sophanseng.info

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:37:09:d0:62:14:5b:23:e7:a7:4f:09:e9:14:ac:e3:84 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sophanseng.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:37:09:d0:62:14:5b:23:e7:a7:4f:09:e9:14:ac:e3:84
Serial Number (int): 328105360208736433333098933471920568198020
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:b1:7d:3f:9e:60:66:f1:fe:d6:46:59:7a:87:56:a6:b9:23:51:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 45:97:13:6b:38:de:08:21:a7:03:58:92:d3:5e:75:0a:7f:9d:83:0c
Fingerprint (sha256): 02:16:76:19:76:6b:63:83:a2:84:23:5c:8c:ef:88:34:e0:05:62:85:a9:5f:08:c7:a0:6c:1c:0b:05:b5:bb:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sophanseng.info

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sophanseng.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.keeninvestment.info
cpanel.khmerbuddhistassociation.org
cpanel.sophanseng.info
keeninvestment.ghosananda.org
keeninvestment.info
khmerbuddhistassociation.ghosananda.org
khmerbuddhistassociation.org
mail.keeninvestment.info
mail.khmerbuddhistassociation.org
mail.sophanseng.info
sophanseng.ghosananda.org
sophanseng.info
webdisk.keeninvestment.info
webdisk.khmerbuddhistassociation.org
webdisk.sophanseng.info
webmail.keeninvestment.info
webmail.khmerbuddhistassociation.org
webmail.sophanseng.info
www.keeninvestment.ghosananda.org
www.keeninvestment.info
www.khmerbuddhistassociation.ghosananda.org
www.khmerbuddhistassociation.org
www.sophanseng.ghosananda.org
www.sophanseng.info

Other certificates including the domain name sophanseng.info

(limited to 100 certificates)

Certificate

The complete raw certificate details for sophanseng.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIyDCCB7CgAwIBAgISA8Q3CdBiFFsj56dPCekUrOOEMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MjYwNDI3MTZaFw0x
ODA5MjQwNDI3MTZaMBoxGDAWBgNVBAMTD3NvcGhhbnNlbmcuaW5mbzCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMEnsYsMTv5Wh5ViXmJrVIsTVcwpf13m
eNk1hPNscNgavdg6Gohz6rbzyXbFNjV6Q3A0X8gHkIqj9BD5G0fsCKcwaxJPmtge
kZjbGpwGE+Udizhw//7HYzjQMFjaf6Kj/4LYKBLLuOtqaSqwNblCgw1ZQd5OzIeO
d5gLINUSPtCOZTyNAVfy3iD03+5+7O0xxr0QjHMLShFNDoSEw6hMuc3SLK+WHr6V
GwMGP2PLvQVR4597SlTZirLIuCxPEEIdhJF+3hoXcoL9TGi0uVV4KFJQ+hh1cWjf
bRBLbIkUV8baORpovTo80otu6XsdZK9txlQ5/xuDg2JQQ0Dv+3hP2pUCAwEAAaOC
BdYwggXSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU3rF9P55gZvH+1kZZeodWprkj
UTwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCAtcGA1UdEQSCAs4wggLKghpjcGFuZWwua2VlbmludmVzdG1lbnQuaW5m
b4IjY3BhbmVsLmtobWVyYnVkZGhpc3Rhc3NvY2lhdGlvbi5vcmeCFmNwYW5lbC5z
b3BoYW5zZW5nLmluZm+CHWtlZW5pbnZlc3RtZW50Lmdob3NhbmFuZGEub3JnghNr
ZWVuaW52ZXN0bWVudC5pbmZvgidraG1lcmJ1ZGRoaXN0YXNzb2NpYXRpb24uZ2hv
c2FuYW5kYS5vcmeCHGtobWVyYnVkZGhpc3Rhc3NvY2lhdGlvbi5vcmeCGG1haWwu
a2VlbmludmVzdG1lbnQuaW5mb4IhbWFpbC5raG1lcmJ1ZGRoaXN0YXNzb2NpYXRp
b24ub3JnghRtYWlsLnNvcGhhbnNlbmcuaW5mb4IZc29waGFuc2VuZy5naG9zYW5h
bmRhLm9yZ4IPc29waGFuc2VuZy5pbmZvght3ZWJkaXNrLmtlZW5pbnZlc3RtZW50
LmluZm+CJHdlYmRpc2sua2htZXJidWRkaGlzdGFzc29jaWF0aW9uLm9yZ4IXd2Vi
ZGlzay5zb3BoYW5zZW5nLmluZm+CG3dlYm1haWwua2VlbmludmVzdG1lbnQuaW5m
b4Ikd2VibWFpbC5raG1lcmJ1ZGRoaXN0YXNzb2NpYXRpb24ub3Jnghd3ZWJtYWls
LnNvcGhhbnNlbmcuaW5mb4Ihd3d3LmtlZW5pbnZlc3RtZW50Lmdob3NhbmFuZGEu
b3Jnghd3d3cua2VlbmludmVzdG1lbnQuaW5mb4Ird3d3LmtobWVyYnVkZGhpc3Rh
c3NvY2lhdGlvbi5naG9zYW5hbmRhLm9yZ4Igd3d3LmtobWVyYnVkZGhpc3Rhc3Nv
Y2lhdGlvbi5vcmeCHXd3dy5zb3BoYW5zZW5nLmdob3NhbmFuZGEub3JnghN3d3cu
c29waGFuc2VuZy5pbmZvMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE
AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi
ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj
b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0
cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWQ6
j3C2AAAEAwBHMEUCICrMFgWvNr6gfs19uACVqrf5zBf8SpQ5zkxFLVt9UK7DAiEA
sc7NqRUmWrJGVLCxj0wM2iVI4mJ0ukzkVK5abvhRvaAAdgApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWQ6j3DFAAAEAwBHMEUCIQD3/ZNUSf+TbYgd
qfKdlq2zsntj9hV7VHXX1Cb45NsqtAIgEfYi6KQ6vyv9e3o8iYH6ft2rIr/R8clQ
QlyKdJDO/2gwDQYJKoZIhvcNAQELBQADggEBAH2c5SNJQiYZyxhz0jGq06JAz6N8
QDnG55QEIYF9ySgf28WPfHaSVsMT/qhe/lRVF1XGHLSDzEyFCr8kFMeyJ88Y30bK
Ob4hMGarOHiEAFErgLv3rWLzgC3MnIGliwIM23O89dw3IjNTnNzMIcv8MjeoTvHO
3whv4tHNTUcu343fZd06Yp7ArMHPBwL76vcd6EQvQxhMBKlmDBkeyMRcCDDSNpP2
3rNVYX3e9dBe2ME+2jA8zPOhXMJYBWk23AY0yQJf1M6VnqUbhAKvn31FEKjR6lVK
ASnV04tByhNlr65a6x3ZvVqhWsdTFc042aWHBcH0bGwNC7ylB/GyniemzPo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSexiwxO/laHlWJeYmtU
ixNVzCl/XeZ42TWE82xw2Bq92DoaiHPqtvPJdsU2NXpDcDRfyAeQiqP0EPkbR+wI
pzBrEk+a2B6RmNsanAYT5R2LOHD//sdjONAwWNp/oqP/gtgoEsu462ppKrA1uUKD
DVlB3k7Mh453mAsg1RI+0I5lPI0BV/LeIPTf7n7s7THGvRCMcwtKEU0OhITDqEy5
zdIsr5YevpUbAwY/Y8u9BVHjn3tKVNmKssi4LE8QQh2EkX7eGhdygv1MaLS5VXgo
UlD6GHVxaN9tEEtsiRRXxto5Gmi9OjzSi27pex1kr23GVDn/G4ODYlBDQO/7eE/a
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328105360208736433333098933471920568198020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-26 04:27:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 04:27:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sophanseng.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24383566466602452420445673167046731756200497734658074577482155546530851838026819954704370258572721084989109710516709916260423137493014334250187539692613086244885678589275001812073681467821891614051773945452751644192611191656974437064878983886203267596021826229461360865518864780408769547949118263530024082393517563890239411211640896891081230825641261908590865989595797313553746958262842797257667891148302670990520465304584276058933071506778082796885316357863999134430499428689288619754222556321304055287267826039869247068913455009101036484844402728956666470714241409673027497670433644385403979975858798668888576875157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							deb17d3f9e6066f1fed646597a8756a6b923513c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (718 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.keeninvestment.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keeninvestment.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keeninvestment.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerbuddhistassociation.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.keeninvestment.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophanseng.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.keeninvestment.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.keeninvestment.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sophanseng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keeninvestment.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keeninvestment.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerbuddhistassociation.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khmerbuddhistassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sophanseng.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sophanseng.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001643a8f70b6000004030047304502202acc1605af36bea07ecd7db80095aab7f9cc17fc4a9439ce4c452d5b7d50aec3022100b1cecda915265ab24654b0b18f4c0cda2548e26274ba4ce454ae5a6ef851bda0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001643a8f70c50000040300473045022100f7fd935449ff936d881da9f29d96adb3b27b63f6157b5475d7d426f8e4db2ab4022011f622e8a43abf2bfd7b7a3c8981fa7eddab22bfd1f1c950425c8a7490ceff68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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