www.mcdonalds.fi

Issued by R3

About this certificate

This digital certificate with serial number 03:b3:75:ab:0c:18:b9:65:e0:42:21:b1:68:1e:89:f4:d3:2f was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mcdonalds.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:75:ab:0c:18:b9:65:e0:42:21:b1:68:1e:89:f4:d3:2f
Serial Number (int): 322403809277746138543987101591502253773615
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:c4:90:b9:24:d4:50:a2:ee:46:7d:c6:d1:e7:fd:1c:07:db:45:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:c0:8f:e7:62:e4:bf:ee:a2:d3:65:be:0a:93:ee:37:f9:7d:31:d5
Fingerprint (sha256): 21:37:55:f1:eb:c6:88:05:54:36:36:24:c9:f1:8d:a8:0d:c3:8a:17:1c:92:dd:09:29:52:49:96:f4:48:6b:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mcdonalds.fi

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mcdonalds.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ap-passiveloc-stg2.api.mcd.com
ap-stg2.api.mcd.com
appdeeplinks.mcdonalds.ca
apps-ca-uat.mcd.com
atomchockey.ca
cms-staging.rmhccanada.ca
cms.rmhccanada.ca
cms32.mcdonalds.ca
equipemcdo.ca
eu-mte.api.mcd.com
eu-passiveloc-prod.api.mcd.com
eu-prod.api.mcd.com
gmal.mcdonalds.it
iw-ca.mcd.com
iwdev-ca.mcd.com
iwuat-ca.mcd.com
link.dev-brz-eu.mcdonalds.com
link.dev-brz.mcdonalds.com
link.my.mcdonalds.com.au
link.news.mcdonalds.de
link.service.mcdonalds.de
m.mcdonalds.ie
m.mcdonalds.it
mccafe.ca
mcdelivery-awspoc.mcd.com
mcdeliverycanada.ca
mcdonaldsfranchising.ca
mclivraison.ca
rmhc.ca
rmhccanada.ca
stage-appdeeplinks.mcdonalds.ca
stg.rmhccanada.ca
stg32.mcdonalds.ca
www.atomchockey.ca
www.equipemcdo.ca
www.mccafe.ca
www.mcdeliverycanada.ca
www.mcdonalds.com.tw
www.mcdonalds.fi
www.mcdonalds.ie
www.mcdonalds.it
www.mclivraison.ca
www.rmhc.ca
www.rmhccanada.ca
www4.mcdonalds.ca

Other certificates including the domain name mcdonalds.fi

(limited to 100 certificates)
www.mcdonalds.fi
san-9-s50.tlsprovisioning.exacttarget.com
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
burgey.mcd.com
cloud.markkinointi.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
akamai-san219.exacttarget.com
www.mcdonalds.fi
image.email.opcomobilites.fr
businessschool.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
burgey.mcd.com
www.mcdonalds.fi
image.email.opcomobilites.fr
cloud.markkinointi.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
kontakt.mcdonalds.dk
www.mcdonalds.fi
image.email.opcomobilites.fr
image.email.opcomobilites.fr
www.mcdonalds.fi
burgey.mcd.com
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
burgey.mcd.com
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
view.marketing.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
san-9-s50.tlsprovisioning.exacttarget.com
www.mcdonalds.fi
kampanja.mcdonalds.fi
cloud.marketing.mcdonalds.fi
burgey.mcd.com
akamai-san219.exacttarget.com
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
kampanja.mcdonalds.fi
burgey.mcd.com
www.mcdonalds.fi
image.email.opcomobilites.fr
image.email.opcomobilites.fr
www.mcdonalds.fi
businessschool.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
burgey.mcd.com
image.email.opcomobilites.fr
image.email.opcomobilites.fr
www.mcdonalds.fi
image.email.opcomobilites.fr
san-9-s50.tlsprovisioning.exacttarget.com
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
san-9-s50.tlsprovisioning.exacttarget.com
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
businessschool.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
image.email.opcomobilites.fr
www.mcdonalds.fi
kampanja.mcdonalds.fi
www.mcdonalds.fi
www.mcdonalds.fi
akamai-san219.exacttarget.com

Certificate

The complete raw certificate details for www.mcdonalds.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FkmMFIH6yY9TIDgrP+S
Iv4acKSkrR8LNue0qRKNCE+NQYJDsQHUcoLGuG9m3nSyW3vvMu1BtPyVyJxKnyju
+KUozN1YVfwgz1V2C8xMjbV0oDLZe8fH97fJSvcsN0dsjdY8V6VOml0HbbD+h8V3
/p3WvYQKcQL5YR4IE+wYe64ZMH4sVM/1uOp7BU4etgHIy/kX+C5GMLBKUmz/DiiY
52XCMQnf8M1Xxf/vVAHYM/QdBuTtMEw9Cpue6MPzY5BkHXAXrpeR5k30XYP+jADV
i+35xE1rFxqcAu5l3OaIT+OmKfXZbb7fcuRbWLocc0KO6arcQwhMfCPmnI7cFSbD
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322403809277746138543987101591502253773615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 15:05:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 15:05:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mcdonalds.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26806481749356386142099951502097506323671866612795907219379243490794438750513384883143115189029224623518115463000371501139778254862694712150644029192493626875230687390127502060650183378638787046810841274684057139508630945131273146444891154850423380216641198253065089082070805468706108022144384243878726181937210691980504959465742602693302845612816160294455501329783820852375825314293648177344433069108556081900107042442693405948943329141449124957919851387341217748260135742063426611348671982087591344164951855902320373398633388524477523707314259768594150933395105883978710250190382357738652905619863788872646122718037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdc490b924d450a2ee467dc6d1e7fd1c07db4542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (935 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-passiveloc-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appdeeplinks.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-ca-uat.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomchockey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-staging.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms32.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipemcdo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-mte.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-passiveloc-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmal.mcdonalds.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iw-ca.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwdev-ca.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwuat-ca.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dev-brz-eu.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.dev-brz.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.my.mcdonalds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.news.mcdonalds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.service.mcdonalds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccafe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdelivery-awspoc.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdeliverycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldsfranchising.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclivraison.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-appdeeplinks.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg32.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atomchockey.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equipemcdo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccafe.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdeliverycanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclivraison.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmhccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.mcdonalds.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b867bea6200000403004830460221009718c9021684ebf4490158fd60d055abbfcca7aa218b66d13ebddb87a68bb8ac022100dda648b917e5574e5f0cd4e8a0749e74d5811ab6ac7501471857ad0c36f73117007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b867bea410000040300473045022100a7fa7a702047b430b79c29a0b0ee941f01c1670169f233f28af557751be63866022066b09ab83f71debf599c35ecacb4bdd3490fd26aa004861d51accbe3b56411bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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