cert00028-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 03:8e:72:20:cb:b8:66:2a:4f:7e:ee:11:02:45:ff:f1:16:e2 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00028-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:72:20:cb:b8:66:2a:4f:7e:ee:11:02:45:ff:f1:16:e2
Serial Number (int): 309808656175011705340874371328547606304482
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:df:a7:e0:f1:b6:cd:ca:47:c8:a8:b1:19:b6:f7:9c:8d:39:1e:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:e5:a5:e1:38:7d:e8:c0:53:4b:73:4b:1a:b3:bf:26:db:a7:ce:cd
Fingerprint (sha256): 10:3d:26:76:d0:7a:05:b3:03:a2:8b:2c:e4:22:4d:da:26:96:27:66:23:ca:15:11:d0:aa:cb:12:4d:ce:c8:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00028-azurecdn.akamaized.net

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00028-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

20.saiakmtest.azfdtest.xyz
arenapoa.sirros.io
assets.allab.com
assets.d2cmanage.com
azgameakamai.matchroom.net
barracuda.zoovu.com
bdhaccount.tax.deloitte.com.hk
btemptd.wacoal-america.com
cdn-data.hotelgyms.com
cdn.actorsequity.net
cdn.exmed.net
cdn.lifegunk.com
cdn.lnovel.kr
cdn.picknwatch.com
cdn.services-tst.fmi.com
cdn.vindicatesociety.com
cdn01.ideaelearning.net
cdntest.ayahealthcare.com
cert00028-azurecdn.akamaized.net
charity.inca.csas.cz
creativesolutionsportal.shell.com
csportal.shell.com
download.dentalxchange.com
download.perfectgymcdn.com
findstaging.kpmg.com
french.bestsorttechnology.com
go.ppxwo.cf
godrive.gopuff.com
hbcuria-biology.com
health.claypoole.net
image.fthis.gr
infura.xyd4.com
krcon.krs.co.kr
la-api.portal.oriflame.com
lottery-cdn-production-second.spinolagaming.com
lottery-cdn-production.spinolagaming.com
lpqapoc.statdoctorsapp.com
media.jlgarchitects.com
media.nabla-stg.ibhplus.ch
murakami-test-mk24-managedata.ves.cloud-config.jp
murakami-test-mk25-session.ves.cloud-config.jp
murakami-test-mk26-managedata.ves.cloud-config.jp
origin-gms.dogdigital.net
outlet.centralar.com.br
pilot-kms-admin.eni.com
pre.patterson.travel
prodlive.wacoal-america.com
qawwwtenanetat7.scahygiene.com
russian.sls-pump.com
sg001-cdn.sliq.net
sg003-cdn.sliq.net
simplypay.app
smartcare.tena.pt
spanish.td-pumpgroup.com
storage.thenemesis.io
tenmax-static.cacafly.net
test-cdn.hwrescdn.com
testcdn.ayahealthcare.com
www-cdn-akm.headandshoulders.co.id
www.5bucksessay.com
www.betbeer.com.es
www.betbeer.com.pt
www.betbeer.es
www.cdn.leaguelight.com
www.comebooknow.com
www.guidemesingapore.com
www.hbcuria-biology.com
www.jlg.media
www.kingscommunity.care
www.lotusbaby.fr
www.mediaedscotland.org.uk
www.simplypay.app
www.tenanet.it
www.y-ironwire.com

Other certificates including the domain name cert00028-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00028-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpRgwH8USghodB1zzMbk
Ql5UnS2aF0L+lnEu7JnKkF1GyNRfvXpFp2/ohTu8x63DS8Z0Wy2p/h5v7WdA3QSH
ldspYZ3U7wGl5CgY9psX2TQucZ5ybHqNHaT59M2C50D4hwBxPhISSsTz3ZM8D9Tr
YgNMPYdFlasjf8f2N7hqDnxJmaJ8756TB2cXxCpkVlA7IS/ppn/ejadacPuddw9I
cdTwElj972/j0X4sqHek/GTERQxO5UG7Dv3stgZ4RpQNM723T2Pm/wGCweBnLxVa
r0sGPfyBZbs1l7AkDKwvfPLc8JPFLpdEL64Aor238QBzLVgO5hOxJYu6N1QD88gE
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309808656175011705340874371328547606304482
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-16 06:24:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-15 06:24:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00028-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24058445831419563291158468451517306547069173404163426895792082848144646825184319950146283431193542219973299705025546999199376969314008720572497420965906950564698755019446018628086849187802169911782831512484229266239381208823710005644988105264630187262524262682473632047132912766734734161877289990491003308243980122662380520321711932451864803781042056932907605204921581161404849941950354285555390287249395965216168551034119379198598136959183900367841896620385099967467040815319131402554128115009253720239295817827877601459489466458466554284824860512640614766845523184158208437851512742285622240144654995725122697430099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05dfa7e0f1b6cdca47c8a8b119b6f79c8d391ef9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1848 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20.saiakmtest.azfdtest.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapoa.sirros.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.allab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.d2cmanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azgameakamai.matchroom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barracuda.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdhaccount.tax.deloitte.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btemptd.wacoal-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-data.hotelgyms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.actorsequity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.exmed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lifegunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lnovel.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.picknwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.services-tst.fmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vindicatesociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn01.ideaelearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest.ayahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00028-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charity.inca.csas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativesolutionsportal.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csportal.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.dentalxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.perfectgymcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findstaging.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.bestsorttechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ppxwo.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godrive.gopuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcuria-biology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.claypoole.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fthis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infura.xyd4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krcon.krs.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-api.portal.oriflame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-production-second.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-production.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpqapoc.statdoctorsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.jlgarchitects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nabla-stg.ibhplus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murakami-test-mk24-managedata.ves.cloud-config.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murakami-test-mk25-session.ves.cloud-config.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murakami-test-mk26-managedata.ves.cloud-config.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-gms.dogdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlet.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-kms-admin.eni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodlive.wacoal-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qawwwtenanetat7.scahygiene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russian.sls-pump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg001-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg003-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplypay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcare.tena.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.td-pumpgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.thenemesis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenmax-static.cacafly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cdn.hwrescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcdn.ayahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.headandshoulders.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5bucksessay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.leaguelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comebooknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidemesingapore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcuria-biology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlg.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingscommunity.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotusbaby.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaedscotland.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplypay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenanet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.y-ironwire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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