cert00029-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:cf:af:4d:90:73:a5:74:f4:31:63:47:6d:4c:af:d5:40:71 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00029-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cf:af:4d:90:73:a5:74:f4:31:63:47:6d:4c:af:d5:40:71
Serial Number (int): 419120611315625144013064708023773109239921
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 10:e9:23:4f:36:63:0f:a6:0f:f0:6d:46:af:4d:95:88:48:69:21:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:ad:89:11:71:ab:cf:96:9d:5b:fe:5b:f6:fb:22:10:a5:09:0e:7a
Fingerprint (sha256): 10:54:c9:8d:6a:37:7d:c3:c8:c7:bd:04:9d:66:b5:ec:46:e0:d3:03:28:71:45:16:da:dc:65:09:07:74:d9:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00029-azurecdn.akamaized.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00029-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-uat.tributementorship.com
arendalsuka.litt.ninja
azure-test.tredsoft.co.uk
bellaliantmediatvcdn.communitylive.ca
beta-cdp-cdn.tenmax.io
bpcdn.parliament.scot
cdn.actorsequity.org
cdn.bestelboer.nl
cdn.groundzero-subweb.com
cdn.lebanese-market.com
cdn.plus.yitgroup.com
cdn.sourcingsolutions.com
cdnm.cobblecord.com
cert00029-azurecdn.akamaized.net
china.sls-pump.com
endpoint-game-gamesclient-dwgus.rmg.designworksgames.com
files-2.mylutron.com
homolog-postura.acto.net.br
instantteapowder.com
levelcome.com
logo.dentons.com
lottery-cdn-staging-second.spinolagaming.com
lottery-cdn-staging.spinolagaming.com
mainsite-cdn1.linfamily.network
mastersmartcare.tenashop.com
mcimages.maistering.com
mcscripts.maistering.com
mcstyles.maistering.com
mcuiscripts.maistering.com
myidem.idemtools.com
myroofintcdn.gaf.com
outdoor.exploretrumbullcounty.com
poland.perfectgymcdn.com
privacypolicy.campari.com
pubdocrep.mobileheartbeat.com
qa-b2b.centralar.com.br
qa-b2c.centralar.com.br
qa-nms-images.nomanssky.com
rta-adv-uat.dmallcdn.com.hk
s.ziva.gold
service.buildai.com.au
sg002-cdn.sliq.net
staging.guia360ford.com.br
static.beopsmart.com
static.rnbtechgroup.com
static.smartbeop.com
static.staging.diksha.gov.in
static2.yschool.co.il
stories.kleague.com
surlbs01.shareurlight.com
test-digitalbanking.crowe.com
tms-qa.lusy-dev.com
tms-staging.lusy-dev.com
virtualsapibetking.betagy.services
www-cdn-akm.mbib.com
www-cdn-akm.pantene.co.uk
www-cdn-aks.myrepi.com
www-cdn-aks.pantene.co.uk
www.gillette.sg
www.instantteapowder.com
www.levelcome.com
www.patterson.travel
www.tenanet.at
www.zhuoqingfactory.com
www2.oriflame.ru
zhuoqingfactory.com

Other certificates including the domain name cert00029-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00029-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL1jCCCr6gAwIBAgISBM+vTZBzpXT0MWNHbUyv1UBxMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA2MDcxMDUyMDVaFw0yMTA5MDUxMDUyMDVaMCsxKTAnBgNVBAMT
IGNlcnQwMDAyOS1henVyZWNkbi5ha2FtYWl6ZWQubmV0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAzYOdtoXtQGLa4rDvUDQpMJlYp6GpPFQAxnjyymmk
H1x23O4gubzxz2n7YbRHC21/AMStmBbrAoEdgOgLuCgGnh3gYsatwbuqa23Z2Rzb
j0n4moYZvPtuYA4YjamOmCAU7/LpIJVqkQ+pCe3HRlf2E6oLFgr4peqQQZ0pUf0b
RgKNWc1MThbw1QT1uIU+m437b9suewoyRqgGtPExD3whL1Zu071vaaL61chEyJ1b
ahzXS64GXy4s/sU4QlDViBYG8CgwfwhmcFlzfTDhYhtBLVjrhlPWZu2XwvDvpGGV
3Q2udv+oRFzoXB30g62JQzlmYlAsBI6p3kAEbSsEZ8+lbwIDAQABo4II6zCCCOcw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQQ6SNPNmMPpg/wbUavTZWISGkhyzAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCBrkGA1UdEQSCBrAwggasgh9hZG1pbi11YXQu
dHJpYnV0ZW1lbnRvcnNoaXAuY29tghZhcmVuZGFsc3VrYS5saXR0Lm5pbmphghlh
enVyZS10ZXN0LnRyZWRzb2Z0LmNvLnVrgiViZWxsYWxpYW50bWVkaWF0dmNkbi5j
b21tdW5pdHlsaXZlLmNhghZiZXRhLWNkcC1jZG4udGVubWF4LmlvghVicGNkbi5w
YXJsaWFtZW50LnNjb3SCFGNkbi5hY3RvcnNlcXVpdHkub3JnghFjZG4uYmVzdGVs
Ym9lci5ubIIZY2RuLmdyb3VuZHplcm8tc3Vid2ViLmNvbYIXY2RuLmxlYmFuZXNl
LW1hcmtldC5jb22CFWNkbi5wbHVzLnlpdGdyb3VwLmNvbYIZY2RuLnNvdXJjaW5n
c29sdXRpb25zLmNvbYITY2RubS5jb2JibGVjb3JkLmNvbYIgY2VydDAwMDI5LWF6
dXJlY2RuLmFrYW1haXplZC5uZXSCEmNoaW5hLnNscy1wdW1wLmNvbYI4ZW5kcG9p
bnQtZ2FtZS1nYW1lc2NsaWVudC1kd2d1cy5ybWcuZGVzaWdud29ya3NnYW1lcy5j
b22CFGZpbGVzLTIubXlsdXRyb24uY29tghtob21vbG9nLXBvc3R1cmEuYWN0by5u
ZXQuYnKCFGluc3RhbnR0ZWFwb3dkZXIuY29tgg1sZXZlbGNvbWUuY29tghBsb2dv
LmRlbnRvbnMuY29tgixsb3R0ZXJ5LWNkbi1zdGFnaW5nLXNlY29uZC5zcGlub2xh
Z2FtaW5nLmNvbYIlbG90dGVyeS1jZG4tc3RhZ2luZy5zcGlub2xhZ2FtaW5nLmNv
bYIfbWFpbnNpdGUtY2RuMS5saW5mYW1pbHkubmV0d29ya4IcbWFzdGVyc21hcnRj
YXJlLnRlbmFzaG9wLmNvbYIXbWNpbWFnZXMubWFpc3RlcmluZy5jb22CGG1jc2Ny
aXB0cy5tYWlzdGVyaW5nLmNvbYIXbWNzdHlsZXMubWFpc3RlcmluZy5jb22CGm1j
dWlzY3JpcHRzLm1haXN0ZXJpbmcuY29tghRteWlkZW0uaWRlbXRvb2xzLmNvbYIU
bXlyb29maW50Y2RuLmdhZi5jb22CIW91dGRvb3IuZXhwbG9yZXRydW1idWxsY291
bnR5LmNvbYIYcG9sYW5kLnBlcmZlY3RneW1jZG4uY29tghlwcml2YWN5cG9saWN5
LmNhbXBhcmkuY29tgh1wdWJkb2NyZXAubW9iaWxlaGVhcnRiZWF0LmNvbYIXcWEt
YjJiLmNlbnRyYWxhci5jb20uYnKCF3FhLWIyYy5jZW50cmFsYXIuY29tLmJyghtx
YS1ubXMtaW1hZ2VzLm5vbWFuc3NreS5jb22CG3J0YS1hZHYtdWF0LmRtYWxsY2Ru
LmNvbS5oa4ILcy56aXZhLmdvbGSCFnNlcnZpY2UuYnVpbGRhaS5jb20uYXWCEnNn
MDAyLWNkbi5zbGlxLm5ldIIac3RhZ2luZy5ndWlhMzYwZm9yZC5jb20uYnKCFHN0
YXRpYy5iZW9wc21hcnQuY29tghdzdGF0aWMucm5idGVjaGdyb3VwLmNvbYIUc3Rh
dGljLnNtYXJ0YmVvcC5jb22CHHN0YXRpYy5zdGFnaW5nLmRpa3NoYS5nb3YuaW6C
FXN0YXRpYzIueXNjaG9vbC5jby5pbIITc3Rvcmllcy5rbGVhZ3VlLmNvbYIZc3Vy
bGJzMDEuc2hhcmV1cmxpZ2h0LmNvbYIddGVzdC1kaWdpdGFsYmFua2luZy5jcm93
ZS5jb22CE3Rtcy1xYS5sdXN5LWRldi5jb22CGHRtcy1zdGFnaW5nLmx1c3ktZGV2
LmNvbYIidmlydHVhbHNhcGliZXRraW5nLmJldGFneS5zZXJ2aWNlc4IUd3d3LWNk
bi1ha20ubWJpYi5jb22CGXd3dy1jZG4tYWttLnBhbnRlbmUuY28udWuCFnd3dy1j
ZG4tYWtzLm15cmVwaS5jb22CGXd3dy1jZG4tYWtzLnBhbnRlbmUuY28udWuCD3d3
dy5naWxsZXR0ZS5zZ4IYd3d3Lmluc3RhbnR0ZWFwb3dkZXIuY29tghF3d3cubGV2
ZWxjb21lLmNvbYIUd3d3LnBhdHRlcnNvbi50cmF2ZWyCDnd3dy50ZW5hbmV0LmF0
ghd3d3cuemh1b3FpbmdmYWN0b3J5LmNvbYIQd3d3Mi5vcmlmbGFtZS5ydYITemh1
b3FpbmdmYWN0b3J5LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AJQgvB6O1Y1siHMfgosiLA3R2k1ebE+U
PWHbTi9YTaLCAAABeeZQzAAAAAQDAEcwRQIhAL+78j1o468oF6tnaLhYF5Mw5dPK
OX4w69RTyNkQDGmAAiBtjUnzQSZgAPvpgvOciToja5gtyaOupF8d9vEMLCD4UQB2
APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABeeZQzCYAAAQDAEcw
RQIgIOkbVEfRsh3p+cIJTMiJamy6fuAkcnoiZdoJ4aWeL+wCIQD+aUiysAkyBW9t
bjyae5I4ORwPz2QD4QaguJ9J0wTaBDANBgkqhkiG9w0BAQsFAAOCAQEALQGQt9e7
hOjYhbooeZch1nN4034zP39hjHq1Wl7AzUrCCuy2Gp7JE6eVpt5idWQ0uIY7avyJ
PlhHdec9vi7hWhFqd6K4WPwUKxkao+888xrJibjoWjdfqFk3HuO1XIMFg81qo5nf
Y56/4wDme173o6tY0Bd6F/JXafUYmCjQjooy/fAebxEv0ar0i6wqPWVVOg9O5HGe
+zMOaGe21zYLacd1VV+rte+FBAKaDki9b0Sysv6pHvkdcnF27bklzcAFMqKnHElw
BditMQQLM2KIeDKA6iKOvEU5cQ7mTB+CQxbG7e5KeIhVTWg6rv+JRWiSN3+iMRO1
CBefhXsrB4XK/w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYOdtoXtQGLa4rDvUDQp
MJlYp6GpPFQAxnjyymmkH1x23O4gubzxz2n7YbRHC21/AMStmBbrAoEdgOgLuCgG
nh3gYsatwbuqa23Z2Rzbj0n4moYZvPtuYA4YjamOmCAU7/LpIJVqkQ+pCe3HRlf2
E6oLFgr4peqQQZ0pUf0bRgKNWc1MThbw1QT1uIU+m437b9suewoyRqgGtPExD3wh
L1Zu071vaaL61chEyJ1bahzXS64GXy4s/sU4QlDViBYG8CgwfwhmcFlzfTDhYhtB
LVjrhlPWZu2XwvDvpGGV3Q2udv+oRFzoXB30g62JQzlmYlAsBI6p3kAEbSsEZ8+l
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 419120611315625144013064708023773109239921
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-07 10:52:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-05 10:52:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00029-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25943754819292352196476173446128510980005314943358848606741801918544264158074586089806708514156472831434972203588063554475334242875484463782176923074231574478158807432944550638579270692108049804157800855221566986534676933628161289774635144782830892024074684721497764806161104343235954775796275362068814273674358687284559972008932793141099597521936970733369523556836521689479465346994037433976748124879422718596002347139960555835005071922507838180235437197358258909049054184962643541892195677195975672935836739782581252100722639807271217706025341629137142460565991204673905033762856237868368850217844021234239970190703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10e9234f36630fa60ff06d46af4d9588486921cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-uat.tributementorship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arendalsuka.litt.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure-test.tredsoft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellaliantmediatvcdn.communitylive.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-cdp-cdn.tenmax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpcdn.parliament.scot'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.actorsequity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bestelboer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.groundzero-subweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lebanese-market.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.plus.yitgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sourcingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnm.cobblecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00029-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.sls-pump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-gamesclient-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files-2.mylutron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homolog-postura.acto.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantteapowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logo.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-staging-second.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-staging.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainsite-cdn1.linfamily.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastersmartcare.tenashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcimages.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcscripts.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstyles.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcuiscripts.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myidem.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myroofintcdn.gaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor.exploretrumbullcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poland.perfectgymcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacypolicy.campari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubdocrep.mobileheartbeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-b2b.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-b2c.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-nms-images.nomanssky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rta-adv-uat.dmallcdn.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.ziva.gold'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.buildai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg002-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.guia360ford.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.beopsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.rnbtechgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.smartbeop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.staging.diksha.gov.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.yschool.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories.kleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surlbs01.shareurlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-digitalbanking.crowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms-qa.lusy-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms-staging.lusy-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapibetking.betagy.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.mbib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.pantene.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-aks.myrepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-aks.pantene.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillette.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instantteapowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenanet.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zhuoqingfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.oriflame.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhuoqingfactory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000179e650cc000000040300473045022100bfbbf23d68e3af2817ab6768b858179330e5d3ca397e30ebd453c8d9100c698002206d8d49f341266000fbe982f39c893a236b982dc9a3aea45f1df6f10c2c20f851007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179e650cc260000040300473045022020e91b5447d1b21de9f9c2094cc8896a6cba7ee024727a2265da09e1a59e2fec022100fe6948b2b00932056f6d6e3c9a7b9238391c0fcf6403e106a0b89f49d304da04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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