cert00031-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:2f:7b:2b:3b:34:15:a7:11:d4:4e:19:e8:0b:41:a7:1b:e9 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00031-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:7b:2b:3b:34:15:a7:11:d4:4e:19:e8:0b:41:a7:1b:e9
Serial Number (int): 364606134485360288245434391833202714418153
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:2c:0e:b1:eb:be:60:fc:5f:24:25:7e:61:0c:eb:e1:df:b6:6f:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:a9:3f:8a:7a:6f:b5:1e:80:c2:50:15:0f:d7:3b:e1:db:0b:c1:e2
Fingerprint (sha256): 05:f3:71:16:7c:98:68:76:6b:a0:91:a6:d3:a4:2e:4e:a8:fb:57:3b:9e:11:f7:94:e0:85:5b:26:ec:41:bb:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00031-azurecdn.akamaized.net

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00031-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ablisfiles.business.gov.au
aka-w-deve-base10-02.infocms.jp
anpingwiremesh.cn
api-cdn.doka.com
au-chat.followapp.care
backgrounds.goroster.com
bof.fire.ca.gov
buy.tr.vava.cars
cdn-preprod.hrpeak.com
cdn.aidealapersonne.com
cdn.development.mojo.myisolved.com
cdn.kingstone.com.tw
cdn.ppxvpn.com
cdn.seaturtlestranding.com
cdn.workingagainstgravity.com
cdnlegacy.enhancedballot.com
cdnverify.aaimtraining.org
cdnverify.bof.fire.ca.gov
cdnverify.frap.fire.ca.gov
cdnverify.www.aaimtraining.org
cert00031-azurecdn.akamaized.net
coach.dazn.com
event.ryo22.dv.metaversecloud.cc
files.bastow.vic.edu.au
findqa.kpmg.com
frap.fire.ca.gov
game-arconada.laligafantasy.marca.com
game-arconada.laligafantasymarca.com
gpmbt.family.com.tw
inlay.mysortimo.at
inlay.mysortimo.be
inlay.mysortimo.co.uk
inlay.mysortimo.de
inlay.mysortimo.dk
inlay.mysortimo.es
inlay.mysortimo.fr
inlay.mysortimo.ie
inlay.mysortimo.nl
inlay.mysortimo.no
inlay.mysortimo.se
leanpos-static-dev-rilx.non-prod.webapps.grandvision.com
logo.zain.com.my
mediadata.ryo22.dv.metaversecloud.cc
pphelp.unum.com
prodazurewwwtenanetca.scahygiene.com
profiledatacenter.eventcore.com
resource-cdn.house3d.net
roman.vava.cars
rowesd.com
rta-os-dfp-finance.dmallcdn.com.hk
samakamaicdn.samkuo.biz
scpassetslegcdn.sagepub.com
scpassetsstglegcdn.sagepub.com
shelflist.sigwald.org
sitemaps.qa.repairclinic.com
superweb.rtacdn-os.com
testimg3.capital.com.tw
tr.vava.cars
units.coiltubingpartners.com
vicks.it
widgetsdevcdn.sagepub.com
wu2preprodcdne3120d11ef3-preprod.energyexemplar.com
www.aaimtraining.org
www.anpingwiremesh.cn
www.dcassociatesgroup.com
www.frap.fire.ca.gov
www.mcstayfamily.org
www.oralb.nl
www.pozitivnews.org
www.ppehrc.org
www.tenabutiken.se
yanfeng.lixun.org

Other certificates including the domain name cert00031-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00031-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MYztn5QMnEkz9/1M8Sy
bc0CoxZo+Ik1bOfaUoJI2LlMoIjj9Fz0pQdrTFlzvQMxhYd5PYffQZ66lIFM7adr
5YrcSUqnLwijyOdcoJ0KiCPKnLU4m+OKxn9mi2x/rtwZicyI3HBr6dFaExLiaIgZ
krKSp+oSqEV4CPqgDDU3iR3Lye3orBnPsG5O17hjuETZl5wDaIQ50c9+AWqDD+RP
3cZwgSmeMu0vemjfl2VGsA4nIWlJDaQaYPoN4sajLYBkPJn35KSvcj2e6vWp5cQg
tpcN2A1aT5l1wIQtZSTyDnXTJRqSacs0eoganTSp/0pLDo5yZk9fZHFF/4Ds+Vie
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364606134485360288245434391833202714418153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-29 11:40:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-27 11:40:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00031-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30394930242429751733319176121458148784228888117072616349638921096643000864291623245554717292945817971347558416025951829154225924628930517796722616736827848639696028144331145111684493814034937267499277934516837924093668698098189703745987139489009105563224996400276408304587160992699418436685500185609785113608038945259653377606924846848399434948682104613048657968740264440404474964652845370651702825508630370831117301973499357502327370034820915897488542905831391095444941551171625324517447371083991260019704708939255031989868115803711476608629304669567445962412787585874463558008263166321769424575735848421116012437243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad2c0eb1ebbe60fc5f24257e610cebe1dfb66f2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1800 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablisfiles.business.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aka-w-deve-base10-02.infocms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anpingwiremesh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cdn.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au-chat.followapp.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backgrounds.goroster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bof.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.tr.vava.cars'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-preprod.hrpeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.aidealapersonne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.development.mojo.myisolved.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kingstone.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ppxvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.seaturtlestranding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.workingagainstgravity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnlegacy.enhancedballot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnverify.aaimtraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnverify.bof.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnverify.frap.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnverify.www.aaimtraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00031-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach.dazn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'event.ryo22.dv.metaversecloud.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.bastow.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findqa.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frap.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-arconada.laligafantasy.marca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-arconada.laligafantasymarca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpmbt.family.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlay.mysortimo.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leanpos-static-dev-rilx.non-prod.webapps.grandvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logo.zain.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadata.ryo22.dv.metaversecloud.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pphelp.unum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodazurewwwtenanetca.scahygiene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profiledatacenter.eventcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource-cdn.house3d.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roman.vava.cars'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowesd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rta-os-dfp-finance.dmallcdn.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samakamaicdn.samkuo.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpassetslegcdn.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpassetsstglegcdn.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelflist.sigwald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitemaps.qa.repairclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superweb.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testimg3.capital.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.vava.cars'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'units.coiltubingpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicks.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgetsdevcdn.sagepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wu2preprodcdne3120d11ef3-preprod.energyexemplar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaimtraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anpingwiremesh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcassociatesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frap.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcstayfamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pozitivnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppehrc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenabutiken.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yanfeng.lixun.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000182e99e03d30000040300483046022100b0cacd47115d72082b330ab07d046f65574475a0f614901132099af4b802c1a1022100ced1d8d31f5f40116a59ae2cc381683d24326fb0b09a29d036991ac85ef85d3100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182e99e05b00000040300483046022100a5f140a8bac28bdc8478a091bd2b2c8a909b71aa46e27f980047eb2a7f1dc102022100f2bede85afaf8a692724df465890c8fb11fec1bbaa9ea4ad7ec38c4c8c8e9e68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b480a5dbfa43ceac7262278b8ea9e472c028c30f9f41867d58ac74c7af3ad130b1f50537c6a9c6084abbdab7513d881c8bcce2d98d043b03cf375f1bb3eebc119fe2fcea1c1e8ad72d19a28ee1fd59ea01fc0da67dca1d050f35cdbfa9fea6cce977d5127e133c317a51706b58a07f7652a3120b5b90fad9c9c81858b3e64fc278ec6c81356703934804cbdc7d60cf9f5c29b22c50114bfb5c6904e3ed909a08e0821d56858d8b476198fa5386e53e5fe3fae3a7d850f5cef50f15fbaeff5c8f00afb744281b1afe6f06f77f12f88004ac19b7be2b26d69d9de35c0afb33acfd87175161fbbd0e63807886bf12632b40dded12e9e70a7bfd23ca29c023b295b