*.mars.com

- Mars Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:58:57:2d:16:70:32:94:f0:4a:51:50:1e:7f:d1:04 was issued on by DigiCert Inc.

With 128 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mars Inc.

Organization: Mars Inc.
State / Province: Virginia
Locality: McLean
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:58:57:2d:16:70:32:94:f0:4a:51:50:1e:7f:d1:04
Serial Number (int): 9763286235892615552482845711990247684
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fc:1e:ef:5d:f7:25:ea:e8:05:03:e7:62:d8:c3:70:5e:2d:43:3e:b1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 5f:05:aa:c4:87:0d:17:06:b8:1b:0c:a5:01:e4:2b:7c:9e:ad:a1:a3
Fingerprint (sha256): 56:06:e2:60:56:e2:6f:42:13:45:f2:6f:f9:2f:db:3d:f2:d8:e4:0d:c0:83:1d:43:34:eb:f6:e6:de:ca:18:84

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate *.mars.com

128

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mars.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mars.com
*.royalcanin.com
*.royalcanin.ca
*.royalcanin.com.au
*.royalcanin.co.nz
*.royalcanin.co.uk
*.royalcanin.co.jp
*.royalcanin.dk
*.royalcanin.my
*.royalcanin.ph
*.royalcanin.co.za
*.royalcanin.in
*.royalcanin.hk
*.royalcanin.no
*.royalcanin.fi
*.royal-canin.de
*.royalcanin.de
*.royalcanin.com.br
*.royal-canin.ee
*.royalcanin.lv
*.royalcanin.lt
*.royalcanin.com.ua
*.royalcanin.it
*.royalcanin.se
*.royal-canin.at
*.royalcanin.ch
*.royalcanin.ro
*.eng.royalcanin.gr
*.royalcanin.gr
*.royalcanin.bg
*.my.royalcanin.bg
*.royal-canin.com.ar
*.royalcanin.com.ar
*.royalcanin.es
*.royalcanin.pt
*.royalcanin.com.tw
*.royalcanin.co.th
*.royalcanin.co.id
*.royalcanin.co.kr
*.royalcanin.si
*.royalcanin.hu
*.royalcanin.com.hr
*.royalcanin.fr
*.royalcanin.cz
*.royalcanin.sk
*.royalcanin.com.tr
*.royalcanin.nl
*.royal-canin.ru
*.royalcanin.pl
*.royalcanin.cl
*.royalcanin.pr
*.royalcanin.mx
*.royalcanin.co
*.royalcanin.com.mx
*.royalcanin.com.co
*.eukanuba.com.au
*.eukanuba.co.nz
*.eukanuba.co.za
*.eukanuba.com
*.eukanuba.com.ar
*.eukanuba.com.mx
*.eukanuba.com.co
*.eukanuba.cl
*.eukanuba.pr
royalcanin.com.au
royalcanin.co.nz
royalcanin.co.uk
mars.com
royalcanin.com
royalcanin.ca
royalcanin.co.jp
royalcanin.my
royalcanin.ph
royalcanin.co.za
royalcanin.in
royalcanin.hk
royalcanin.dk
royalcanin.no
royalcanin.fi
royal-canin.de
royalcanin.de
royalcanin.com.br
royal-canin.ee
royalcanin.lv
royalcanin.lt
royalcanin.com.ua
royalcanin.it
royalcanin.se
royal-canin.at
royalcanin.ch
royalcanin.ro
eng.royalcanin.gr
royalcanin.gr
royalcanin.bg
my.royalcanin.bg
royal-canin.com.ar
royalcanin.com.ar
royalcanin.es
royalcanin.pt
royalcanin.com.tw
royalcanin.co.th
royalcanin.co.id
royalcanin.co.kr
royalcanin.si
royalcanin.hu
royalcanin.com.hr
royalcanin.fr
royalcanin.cz
royalcanin.sk
royalcanin.com.tr
royalcanin.nl
royal-canin.ru
royalcanin.pl
royalcanin.cl
royalcanin.pr
royalcanin.mx
royalcanin.co
royalcanin.com.mx
royalcanin.com.co
eukanuba.com.au
eukanuba.co.nz
eukanuba.co.za
eukanuba.com
eukanuba.com.ar
eukanuba.com.mx
eukanuba.com.co
eukanuba.cl
eukanuba.pr

Other certificates including the domain name mars.com

(limited to 100 certificates)
www.footer.mars.com
stage-associatesconnect.mars.com
termsofpurchase-uk.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage-mfapackagingdata.mars.com
stage.promo-repo.mars.com
www.contact.mars.com
lambda-redirect24.mars-inc.com
uat-sitecorerc-cd-sportingdog.mars.com
stage.v2.footer.mars.com
www.sharedservices.mars.com
arg.mars.com
*.mars.com
stage.2025digitalvision.mars.com
oktadocs.mars.com
www.footer.mars.com
origin.stage-jobs.supplier.mars.com
wostest.effem.com.cn
dev-lighthouse.mars.com
stage-perfectfitfonts.mars.com
*.mars.com
sni.cloudflaressl.com
stage-sitecorerc-cd.mars.com
petcollege.mars.com
ucskypechatbot01.mars.com
oktadocs.mars.com
stage-retroapproval.mars.com
productcentral.mars.com
whiskas.com.br
Sitecore1-uat.mars.com
sni.cloudflaressl.com
rcdfcdn.mars.com
mix.mars.com
careers.mars.com
sni.cloudflaressl.com
survey.gradwell.com
sni.cloudflaressl.com
stage.mfapackagingdata.mars.com
meetsmart.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
marta.mars.com
stage-marketingportal.mars.com
itservicedesk.mars.com
jobs.supply2.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
migration.customs-cargo.mars.com
click.eu-petcare.mars.com
ciameu.mars.com
retroapproval-units.mars.com
lambda-redirect26.mars-inc.com
migration.stage-footer.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
aws-cf-rd25.mars-inc.com
metrics.mars.com
my-cms.mars.com
mypo.mars.com
sni.cloudflaressl.com
www.cravepetfood.co.uk
stage.qfs-warehouses.mars.com
iccc-webapp-dev.mars.com
brandgateway.mars.com
guest1-NA.mars.com
efexap.mars.com
survey.mars.com
stage.specialistpettrade.mars.com
origin.stage-newsservice.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
akamai-san122.exacttarget.com
aws-cf-www-mars-com-rd01.mars-inc.com
stage-profile.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage.customer.mars.com
calendar.mars.com
survey.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stage.posm-ae.mars.com
sni.cloudflaressl.com
customer.mars.com
survey.westernwindowsystems.com
origin.brandgateway.mars.com
lambda-redirect21.mars-inc.com
stage.petcollege.mars.com
aws-cf-www-mars-com-rd01.mars-inc.com
sni.cloudflaressl.com
sni.cloudflaressl.com
lambda-redirect5.mars-inc.com
aws-cf-rd17.mars-inc.com
aws-cf-rd21.mars-inc.com
aws-cf-rd18.mars-inc.com

Certificate

The complete raw certificate details for *.mars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQpMy7lhCokH7dm3sG9a
H0auOWTP5kTR0lwpqDMH3b+7oIMxGZnDLH914yy5iaR6i+er/Hc/tAjU/VSmm9Ei
vXCXYJtm/XTqAq1F2FEI5UJ0tvSIsdbf+Pg+SUHA7GkJVIBxG3d6maO5byPfp/8L
gwQQYCeuTieE9ZK+vWkUErVB/DXk+OFZ4NyAEwMApybCv6mzBnF9uWq77N+Rmqd3
sA6fBRQqQrik/KbKGjj0oZCIA+sbKaYM3yePqrLE29UIfQGkj3I4BJ3JCtlD/ejW
wbNjWvBUd+2JQJMexerLbChrteVUhJ3wSoKmZ7SThrajH9X+8PpZACzKL4phH+GZ
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9763286235892615552482845711990247684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McLean'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22854212310062767176789330190146116376177284632549268294654199097708378983248717042187946110152131479722956157317706147571786632653875360160796882541182701722903729216074760629281592722340629889469006840565951580555086511622500024462001073371365087245851206743888292638416287915058685243001676107692192489791122598987159083742699241623286469762084463955889947936203169239489581401619000844096882808731460983571052859948943951231923470481815689209582127089936793628393343334411853162337107132595580642587452052995102909135845445811551730664003615091298814367083466729177985575854134603377062120533943510951407598541281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc1eef5df725eae80503e762d8c3705e2d433eb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukanuba.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukanuba.pr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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