.io
prod8.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod1.edgeduck.io
nonprod15.edgeduck.io
nonprod14.edgeduck.io
nonprod17.edgeduck.io
prod7.edgeduck.io
nonprod16.edgeduck.io
nonprod4.edgeduck.io
nonprod16.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
prod11.edgeduck.io
nonprod12.edgeduck.io
prod1.edgeduck.io
prod6.edgeduck.io
prod11.edgeduck.io
prod9.edgeduck.io
prod.edgeduck.io
nonprod14.edgeduck.io
prod4.edgeduck.io
nonprod.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
prod4.edgeduck.io
prod2.edgeduck.io
nonprod10.edgeduck.io
prod5.edgeduck.io
prod6.edgeduck.io
prod3.edgeduck.io
nonprod10.edgeduck.io
nonprod17.edgeduck.io
nonprod1.edgeduck.io
nonprod1.edgeduck.io
nonprod13.edgeduck.io
nonprod6.edgeduck.io
nonprod13.edgeduck.io
nonprod3.edgeduck.io
prod7.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod11.edgeduck.io
nonprod14.edgeduck.io
nonprod.edgeduck.io
nonprod3.edgeduck.io
prod12.edgeduck.io
nonprod8.edgeduck.io
prod10.edgeduck.io
prod5.edgeduck.io
nonprod1.edgeduck.io
nonprod6.edgeduck.io
prod11.edgeduck.io
prod2.edgeduck.io
nonprod.edgeduck.io
nonprod10.edgeduck.io
nonprod10.edgeduck.io
prod6.edgeduck.io
prod12.edgeduck.io
prod7.edgeduck.io
prod11.edgeduck.io
nonprod4.edgeduck.io
prodw1.edgeduck.io
nonprod6.edgeduck.io
nonprod12.edgeduck.io
nonprod14.edgeduck.io
nonprod8.edgeduck.io
prod7.edgeduck.io
prod6.edgeduck.io
nonprod5.edgeduck.io
nonprod11.edgeduck.io
prod3.edgeduck.io
nonprod9.edgeduck.io
nonprod8.edgeduck.io
nonprod14.edgeduck.io
prod3.edgeduck.io
nonprod5.edgeduck.io
prod2.edgeduck.io
prod1.edgeduck.io
nonprod17.edgeduck.io
prod12.edgeduck.io
prod3.edgeduck.io

Certificate

The complete raw certificate details for prod10.edgeduck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutn+VeP4nHtS04ulZk6D
bL+3BQMQoQASkiS0ywfMQx3grmOeY00xBYcYvdqmBPgBhrH2Gnocee6zmZCc0nsJ
e+mTRPDgSiGs+28GLmQE8cuGlouDDWyhttinA8EjYX+ieNvFhACAsDjt4Qu2KnKd
5xuBJpzjSEzb5oE+Fr69SKL8OQ3V7YEgV0pAtoy2X/w9Vf9kqHzDQoGDtLfwjJ+k
I/jpNWqD1j5e3vryHYZZ95l24yYgNmvASxaUVXHCq+PzEuz0jUuspBqLM66jVRWM
oEste/oucvoz4sHq4+h/b6iSZ9QKMdwJ7dg0m2YjuUaBLLtS3zSwMl1rCS/bmSyO
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379730067506674480676422200693077180314029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 21:10:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 21:10:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod10.edgeduck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23587821324045882372763091953287850130220822571929396790145290981307223071647653004500736880699623041105964581580827716833451198610249692310817204884232176760372810967948504348059594420927969295944221282640847111779923186962267659628496593881222651498556468212884553442103750129593678111507818706073969390426458006467187221692052200772271047012116226410336450041738885571581266556989932313471957234511701544958372861861408224580934473144133024542576266202020075120246480000300561608505023982871718564043408698696454955994663357972135996505964960768835869468300304043417320677603869575072207224845283465161370292227611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb4120f9a150df5f9ca3003cda9bc3a8070d8331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1715 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus.nestleusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boservices.laviewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cat.apps.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandsensing.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eretailer.nespresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iag.nestle.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.s-momclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesternship.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestleatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npd365.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2-boservices.dolce-gusto.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2-boservices.dolce-gusto.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2-boservices.dolce-gusto.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-m2-boservices.dolce-gusto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.nutricionesvida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.puritan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.shop.celltrient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod10.edgeduck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.celltrient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.nesternship.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.nestlemarketonline.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wso.it.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearbrand.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyonline.nestlewaters.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyonline.nestlewaters.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chocollabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esterc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdgard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbgard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibgard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkat.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkat.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitkatarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milo.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minamihealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.momandme.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mychildnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestlecocina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestlepurelifedelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestlewatersegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestsf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newbynestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nqacdublin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nqaclabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutricaoatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutricionesvida.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutrition.personanutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optifastcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pediatraonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personanutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photo.nestle.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pl.classoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polandspringdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portalpurina.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.productoresnestle.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promonestle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promozionitaliane.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proplanvetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pureencapsulations.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purina.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundownnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thickenupclear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaflo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaflousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wobecare.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wobenzym.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca82e4b450000040300473045022100ab46b5919e6203aa8107c66641a5970d8446cc1f05a3597929a16c4995836b4802200ca61971ceb10dd5c79ad5e15290f6f0648eca492517230e43f328a10542306c00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ca82e4bae0000040300483046022100834264a05c3f098cf008e7084e7127224f8adc266abb50105856194acae64f88022100ebe27fa08bff6cba22102c5c6f3d9a205b5ef244b01c99c02df132aad5e97cf0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d8471b9c2cbca2ee4636ae784fe1b69747aa899419b06b51797884393c6258a4ed119810dac302264a2d4e78080d0633aae52f34bf763e0540d3dd9e54e524d4cd1ad16495b0efa17522d8f258c05607d1d03e89c3e9959045555b727346dcd7efa559c6a9b79e78570893bbc6b303f74852fadfd7fcb1882a1d55ed220640808623c22e4fc749cb3dd811d6304d38208c64ede3ff95514daaa1b0c9029e0dd3d4a2630d069530d741c14d2bac43cbc138d9b4ebb7018ddf222759ae987eaab3b2d5b167956939d304f1783ab163c2dfc2daf080b6a936c04cd7adfcc51236dbe72e0b634660abee83f0ac649a27914a4e8c724c2d85e5219ab19a7309d80cf