deliciousrewards.leancuisine.com

Issued by Nestle External CA

About this certificate


This digital certificate with serial number 17:28:4a:fa:00:01:00:00:0e:d3 was issued on by Nestle .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present
  • ERROR: Certificate contains a key usage different from ClientAuth or EmailProtection

Nestle USA, Inc.

Organization: Nestle USA, Inc.
Organization unit: Consumer Marketing Technologies
State / Province: CA
Locality: Glendale
Country: US

Nestle

Organization: Nestle
Organization unit: IS/IT
State / Province: CA
Locality: Glendale
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 17:28:4a:fa:00:01:00:00:0e:d3
Serial Number (int): 109357701499657501282003
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 5c:49:9e:04:82:f3:21:f3:f0:78:55:56:e7:ef:f6:69:64:e2:b1:3b
AuthorityKeyId: ab:12:9a:d0:62:96:3b:a6:95:83:ee:54:26:a8:cd:d7:6f:71:0b:e2

Fingerprint (sha1): 10:88:02:7e:2b:46:8c:7b:16:25:de:ad:c8:8b:77:d9:1b:9e:8f:97
Fingerprint (sha256): 7c:6b:0a:bc:aa:cd:87:04:e4:08:13:39:c5:28:c2:bd:d5:97:58:44:49:46:be:c1:b1:84:5b:67:b2:d7:4c:cd

Issuing Certificate URL: http://crl.nestle.com/Nestle%20External%20CA(1).crt

Revocation information

CRL Distribution Point: http://crl.nestle.com/Nestle%20External%20CA(1).crl

Check the revocation status for the current certificate on deliciousrewards.leancuisine.com
0
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names (DNS Name).

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGFjCCA/6gAwIBAgIKFyhK+gABAAAO0zANBgkqhkiG9w0BAQUFADCBljELMAkG A1UEBhMCQ0gxDTALBgNVBAgTBFZhdWQxDjAMBgNVBAcTBVZldmV5MQ8wDQYDVQQK EwZOZXN0bGUxDjAMBgNVBAsTBUlTL0lUMRswGQYDVQQDExJOZXN0bGUgRXh0ZXJu YWwgQ0ExKjAoBgkqhkiG9w0BCQEWG3BraS1zZWN1cml0eS1leHRAbmVzdGxlLmNv bTAeFw0xMTA0MTIxMzQyNTlaFw0xMzA0MTExMzQyNTlaMIHKMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExETAPBgNVBAcTCEdsZW5kYWxlMRkwFwYDVQQKExBOZXN0 bGUgVVNBLCBJbmMuMSgwJgYDVQQLEx9Db25zdW1lciBNYXJrZXRpbmcgVGVjaG5v bG9naWVzMSkwJwYDVQQDEyBkZWxpY2lvdXNyZXdhcmRzLmxlYW5jdWlzaW5lLmNv bTErMCkGCSqGSIb3DQEJARYcU3RlZmFuaS53YXJyZW5AdXMubmVzdGxlLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMn7gJPbN93DCFVJDoZESDA WBX/SaF7Fx0XsXqY0Osc+7vqmuuGdi77vcJukOS58vttDDoC9a7Jt919Xi3IzkYg JzcAeklORQFu+EPYcQJTU/HUTkcpevT8nCFrnxexdV9orkd7OUmnHe0lWqaqe8S7 aZ0wYb8vyvPtilM+N+H8bctlaTm20EC/fD0zWVUyElDo8eVtq3ekVbvDAy7zfizf 9WQ4mEQKvmTgPBPZyqpP449XDN305UXZG7uoXMyziXD/MOnMAyf52/aarPbLZBCp 0CDd8fXfg//1Uw9+Sabp4F0KiJtwf2xBObCwJmHM5VBi3y8ybKWcvhNqQRITcm8C AwEAAaOCAS4wggEqMB0GA1UdDgQWBBRcSZ4EgvMh8/B4VVbn7/ZpZOKxOzAfBgNV HSMEGDAWgBSrEprQYpY7ppWD7lQmqM3Xb3EL4jBEBgNVHR8EPTA7MDmgN6A1hjNo dHRwOi8vY3JsLm5lc3RsZS5jb20vTmVzdGxlJTIwRXh0ZXJuYWwlMjBDQSgxKS5j cmwwTwYIKwYBBQUHAQEEQzBBMD8GCCsGAQUFBzAChjNodHRwOi8vY3JsLm5lc3Rs ZS5jb20vTmVzdGxlJTIwRXh0ZXJuYWwlMjBDQSgxKS5jcnQwIQYJKwYBBAGCNxQC BBQeEgBXAGUAYgBTAGUAcgB2AGUAcjAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIF oDATBgNVHSUEDDAKBggrBgEFBQcDATANBgkqhkiG9w0BAQUFAAOCAgEAkXWbMKwy 847J2plRCqyooBd9C3BJHgQyy30H773qFIay2mAbGos95xkGULSl511nbbfXnPmQ 0UNSjxK9XwtYr3EPZWruAtJG9eRyjKESEbw5CQIn/oQci3SPmJBkTGddi4lNy6tp L2V+2+vsWKAXSYiCm1GiSphQLIXtv00F/qTeeKewEaGB5cGOP9KcLRS5KrOSbu6s pGz0Kz5UaDux/Syqyaw943pmVgalXmY/kozoWZ1nUPxSt4/8bzOeDl8EDdVJvtkt E2H5995wZ+H35yC8mm9SMDtY6S0f9dj984AI6KE6CzP2xl/8GjuGu6z5PZy5aUd9 Fa7oPvRK8Sb7Bs6d2yzh/TNDgnqR8Vdyd4HCnMa8JyOzOFbWa0XnHUSqwJ7v7pLa JZbx29q8XRiIbeDL1ncOj8jADgvHaPWrQeo3dxnsDG+U3q9gekxvAsqUYR/eP55I GJxRGBx4lEX4I9YyOTMaFnB5HjTudvoIPHWW37WWo3PbHx/KxZat8zGzDw/FSa8r r5QoCPQvvLQrF690l+mTjxQVWaytqySi3HM9vlwAr7KGOoXZYUdQs5bumyCj8yaE JfW5LzUEZwmCZDsR9vXLUb8SQvFEVRX/eYFrPbHcbnMDtdFGtRebOmEutc19Vl56 ApZXf+Co01VuOappE52LH4ekANq+p/V9YB4= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyfuAk9s33cMIVUkOhkR IMBYFf9JoXsXHRexepjQ6xz7u+qa64Z2Lvu9wm6Q5Lny+20MOgL1rsm33X1eLcjO RiAnNwB6SU5FAW74Q9hxAlNT8dRORyl69PycIWufF7F1X2iuR3s5Sacd7SVapqp7 xLtpnTBhvy/K8+2KUz434fxty2VpObbQQL98PTNZVTISUOjx5W2rd6RVu8MDLvN+ LN/1ZDiYRAq+ZOA8E9nKqk/jj1cM3fTlRdkbu6hczLOJcP8w6cwDJ/nb9pqs9stk EKnQIN3x9d+D//VTD35JpungXQqIm3B/bEE5sLAmYczlUGLfLzJspZy+E2pBEhNy bwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 109357701499657501282003 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vaud' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vevey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS/IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle External CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-12 13:42:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-11 13:42:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glendale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nestle USA, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Consumer Marketing Technologies' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'deliciousrewards.leancuisine.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22616346669072690722588584103092659292951601630109120703444133124057634250857482082216032140954676303387328911866060355831557599260099896651572990526832898236602916165617195986065202265509223518229305218468414412691829254024595978909751778337317406719299663640180512059684852606841417735976844080932587623857909913477276425813114627432040341697417032083064946567345454901833033231688499175552453693596911222964988111549025264446848199580938679883892324382262026049776328316503029714245057655320602038095416088032507697513535742568138419348927231423798925042960823475203721399801602661681292439304474574334944515158639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5c499e0482f321f3f0785556e7eff66964e2b13b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab129ad062963ba69583ee5426a8cdd76f710be2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.nestle.com/Nestle%20External%20CA(1).crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2 (enrollCerttypeExtension) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 87 0 101 0 98 0 83 0 101 0 114 0 118 0 101 0 114] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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