cert00029-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:dc:42:4c:65:e4:95:16:e2:4b:55:c7:34:50:c3:31:aa:ab was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00029-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dc:42:4c:65:e4:95:16:e2:4b:55:c7:34:50:c3:31:aa:ab
Serial Number (int): 423399390178564033596496336856504515799723
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:38:b1:cf:44:42:1b:69:06:fd:26:8e:53:6c:d6:a3:f3:e9:2d:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:7a:8e:7b:52:f1:4f:4f:19:c5:07:9b:78:42:b6:e0:d7:cc:b3:5c
Fingerprint (sha256): 11:55:b2:63:73:55:75:75:29:99:3f:96:c9:98:10:12:b3:25:16:e0:a7:53:94:23:d9:ae:66:19:bd:eb:07:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00029-azurecdn.akamaized.net

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00029-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

au.litt.ninja
azure-test.tredsoft.co.uk
bellaliantmediatvcdn.communitylive.ca
beta-cdp-cdn.tenmax.io
bpcdn.parliament.scot
cdn.actorsequity.org
cdn.bestelboer.nl
cdn.groundzero-subweb.com
cdn.lebanese-market.com
cdn.plus.yitgroup.com
cdn.sourcingsolutions.com
cdnm.cobblecord.com
cert00029-azurecdn.akamaized.net
china.sls-pump.com
cms.h3dstaging.com
endpoint-game-gamesclient-dwgus.rmg.designworksgames.com
files-2.mylutron.com
homolog-postura.acto.net.br
instantteapowder.com
levelcome.com
logo.dentons.com
lottery-cdn-staging-second.spinolagaming.com
lottery-cdn-staging.spinolagaming.com
mainsite-cdn1.linfamily.network
mastersmartcare.tenashop.com
mcimages.maistering.com
mcscripts.maistering.com
mcstyles.maistering.com
mcuiscripts.maistering.com
myidem.idemtools.com
myroofintcdn.gaf.com
outdoor.exploretrumbullcounty.com
poland.perfectgymcdn.com
pr980a-event.ves.cloud-config.jp
privacypolicy.campari.com
pubdocrep.mobileheartbeat.com
qa-b2b.centralar.com.br
qa-b2c.centralar.com.br
qa-nms-images.nomanssky.com
rocket.colesgroup.com.au
rta-adv-uat.dmallcdn.com.hk
service.buildai.com.au
sg002-cdn.sliq.net
staging.guia360ford.com.br
static.beopsmart.com
static.rnbtechgroup.com
static.smartbeop.com
static.staging.diksha.gov.in
static2.yschool.co.il
stories.kleague.com
surlbs01.shareurlight.com
test-digitalbanking.crowe.com
tms-qa.lusy-dev.com
tms-staging.lusy-dev.com
virtualsapibetking.betagy.services
www-cdn-akm.mbib.com
www-cdn-akm.pantene.co.uk
www-cdn-aks.myrepi.com
www-cdn-aks.pantene.co.uk
www.gillette.sg
www.instantteapowder.com
www.levelcome.com
www.patterson.travel
www.tenanet.at
www.zhuoqingfactory.com
www2.oriflame.ru
zhuoqingfactory.com

Other certificates including the domain name cert00029-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00029-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Zpq/VTSvxYYsDqf1jc
/AKXxr9xQ8KoBBh6uVy0SZVXVA9BbKGgh4ZZgRRMFb6NDCSSF1mRD12m+txwIIfn
/77gV4G86rzTTYcdujzb+CThYiUv4HIxGOZ/8T3IiSkYd3JAGWKw+1WePDk/iXUY
I1uvd1oXRIVuWs7rR9V8hG6GFyMoiory1RCn+WtOuGoisUcNrYhVes/sIE+MhPWQ
gubIlGk1WafHcanEzTtpvaVvOTzIb/bGULn0qn7FhfaxMj6B0tEu7rNLRDQz4JB7
NfN+MZT0VfW6KR/Dz/aK7bLHVcTt+l5u5xS43dv60HCAhgKsgHXBxZ6ZDPxO9Iyc
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423399390178564033596496336856504515799723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-21 06:47:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-19 06:47:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00029-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28753936215758750440948314556376148886085363736049334196748151696674446546666035690213555943981252318184102733469915159308598809952665147798745232138419273688901728206551612631631886952603687988620381928839829180594922170226295010685754338570225128364592439188562485286111506170129783583239128682953545243218069351055997820016183573767198423525605364459762415871451424021353598569751080107066054530765430523728159479184425109475262015282228755288956040733936938777648762106587513350049064236701559669992137613175030473771712958203936950754917670470376119299617045154744119153978682325327071012172817677695478785678463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf38b1cf44421b6906fd268e536cd6a3f3e92dda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.litt.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure-test.tredsoft.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellaliantmediatvcdn.communitylive.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-cdp-cdn.tenmax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpcdn.parliament.scot'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.actorsequity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bestelboer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.groundzero-subweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lebanese-market.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.plus.yitgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sourcingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnm.cobblecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00029-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.sls-pump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.h3dstaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-gamesclient-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files-2.mylutron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homolog-postura.acto.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantteapowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logo.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-staging-second.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-staging.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainsite-cdn1.linfamily.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastersmartcare.tenashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcimages.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcscripts.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstyles.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcuiscripts.maistering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myidem.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myroofintcdn.gaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoor.exploretrumbullcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poland.perfectgymcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr980a-event.ves.cloud-config.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacypolicy.campari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubdocrep.mobileheartbeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-b2b.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-b2c.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-nms-images.nomanssky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocket.colesgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rta-adv-uat.dmallcdn.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.buildai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg002-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.guia360ford.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.beopsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.rnbtechgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.smartbeop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.staging.diksha.gov.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.yschool.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stories.kleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surlbs01.shareurlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-digitalbanking.crowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms-qa.lusy-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tms-staging.lusy-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualsapibetking.betagy.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.mbib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.pantene.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-aks.myrepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-aks.pantene.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillette.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instantteapowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.levelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenanet.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zhuoqingfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.oriflame.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhuoqingfactory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017a2d89e6320000040300483046022100fce1f15e55fea2bd62494141c927a35af5da31810f0d16884e687f76654b256c022100f759f11a03477ee42091f1136fa3ffb56a9bf4fd24eeffb982a3d0e681f96bfd0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017a2d89e667000004030047304502204247e7c4223be3b4db41bac1256681adb3d7c587a8358b716a1104651c7e52e90221008cbac1faa67b3e4742d3467d42e5b4ac198c0b6aa311a1a6c0673e070befb0e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00781ab4d841b891d016e3cb713df8cb45dea87b052e68636ab598181d92ac9b978d8ea46f74ead9ee8aae2acd29a79ccdd9872461baf0bb9aafcbe575c13519703c3eee774807e8b94598d2e1c944ad7a439cb44ba0f48b91812d9e91236593e870476858c0f72f3cf791e5170b504706b70c616fbd6b57fbfdf63ea25e42fd269a6e6c37b00a969780ec3576029ca112152e5e1b777fd2a784c1c6e31e11a06c0eebcc5fcc0b2d4c3bf60f44047355bd332927b11a2aa8b27e73ae41966bfb5a149e7f893463fafa2c8139afaf7a443f307f59216096360be0224a067a07ac8eee51365e9e4d411ca47ef2a34119a9fcfa86d0b68d23ba3626b663ac4b837dd4