cert00091-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:54:f2:e5:5a:5f:17:0d:db:b0:af:91:37:50:70:b5:71:7f was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00091-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:f2:e5:5a:5f:17:0d:db:b0:af:91:37:50:70:b5:71:7f
Serial Number (int): 377355726592311046310413253639117716418943
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:f4:bc:d1:65:04:f5:54:21:c3:f7:05:81:00:21:b7:ee:a4:4a:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:f3:2d:cd:e8:85:d8:29:cd:2e:9e:5c:68:b1:1f:03:78:3d:bd:92
Fingerprint (sha256): 0d:78:f1:3e:f6:fd:0f:83:17:be:c2:50:0c:50:ce:29:4f:07:5e:03:d3:f4:d9:c7:7d:12:a3:1e:6c:16:4b:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00091-azurecdn.akamaized.net

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00091-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ablink.gomail.gopuff.com
acdntest1.dfrog.com
apifeed.ctee.com.tw
assets-des.laliga.com
assets-qa.laligafantasyone.com
assets.hgedge.io
barracuda-components-library.zoovu.com
betasite.roycenet.com
boost-solar.com
capitalautoparts.apacatalog.com
cdn-assets-large.facelift-cloud.com
cdn-belong.upnode.com.au
cdn.dges.gov.pt
cdn.honeycrm.com
cdn.kbtradingservice.com
cdn.pcapis.com
cdn.simio.com
cdn1.animotica.com
cdnverify.osfm.fire.ca.gov
cert00091-azurecdn.akamaized.net
dashboardcdn--uks.workflowcloud.com
didweb.billhughes.ninja
dv-assets-fantasyanf.llt-services.com
endpoint-game-bmm-dwgus.rmg.designworksgames.com
erpcinrmcdn.easyrewardz.com
eu-images-azure.smartassistant.com
f0cotui-int.aivicare.ai
flow6web.dev.novacuradev.net
fonts.recapsy.com
fs.honeycrmapp.net
gbo-fst-znc.nintex.io
gbo-fst-znc.nintexstaging.io
global-jss-uat.geely-test.com
hafjell.itverket.no
images-tb.camis.com
images-wa.camis.com
landing.dges.gov.pt
leanpos-static-ops-fenb.non-prod.webapps.grandvision.com
me-connect-tou-emea-dev.mercedes-benz.com
media-cis-cdn.oriflame.com
media-stg-cis-cdn.oriflame.com
media.oriflame.ru
media.vm-images.net
mycdn.ictsi.com
nathan.kewley.me
osfm.fire.ca.gov
ota-prod.olaelectric.com
pfrbusiness.postforrent.com
pioneers.zoovu.com
portal.speedupedu.com
prd-dscdn.ictsi.net
qastatic.oliveyoung.co.kr
renew-cja-can.an.adobe.com
rta-wms-1.rtacdn-os.com
ru.yuanchemnc.com
schoolgame.nidarachildren.com
snapshots2.playingsurface.net
stage.charliebanana.co.kr
staging.simmnet.net.au
static.oliveyoung.co.kr
static.preview.moncomptemobilite.fr
stg-cdn.vefy03.sukurire.jp
swipevideo-test2.swipevideo.site
torcedor.arenapoa.com.br
uat.seattlechildrens.org
unsubscribe-cja-can.an.adobe.com
url6677.grapecity.com
video-akm.tech.onefc.com
vitasleb.tlxmobility.com
workspace.300624.cn
www.alanorecoveryhomes.org
www.belplaine.com
www.boost-solar.com
www.brasino.cn
www.buiometriapartecipativa.org
www.byte9.nl
www.bytenine.nl
www.californiastem.org
www.dnet-shop.jp
www.familymattersinhome.com
www.fantasyfutbolchile.com
www.fifa55overr.com
www.fmrppv.org
www.howtoreachblog.com
www.juntai-technology.com
www.lekhuays.com
www.lottocasinobet.com
www.mepj.jp
www.oralb.dk
www.osfm.fire.ca.gov
www.redbandclips.com
www.seal-product.com
www.shareconference.org
www.siftnlp.com
www.spi-research.eu
www.swedees.i502.club
www.theandreaager.com

Other certificates including the domain name cert00091-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00091-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRNC5gcTd8Rkqs+FRyRY
tI/2M0dvstbn917Tz6CWWTFV7EjTTtuBIVPAPpA5CI+4A7mLLrPwhOoNu4SbaA8x
AlXg4JyT9Uz0ocq9yhLf1TtpiuIuY1n862tOS5gsmjJKO0s/PoulspzMnHBdClOl
0qcrx+qEeJl0YQdvrUsSlPoC1MQcv+yHs0qXi7S21JHkn4JgVBAB1Bsf6+wW6UUV
WxHDJtaFddTPSCa7Wa4Ly69w6hA17bFHv0q8xoudxPOqonH0x/DjYf9CpiMsRJDq
hliBHPPC2m/GMzBmYUaOoQ/3Xkh1WNPb+MVgb8R6Jcz1CvFynfZtwJ0f6NxWpSJt
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377355726592311046310413253639117716418943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 08:19:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-16 08:19:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00091-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25383397410274035154682619156141036605100035412337989316363885737047292207587337013796803682126802746414179546790406263318254673952763352662473634827224658930825282531299931151656483024048085219404259033650468904798981655807355912532703162339649592408163038415502890096572249959674326322866605316729290586066105674153239056361917065245214199520992072417724697672148484118905810914637412711919904362003539024498373783999364769786452465347280780038807086325429743470308740279929423735101088779667466253905996154355820196222559175586979267391374687088900462825933300846607031276741259148996409602556098863836656713231829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daf4bcd16504f55421c3f705810021b7eea44a94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.gomail.gopuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acdntest1.dfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apifeed.ctee.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-des.laliga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-qa.laligafantasyone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.hgedge.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barracuda-components-library.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betasite.roycenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boost-solar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalautoparts.apacatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-assets-large.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-belong.upnode.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dges.gov.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.honeycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kbtradingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pcapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.simio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.animotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnverify.osfm.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00091-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboardcdn--uks.workflowcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'didweb.billhughes.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv-assets-fantasyanf.llt-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-bmm-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erpcinrmcdn.easyrewardz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-images-azure.smartassistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f0cotui-int.aivicare.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flow6web.dev.novacuradev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonts.recapsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.honeycrmapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbo-fst-znc.nintex.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbo-fst-znc.nintexstaging.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-jss-uat.geely-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafjell.itverket.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-tb.camis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-wa.camis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.dges.gov.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leanpos-static-ops-fenb.non-prod.webapps.grandvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-connect-tou-emea-dev.mercedes-benz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-cis-cdn.oriflame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-stg-cis-cdn.oriflame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.oriflame.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vm-images.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycdn.ictsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nathan.kewley.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osfm.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ota-prod.olaelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfrbusiness.postforrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneers.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.speedupedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-dscdn.ictsi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qastatic.oliveyoung.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renew-cja-can.an.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rta-wms-1.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.yuanchemnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolgame.nidarachildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshots2.playingsurface.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.charliebanana.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.simmnet.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.oliveyoung.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.preview.moncomptemobilite.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cdn.vefy03.sukurire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swipevideo-test2.swipevideo.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torcedor.arenapoa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.seattlechildrens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsubscribe-cja-can.an.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'url6677.grapecity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-akm.tech.onefc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitasleb.tlxmobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workspace.300624.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alanorecoveryhomes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belplaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boost-solar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brasino.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buiometriapartecipativa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.byte9.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bytenine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiastem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dnet-shop.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.familymattersinhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fantasyfutbolchile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fifa55overr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fmrppv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howtoreachblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juntai-technology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lekhuays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lottocasinobet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mepj.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oralb.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osfm.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbandclips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seal-product.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shareconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siftnlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spi-research.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swedees.i502.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theandreaager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001851a3afef1000004030047304502207e70e5530b8460133107e9700077ceab7323938999c5451ebe6cde057a73e2a4022100e3872e2a3edb5617b4f8e77379e31bd911194c6d681a367d62c3c725265e3f2c007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001851a3aff4c00000403004730450221008f474204ae9b28cd9eb34a3484cfc48c784a4825014021e7694fe6be22a90bc6022070e5afe5830e27e6ddd55e096785eeae29f948f6e69a6b43a3d114f670efc195
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b112abf01f1fd752cd1ff6c33b992ebf5ac7447b36f7b22c9af0bf02341bd687e27a6d8ac14e1e842d6c7078c207a1038b9d95665731c92a3eb23b6c95192522b1fad6a8b6a78b6164ef79fc8c0fb320314c0e607a985ebd42417105251769206045a45714a05d710fd5384300a7bb1a0a77c4511a074f49f5756e46d78fc14403a0c26c09634db267bd6192f23cd33cc11277485a0a73fda212abf18b3bfa38a329a2e5b7429a9feffb2ec768389927fa24cb1adad17a46020b7dbb018b1607036436a23fd891ff80981642aba13538ce3cdcb682e8effff999f939766f552b0168ed98af347ba7928ee6cbae769a1a4f08ad991bdf46ae8db144752f9b9425