cert00052-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 03:03:fc:ce:16:dd:e5:ca:88:a3:13:b4:47:46:6d:41:63:69 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00052-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:fc:ce:16:dd:e5:ca:88:a3:13:b4:47:46:6d:41:63:69
Serial Number (int): 262693740427927764416228957894608504841065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:54:1f:a9:eb:91:70:52:b6:5d:af:a2:34:e5:eb:8d:b6:59:f0:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:90:37:4d:a5:1f:69:c0:e1:09:bb:e7:d1:e3:3e:70:ce:75:43:d1
Fingerprint (sha256): 01:8e:0f:0a:36:cc:10:78:1d:34:1c:4b:c7:74:67:45:e3:40:d8:bf:bb:ff:0e:76:b0:96:29:a3:90:9b:7d:68

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00052-azurecdn.akamaized.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00052-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alwaysdiscreet.de
api-docs.firefly-iii.org
apps.doka.com
booking.patterson.travel
caas-content.rtgbizapps.com
cdn.circuitmaps.com
cdn.finlocker.com
cdn.honda-mc.dk
cdn.motostore.cloud8.structpim.com
cdn.motostore.dk
cdn.pagaqui.net
cdn.wineshop.hu
cdnbs.bettercommerce.io
cert00052-azurecdn.akamaized.net
dbg.laticrete.com
dev-rbac-app.idemtools.com
dv-legals-fantasyanf.llt-services.com
game-qa.laligafantasy.marca.com
game-qa.laligafantasymarca.com
gestao.hmg.donepay.app
guestjourney-qa.newhotelcloud.com
headandshouldersarabia.com
hugo-test.openwt.com
images.winegroup.hu
me-connect-tou-amap-nonprod.mercedes-benz.com
media.manage365.rackspace.com
media.office365.rackspace.com
mobile.just-helping.org.uk
ocrbot.technology.ca.gov
odl.cdn.jula.com
orca-sandbox.zoovu.com
prd-edmstream.royalmail.com
pro-challenge.schott-ceran.com
regpricing-dev.ccok.com
reservatucita.audi.com.pe
rtakhinventory.rtacdn-os.com
sagahf.com
scpadmindevcdn.sagepub.com
store-hbwprodlive.2-10.com
vicks.com.au
virtualsapicdn-app.betking.com.gh
virtualsapicdn-desktop.betking.com.gh
virtualsapicdn-mobile.betking.co.ke
virtualsapicdn-mobile.betking.com.gh
virtualsapicdn-mobilelite.betking.com.gh
virtualsapicdn.betking.co.ke
webcdn.recapsy.com
webfiles.horizonhobby.com
www-assets.conestogac.on.ca
www.alwaysdiscreet.de
www.automotiveupdate.net
www.bilnkcasino.com
www.ceritahoror.com
www.feinklettern.de
www.gillette-latino.com
www.if-kingdom.com
www.innodig.eu
www.internetmediastudio.com
www.lottoduckruay.com
www.metamucil.com.co
www.njstategamblingsites.com
www.richlandtricountyfair.com
www.sagahf.com
www.sex-sucom.com
www.yellowbike.jp

Other certificates including the domain name cert00052-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00052-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomaNNyZvg+mdJATp/NHS
NHNXV0F/hrF/G2DR2C2luJAkmmPot1rgP81W9VTg3jL3M8PReRp5LvrZxJp/Blzi
Uwb3zq964+E49W3AYBkDnYICK5dGBSwmIvSzt1uFJGKhJmYBaFUp6Ai8U4D4F/H7
hAyYrJ6/QliwP7n2NWNDvibEc1sYB3e++lpxT9WHh70loksFVGJciKJ5AfVleU9z
7mqUkmhJcqgkPFXaO9OYTKrnRxEOClgk6gWRH6E/HEM1heBJYom82k87kc0vpwZZ
vVciS5QbR3UGfkiwLonT0Mxc5eMjHZMkpE5at03LMMtdHCixQVHgJq3BYtiec5hm
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262693740427927764416228957894608504841065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-30 11:47:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-30 11:47:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00052-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20501175494464587525857224021788312376379363246916543347065245631608058343628685213716072082130990862798016347273935067959109026565825726795065850961310016258326496192691898261977823734430390108741518468140777473269931387281209393215617456438711775928469603863099713838387722035383705800166815323600704058843530168066313305775170452129545163748374027949944753044664811554125666195507207744771602665853110046592644977280591428981564782707426935084562814507253499173362874627218373286410361957778904190058769069053784600143801957746732747017999346179174572247919494063290223704615482879710211053562184853382730207487719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73541fa9eb917052b65dafa234e5eb8db659f010
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1693 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwaysdiscreet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-docs.firefly-iii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caas-content.rtgbizapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.circuitmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.finlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.honda-mc.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.motostore.cloud8.structpim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.motostore.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pagaqui.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wineshop.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnbs.bettercommerce.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00052-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbg.laticrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-rbac-app.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv-legals-fantasyanf.llt-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-qa.laligafantasy.marca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-qa.laligafantasymarca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestao.hmg.donepay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestjourney-qa.newhotelcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headandshouldersarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugo-test.openwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.winegroup.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-connect-tou-amap-nonprod.mercedes-benz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.manage365.rackspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.office365.rackspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.just-helping.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrbot.technology.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.cdn.jula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca-sandbox.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-edmstream.royalmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-challenge.schott-ceran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regpricing-dev.ccok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservatucita.audi.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhinventory.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagahf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpadmindevcdn.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-hbwprodlive.2-10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-app.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-desktop.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobile.betking.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobile.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobilelite.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn.betking.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcdn.recapsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfiles.horizonhobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-assets.conestogac.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alwaysdiscreet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automotiveupdate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bilnkcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceritahoror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feinklettern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillette-latino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.if-kingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innodig.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetmediastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lottoduckruay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metamucil.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njstategamblingsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandtricountyfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagahf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sex-sucom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowbike.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001856312bf0400000403004630440220319d3d1d98402e3cfc16ed9e38e10daa5734e782e1f4d09e3b0b00b7e2a74ac402204842d5a30d43164b86c23a76a455e73013f8d00c89cb2616fcb0cceb43ade920007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001856312bf2200000403004730450220252d9a6c9c0f87f73b5297733360ac03c30880142fdfac02221eb2bbf29bb3d0022100c79b0c91d7f9c0c7dfde8b09acbdcf8dba52980639f3a4d6786979146f55f493
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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