www.happymeal.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f9:b4:21:a6:ee:fb:b4:00:62:c2:b9:da:35:64:12:22:0d was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.happymeal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f9:b4:21:a6:ee:fb:b4:00:62:c2:b9:da:35:64:12:22:0d
Serial Number (int): 433418888861206475725817005411139232866829
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:6c:a4:ed:86:39:af:ba:13:64:65:db:86:75:43:b9:f0:81:6b:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:4d:ca:57:b5:5f:d6:8e:de:c2:3f:f2:b6:36:ff:7e:44:1d:69:91
Fingerprint (sha256): 56:71:bb:1e:2d:e2:9d:8e:18:a6:fb:f6:ab:42:37:2a:8a:f5:bc:b3:98:89:68:e3:41:b1:8d:55:6f:af:65:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.happymeal.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.happymeal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aag-stage.mcdonalds.com
ap-ipe.api.mcd.com
ap-mte.api.mcd.com
ap-passiveloc-prod.api.mcd.com
ap-passiveloc-stg.api.mcd.com
ap-prod.api.mcd.com
ap-uat.api.mcd.com
apps.mcdonalds-kuwait.com
birthdayparty.mcdonalds-kuwait.com
corporate-stage.mcdonalds.com
corporate.mcdonalds.com
de-ipe.api.mcd.com
development.archwaystoopportunity.com
dif-dev.gmal.app
dif-stg.gmal.app
dif.gmal.app
dna3-development.mcdonalds.com
dnaapp.mcdonalds.com
el-prod.api.mcd.com
el-stg.api.mcd.com
eu-ipe.api.mcd.com
eu-passiveloc-stg.api.mcd.com
europe.api.mcd.com
evvm-rapport-internal.mcd.com
evvm-rapport.mcd.com
external-mbs-uat.mcd.com
external-mbs.mcd.com
external-mbsptch1.mcd.com
external-mbsqa.mcd.com
grbes.mcd.com
grbesstaging.mcd.com
grs.mcd.com
link.canada.mcdonalds.com
link.hello.mcdonalds.co.uk
link.i.mcdonalds.com
link.info.mcdonalds.co.uk
link.m.mcdonalds.com
m.mcdonalds.co.uk
m.mcdonalds.no
m.mcdonaldsarabia.com
mbsoam-dev.mcd.com
mbsoam-prod.mcd.com
mbsoam-stg.mcd.com
mbsoam-stg1.mcd.com
mcdeliverysdckr.mcdonalds.com
mcdportal.mcdonalds-kuwait.com
na-devgw.api.mcd.com
na-int.api.mcd.com
na-ipe.api.mcd.com
na-mte.api.mcd.com
na-passiveloc-stg.api.mcd.com
na-passiveloc-stg1.api.mcd.com
na-passiveloc-stg2.api.mcd.com
na-stg1.api.mcd.com
na-stg2.api.mcd.com
na-uat.api.mcd.com
preview.mcdonalds.com
stage-corporate.mcdonalds.com
stage-preview.mcdonalds.com
stage.mcdonalds.com
uk-mte01-de-monopoly.vet-qa.digitalecp.mcd.com
uk-prod01-de-monopoly.vet-prod.digitalecp.mcd.com
uk-stg01-de-monopoly.vet-stage.digitalecp.mcd.com
us-passiveloc-prod.api.mcd.com
us-passiveloc-stg.api.mcd.com
us-prod.api.mcd.com
us-stg.api.mcd.com
webexbld-dev3.mcdonalds.com
welcomeonboard.mcdonalds-kuwait.com
wifi.mcdonalds-kuwait.com
wifi2.mcdonalds.com
wolf.mcd.com
wolfstaging.mcd.com
www.aboutmcdonalds.com
www.archwaystoopportunity.com
www.development.happymeal.com
www.happymeal.com
www.mcdonalds.ca
www.mcdonalds.co.uk
www.mcdonalds.com
www.mcdonalds.no
www.mcdonalds.se
www.mcdonaldsarabia.com
www1.development.mcdonalds.com
www3-staging.mcdonalds.com
www5.development.mcdonalds.com

Other certificates including the domain name happymeal.com

(limited to 100 certificates)
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
burgey.mcd.com
incapsula.com
incapsula.com
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
burgey.mcd.com
happymeal.com
incapsula.com
incapsula.com
akamai-poc.mcdonalds.com
www.happymeal.com
akamai-poc.mcdonalds.com
akamai-poc.mcdonalds.com
incapsula.com
www.happymeal.com
burgey.mcd.com
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
burgey.mcd.com
incapsula.com
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
incapsula.com
incapsula.com
akamai-poc.mcdonalds.com
akamai-poc.mcdonalds.com
burgey.mcd.com
incapsula.com
burgey.mcd.com
assets.mcdonalds.co.uk
www.happymeal.com
incapsula.com
burgey.mcd.com
burgey.mcd.com
burgey.mcd.com
burgey.mcd.com
incapsula.com
incapsula.com
burgey.mcd.com
akamai-poc.mcdonalds.com
assets.mcdonalds.co.uk
incapsula.com
burgey.mcd.com
burgey.mcd.com
assets.mcdonalds.co.uk
www.happymeal.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
www.happymeal.com
assets.mcdonalds.co.uk
incapsula.com
www.happymeal.com
incapsula.com
akamai-poc.mcdonalds.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
burgey.mcd.com
incapsula.com
burgey.mcd.com

Certificate

The complete raw certificate details for www.happymeal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h2FzOwBPGyy5lo9Ugor
h3abJUgm16IwSGB4zOoXqBfa6QRf0Yo6caWEDOV66J8L4gn0NDc5L/7P4X0YvSzE
+EL1/0bAvUapf3t3bmKzGQ2I6wHtGlrdIJlW8nG0kWcg2FE1hYeKVSiunIBQtiJl
XoD2HtGJCpkmEeuXyxjj8hppWzZYI4BLUw4t7jLdSCiDw8HbVS8svNs1t7ys306J
cvoP1/G07lE0FXEaHkCLRr8yksTC9WU5uZrCJJlOWFRX6hCXbs1XHvkMgqPvjZcG
DQKLbw2IbxcCuDj4NNkTvM2O/ERo4ssYFk7dp6bgsYQp0jXw38GmET2s2Q9ark99
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433418888861206475725817005411139232866829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 16:03:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 16:03:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.happymeal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27029555428040814279615832100140720627137842400864346966124323065370920713676749386265923662033769489058283048908880223879017585852364972016698325518243081443223874972088960238908561433407573058920203693304706985184681861508225051172646000719119092140722520009609801052803794743248853731533093437432706277868564021508932566053673046783421220056321547189572994445980209165576980828285187993167183536850459074076601564199983307433664513790523302604580189625499532115667044616728698465227526243420588125321091362425539146555022529161777058373882587044176969554209580409282127715658052134828018646036890541652292263705921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							346ca4ed8639afba136465db867543b9f0816bf7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aag-stage.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-mte.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-passiveloc-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-uat.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthdayparty.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate-stage.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.archwaystoopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dif-dev.gmal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dif-stg.gmal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dif.gmal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dna3-development.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnaapp.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evvm-rapport-internal.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evvm-rapport.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbs-uat.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbs.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbsptch1.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbsqa.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grbes.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grbesstaging.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.canada.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.hello.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.i.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.info.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.m.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonaldsarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-dev.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-prod.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-stg.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-stg1.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdeliverysdckr.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdportal.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-devgw.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-int.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-mte.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-passiveloc-stg1.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-passiveloc-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-stg1.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-uat.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-corporate.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-mte01-de-monopoly.vet-qa.digitalecp.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-prod01-de-monopoly.vet-prod.digitalecp.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-stg01-de-monopoly.vet-stage.digitalecp.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-passiveloc-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webexbld-dev3.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcomeonboard.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi2.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolf.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfstaging.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutmcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archwaystoopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.development.happymeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happymeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonaldsarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.development.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3-staging.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.development.mcdonalds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb50a570e0000040300473045022100d5d0f1f8b026b719fe5664325d44261cfa8cdd011adde9990c1563001fd1922202202fb4ac0f5b78d0eafe6434e5d02c1ae65482f377b2a04ec0eb09c2b013c551010075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bb50a5718000004030046304402207ff67fb91950f7ef5609597a0051b7a13c23dc73501de5c1595b4afff353637102202686f016bf926c2fd5b5c2c349105ef8b3edfb1e726f7a8c060fdb868a3b0479
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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