cert00029-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 03:c2:2d:2f:4b:9f:69:ac:2e:9f:33:28:ac:5f:b7:45:20:96 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00029-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:2d:2f:4b:9f:69:ac:2e:9f:33:28:ac:5f:b7:45:20:96
Serial Number (int): 327411697809516176398026687927798192218262
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:ee:43:49:07:6f:0c:4b:5b:31:d9:05:96:f3:e3:8b:f8:f4:b4:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:d7:7f:98:22:16:d4:ca:06:b3:fa:69:e0:a3:9c:fa:97:12:8f:68
Fingerprint (sha256): 11:53:e9:05:cc:26:82:ff:58:5e:cd:18:14:50:ad:72:05:12:3c:a7:ec:bb:26:4a:94:1d:c0:48:0a:f0:c3:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00029-azurecdn.akamaized.net

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00029-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-uat.tributementorship.com
arendalsuka.litt.ninja
azure-test.tredsoft.co.uk
bellaliantmediatvcdn.communitylive.ca
beta-cdp-cdn.tenmax.io
bpcdn.parliament.scot
cdn.actorsequity.org
cdn.bestelboer.nl
cdn.groundzero-subweb.com
cdn.lebanese-market.com
cdn.musicdiscoveryhub.com
cdn.plus.yitgroup.com
cdn.sourcingsolutions.com
cdnm.cobblecord.com
cert00029-azurecdn.akamaized.net
china.sls-pump.com
endpoint-game-gamesclient-dwgus.rmg.designworksgames.com
files-2.mylutron.com
homolog-postura.acto.net.br
instantteapowder.com
levelcome.com
logo.dentons.com
lottery-cdn-staging-second.spinolagaming.com
lottery-cdn-staging.spinolagaming.com
mainsite-cdn1.linfamily.network
mastersmartcare.tenashop.com
mcimages.maistering.com
mcscripts.maistering.com
mcstyles.maistering.com
mcuiscripts.maistering.com
myidem.idemtools.com
myroofintcdn.gaf.com
outdoor.exploretrumbullcounty.com
poland.perfectgymcdn.com
privacypolicy.campari.com
pubdocrep.mobileheartbeat.com
qa-b2b.centralar.com.br
qa-b2c.centralar.com.br
qa-nms-images.nomanssky.com
rocket.colesgroup.com.au
rta-adv-uat.dmallcdn.com.hk
s.ziva.gold
service.buildai.com.au
sg002-cdn.sliq.net
staging.guia360ford.com.br
static.beopsmart.com
static.rnbtechgroup.com
static.smartbeop.com
static.staging.diksha.gov.in
static2.yschool.co.il
stories.kleague.com
surlbs01.shareurlight.com
test-digitalbanking.crowe.com
tms-qa.lusy-dev.com
tms-staging.lusy-dev.com
virtualsapibetking.betagy.services
www-cdn-akm.mbib.com
www-cdn-akm.pantene.co.uk
www-cdn-aks.myrepi.com
www-cdn-aks.pantene.co.uk
www.gillette.sg
www.instantteapowder.com
www.levelcome.com
www.patterson.travel
www.tenanet.at
www.zhuoqingfactory.com
www2.oriflame.ru
zhuoqingfactory.com

Other certificates including the domain name cert00029-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00029-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNEjWMAc7u/5hVVsetUC
L55qWbLTxdvoqtwFhSvFwsL2QU+IlvSR9p5XWzuaZF+oLLqF6EmpdTEOSq5nGorB
i569bUqITXRT84k5N1oxyyZ1HHf8PEkNwy7uGeTQGcy31/CiArU413y8S8ymjURA
GL9v5XajmJNMTYFqOxCXdTVrBz7xQGY4xRH7B7k8bDKZoHOUCu24tPkA3awkTkVD
cdnkqUMCQFyCvDhoj7zoEmLhTjlada52PJrz788t49igjhhyWqfjaTfjHoUExsW4
IhhywSIkpPInGVwrqJtyTwAxLffF/E5XZjGhAXVA/OEc0Js/8mRZ+BQs+GXZL2Oh
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327411697809516176398026687927798192218262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-07 23:29:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-05 23:29:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00029-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22826024721375470748008575445112302322022981511090153021295317428558108579795886120738740492269670970521233868187853482770574742088207517116651657322257085150898211432611608771279535371111935246575971279909550976218776857304755903048607339441511122632050521599617299340419218458069046348170530804487498801606458094383610922042258860168521585177977032946240013950543414607264070791987184904797363831376596429669365935458125244385630669297612077570792940079991691700986873821897444427395255692688729618453513574908542508532107828255021780269498971703574954553165787054381803231706468398975180340390329170551996852445457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06ee4349076f0c4b5b31d90596f3e38bf8f4b4b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1765 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-uat.tributementorship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arendalsuka.litt.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure-test.tredsoft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellaliantmediatvcdn.communitylive.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-cdp-cdn.tenmax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpcdn.parliament.scot'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.actorsequity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bestelboer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.groundzero-subweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lebanese-market.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.musicdiscoveryhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.plus.yitgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sourcingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnm.cobblecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00029-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.sls-pump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-gamesclient-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files-2.mylutron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homolog-postura.acto.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantteapowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logo.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-staging-second.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-staging.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainsite-cdn1.linfamily.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastersmartcare.tenashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcimages.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcscripts.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstyles.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcuiscripts.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myidem.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myroofintcdn.gaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor.exploretrumbullcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poland.perfectgymcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacypolicy.campari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubdocrep.mobileheartbeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-b2b.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-b2c.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-nms-images.nomanssky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocket.colesgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rta-adv-uat.dmallcdn.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.ziva.gold'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.buildai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg002-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.guia360ford.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.beopsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.rnbtechgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.smartbeop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.staging.diksha.gov.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.yschool.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories.kleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surlbs01.shareurlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-digitalbanking.crowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms-qa.lusy-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms-staging.lusy-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapibetking.betagy.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.mbib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.pantene.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-aks.myrepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-aks.pantene.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillette.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instantteapowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenanet.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zhuoqingfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.oriflame.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhuoqingfactory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000179e905f7480000040300483046022100c0898c106b12c335cb44f51d98f935c509e615702566ba515c29911230fe0d45022100bbe467907d814771e813452c5cda83413729049d96ac1dffc4509f6717373faf007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000179e905f81600000403004830460221009e8386137a7b64b1329990361f657a6eb271659180632c25cc2c6045cc1409910221008046982b72ab2874b08f65df42f06822c85acd247eb1460fe977ab834e7b8003
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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