*.mars.com

- Mars Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:65:b7:7c:c3:0d:ef:83:b5:7b:e0:ae:17:14:d1:79 was issued on by DigiCert Inc.

With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mars Inc.

Organization: Mars Inc.
Organization unit: Mars Information Services
State / Province: Virginia
Locality: McLean
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:65:b7:7c:c3:0d:ef:83:b5:7b:e0:ae:17:14:d1:79
Serial Number (int): 8503511523037556878377317500445839737
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 67:60:8f:4f:8e:b6:8b:12:54:93:f7:ad:c6:ec:28:54:cb:c6:1c:35
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 1b:25:40:ce:6e:22:5a:34:bc:60:ea:60:e9:05:9e:dc:34:f7:07:9f
Fingerprint (sha256): a0:e9:73:56:37:14:c6:82:9d:e5:e4:08:d0:04:7e:4c:59:a9:63:69:2b:dd:42:1c:62:15:8f:2c:ed:5d:d2:5e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.mars.com

110

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mars.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mars.com
*.royalcanin.com
*.royalcanin.ca
*.royalcanin.com.au
*.royalcanin.co.nz
*.royalcanin.co.uk
royalcanin.com.au
royalcanin.co.nz
royalcanin.co.uk
mars.com
royalcanin.com
royalcanin.ca
royalcanin.co.jp
*.royalcanin.co.jp
*.royalcanin.my
royalcanin.my
*.royalcanin.ph
royalcanin.ph
*.royalcanin.co.za
royalcanin.co.za
*.royalcanin.in
royalcanin.in
*.royalcanin.hk
royalcanin.hk
*.royalcanin.cl
royalcanin.cl
*.royalcanin.pr
royalcanin.pr
royalcanin.mx
*.royalcanin.mx
royalcanin.co
*.royalcanin.co
*.royalcanin.com.mx
royalcanin.com.mx
*.royalcanin.com.co
royalcanin.com.co
*.royalcanin.dk
royalcanin.dk
*.royalcanin.no
royalcanin.no
*.royalcanin.fi
royalcanin.fi
*.royal-canin.de
royal-canin.de
royalcanin.de
*.royalcanin.de
*.royalcanin.com.br
royalcanin.com.br
*.royal-canin.ee
royal-canin.ee
*.royalcanin.lv
royalcanin.lv
*.royalcanin.lt
royalcanin.lt
*.royalcanin.com.ua
royalcanin.com.ua
*.royalcanin.it
royalcanin.it
*.royalcanin.se
royalcanin.se
*.royal-canin.at
royal-canin.at
*.royalcanin.ch
royalcanin.ch
*.royalcanin.ro
*.eng.royalcanin.gr
*.royalcanin.gr
royalcanin.ro
eng.royalcanin.gr
royalcanin.gr
*.royalcanin.bg
royalcanin.bg
my.royalcanin.bg
*.my.royalcanin.bg
royal-canin.com.ar
*.royal-canin.com.ar
royalcanin.com.ar
*.royalcanin.com.ar
*.royalcanin.es
royalcanin.es
*.royalcanin.pt
royalcanin.pt
*.royalcanin.com.tw
royalcanin.com.tw
*.royalcanin.co.th
royalcanin.co.th
*.royalcanin.co.id
royalcanin.co.id
royalcanin.co.kr
*.royalcanin.co.kr
*.royalcanin.si
royalcanin.si
*.royalcanin.hu
royalcanin.hu
*.royalcanin.com.hr
royalcanin.com.hr
royalcanin.fr
*.royalcanin.fr
*.royalcanin.cz
royalcanin.cz
*.royalcanin.sk
royalcanin.sk
*.royalcanin.com.tr
royalcanin.com.tr
*.royalcanin.nl
royalcanin.nl
*.royal-canin.ru
royal-canin.ru
*.royalcanin.pl
royalcanin.pl

Other certificates including the domain name mars.com

(limited to 100 certificates)
www.footer.mars.com
stage-associatesconnect.mars.com
termsofpurchase-uk.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
stage-mfapackagingdata.mars.com
stage.promo-repo.mars.com
www.contact.mars.com
lambda-redirect24.mars-inc.com
uat-sitecorerc-cd-sportingdog.mars.com
stage.v2.footer.mars.com
www.sharedservices.mars.com
arg.mars.com
*.mars.com
stage.2025digitalvision.mars.com
oktadocs.mars.com
www.footer.mars.com
origin.stage-jobs.supplier.mars.com
wostest.effem.com.cn
dev-lighthouse.mars.com
stage-perfectfitfonts.mars.com
*.mars.com
sni.cloudflaressl.com
stage-sitecorerc-cd.mars.com
petcollege.mars.com
ucskypechatbot01.mars.com
oktadocs.mars.com
stage-retroapproval.mars.com
productcentral.mars.com
whiskas.com.br
Sitecore1-uat.mars.com
sni.cloudflaressl.com
rcdfcdn.mars.com
mix.mars.com
careers.mars.com
sni.cloudflaressl.com
survey.gradwell.com
sni.cloudflaressl.com
stage.mfapackagingdata.mars.com
meetsmart.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
marta.mars.com
mix.mars.com
stage-marketingportal.mars.com
itservicedesk.mars.com
jobs.supply2.mars.com
sni.cloudflaressl.com
lambda-redirect26.mars-inc.com
sni.cloudflaressl.com
migration.customs-cargo.mars.com
click.eu-petcare.mars.com
ciameu.mars.com
retroapproval-units.mars.com
lambda-redirect26.mars-inc.com
migration.stage-footer.mars.com
acts.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
aws-cf-rd25.mars-inc.com
metrics.mars.com
my-cms.mars.com
mypo.mars.com
sni.cloudflaressl.com
www.cravepetfood.co.uk
stage.qfs-warehouses.mars.com
iccc-webapp-dev.mars.com
brandgateway.mars.com
guest1-NA.mars.com
efexap.mars.com
survey.mars.com
stage.specialistpettrade.mars.com
origin.stage-newsservice.mars.com
san-9-s51.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
akamai-san122.exacttarget.com
aws-cf-www-mars-com-rd01.mars-inc.com
stage-profile.mars.com
aws-cf-rd21.mars-inc.com
sni.cloudflaressl.com
footer-admin.mars.com
stage.customer.mars.com
calendar.mars.com
survey.mars.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stage.posm-ae.mars.com
sni.cloudflaressl.com
ppj.mars.com
customer.mars.com
survey.westernwindowsystems.com
origin.brandgateway.mars.com
lambda-redirect21.mars-inc.com
stage.petcollege.mars.com
aws-cf-www-mars-com-rd01.mars-inc.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for *.mars.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPKt+OE9k48znsBZJn/m
jJ8T4rpC4KpYF7EF071QUoxvTmiw9QOtD4M+6IUWNt9ZMg8KJHq/cvF5sgw+Qc2d
peBTKhCmrd/V53n5hWIVKV6rDj2ueTEYcP/WMcovs0Vcrc7Nd7J7lChSDkkFkeaO
xqkKrINPR27WKN2qKDYA2g5muDtsW4QptmzcdsrAzS5qNUFiZjWJ0YsO3h0lLnLd
obrOLCFqhuMKZwX/yh95P3FTotoiu+8ngKeDM19ClEBDDQEbmBPdWK6iwnrAs0yt
DM+tedmwwUbzF/xCyU5MMy5Hd0xoGAHtkGZ7Rdpm/GQTtf2tIbE+jdJayNu63JsN
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8503511523037556878377317500445839737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'McLean'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mars Information Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mars.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22842564654377040010442352847351009112048080756865297655112845387794936424137766604667311745264756041066068799862020624371806627056291842536072529253902203231460587695643463999805745456013202894917673308336995634676891689410393986806578925151981615652645533850865319415131814963043306967961704019145718346462697249600012953739542333166387256880380933541775770446163878864748053899850295746638823173648184375886563539399866844121462358658404088854931304593827614361515532656758185883125397541384244289743356184077607477404741308674751831670212590904226885085193619812319130650905363273400154315066573296533557814693139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67608f4f8eb68b125493f7adc6ec2854cbc61c35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.royalcanin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royal-canin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royal-canin.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcanin.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcanin.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008859e5659e54abc93c076b24de4734a7f644d0eb888bd6f6ce6a48ccf59eb865ba128d772fa11c5767532aece520a113db51bb7b3664aef27bfe66478f851ffeb5fabfed704d0d7c90af3905af3923104ea0458f89fef551026639ab4da2da5ac09e36dccdda4a0f3c1058ee39f03304ba1cc33f87c41a302704ea2b091c419fd9d9238c29e8e284d0875abac410331672518fef30c086086374ab4967a4fce91c0c9e49672594df4360307d54cc260ccb9c22ec5a478520945f955184a9e3e96efe0013520d5c4455c53888ef7339cf03a540b3b10af95938b41113fcd68c503613e9de47b9e3088c2bf4552f3c50fc678ca6ac254908c4053b036451b6d597