cgiai.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:d5:b0:bd:d3:49:ca:d0:e3:76:e0:30:eb:79:9e:5d:55 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cgiai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:d5:b0:bd:d3:49:ca:d0:e3:76:e0:30:eb:79:9e:5d:55
Serial Number (int): 290885184607946131984169257963199622176085
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:ed:b7:ff:39:ec:da:41:10:83:94:e4:40:d1:7b:82:0b:a1:da:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:0a:36:70:4b:2b:57:93:01:a8:84:c7:ab:21:fc:fb:20:13:75:f2
Fingerprint (sha256): 1a:08:ac:13:ab:02:74:0f:2c:6f:35:71:e6:54:dd:31:6d:06:46:d2:3a:1f:44:d2:02:75:6a:56:4a:58:a6:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cgiai.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cgiai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

africathai.com
ancientshanghai.com
artgalleryshanghai.com
breakfastshanghai.com
bundhotelsshanghai.com
businesshotelsshanghai.com
businesstvshanghai.com
cabletvshanghai.com
cgiai.com
chatshanghai.com
cheapflightsshanghai.com
chessthai.com
editorkai.com
freeviewshanghai.com
galleryshanghai.com
gemsai.com
guideabudhabi.com
industryshanghai.com
iptvshanghai.com
kristianradnai.com
krisztianradnai.com
liveabudhabi.com
longtimeeditorkai.com
luckeesarai.com
mediaabudhabi.com
mediamasai.com
multimediathai.com
naturalchennai.com
radiomaasai.com
radiomasai.com
radiosumai.com
radiotvshanghai.com
radiozhuhai.com
recruitmentshanghai.com
resortshanghai.com
rolandopanerai.com
securityshanghai.com
servicedapartmentshanghai.com
sezai.com
sportshanghai.com
sumai.com
thaimassageabudhabi.com
tvsumai.com
vegetarianchennai.com
wnthai.com
worksai.com
worksshanghai.com
worldtai.com
www.africathai.com
www.ancientshanghai.com
www.artgalleryshanghai.com
www.breakfastshanghai.com
www.bundhotelsshanghai.com
www.businesshotelsshanghai.com
www.businesstvshanghai.com
www.cabletvshanghai.com
www.cgiai.com
www.chatshanghai.com
www.cheapflightsshanghai.com
www.chessthai.com
www.editorkai.com
www.freeviewshanghai.com
www.galleryshanghai.com
www.gemsai.com
www.guideabudhabi.com
www.industryshanghai.com
www.iptvshanghai.com
www.kristianradnai.com
www.krisztianradnai.com
www.liveabudhabi.com
www.longtimeeditorkai.com
www.luckeesarai.com
www.mediaabudhabi.com
www.mediamasai.com
www.multimediathai.com
www.naturalchennai.com
www.radiomaasai.com
www.radiomasai.com
www.radiosumai.com
www.radiotvshanghai.com
www.radiozhuhai.com
www.recruitmentshanghai.com
www.resortshanghai.com
www.rolandopanerai.com
www.securityshanghai.com
www.servicedapartmentshanghai.com
www.sezai.com
www.sportshanghai.com
www.sumai.com
www.thaimassageabudhabi.com
www.tvsumai.com
www.vegetarianchennai.com
www.wnthai.com
www.worksai.com
www.worksshanghai.com
www.worldtai.com
www.yogamassagethai.com
www.yshanghai.com
yogamassagethai.com
yshanghai.com

Other certificates including the domain name cgiai.com

(limited to 100 certificates)
alimentaires.net
cappotto.org
offshoremovies.com
womendesigner.org
bitcoinfinanz.org
cgiai.com
www.eyks.com
cgiai.com
www.videoalarmcall.com
www.hobocleaning.com
rulph.com
anactorprepares.net
www.longtimeeditorkai.com
cgiai.com
southafricablock.com
wellbeingshare.com
rulph.com
offshoremovies.com
bitcoinfinanz.org
cgiai.com
rulph.com
cappotto.org
www.chinesefamilylaw.com
offshoremovies.com
cgiai.com
www.radiotvshanghai.com
www.teenagemillionaires.net
eyks.com
koreanewsagency.com
www.famousfailures.net
cebumarine.org
offshoremovies.com
10000metres.net
bitcoinfinanz.org
www.bundhotelsshanghai.com
cgiai.com
www.malaysiabeachhotel.com
www.tamilshow.org
www.sportshanghai.com
www.bitcoinpvt.com
worldsheikh.com
portteam.com
www.radiotvshanghai.com
koreanewsagency.com
www.boutiquehotelphoenix.com
tamilshow.org
www.alimentaires.net
offshoremovies.com
nairobifilm.com
consciousnesstheultimateintelligence.com
bitcoinfinanz.org
www.krisztianradnai.com
www.advancedsmartphones.net
www.yerres.net
www.10000metres.net
rulph.com
www.privateoccasioncook.com
cappotto.org
radiocontrolledmodels.com
www.anactorprepares.net
boutiqueapartments.org
www.consciousnessultimateintelligence.com
koreanewsagency.com
hashfinance.org
www.leschantres.net
vegetarianchennai.com
bitcoinfinanz.org
rulph.com
consciousnessultimateintelligence.com
www.zinclive.com
www.unitedkingdomfilm.com
boutiquehotelphoenix.com
chelseadelivery.com
tamilshow.org
rulph.com
100metres.net

Certificate

The complete raw certificate details for cgiai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+3KIry2sKn3gwJbsy4o
IVx1+H2ssZzgTbyz7NNL7z6OIEirKbAjTYZlXFIL+XftFYaYg8tgPPHYrn0zAlnC
oDtlZ84EKzQNpWFZKie0B9qjgSJUswPWxB+EC7t8x8xpRhVe4GdDYxbEGhBUyw3j
vNY1wG+H2V8W8ytk9Brfyox490cSJsYC1rvAKY2YT2Bo/Tzn0kw6kSc05N6SY1kB
APtCAcXJWQCy9WXKNNO6wVXryvRqAF1nc25LHUhPEaSdyNKxz988f6j3nCMcyCTo
4rf3fZQryMADBDiZzoPHFKIu91ZaFV1+XQvtPnRkPni0MnhRPRcA1P0MOWTAnevv
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290885184607946131984169257963199622176085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-22 13:00:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 13:00:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cgiai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23723821447019008074607938735345388160538015762230236685174801221728924458082363496220131710260350737908073799064796572699946037753128864733387558339714433883294479981794089409838020635702592379294237129201239378866219468575754636374713331770920416178874361401651055404521035478749096430811274284323662353243948158898709092626420365418573026556695544229472172731250839417922006937951401075627126624272496284030354809041938418262999969757076090794366511147660754404442705903434683121664427451076987460112261767534806695156373186134103301885697042518125843189090192076849927747237632905821122529154969213484521669521197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84edb7ff39ecda41108394e440d17b820ba1da32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artgalleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakfastshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundhotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesstvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabletvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflightsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chessthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeviewshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemsai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guideabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kristianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krisztianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longtimeeditorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckeesarai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediamasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiomaasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiomasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiosumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiozhuhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resortshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolandopanerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securityshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedapartmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sezai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaimassageabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvsumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegetarianchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldtai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancientshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artgalleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakfastshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundhotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesstvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabletvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chatshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflightsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chessthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.editorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeviewshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemsai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guideabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iptvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kristianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krisztianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longtimeeditorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luckeesarai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediamasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multimediathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiomaasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiomasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiosumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiotvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiozhuhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruitmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resortshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rolandopanerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securityshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicedapartmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sezai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thaimassageabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvsumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegetarianchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worksai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worksshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldtai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yogamassagethai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogamassagethai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshanghai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0063a67dba2436c530712e8603fd599ac26e0081191b11be3f210bcec4d6739d2a518ff9e2b3d1031bfea806fe0e77c7fbfb84aaf54de06b923d75fa521ef397a4de36f1a8567a67669af5d8e78c1739f392a428a38b26dd0045428b24de8c661005d2ccf5f5e15ec0e00729fbb8d69f04f6780a2521ddd7f555f866ee447662c6d705fc003d6ebaae381c0058fa3a04db5925536da891fc89e942935f3a2ce6375bc5980684c15b880c823b4f9657ed19a30a512f187d1e32dff620421d7a0ee5d2591c14beb7ea29769b00b6eeff9a3de056db3187fddd38e6555d89e586c0a3cbc49a2de5f7e43bbd8149fe391abf5e2bab168025ebbb349bca8b3bf4543115