*.royalcanin.dk

- Mars Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:2b:ea:10:5b:e1:6f:9d:43:0f:a8:6e:c0:c6:99:13 was issued on by DigiCert Inc.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mars Inc.

Organization: Mars Inc.
Organization unit: Mars Information Services
State / Province: Virginia
Locality: McLean
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:2b:ea:10:5b:e1:6f:9d:43:0f:a8:6e:c0:c6:99:13
Serial Number (int): 1557244140635439466845600596049172755
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 82:f1:c7:cf:21:35:3e:26:24:12:81:e8:31:56:b5:27:2e:90:26:87
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 59:bc:7d:3f:eb:2e:e7:c8:1f:8e:06:0d:fb:0d:e2:1c:a3:23:6a:55
Fingerprint (sha256): 3b:b5:e6:f3:4d:a2:2b:fc:06:65:c4:e4:68:15:e2:c3:6a:39:fe:7c:3d:d5:52:86:88:cd:f2:88:f9:cc:95:58

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.royalcanin.dk

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.royalcanin.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.royalcanin.dk
*.royalcanin.bg
*.royal-canin.at
*.royalcanin.ch
*.royalcanin.ro
*.royalcanin.se
*.royalcanin.es
*.royalcanin.pt
*.royalcanin.si
*.royalcanin.hu
*.royalcanin.gr
*.royalcanin.de
*.royalcanin.it
*.royal-canin.ee
*.royalcanin.fi
*.royalcanin.lv
*.royalcanin.lt
*.royalcanin.no
*.royal-canin.de
*.royalcanin.co.kr
*.royalcanin.co.id
*.royalcanin.co.th
*.royalcanin.com.hr
*.royalcanin.com.ar
*.royalcanin.com.tw
*.royal-canin.com.ar
*.my.royalcanin.bg
*.royalcanin.com.br
*.eng.royalcanin.gr
*.royalcanin.com.ua
royal-canin.at
royalcanin.ch
royalcanin.dk
royalcanin.ro
royalcanin.gr
royalcanin.bg
royalcanin.es
royalcanin.pt
royalcanin.si
royalcanin.hu
royalcanin.se
royalcanin.it
royal-canin.ee
royal-canin.de
royalcanin.de
royalcanin.fi
royalcanin.no
royalcanin.lv
royalcanin.lt
royalcanin.com.tw
royalcanin.co.kr
royalcanin.co.id
royalcanin.co.th
royalcanin.com.ar
royal-canin.com.ar
my.royalcanin.bg
royalcanin.com.br
eng.royalcanin.gr
royalcanin.com.ua
royalcanin.com.hr

Other certificates including the domain name royalcanin.dk

(limited to 100 certificates)
www.royalcanin-world.com
*.mars.com
incapsula.com
*.royalcanin.dk
www.webshop.royalcanin.dk
aws-cf-rd18.mars-inc.com
*.royalcanin.dk
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
*.mars.com
multifunction.royalcanin.dk
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
vetfollowup.royalcanin.com.au
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
royalcanin-com-redirect.mars-inc.com
incapsula.com
incapsula.com
aws-cf-rd18.mars-inc.com
*.royalcanin.dk
aws-cf-rd18.mars-inc.com
www.royalcanin.com
*.mars.com
*.mars.com
vetservices.royal-canin.at
vetservices.royalcanin.be
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
royalcanin-com-redirect.mars-inc.com
*.royalcanin.dk
*.mars.com
lambda-redirect6.mars-inc.com
*.mars.com
multifunction.royalcanin.dk
vetservices.royal-canin.at
*.mars.com
*.royalcanin.dk
*.mars.com
*.mars.com
vetservices.royalcanin.be
lambda-redirect6.mars-inc.com
*.mars.com
aws-cf-rd18.mars-inc.com
*.mars.com
www.royalcanin-world.com
*.mars.com
lambda-redirect6.mars-inc.com
www.webshop.royalcanin.dk
adminvfu.royalcanin.com
aws-cf-www-royalcanin-com-rd01.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
*.mars.com
aws-cf-rd18.mars-inc.com
adminvfu.royalcanin.com
aws-cf-rd18.mars-inc.com
www.royalcanin-world.com
*.mars.com
www.royalcanin-world.com
aws-cf-rd18.mars-inc.com
vetservices.royal-canin.at
aws-cf-rd18.mars-inc.com
www.royalcanin-world.com
incapsula.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
vetservices.royal-canin.at
adminvfu.royalcanin.com
*.mars.com
aws-cf-rd18.mars-inc.com
*.mars.com
aws-cf-rd18.mars-inc.com
adminvfu.royalcanin.com
*.mars.com
vetservices.royal-canin.at
*.mars.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
incapsula.com
vetservices.royal-canin.at
*.mars.com
lambda-redirect6.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rc-rd01.mars-inc.com
aws-cf-rd18.mars-inc.com
aws-cf-rd18.mars-inc.com
*.royalcanin.dk
aws-cf-rd18.mars-inc.com
*.mars.com
*.mars.com
lambda-redirect6.mars-inc.com
*.royalcanin.dk

Certificate

The complete raw certificate details for *.royalcanin.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwfbWHUNGBz8rmElg5QF
asAJ8svF//SKvuLhrvEqmB2RxKGN+a44bIOyGAIjwexHuv3VkOmCRy/oB0Od4FIJ
h9dpolGoadcmz8Xf33QoWr069tyjDW6kbgrD0rlMXxdCPDBoA8I8j3DlJK6hKvOn
JmpYW5smQ0dLV8gti4LCsX1pT4kbCEyvhOvjOhmesOWt7iMpW1aa75rMTn/9nQK3
bZ0jiLBkxUa2hNUdI5db1euzWe/3AVbNjgTfAds/wgkzd0PRNNNWX74DUqo6vTyr
q/Mi9NFhI0hDfeFYqhzbuMbmv1fyHbA1/bgJLL8YDe6QepBcc3ap9HYHO0g/wvhd
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1557244140635439466845600596049172755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McLean'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Information Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.royalcanin.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18055951951747535188084633479454466161275750419899084229150870330605961277608155135858152224963034333101044274590206147703776409710214471674972165845930575118075029420946005439265999186170203409533325768022444163984020980367169113593553973334387333102502366861655511860754106247133350634345269827124615454953266665483516818644868705611861396214978295353504154147276010801680965895849074776187292367014436112236506360036721487187652383683666891336193865729476389421863312603826507138025913459667413614372052232478096312580659824188700524779636021575694477562952885112227619150444852407752977959027592921797617767701981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82f1c7cf21353e26241281e83156b5272e902687
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1052 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a0ac1f08f7d5e6eeb5aa3cdd17691001931490ea02f547f860a01cd85596d99117941c57840e49c525a5a8ae76baf625fce0a143e695ff0da0ea7a4aaa70f5834ed39020e847c05696069909e75f493b42480520854354e4d92d8ad01d74b9e607b9e73342a93f016f890b3d4d315b933d5383cb775028269d8a2b2d7889f4480373062d187f7c6707bd416b8d61b8adf4862b1cfd66cea21fc5064130b7c1894f61da70d5167db573ba0559230a818e49329675eca3fa5dd8714ab3c8681a6d4d25c2fe1a87542a318ade458e9fb1d939d97b27c38cb7aa1f1be77acebe2be4152240b0a154284880123652cc4bca82fa7410197933c24bf09b1d549c2ac17