cert00052-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:64:e5:f3:cb:d1:1f:92:ca:9d:df:26:dc:39:f2:ac:42:b3 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00052-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:e5:f3:cb:d1:1f:92:ca:9d:df:26:dc:39:f2:ac:42:b3
Serial Number (int): 382783039492203809632916479672954089390771
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:52:65:c2:b1:32:85:da:20:7d:39:1f:07:51:82:f5:b2:30:c8:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:f4:87:7b:3a:71:a8:88:f7:40:87:6a:b4:8e:34:50:42:cf:19:f3
Fingerprint (sha256): 00:f5:c6:a3:a0:45:8f:e6:bc:60:33:e7:71:b3:bc:13:a2:23:f2:4f:b2:4e:84:01:08:bf:61:45:0a:6d:20:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00052-azurecdn.akamaized.net

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00052-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acathaystodwl.cathaylife.com.tw
acxlagent2.cathaylife.com.tw
advanced2.zsilu.com
alwaysdiscreet.de
api-docs.firefly-iii.org
apps.doka.com
atos-files-landings-test.llt-services.com
booking.patterson.travel
caas-content.rtgbizapps.com
cdn.circuitmaps.com
cdn.finlocker.com
cdn.honda-mc.dk
cdn.motostore.cloud8.structpim.com
cdn.motostore.dk
cdn.pagaqui.net
cdn.wineshop.hu
cdnacus1-dev.realworld-one.com
cdnasea1-int.realworld-one.com
cdnbs.bettercommerce.io
cert00052-azurecdn.akamaized.net
dbg.laticrete.com
dev-rbac-app.idemtools.com
dv-legals-fantasyanf.llt-services.com
eclectic-uat.techlogix.com
game-qa.laligafantasy.marca.com
game-qa.laligafantasymarca.com
guestjourney-qa.newhotelcloud.com
headandshouldersarabia.com
hugo-test.openwt.com
images.winegroup.hu
linx-sb.bdoalliancesb.com
mailer.shopforesthillsfoods.com
me-connect-tou-amap-nonprod.mercedes-benz.com
media.manage365.rackspace.com
media.office365.rackspace.com
mobile.just-helping.org.uk
ocrbot.technology.ca.gov
odl.cdn.jula.com
orca-sandbox.zoovu.com
prd-edmstream.royalmail.com
pro-challenge.schott-ceran.com
rtakhinventory.rtacdn-os.com
sagahf.com
scpadmindevcdn.sagepub.com
sjzdm.com
staging-orca-exd-global-components.zoovu.com
store-hbwprodlive.2-10.com
vicks.com.au
virtualsapicdn-app.betking.com.gh
virtualsapicdn-desktop.betking.com.gh
virtualsapicdn-mobile.betking.co.ke
virtualsapicdn-mobile.betking.com.gh
virtualsapicdn-mobilelite.betking.com.gh
virtualsapicdn.betking.co.ke
webcdn.recapsy.com
webfiles.horizonhobby.com
www-assets.conestogac.on.ca
www.alwaysdiscreet.de
www.automotiveupdate.net
www.ceritahoror.com
www.feinklettern.de
www.gillette-latino.com
www.huaynn99.com
www.if-kingdom.com
www.innodig.eu
www.internetmediastudio.com
www.lottoduckruay.com
www.metamucil.com.co
www.njstategamblingsites.com
www.richlandtricountyfair.com
www.sagahf.com
www.sex-sucom.com
www.tobiume.org
www.wheless-wyatt.com
www.yellowbike.jp

Other certificates including the domain name cert00052-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00052-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM6zCCC9OgAwIBAgISBGTl88vRH5LKnd8m3DnyrEKzMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MjMwNjE1MzNaFw0yMzA4MjEwNjE1MzJaMCsxKTAnBgNVBAMT
IGNlcnQwMDA1Mi1henVyZWNkbi5ha2FtYWl6ZWQubmV0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAsLG3kA8VQeA2cd+Gq4T6PcLmEfzGibIsMsj/PJus
UtddrM+o0WR3KMw/7l7bJnyOLMplJmHLn6A/tK1Q1J5dEgT1KC4nSSfM7dQZs7Cl
5RtHUgoy/ntZxl59GVWof5d1qs9Uxon7H85l/oujonNrJe1ItM7HGZ1FMjdBLVEl
od9hUqtzC4l68noW7Q8cfr1VqS/k1/pDH51DykAUPIY6+l8r0ZBR+YVBbrirkxuZ
Q007BepGi42PTH/DmOJ6mxNtD9KGStHkh5OWzPKWkItlvzNubzvJTPi4xryITdtN
L7D0tB+/LoqeTKwutVoTIlXBb8zVERLZzHCIC0bdintK7QIDAQABo4IKADCCCfww
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT8UmXCsTKF2iB9OR8HUYL1sjDIuDAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCB88GA1UdEQSCB8YwggfCgh9hY2F0aGF5c3Rv
ZHdsLmNhdGhheWxpZmUuY29tLnR3ghxhY3hsYWdlbnQyLmNhdGhheWxpZmUuY29t
LnR3ghNhZHZhbmNlZDIuenNpbHUuY29tghFhbHdheXNkaXNjcmVldC5kZYIYYXBp
LWRvY3MuZmlyZWZseS1paWkub3Jngg1hcHBzLmRva2EuY29tgilhdG9zLWZpbGVz
LWxhbmRpbmdzLXRlc3QubGx0LXNlcnZpY2VzLmNvbYIYYm9va2luZy5wYXR0ZXJz
b24udHJhdmVsghtjYWFzLWNvbnRlbnQucnRnYml6YXBwcy5jb22CE2Nkbi5jaXJj
dWl0bWFwcy5jb22CEWNkbi5maW5sb2NrZXIuY29tgg9jZG4uaG9uZGEtbWMuZGuC
ImNkbi5tb3Rvc3RvcmUuY2xvdWQ4LnN0cnVjdHBpbS5jb22CEGNkbi5tb3Rvc3Rv
cmUuZGuCD2Nkbi5wYWdhcXVpLm5ldIIPY2RuLndpbmVzaG9wLmh1gh5jZG5hY3Vz
MS1kZXYucmVhbHdvcmxkLW9uZS5jb22CHmNkbmFzZWExLWludC5yZWFsd29ybGQt
b25lLmNvbYIXY2RuYnMuYmV0dGVyY29tbWVyY2UuaW+CIGNlcnQwMDA1Mi1henVy
ZWNkbi5ha2FtYWl6ZWQubmV0ghFkYmcubGF0aWNyZXRlLmNvbYIaZGV2LXJiYWMt
YXBwLmlkZW10b29scy5jb22CJWR2LWxlZ2Fscy1mYW50YXN5YW5mLmxsdC1zZXJ2
aWNlcy5jb22CGmVjbGVjdGljLXVhdC50ZWNobG9naXguY29tgh9nYW1lLXFhLmxh
bGlnYWZhbnRhc3kubWFyY2EuY29tgh5nYW1lLXFhLmxhbGlnYWZhbnRhc3ltYXJj
YS5jb22CIWd1ZXN0am91cm5leS1xYS5uZXdob3RlbGNsb3VkLmNvbYIaaGVhZGFu
ZHNob3VsZGVyc2FyYWJpYS5jb22CFGh1Z28tdGVzdC5vcGVud3QuY29tghNpbWFn
ZXMud2luZWdyb3VwLmh1ghlsaW54LXNiLmJkb2FsbGlhbmNlc2IuY29tgh9tYWls
ZXIuc2hvcGZvcmVzdGhpbGxzZm9vZHMuY29tgi1tZS1jb25uZWN0LXRvdS1hbWFw
LW5vbnByb2QubWVyY2VkZXMtYmVuei5jb22CHW1lZGlhLm1hbmFnZTM2NS5yYWNr
c3BhY2UuY29tgh1tZWRpYS5vZmZpY2UzNjUucmFja3NwYWNlLmNvbYIabW9iaWxl
Lmp1c3QtaGVscGluZy5vcmcudWuCGG9jcmJvdC50ZWNobm9sb2d5LmNhLmdvdoIQ
b2RsLmNkbi5qdWxhLmNvbYIWb3JjYS1zYW5kYm94Lnpvb3Z1LmNvbYIbcHJkLWVk
bXN0cmVhbS5yb3lhbG1haWwuY29tgh5wcm8tY2hhbGxlbmdlLnNjaG90dC1jZXJh
bi5jb22CHHJ0YWtoaW52ZW50b3J5LnJ0YWNkbi1vcy5jb22CCnNhZ2FoZi5jb22C
GnNjcGFkbWluZGV2Y2RuLnNhZ2VwdWIuY29tgglzanpkbS5jb22CLHN0YWdpbmct
b3JjYS1leGQtZ2xvYmFsLWNvbXBvbmVudHMuem9vdnUuY29tghpzdG9yZS1oYndw
cm9kbGl2ZS4yLTEwLmNvbYIMdmlja3MuY29tLmF1giF2aXJ0dWFsc2FwaWNkbi1h
cHAuYmV0a2luZy5jb20uZ2iCJXZpcnR1YWxzYXBpY2RuLWRlc2t0b3AuYmV0a2lu
Zy5jb20uZ2iCI3ZpcnR1YWxzYXBpY2RuLW1vYmlsZS5iZXRraW5nLmNvLmtlgiR2
aXJ0dWFsc2FwaWNkbi1tb2JpbGUuYmV0a2luZy5jb20uZ2iCKHZpcnR1YWxzYXBp
Y2RuLW1vYmlsZWxpdGUuYmV0a2luZy5jb20uZ2iCHHZpcnR1YWxzYXBpY2RuLmJl
dGtpbmcuY28ua2WCEndlYmNkbi5yZWNhcHN5LmNvbYIZd2ViZmlsZXMuaG9yaXpv
bmhvYmJ5LmNvbYIbd3d3LWFzc2V0cy5jb25lc3RvZ2FjLm9uLmNhghV3d3cuYWx3
YXlzZGlzY3JlZXQuZGWCGHd3dy5hdXRvbW90aXZldXBkYXRlLm5ldIITd3d3LmNl
cml0YWhvcm9yLmNvbYITd3d3LmZlaW5rbGV0dGVybi5kZYIXd3d3LmdpbGxldHRl
LWxhdGluby5jb22CEHd3dy5odWF5bm45OS5jb22CEnd3dy5pZi1raW5nZG9tLmNv
bYIOd3d3Lmlubm9kaWcuZXWCG3d3dy5pbnRlcm5ldG1lZGlhc3R1ZGlvLmNvbYIV
d3d3LmxvdHRvZHVja3J1YXkuY29tghR3d3cubWV0YW11Y2lsLmNvbS5jb4Icd3d3
Lm5qc3RhdGVnYW1ibGluZ3NpdGVzLmNvbYIdd3d3LnJpY2hsYW5kdHJpY291bnR5
ZmFpci5jb22CDnd3dy5zYWdhaGYuY29tghF3d3cuc2V4LXN1Y29tLmNvbYIPd3d3
LnRvYml1bWUub3JnghV3d3cud2hlbGVzcy13eWF0dC5jb22CEXd3dy55ZWxsb3di
aWtlLmpwMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IA
AAGIR3aWBwAABAMARzBFAiEAzZh/jZZKZdBf9Guc9SrIL0mgCAGj8JIwLVO3RZr4
u30CIF6RYhpnKud+rFqBWPKtYVchV/5+iXLJy84AGkaALIGkAHUA6D7Q2j71BjUy
51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGIR3aWBwAABAMARjBEAiB7K14chWt3
3TkfTOegNfZWmp5TI7ufSyS9ihin8AgoRgIgMSDONwHObwzzHhMqTGemCGXXrFA6
IucQwAHlxtD4jpcwDQYJKoZIhvcNAQELBQADggEBAKTin8QXwS7My1Ah8wTSMJRb
o2Ao31OXaFu1cX90f5MirC2WsM2p228ijzpgJFIBW5N8wwOQQf4HiNj5f/ojBBnk
s/4VgAlyl6tFFRxrv8FZYVa8bCfYmgb1nD6jGpN+0962yNKmck1NSFi2lG9oo8W/
zQrAEF5VFQHGVSSeBQwvz6X3JzabFNZqywRho1ZKXaf/oS6oSR9U4jZpGhVBNr+A
T9BHHA30h1gSFmGyteEKOUURmB2j9L89/bprsVn+qT4j743Bh/KOzZa1bpYPmOLJ
FzMbO4bmN8Ma61OyNRR/AE97OMCmB+LhBYs7Ac+nTMJUu22arrTG7KIbF2Ec91U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLG3kA8VQeA2cd+Gq4T6
PcLmEfzGibIsMsj/PJusUtddrM+o0WR3KMw/7l7bJnyOLMplJmHLn6A/tK1Q1J5d
EgT1KC4nSSfM7dQZs7Cl5RtHUgoy/ntZxl59GVWof5d1qs9Uxon7H85l/oujonNr
Je1ItM7HGZ1FMjdBLVElod9hUqtzC4l68noW7Q8cfr1VqS/k1/pDH51DykAUPIY6
+l8r0ZBR+YVBbrirkxuZQ007BepGi42PTH/DmOJ6mxNtD9KGStHkh5OWzPKWkItl
vzNubzvJTPi4xryITdtNL7D0tB+/LoqeTKwutVoTIlXBb8zVERLZzHCIC0bdintK
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382783039492203809632916479672954089390771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 06:15:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 06:15:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00052-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22305577213615718517809961072663697661846047112248617309080540401409907089718411742225098898132805364385439829485583002753560663772132348135783555012220917086478191045440571446312187481784316523374790049838749476284609532393355740441772675448978647209407603992228473152257878663569010237348476115982083406393914660282714268198578719919606887413950862468947196600711509183719051934594638005087358404808982401284314036402657186949475902100740477910763421620136486602380088482182563714823183539608241849079435896799261964992314525972568809081104144451233164545999549331674204218870153887736115598728516911533548243733229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc5265c2b13285da207d391f075182f5b230c8b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acathaystodwl.cathaylife.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acxlagent2.cathaylife.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanced2.zsilu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwaysdiscreet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-docs.firefly-iii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atos-files-landings-test.llt-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caas-content.rtgbizapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.circuitmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.finlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.honda-mc.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.motostore.cloud8.structpim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.motostore.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pagaqui.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wineshop.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnacus1-dev.realworld-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnasea1-int.realworld-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnbs.bettercommerce.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00052-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbg.laticrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-rbac-app.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv-legals-fantasyanf.llt-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclectic-uat.techlogix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-qa.laligafantasy.marca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-qa.laligafantasymarca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestjourney-qa.newhotelcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headandshouldersarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugo-test.openwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.winegroup.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linx-sb.bdoalliancesb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailer.shopforesthillsfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-connect-tou-amap-nonprod.mercedes-benz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.manage365.rackspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.office365.rackspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.just-helping.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrbot.technology.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.cdn.jula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca-sandbox.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-edmstream.royalmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-challenge.schott-ceran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhinventory.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagahf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpadmindevcdn.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjzdm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-orca-exd-global-components.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-hbwprodlive.2-10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-app.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-desktop.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobile.betking.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobile.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobilelite.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn.betking.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcdn.recapsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfiles.horizonhobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-assets.conestogac.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alwaysdiscreet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automotiveupdate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceritahoror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feinklettern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillette-latino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huaynn99.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.if-kingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innodig.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetmediastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lottoduckruay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metamucil.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njstategamblingsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandtricountyfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagahf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sex-sucom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tobiume.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheless-wyatt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowbike.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188477696070000040300473045022100cd987f8d964a65d05ff46b9cf52ac82f49a00801a3f092302d53b7459af8bb7d02205e91621a672ae77eac5a8158f2ad61572157fe7e8972c9cbce001a46802c81a4007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018847769607000004030046304402207b2b5e1c856b77dd391f4ce7a035f6569a9e5323bb9f4b24bd8a18a7f008284602203120ce3701ce6f0cf31e132a4c67a60865d7ac503a22e710c001e5c6d0f88e97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a4e29fc417c12ecccb5021f304d230945ba36028df5397685bb5717f747f9322ac2d96b0cda9db6f228f3a602452015b937cc3039041fe0788d8f97ffa230419e4b3fe1580097297ab45151c6bbfc1596156bc6c27d89a06f59c3ea31a937ed3deb6c8d2a6724d4d4858b6946f68a3c5bfcd0ac0105e551501c655249e050c2fcfa5f727369b14d66acb0461a3564a5da7ffa12ea8491f54e236691a154136bf804fd0471c0df48758121661b2b5e10a394511981da3f4bf3dfdba6bb159fea93e23ef8dc187f28ecd96b56e960f98e2c917331b3b86e637c31aeb53b235147f004f7b38c0a607e2e1058b3b01cfa74cc254bb6d9aaeb4c6eca21b17611cf755