www.happymeal.com

Issued by R3

About this certificate

This digital certificate with serial number 03:be:8d:fa:d7:57:13:7e:06:21:89:06:d2:3b:2a:89:d3:92 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.happymeal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:8d:fa:d7:57:13:7e:06:21:89:06:d2:3b:2a:89:d3:92
Serial Number (int): 326179231099496302335542274120129815630738
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:56:20:5a:62:90:bb:38:8d:c1:32:a6:ee:37:c7:57:7b:d0:09:de
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:4b:71:f1:be:ab:19:00:61:32:b7:61:c3:e4:ba:f1:f0:dd:d3:25
Fingerprint (sha256): 96:f8:94:48:7a:f8:47:27:5d:c3:a4:e2:8c:f7:be:91:86:3a:7c:44:d7:9a:92:01:93:c1:db:40:68:f7:49:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.happymeal.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.happymeal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aag-stage.mcdonalds.com
ap-ipe.api.mcd.com
ap-mte.api.mcd.com
ap-passiveloc-prod.api.mcd.com
ap-passiveloc-stg.api.mcd.com
ap-prod.api.mcd.com
ap-uat.api.mcd.com
apps.mcdonalds-kuwait.com
birthdayparty.mcdonalds-kuwait.com
corporate-stage.mcdonalds.com
corporate.mcdonalds.com
de-ipe.api.mcd.com
development.archwaystoopportunity.com
dif-dev.gmal.app
dif-stg.gmal.app
dif.gmal.app
dna3-development.mcdonalds.com
dnaapp.mcdonalds.com
el-prod.api.mcd.com
el-stg.api.mcd.com
eu-ipe.api.mcd.com
eu-passiveloc-stg.api.mcd.com
europe.api.mcd.com
evvm-rapport-internal.mcd.com
evvm-rapport.mcd.com
external-mbs-uat.mcd.com
external-mbs.mcd.com
external-mbsptch1.mcd.com
external-mbsqa.mcd.com
franchise-stage.mcdonalds.com
franchise.mcdonalds.com
grbes.mcd.com
grbesstaging.mcd.com
grs.mcd.com
hiring.mcdonalds-kuwait.com
link.canada.mcdonalds.com
link.hello.mcdonalds.co.uk
link.i.mcdonalds.com
link.info.mcdonalds.co.uk
link.m.mcdonalds.com
m.mcdonalds.co.uk
m.mcdonalds.no
m.mcdonaldsarabia.com
mbsoam-dev.mcd.com
mbsoam-prod.mcd.com
mbsoam-stg.mcd.com
mbsoam-stg1.mcd.com
mcdeliverysdckr.mcdonalds.com
mcdportal.mcdonalds-kuwait.com
na-devgw.api.mcd.com
na-int.api.mcd.com
na-ipe.api.mcd.com
na-mte.api.mcd.com
na-passiveloc-stg.api.mcd.com
na-passiveloc-stg1.api.mcd.com
na-passiveloc-stg2.api.mcd.com
na-stg1.api.mcd.com
na-stg2.api.mcd.com
na-uat.api.mcd.com
preview.mcdonalds.com
salesforcecrm.development.mcdonalds.com
salesforcecrm.qa.mcdonalds.com
stage-corporate.mcdonalds.com
stage-preview.mcdonalds.com
stage.mcdonalds.com
uk-mte01-de-monopoly.vet-qa.digitalecp.mcd.com
uk-prod01-de-monopoly.vet-prod.digitalecp.mcd.com
uk-stg01-de-monopoly.vet-stage.digitalecp.mcd.com
us-passiveloc-prod.api.mcd.com
us-passiveloc-stg.api.mcd.com
us-prod.api.mcd.com
us-stg.api.mcd.com
vpn.kw.mcd.com
vpn.mcdonalds-kuwait.com
webexbld-dev3.mcdonalds.com
welcomeonboard.mcdonalds-kuwait.com
wifi.mcdonalds-kuwait.com
wifi2.mcdonalds.com
wolf.mcd.com
wolfstaging.mcd.com
www.aboutmcdonalds.com
www.archwaystoopportunity.com
www.development.happymeal.com
www.happymeal.com
www.mcdonalds.ca
www.mcdonalds.co.uk
www.mcdonalds.com
www.mcdonalds.no
www.mcdonalds.se
www.mcdonaldsarabia.com
www1.development.mcdonalds.com
www3-staging.mcdonalds.com
www5.development.mcdonalds.com

Other certificates including the domain name happymeal.com

(limited to 100 certificates)
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
burgey.mcd.com
incapsula.com
incapsula.com
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
burgey.mcd.com
happymeal.com
incapsula.com
incapsula.com
akamai-poc.mcdonalds.com
www.happymeal.com
akamai-poc.mcdonalds.com
akamai-poc.mcdonalds.com
incapsula.com
www.happymeal.com
burgey.mcd.com
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
burgey.mcd.com
incapsula.com
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
incapsula.com
incapsula.com
akamai-poc.mcdonalds.com
akamai-poc.mcdonalds.com
burgey.mcd.com
incapsula.com
burgey.mcd.com
assets.mcdonalds.co.uk
www.happymeal.com
incapsula.com
burgey.mcd.com
burgey.mcd.com
burgey.mcd.com
burgey.mcd.com
incapsula.com
incapsula.com
burgey.mcd.com
akamai-poc.mcdonalds.com
assets.mcdonalds.co.uk
incapsula.com
burgey.mcd.com
burgey.mcd.com
assets.mcdonalds.co.uk
www.happymeal.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
www.happymeal.com
assets.mcdonalds.co.uk
incapsula.com
www.happymeal.com
incapsula.com
akamai-poc.mcdonalds.com
assets.mcdonalds.co.uk
assets.mcdonalds.co.uk
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
akamai-poc.mcdonalds.com
incapsula.com
assets.mcdonalds.co.uk
incapsula.com
assets.mcdonalds.co.uk
burgey.mcd.com
assets.mcdonalds.co.uk
burgey.mcd.com
incapsula.com
burgey.mcd.com

Certificate

The complete raw certificate details for www.happymeal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIPDvoYD+IvuV0NxJKng
rh5na5+00f9ghRs5j27Gp2vC9NYgAtsdEHtpFU6Qim1JtUs8UEWyzT0AAilGHRx6
9tjkWDBRAlEqn6OohR0RthpKT0nIOh+Oz/AmowYsvd10hr8dEqmmw9YOOvZRppcc
FDzKUlK386S9GNYHWE4hS+rz/aqzsbS7b8KzJTsDBlRYoOHFeQeQhnTNbsqZB/Me
OUG/sVm9qXWgfBuAxkQ/Z8mrVIeC6/9hNaAl3sB/vtbI8xCDQV6ZFGzqJi6WNmw6
z7pjIm31aK/kc5S2QQta6eJJwGCStLFPRbBQSr4Dj9KnP40/vBXTeomKiWcJbo51
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326179231099496302335542274120129815630738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 08:03:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 08:03:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.happymeal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21273010793005255466444363395373219591569166524226356810806881813485655395960906542598575568675413498552692087335113436737513861911828233278359128570381346370143426430871472491886591399245780887960566656810796772707946052575322341293148799405772269801373124449953341957003674975520423726294404114908779063493037155794573790124671707678593395270703489713756353161902633949434956228947412618408177287903303210018977226420695680365024700838819325628934076520622973870904986043726218901203437202388435164025578243463488812257682021609239865475099492585137792420412768503011922940795232883287803277524834304152918326932851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb56205a6290bb388dc132a6ee37c7577bd009de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aag-stage.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-mte.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-passiveloc-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap-uat.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthdayparty.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate-stage.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.archwaystoopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dif-dev.gmal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dif-stg.gmal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dif.gmal.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dna3-development.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnaapp.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evvm-rapport-internal.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evvm-rapport.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbs-uat.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbs.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbsptch1.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-mbsqa.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise-stage.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchise.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grbes.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grbesstaging.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiring.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.canada.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.hello.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.i.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.info.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.m.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonalds.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.mcdonaldsarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-dev.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-prod.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-stg.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbsoam-stg1.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdeliverysdckr.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdportal.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-devgw.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-int.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-ipe.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-mte.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-passiveloc-stg1.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-passiveloc-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-stg1.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-stg2.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na-uat.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecrm.development.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecrm.qa.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-corporate.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-mte01-de-monopoly.vet-qa.digitalecp.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-prod01-de-monopoly.vet-prod.digitalecp.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk-stg01-de-monopoly.vet-stage.digitalecp.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-passiveloc-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-passiveloc-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-prod.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-stg.api.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.kw.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webexbld-dev3.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcomeonboard.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.mcdonalds-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi2.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolf.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfstaging.mcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutmcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archwaystoopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.development.happymeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happymeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonalds.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonaldsarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.development.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3-staging.mcdonalds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www5.development.mcdonalds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3e5e2c21000004030046304402200403d7fc65d9b267e4e83c028d2e4ff9ae466565c8d6dde744f24ab5181269e30220324247e833836329fa14e671d68a2f33db93596c6f1d14e2927186cdf7ca17020077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c3e5e2c26000004030048304602210088623dd722c776e4f5e3bf7d49c009260cca06cfdf000411c215747da20fb0f60221008833594987db65ed7820c25598c6a8780a327a1486ae9c84dac9bf20d5624ddf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007575afb63fab7bfdb98881c9a3aa91809aeedb4fb6e68043b4a1a30d77e9353ef76f2454b91acf0cff8c0c350838856c57cff720b63ded81a23377b52a429793ca8e9302b58156008f4146ea9ef8b575ab272652649ba5faa5e608a6d1f5bb67e814df7df2709331b6198c3784499c51e35eec5a7d96a6cb1aaf7832832a01bd7ac99c7c30ff6cd7dae2be98eb0e2f6d766e3b969c1898d7de6ceae3587302023098e4b67987932f78974f364f2dc671ca86ea4d2c734fce87536c6436abb213a7b7f2fadc27bd620bcd40b7e3ca4345811353f647f84de79986d963b523f31cc7796069669c286990c71356d9d063f321d1d3671cd5ab72b68281b7aa48eefb