cert00070-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 03:91:9a:19:c6:24:1e:d1:00:ba:77:7b:ea:31:94:9b:43:1d was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00070-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:9a:19:c6:24:1e:d1:00:ba:77:7b:ea:31:94:9b:43:1d
Serial Number (int): 310882635936368010149953820169699667428125
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:c0:06:99:cf:8f:9c:ad:28:04:fc:a2:bd:47:80:b7:dc:14:f2:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:08:04:fd:b5:6c:96:7f:cc:15:64:ef:b2:27:2c:25:02:03:91:b3
Fingerprint (sha256): 0f:5a:f9:60:99:94:5b:4c:36:ba:a7:1c:e0:b7:6b:3e:1f:6c:81:ec:84:e9:63:8c:e7:d4:9f:9f:55:30:ad:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00070-azurecdn.akamaized.net

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00070-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agriculture.newholland.com
agriculture2.newholland.com
akamai.compareyourflare.com
akeneotest.jabra.com
api.plcnext.help
badging.cdn.carfaxcanada.com
badgingcdn.carfax.ca
beta-s.tenmax.io
blob-sandbox-cdn.manticoreplatform.com
bomgardian.downloads.restaurant365.com
cargoes-platform-prod-images-cdn.cargoes.com
cdn-planner.facelift-cloud.com
cdn-snap-website.snap-compliance.com
cdn.cherryservers.com
cdn.cookwithbelula.com
cdn.oldschoolhousestony.co.uk
cert00070-azurecdn.akamaized.net
clientdownloads.boardmakerservices.com
content.landdocker.com
contents.smartcity-poc.com
designercdn--wus.workflowcloud-test.com
developer.api.idemtools.com
dfds-assets.dev.doka.com
dig.fire.ca.gov
distributiontest.iqmetrix.net
download-software-installer.dev.doka.com
edge-sitelist.avt.se
egmont.valtech.dk
elearning.plcnext.help
emlfiles.impaxam.com
endpoint-game-proto-dwgus.rmg.designworksgames.com
highlystarelec.com
hxpipefittings.com
images-bc.camis.com
incheon.wizschool.io
it-assets.conestogac.on.ca
js1.tst.applicationinsights.io
junior.akhlaquna.qa
live-storage.enetlearn.com
media.fillment.co
metalinductionweld.com
mit.uniteframework.io
mta-sts.i15ltd.co.uk
myinventory.sortimo-test.de
neapco.apacatalog.com
ohrm.dlenc.co.kr
parceiros.mobees.com.br
players-cdn-v2.vidmizer.com
pro-1w-static.onelouder.com
qa-docs.insimplify.com.au
rsprodcoupon.pspcdn.com
rtakhmission.rtacdn-os.com
rtakhuat-dealgroup.rtacdn-os.com
seaheartlaser.com
serviceaudev.buildai.com.au
snapshots.playingsurface.net
software-installer-assets.dev.doka.com
stg-cdn.vefy01.sukurire.jp
thirdpartylibs.mentice.com
tommy.visulon.com
travel.mygini.com
uatapi.wimpy.me
web-discovery-checker.zoovu.com
weijiahealth.com
wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net
wms-staging.paragonbox.com
www-cdn.igrad.com
www.bds-deutschland.de
www.bepeople.tech
www.corrugated-metal-pipe.com
www.edengreave.co.uk
www.flyaerobatics.com
www.highlystarelec.com
www.hxpipefittings.com
www.metalinductionweld.com
www.mkwi2012.de
www.moap.vn
www.neomi.immo
www.pantaudrakor.com
www.plumber-new-jersey.com
www.runyanpipeline.com
www.seaheartlaser.com
www.sinpopofairs.com
www.weijiahealth.com

Other certificates including the domain name cert00070-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00070-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06CbTwSgDHYZnS/p9DeL
Pf2VWXDRJlkyVfXs78pfO39iqXH8xwv56ISYOIvz+MdNuKDOmINUfvV25Je3k/EG
Q17ROqJY1Utuy5R2Ne2aPlBCqgB8bJGJo0QuFLXVxdr5EuRRYvaP7D3JKunn7ak3
lhdOHMAiqfCb9f/JnboUfdrvP8GNbskVRC20jvKy9OM3y4Q7ExCoPhEKhz9TTMha
hm+5Aibab1wCEQHhN99LiabwFSZ0hWht7UJkJZmDA9TVBEAGu1yJkPebpVEenrJ6
Uu3kiR2P08XLwRwLVL/iMUbJYDEnPoM54CH8MUlBNoe5s2PmzP5XKeYJaIDGbnpL
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310882635936368010149953820169699667428125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 04:51:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 04:51:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26715480450773254958421013631151923095460496511651459487306990567205745749330708821910287533916113140771286387428452542696976910290799669447513296766733660549204476913298515858927813982416909280839837693045214520718513415366825324356010432388345742362569714101325704640017543069942897810251002914905270727345168845608317405068090638472800079686729723567679548550900016869441910806788148422630780015335926286347108915902126859105492485941441475496436326703262308357894143829701207029599067945886479204379498985113843360260690404167646263125908482157418612264997564630305129949417637801943896797688728236535351434955739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6c00699cf8f9cad2804fca2bd4780b7dc14f268
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture2.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.compareyourflare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akeneotest.jabra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badging.cdn.carfaxcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgingcdn.carfax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-s.tenmax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blob-sandbox-cdn.manticoreplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomgardian.downloads.restaurant365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargoes-platform-prod-images-cdn.cargoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-planner.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-snap-website.snap-compliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cherryservers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cookwithbelula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.oldschoolhousestony.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientdownloads.boardmakerservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.landdocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contents.smartcity-poc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designercdn--wus.workflowcloud-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.api.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfds-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dig.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributiontest.iqmetrix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-software-installer.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-sitelist.avt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egmont.valtech.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emlfiles.impaxam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-proto-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-bc.camis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incheon.wizschool.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-assets.conestogac.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js1.tst.applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junior.akhlaquna.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-storage.enetlearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.fillment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mit.uniteframework.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.i15ltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinventory.sortimo-test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neapco.apacatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohrm.dlenc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceiros.mobees.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'players-cdn-v2.vidmizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-1w-static.onelouder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-docs.insimplify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsprodcoupon.pspcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhmission.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhuat-dealgroup.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaheartlaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceaudev.buildai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshots.playingsurface.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-installer-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cdn.vefy01.sukurire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdpartylibs.mentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommy.visulon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.mygini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.wimpy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-discovery-checker.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weijiahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms-staging.paragonbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn.igrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bds-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepeople.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corrugated-metal-pipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edengreave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyaerobatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkwi2012.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moap.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neomi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pantaudrakor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plumber-new-jersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runyanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaheartlaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinpopofairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weijiahealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001835e9a5e7d00000403004730450220141714541f01c0739ce2c17620a9b258858553ac3fcc4d655a3b8a0a77259760022100c5496671ab3c82316d9e34fdc606f8f18ad51d59a0217f6806f19b2bbd8caaff00770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001835e9a5eae0000040300483046022100adf5f857085fbb6ae183717ff76b576b78ad29203b443e2fa90416b50912991a022100a9a2b622f658a61c30c78c07165bd81e79363599ac081b4c7c6fc7e5fcc9cf9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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