www.diageohorizon.com

- Diageo Plc -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 2f:e5:68:56:d0:ba:d3:e9:05:e8:ac:6f:c9:70:3e:a8 was issued on by Corporation Service Company.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Diageo Plc

Organization: Diageo Plc
Address: Lakeside Drive, Park Royal
Postal code: NW10 7HQ
State / Province: London
Locality: London
Country: GB

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:e5:68:56:d0:ba:d3:e9:05:e8:ac:6f:c9:70:3e:a8
Serial Number (int): 63664868031315020517002668803103932072
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b1:37:eb:12:ee:b3:cb:85:6f:6e:66:5e:c8:1d:57:d1:69:17:fd:ea
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): c5:ec:6d:43:41:0e:ae:61:2c:2b:b5:38:ed:04:24:00:7c:d0:3d:72
Fingerprint (sha256): 19:0a:c6:59:44:dd:f1:e2:46:55:77:ce:5d:6b:d9:d9:77:a4:e9:dd:cd:d5:1d:a2:51:0a:d5:82:7c:93:cd:49

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate www.diageohorizon.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.diageohorizon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.diageohorizon.com
backend2.singleton.com.tw
labels.johnniewalkerstore.com
rebuild.ketelone.com
secure.ketelone.com
vr.ketelone.com
www.diageodglstyleguides.com
www.dnatotalrewards.com
www.ketelone.com
www.kob-sales.com
www.seybrew.com
www.singleton.com.tw
www.stay-yourself.eu

Other certificates including the domain name diageohorizon.com

(limited to 100 certificates)
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageo.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageo.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com
www.diageohorizon.com

Certificate

The complete raw certificate details for www.diageohorizon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlWVzIj6d6x+2xHT8HKm
nSSol1D1xuH2zrrguMY/8yjc7Xm3Oh4pvI475lp/OUF0PpEEawecPC8NuSYGgWmJ
9aF8Qaw4R3JHPzJAJ0l31hEWlsudrj0+Ceoy0x46wkuBhQhLfY23KtcMTnL4lZYi
88BoCvJhI5OVi5s525d/FGzkW2g21FR4V8cy79jUK7wTCSR5fKMuBpSezfjfxFY+
KSg0HDVzUPAUnxR+5X1YLFTj8njin2SbNUk0mtAzO+v3N2N0CZtAySVxmETIvR4h
2UfuZEwt0DRNIB288g61E3J6+g4llvIYeqqDMf++YKBUHELmNB6zSN5bgX0BBuKr
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 63664868031315020517002668803103932072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NW10 7HQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lakeside Drive, Park Royal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Diageo Plc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diageohorizon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24532434774919040959025361140268510688961508455190762662018264668383379228742450470701988452615681783817130463394084046470243366342932936634060541999674067190578929193560312539119807855792072436510996316804185596550680152435141063154352242174911595147183060780442753395944573021056019830154379330008844897722838636521031876894377523582629430624697765456791197354196810729356785421218161524818869505662667641808550734070787403032174923731798937724116488884368001638076193974472017759186295960731614079016670723880954496417352064290364840852596816948792236948289215775716949433303491529140145767521649102057158106852273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b137eb12eeb3cb856f6e665ec81d57d16917fdea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diageohorizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend2.singleton.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labels.johnniewalkerstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebuild.ketelone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ketelone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vr.ketelone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diageodglstyleguides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnatotalrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ketelone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kob-sales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seybrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.singleton.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stay-yourself.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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