*.mars.com

- Mars Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:e4:50:de:71:e3:d5:8e:ba:86:49:30:07:08:e8:ef was issued on by DigiCert Inc.

With 132 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mars Inc.

Organization: Mars Inc.
State / Province: Virginia
Locality: McLean
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e4:50:de:71:e3:d5:8e:ba:86:49:30:07:08:e8:ef
Serial Number (int): 17136219849832542242271033331590686959
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:12:8f:ed:bd:b1:d6:67:fc:1a:fe:6f:46:58:af:a3:6b:01:f4:16
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 23:b7:e6:25:7a:7b:f0:da:8f:e5:35:17:b2:77:02:e2:a7:e3:0e:f4
Fingerprint (sha256): 3f:bc:c4:c6:0f:40:52:1f:b8:a6:31:e2:15:16:ca:59:12:bd:e6:04:a4:6d:7a:38:40:60:6c:a8:c8:0b:e7:cc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate *.mars.com

132

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mars.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mars.com
*.royalcanin.com
*.royalcanin.ca
*.royalcanin.com.au
*.royalcanin.co.nz
*.royalcanin.co.uk
*.royalcanin.co.jp
*.royalcanin.dk
*.royalcanin.my
*.royalcanin.ph
*.royalcanin.co.za
*.royalcanin.in
*.royalcanin.hk
*.royalcanin.no
*.royalcanin.fi
*.royal-canin.de
*.royalcanin.de
*.royalcanin.com.br
*.royal-canin.ee
*.royalcanin.lv
*.royalcanin.lt
*.royalcanin.com.ua
*.royalcanin.it
*.royalcanin.se
*.royal-canin.at
*.royalcanin.ch
*.royalcanin.ro
*.eng.royalcanin.gr
*.royalcanin.gr
*.royalcanin.bg
*.my.royalcanin.bg
*.royal-canin.com.ar
*.royalcanin.com.ar
*.royalcanin.es
*.royalcanin.pt
*.royalcanin.com.tw
*.royalcanin.co.th
*.royalcanin.co.id
*.royalcanin.co.kr
*.royalcanin.si
*.royalcanin.hu
*.royalcanin.com.hr
*.royalcanin.fr
*.royalcanin.cz
*.royalcanin.sk
*.royalcanin.com.tr
*.royalcanin.nl
*.royal-canin.ru
*.royalcanin.pl
*.royalcanin.cl
*.royalcanin.pr
*.royalcanin.mx
*.royalcanin.co
*.royalcanin.com.mx
*.royalcanin.com.co
*.eukanuba.com.au
*.eukanuba.co.nz
*.eukanuba.co.za
*.eukanuba.com
*.eukanuba.com.ar
*.eukanuba.com.mx
*.eukanuba.com.co
*.eukanuba.cl
*.eukanuba.pr
*.eukanuba.ru
*.eukanuba.ca
royalcanin.com.au
royalcanin.co.nz
royalcanin.co.uk
mars.com
royalcanin.com
royalcanin.ca
royalcanin.co.jp
royalcanin.my
royalcanin.ph
royalcanin.co.za
royalcanin.in
royalcanin.hk
royalcanin.dk
royalcanin.no
royalcanin.fi
royal-canin.de
royalcanin.de
royalcanin.com.br
royal-canin.ee
royalcanin.lv
royalcanin.lt
royalcanin.com.ua
royalcanin.it
royalcanin.se
royal-canin.at
royalcanin.ch
royalcanin.ro
eng.royalcanin.gr
royalcanin.gr
royalcanin.bg
my.royalcanin.bg
royal-canin.com.ar
royalcanin.com.ar
royalcanin.es
royalcanin.pt
royalcanin.com.tw
royalcanin.co.th
royalcanin.co.id
royalcanin.co.kr
royalcanin.si
royalcanin.hu
royalcanin.com.hr
royalcanin.fr
royalcanin.cz
royalcanin.sk
royalcanin.com.tr
royalcanin.nl
royal-canin.ru
royalcanin.pl
royalcanin.cl
royalcanin.pr
royalcanin.mx
royalcanin.co
royalcanin.com.mx
royalcanin.com.co
eukanuba.com.au
eukanuba.co.nz
eukanuba.co.za
eukanuba.com
eukanuba.com.ar
eukanuba.com.mx
eukanuba.com.co
eukanuba.cl
eukanuba.pr
eukanuba.ru
eukanuba.ca

Other certificates including the domain name mars.com

(limited to 100 certificates)
www.footer.mars.com
stage-associatesconnect.mars.com
termsofpurchase-uk.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage-mfapackagingdata.mars.com
stage.promo-repo.mars.com
www.contact.mars.com
lambda-redirect24.mars-inc.com
uat-sitecorerc-cd-sportingdog.mars.com
stage.v2.footer.mars.com
www.sharedservices.mars.com
arg.mars.com
*.mars.com
stage.2025digitalvision.mars.com
oktadocs.mars.com
www.footer.mars.com
origin.stage-jobs.supplier.mars.com
wostest.effem.com.cn
dev-lighthouse.mars.com
stage-perfectfitfonts.mars.com
*.mars.com
sni.cloudflaressl.com
stage-sitecorerc-cd.mars.com
petcollege.mars.com
ucskypechatbot01.mars.com
oktadocs.mars.com
stage-retroapproval.mars.com
productcentral.mars.com
whiskas.com.br
Sitecore1-uat.mars.com
sni.cloudflaressl.com
rcdfcdn.mars.com
mix.mars.com
careers.mars.com
sni.cloudflaressl.com
survey.gradwell.com
sni.cloudflaressl.com
stage.mfapackagingdata.mars.com
meetsmart.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
marta.mars.com
stage-marketingportal.mars.com
itservicedesk.mars.com
jobs.supply2.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
migration.customs-cargo.mars.com
click.eu-petcare.mars.com
ciameu.mars.com
retroapproval-units.mars.com
lambda-redirect26.mars-inc.com
migration.stage-footer.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
aws-cf-rd25.mars-inc.com
metrics.mars.com
my-cms.mars.com
mypo.mars.com
sni.cloudflaressl.com
www.cravepetfood.co.uk
stage.qfs-warehouses.mars.com
iccc-webapp-dev.mars.com
brandgateway.mars.com
guest1-NA.mars.com
efexap.mars.com
survey.mars.com
stage.specialistpettrade.mars.com
origin.stage-newsservice.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
akamai-san122.exacttarget.com
aws-cf-www-mars-com-rd01.mars-inc.com
stage-profile.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage.customer.mars.com
calendar.mars.com
survey.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stage.posm-ae.mars.com
sni.cloudflaressl.com
customer.mars.com
survey.westernwindowsystems.com
origin.brandgateway.mars.com
lambda-redirect21.mars-inc.com
stage.petcollege.mars.com
aws-cf-www-mars-com-rd01.mars-inc.com
sni.cloudflaressl.com
sni.cloudflaressl.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com

Certificate

The complete raw certificate details for *.mars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnrOyQE5vGwE21sTChXf
sIwUYhlVID2wEA8mMO0D+LpjN+zrUiI2EvxnRO3sqCR+qxhL/zvWWbGpQ/ewVxNE
LAR35CKCBljh6dsG/rXCMGROYKVCwR8OjWGVdcc6ACU6W9F70hdV/Ex6jUe1bV8u
0a5li2+QtU1FWTA/Ts8TG8gJrGTOdknan2QFWY4yNxQm6mSgXhWXQS0zsHSbe8p2
rp5CStAt1r04f+ib+J1FWuwqyQtEHQoF1y1XYdrnURSDNHbRRcCuvkcruFccfoL2
dBh/Tvruiu973/0AtlsEihgd8cCD24D0MkAdxWJyuiIj7ueYG6V3Qj/Ja0+gP99D
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17136219849832542242271033331590686959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McLean'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22026023824938282251905319745839237514765965342661866081277317574176540825025706444809775294506200892996832889004187125375198332186633049207374103755244834854651114017272169459422066634273722709137882992548048407393955348874496745947701199359847569249331283480968512989413340844455296392052498501460737690546808950364914971929905439081179425883592478371351899267913417501542539072571910389940523904560200040456792907373041195488205855155828963779463143794143784404916900987759967333309031756956530800900422757069101897071257680631370526414553172460196979211660818426950952791285145540558623331169612440869858199946061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:24|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2256 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020f1d81f9d39512108e8958958f63d455a35341146f1178fb02feb8040aa82d47aaca81b10702824471cca6edec0eb645662f5506cc3287f620030c297d2b6fd00627f8249be3cb0235831d168cce8006e221d97c34c73756701267770fdc8c26e5a461bdb628ddd828cb29933cddfd431e810d650c886a00532b10d544cbdb22825f1fa82183eb0b964d3f2e58f93d02f416ad92c44d49b1bc8e9e724d7d931878f5070161194fa8b8bd037b64582041835af2904c4e96d2fc5e7efe17d67e70d9a19a73e043f410f93ef464d726e187f327aa4896ea5f8548243aac11a82530ac1a91ec40fa8fdf48498f9627ff22268765330416bf908bba8cf4396c6d838