cert00052-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:43:41:7a:cc:9e:ff:70:86:9c:56:39:3b:b7:c3:6f:de:95 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00052-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:41:7a:cc:9e:ff:70:86:9c:56:39:3b:b7:c3:6f:de:95
Serial Number (int): 371335099740895287954322910386393625648789
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f6:46:9d:b4:ee:53:cf:b4:33:76:61:e2:49:64:13:28:c5:fa:78:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:bd:9f:db:14:03:8c:8f:fe:f9:01:1a:fe:8c:21:90:44:63:c5:69
Fingerprint (sha256): 03:88:90:19:e7:1a:a7:05:5c:3b:a2:be:63:97:94:d0:ae:92:56:d0:2d:b0:0a:ce:f2:21:e0:ff:1e:94:11:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00052-azurecdn.akamaized.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00052-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alwaysdiscreet.de
api-docs.firefly-iii.org
apps.doka.com
booking.patterson.travel
caas-content.rtgbizapps.com
cdn.circuitmaps.com
cdn.finlocker.com
cdn.honda-mc.dk
cdn.motostore.cloud8.structpim.com
cdn.motostore.dk
cdn.pagaqui.net
cdn.wineshop.hu
cdnbs.bettercommerce.io
cert00052-azurecdn.akamaized.net
dbg.laticrete.com
dev-rbac-app.idemtools.com
dv-legals-fantasyanf.llt-services.com
game-qa.laligafantasy.marca.com
game-qa.laligafantasymarca.com
gestao.hmg.donepay.app
guestjourney-qa.newhotelcloud.com
headandshouldersarabia.com
hugo-test.openwt.com
images.winegroup.hu
me-connect-tou-amap-nonprod.mercedes-benz.com
media.manage365.rackspace.com
media.office365.rackspace.com
mobile.just-helping.org.uk
ocrbot.technology.ca.gov
odl.cdn.jula.com
orca-sandbox.zoovu.com
prd-edmstream.royalmail.com
pro-challenge.schott-ceran.com
regpricing-dev.ccok.com
reservatucita.audi.com.pe
rtakhinventory.rtacdn-os.com
sagahf.com
scpadmindevcdn.sagepub.com
store-hbwprodlive.2-10.com
testakmai2.ms.itguru.com.pl
vicks.com.au
virtualsapicdn-app.betking.com.gh
virtualsapicdn-desktop.betking.com.gh
virtualsapicdn-mobile.betking.co.ke
virtualsapicdn-mobile.betking.com.gh
virtualsapicdn-mobilelite.betking.com.gh
virtualsapicdn.betking.co.ke
webcdn.recapsy.com
webfiles.horizonhobby.com
www-assets.conestogac.on.ca
www.alwaysdiscreet.de
www.automotiveupdate.net
www.bilnkcasino.com
www.ceritahoror.com
www.feinklettern.de
www.gillette-latino.com
www.if-kingdom.com
www.innodig.eu
www.internetmediastudio.com
www.lottoduckruay.com
www.metamucil.com.co
www.njstategamblingsites.com
www.richlandtricountyfair.com
www.sagahf.com
www.sex-sucom.com
www.yellowbike.jp

Other certificates including the domain name cert00052-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00052-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78ERayS7GDwjAQ/DheOW
S7Uv12lrOskhppp8LbXDFgMY/K8LpsjCn95q9W6h7R0dwnFi0TDVm7DBnBKcp/t+
ef3PxTfWzOo+lbM1jVpa5OUnqGbG1ygK86ZrzLafK4HOWNepVej2zhCw2abqNr0V
v0l5JSjxBU5IhFTYeIq59Sw5dzM4pJGYjpqsBP72LhtI8AsmtV9nIHTusLMCVbbm
uwOP8otjqG4BucVqrNFwQdqJ/QQKWgriiTQA+tS0lvb/ue8dtOmbd1Z51xxBSNaY
rHOIDW5aaEpkfzEmRDB2pjb8j3CV+WW7JEb0g4JmlK/uow/uQuLvp/Nj6/FFi+Dl
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371335099740895287954322910386393625648789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-24 08:47:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 08:47:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00052-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30266160286322924682763522537946113064355434323862466501427596184940927450013848138765542863482640626359163786502373120524756474360829069349615312800799070860608062232948872897375017656561448893085844424652901563724882351390702097218801020896136214514748141630998446897450573043223060303580276351456924022393786357611776686592098149324143137696465726450351229912641121018422845932657097746804310638939249896848402596581887195734946304026590866143270245078156226516816369351786329944855309784656799794074833981692765352713885109967980730840225863685483225803697819041480456649678066474868722295472797139490243199689997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6469db4ee53cfb4337661e249641328c5fa7891
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1722 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwaysdiscreet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-docs.firefly-iii.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caas-content.rtgbizapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.circuitmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.finlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.honda-mc.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.motostore.cloud8.structpim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.motostore.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pagaqui.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wineshop.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnbs.bettercommerce.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00052-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbg.laticrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-rbac-app.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv-legals-fantasyanf.llt-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-qa.laligafantasy.marca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-qa.laligafantasymarca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestao.hmg.donepay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestjourney-qa.newhotelcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headandshouldersarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugo-test.openwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.winegroup.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-connect-tou-amap-nonprod.mercedes-benz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.manage365.rackspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.office365.rackspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.just-helping.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocrbot.technology.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odl.cdn.jula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orca-sandbox.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-edmstream.royalmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-challenge.schott-ceran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regpricing-dev.ccok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservatucita.audi.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhinventory.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagahf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpadmindevcdn.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store-hbwprodlive.2-10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testakmai2.ms.itguru.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-app.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-desktop.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobile.betking.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobile.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn-mobilelite.betking.com.gh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapicdn.betking.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcdn.recapsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfiles.horizonhobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-assets.conestogac.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alwaysdiscreet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automotiveupdate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bilnkcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ceritahoror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feinklettern.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillette-latino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.if-kingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innodig.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internetmediastudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lottoduckruay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metamucil.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njstategamblingsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandtricountyfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sagahf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sex-sucom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yellowbike.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184a908dc120000040300483046022100c9000ffbb1f6da50a0a07cb5694576668ddc4a19c6c40266c7666b2e46a940ad022100eedd05b24307baf60a3770631891fc633c11b8360c831b3b15317b842aca7ec9007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184a908de8e000004030046304402200863fd9763110e37b5d38756a92605ea93fefcd8d002d26f1564075ae5d501d40220051760067c080177c0fa1b2028c5cfd94c250afcfd48af87e023afabd9679c17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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