cert00070-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:d3:a1:1d:16:ff:25:63:99:9f:6d:30:95:2e:9f:af:ab:0b was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00070-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d3:a1:1d:16:ff:25:63:99:9f:6d:30:95:2e:9f:af:ab:0b
Serial Number (int): 420462879897717035418763039667708805229323
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 36:1e:7b:77:d1:73:4d:d0:c7:63:89:75:a4:bd:1d:16:ca:ed:4d:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:b6:e2:49:cd:20:ff:b5:9a:bb:f7:14:99:ab:51:69:4c:73:77:47
Fingerprint (sha256): 1d:5c:fe:5c:ae:2b:c3:a7:78:35:b5:5b:fa:8e:da:30:8a:d2:09:52:be:bb:18:fa:b3:49:a8:85:01:ee:40:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00070-azurecdn.akamaized.net

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00070-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agriculture.newholland.com
agriculture2.newholland.com
akeneotest.jabra.com
api.plcnext.help
app-admin.spoto-learning.spoto.cloud
assets.prelist.com.au
assets.rexroth.mam.bosch.tech
badging.cdn.carfaxcanada.com
badgingcdn.carfax.ca
beta-s.tenmax.io
blob-sandbox-cdn.manticoreplatform.com
bomgardian.downloads.restaurant365.com
cargoes-platform-prod-images-cdn.cargoes.com
cdn-bh3-asset.facelift-cloud.com
cdn-planner.facelift-cloud.com
cdn-snap-website.snap-compliance.com
cdn.cherryservers.com
cdn.cookwithbelula.com
cert00070-azurecdn.akamaized.net
checkout-hml.mateusmais.com.br
clientdownloads.boardmakerservices.com
content.landdocker.com
contents.smartcity-poc.com
designercdn--wus.workflowcloud-test.com
developer.api.idemtools.com
dfds-assets.dev.doka.com
dig.fire.ca.gov
dilongrack.com
distributiontest.iqmetrix.net
download-software-installer.dev.doka.com
edge-sitelist.avt.se
egmont.valtech.dk
elearning.plcnext.help
emlfiles.impaxam.com
endpoint-game-proto-dwgus.rmg.designworksgames.com
global-cdn.vpartake.com
highlystarelec.com
hxpipefittings.com
images-bc.camis.com
incheon.wizschool.io
it-assets.conestogac.on.ca
js1.tst.applicationinsights.io
junior.akhlaquna.qa
live-storage.enetlearn.com
managed-akam.cdn.ynishiz.net
media.fillment.co
metalinductionweld.com
mit.uniteframework.io
mta-sts.i15ltd.co.uk
myinventory.sortimo-test.de
neapco.apacatalog.com
nss.beacontower.app
ohrm.daelim.co.kr
ohrm.dlenc.co.kr
parceiros.mobees.com.br
players-cdn-v2.vidmizer.com
pro-1w-static.onelouder.com
qa-docs.insimplify.com.au
rsprodcoupon.pspcdn.com
rtakhuat-dealgroup.rtacdn-os.com
seaheartlaser.com
serviceaudev.buildai.com.au
snapshots.playingsurface.net
snd10-icontents.777cache.com
software-installer-assets.dev.doka.com
stg-cdn.vefy01.sukurire.jp
testcli.buddybet.com
thirdpartylibs.mentice.com
tommy.visulon.com
tr.heygets.com
uatapi.wimpy.me
vaascdntestendpoint1.sturdyfish.com
weijiahealth.com
wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net
wms-staging.paragonbox.com
www-cdn.igrad.com
www.axellelemaire.eu
www.bds-deutschland.de
www.bepeople.tech
www.dilongrack.com
www.edengreave.co.uk
www.flyaerobatics.com
www.hftubemills.com
www.highlystarelec.com
www.hxpipefittings.com
www.metalinductionweld.com
www.mkwi2012.de
www.moap.vn
www.neomi.immo
www.pantaudrakor.com
www.pghealthindia.com
www.plumber-new-jersey.com
www.runyanpipeline.com
www.seaheartlaser.com
www.sinpopofairs.com
www.weijiahealth.com

Other certificates including the domain name cert00070-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00070-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPCjCCDfKgAwIBAgISBNOhHRb/JWOZn20wlS6fr6sLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAyMjQwOTI4MjVaFw0yMjA1MjUwOTI4MjRaMCsxKTAnBgNVBAMT
IGNlcnQwMDA3MC1henVyZWNkbi5ha2FtYWl6ZWQubmV0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEArH0UCS5v+pSPFf1g26U6/RDoShgFLUVhhP+sQJ6Q
pWYZdQ2wvYBVv0f21PQK8wT9o3icOhKT0WiQrXFcqfWmBgFOoShJj12sZUrWn+jt
y8XwxmIAqb2lmFcoHZPv3OOgxTQReXnCvQ8CkfvM3j0Z8l67B5ZIGTNAMijL3xwL
kYJXl3d0fcEWPLXWQauXu9tz4TXPdXLyZ3L9w0+Pd4uvQm315bvpI09FCb4n5t45
gtzG35wFVyNsqEiKw7BKWgz2k94ysQTmDkqlQZkDHSTWuJzeT4/SE02NJfi3F1SP
M7eGhbMzA7znbfZ3V2nqVf+Yjq091GopRlhscNEKuu1WzQIDAQABo4IMHzCCDBsw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ2Hnt30XNN0MdjiXWkvR0Wyu1NgjAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCCe0GA1UdEQSCCeQwggngghphZ3JpY3VsdHVy
ZS5uZXdob2xsYW5kLmNvbYIbYWdyaWN1bHR1cmUyLm5ld2hvbGxhbmQuY29tghRh
a2VuZW90ZXN0LmphYnJhLmNvbYIQYXBpLnBsY25leHQuaGVscIIkYXBwLWFkbWlu
LnNwb3RvLWxlYXJuaW5nLnNwb3RvLmNsb3VkghVhc3NldHMucHJlbGlzdC5jb20u
YXWCHWFzc2V0cy5yZXhyb3RoLm1hbS5ib3NjaC50ZWNoghxiYWRnaW5nLmNkbi5j
YXJmYXhjYW5hZGEuY29tghRiYWRnaW5nY2RuLmNhcmZheC5jYYIQYmV0YS1zLnRl
bm1heC5pb4ImYmxvYi1zYW5kYm94LWNkbi5tYW50aWNvcmVwbGF0Zm9ybS5jb22C
JmJvbWdhcmRpYW4uZG93bmxvYWRzLnJlc3RhdXJhbnQzNjUuY29tgixjYXJnb2Vz
LXBsYXRmb3JtLXByb2QtaW1hZ2VzLWNkbi5jYXJnb2VzLmNvbYIgY2RuLWJoMy1h
c3NldC5mYWNlbGlmdC1jbG91ZC5jb22CHmNkbi1wbGFubmVyLmZhY2VsaWZ0LWNs
b3VkLmNvbYIkY2RuLXNuYXAtd2Vic2l0ZS5zbmFwLWNvbXBsaWFuY2UuY29tghVj
ZG4uY2hlcnJ5c2VydmVycy5jb22CFmNkbi5jb29rd2l0aGJlbHVsYS5jb22CIGNl
cnQwMDA3MC1henVyZWNkbi5ha2FtYWl6ZWQubmV0gh5jaGVja291dC1obWwubWF0
ZXVzbWFpcy5jb20uYnKCJmNsaWVudGRvd25sb2Fkcy5ib2FyZG1ha2Vyc2Vydmlj
ZXMuY29tghZjb250ZW50LmxhbmRkb2NrZXIuY29tghpjb250ZW50cy5zbWFydGNp
dHktcG9jLmNvbYInZGVzaWduZXJjZG4tLXd1cy53b3JrZmxvd2Nsb3VkLXRlc3Qu
Y29tghtkZXZlbG9wZXIuYXBpLmlkZW10b29scy5jb22CGGRmZHMtYXNzZXRzLmRl
di5kb2thLmNvbYIPZGlnLmZpcmUuY2EuZ292gg5kaWxvbmdyYWNrLmNvbYIdZGlz
dHJpYnV0aW9udGVzdC5pcW1ldHJpeC5uZXSCKGRvd25sb2FkLXNvZnR3YXJlLWlu
c3RhbGxlci5kZXYuZG9rYS5jb22CFGVkZ2Utc2l0ZWxpc3QuYXZ0LnNlghFlZ21v
bnQudmFsdGVjaC5ka4IWZWxlYXJuaW5nLnBsY25leHQuaGVscIIUZW1sZmlsZXMu
aW1wYXhhbS5jb22CMmVuZHBvaW50LWdhbWUtcHJvdG8tZHdndXMucm1nLmRlc2ln
bndvcmtzZ2FtZXMuY29tghdnbG9iYWwtY2RuLnZwYXJ0YWtlLmNvbYISaGlnaGx5
c3RhcmVsZWMuY29tghJoeHBpcGVmaXR0aW5ncy5jb22CE2ltYWdlcy1iYy5jYW1p
cy5jb22CFGluY2hlb24ud2l6c2Nob29sLmlvghppdC1hc3NldHMuY29uZXN0b2dh
Yy5vbi5jYYIeanMxLnRzdC5hcHBsaWNhdGlvbmluc2lnaHRzLmlvghNqdW5pb3Iu
YWtobGFxdW5hLnFhghpsaXZlLXN0b3JhZ2UuZW5ldGxlYXJuLmNvbYIcbWFuYWdl
ZC1ha2FtLmNkbi55bmlzaGl6Lm5ldIIRbWVkaWEuZmlsbG1lbnQuY2+CFm1ldGFs
aW5kdWN0aW9ud2VsZC5jb22CFW1pdC51bml0ZWZyYW1ld29yay5pb4IUbXRhLXN0
cy5pMTVsdGQuY28udWuCG215aW52ZW50b3J5LnNvcnRpbW8tdGVzdC5kZYIVbmVh
cGNvLmFwYWNhdGFsb2cuY29tghNuc3MuYmVhY29udG93ZXIuYXBwghFvaHJtLmRh
ZWxpbS5jby5rcoIQb2hybS5kbGVuYy5jby5rcoIXcGFyY2Vpcm9zLm1vYmVlcy5j
b20uYnKCG3BsYXllcnMtY2RuLXYyLnZpZG1pemVyLmNvbYIbcHJvLTF3LXN0YXRp
Yy5vbmVsb3VkZXIuY29tghlxYS1kb2NzLmluc2ltcGxpZnkuY29tLmF1ghdyc3By
b2Rjb3Vwb24ucHNwY2RuLmNvbYIgcnRha2h1YXQtZGVhbGdyb3VwLnJ0YWNkbi1v
cy5jb22CEXNlYWhlYXJ0bGFzZXIuY29tghtzZXJ2aWNlYXVkZXYuYnVpbGRhaS5j
b20uYXWCHHNuYXBzaG90cy5wbGF5aW5nc3VyZmFjZS5uZXSCHHNuZDEwLWljb250
ZW50cy43NzdjYWNoZS5jb22CJnNvZnR3YXJlLWluc3RhbGxlci1hc3NldHMuZGV2
LmRva2EuY29tghpzdGctY2RuLnZlZnkwMS5zdWt1cmlyZS5qcIIUdGVzdGNsaS5i
dWRkeWJldC5jb22CGnRoaXJkcGFydHlsaWJzLm1lbnRpY2UuY29tghF0b21teS52
aXN1bG9uLmNvbYIOdHIuaGV5Z2V0cy5jb22CD3VhdGFwaS53aW1weS5tZYIjdmFh
c2NkbnRlc3RlbmRwb2ludDEuc3R1cmR5ZmlzaC5jb22CEHdlaWppYWhlYWx0aC5j
b22CPHdlbS1zeXN0ZW10ZXN0LXdlYmNvbnNvbGUtdXMtYS5zeXN0ZW10ZXN0Lndl
bWRldmVsb3BtZW50Lm5ldIIad21zLXN0YWdpbmcucGFyYWdvbmJveC5jb22CEXd3
dy1jZG4uaWdyYWQuY29tghR3d3cuYXhlbGxlbGVtYWlyZS5ldYIWd3d3LmJkcy1k
ZXV0c2NobGFuZC5kZYIRd3d3LmJlcGVvcGxlLnRlY2iCEnd3dy5kaWxvbmdyYWNr
LmNvbYIUd3d3LmVkZW5ncmVhdmUuY28udWuCFXd3dy5mbHlhZXJvYmF0aWNzLmNv
bYITd3d3LmhmdHViZW1pbGxzLmNvbYIWd3d3LmhpZ2hseXN0YXJlbGVjLmNvbYIW
d3d3Lmh4cGlwZWZpdHRpbmdzLmNvbYIad3d3Lm1ldGFsaW5kdWN0aW9ud2VsZC5j
b22CD3d3dy5ta3dpMjAxMi5kZYILd3d3Lm1vYXAudm6CDnd3dy5uZW9taS5pbW1v
ghR3d3cucGFudGF1ZHJha29yLmNvbYIVd3d3LnBnaGVhbHRoaW5kaWEuY29tghp3
d3cucGx1bWJlci1uZXctamVyc2V5LmNvbYIWd3d3LnJ1bnlhbnBpcGVsaW5lLmNv
bYIVd3d3LnNlYWhlYXJ0bGFzZXIuY29tghR3d3cuc2lucG9wb2ZhaXJzLmNvbYIU
d3d3LndlaWppYWhlYWx0aC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBByMqx3yJGShDGoToJQodeTjGL
GwPr60vHaPCQYpYG9gAAAX8rRlvTAAAEAwBHMEUCIQCgNNJ4jmGTde5Kw/jjYNC5
uXM124O/sflaW/Rk6BAUwAIgGbz67n6ka0Za2N7FK3fsQI1HEy5t0VEMwfPSgZSn
IYgAdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAX8rRlv9AAAE
AwBHMEUCIDxSFmiqyjzo2bbG/xKAUVFJj0wPrg3myhjOoNjhrE9ZAiEAhMv+1Qci
1CQTaWOwJtJDeiZIpqPsX3FUqQ39FpuelJQwDQYJKoZIhvcNAQELBQADggEBAHAI
iB5vkRxkLGAheF0ejXzm0WKd/4VDLLhqsRFOzQGK9hzZfxerWZSQY/9d+EFX+V/L
XcN1igxJJhGo5vJubBARQoPxiCrfgh2jhLT6Oa9+Nir6ZtaWB5WMlm7sZqa5ygO6
YFIAECgknBfCWZbVNGUajoHKbL8qEjxDNjTRGArEio3+uM8oXwPqE9M7MVMZGyxy
ErxVSvhwKYzKlhwt7u64q5MpWSzxF+3IEbSPyaixkudeHECobPEcQXHkiSRYMStH
C2TV03DxVejw19wQZp8BK6BsxWyFyhIZrg8pTUpJC74p7HRoMjUAQ0HMBWIERjlY
Sck4xVRCWmndUVE0NFs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH0UCS5v+pSPFf1g26U6
/RDoShgFLUVhhP+sQJ6QpWYZdQ2wvYBVv0f21PQK8wT9o3icOhKT0WiQrXFcqfWm
BgFOoShJj12sZUrWn+jty8XwxmIAqb2lmFcoHZPv3OOgxTQReXnCvQ8CkfvM3j0Z
8l67B5ZIGTNAMijL3xwLkYJXl3d0fcEWPLXWQauXu9tz4TXPdXLyZ3L9w0+Pd4uv
Qm315bvpI09FCb4n5t45gtzG35wFVyNsqEiKw7BKWgz2k94ysQTmDkqlQZkDHSTW
uJzeT4/SE02NJfi3F1SPM7eGhbMzA7znbfZ3V2nqVf+Yjq091GopRlhscNEKuu1W
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420462879897717035418763039667708805229323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-24 09:28:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 09:28:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21774666845466532295333636873641772229349047755912980857505020676094738196063296829727607306792943407903667519869759307625783799116071759361739603022133942977105102524559205886421451029900651612156589940702813093576615016616468236348484385011728250901382071925310061824241791906181109453889519505613492523408858963894335099592902237764294739728519070913290804816737651666711577619222411864827214563487337828560696420263381870111786417463709959263328488461628980138510895088758115249851045893147896363165642113522797514720881051743721207963342730932074565387852230859620684668497019666190905745584387513661766127933133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							361e7b77d1734dd0c7638975a4bd1d16caed4d82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture2.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akeneotest.jabra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-admin.spoto-learning.spoto.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.prelist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.rexroth.mam.bosch.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badging.cdn.carfaxcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgingcdn.carfax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-s.tenmax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blob-sandbox-cdn.manticoreplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomgardian.downloads.restaurant365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargoes-platform-prod-images-cdn.cargoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bh3-asset.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-planner.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-snap-website.snap-compliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cherryservers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cookwithbelula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout-hml.mateusmais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientdownloads.boardmakerservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.landdocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contents.smartcity-poc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designercdn--wus.workflowcloud-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.api.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfds-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dig.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilongrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributiontest.iqmetrix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-software-installer.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-sitelist.avt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egmont.valtech.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emlfiles.impaxam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-proto-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-cdn.vpartake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-bc.camis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incheon.wizschool.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-assets.conestogac.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js1.tst.applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junior.akhlaquna.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-storage.enetlearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managed-akam.cdn.ynishiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.fillment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mit.uniteframework.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.i15ltd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinventory.sortimo-test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neapco.apacatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nss.beacontower.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohrm.daelim.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohrm.dlenc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceiros.mobees.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'players-cdn-v2.vidmizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-1w-static.onelouder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-docs.insimplify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsprodcoupon.pspcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhuat-dealgroup.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaheartlaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceaudev.buildai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshots.playingsurface.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snd10-icontents.777cache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-installer-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cdn.vefy01.sukurire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcli.buddybet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdpartylibs.mentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommy.visulon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.heygets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.wimpy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaascdntestendpoint1.sturdyfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weijiahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms-staging.paragonbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn.igrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axellelemaire.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bds-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepeople.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dilongrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edengreave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyaerobatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hftubemills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkwi2012.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moap.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neomi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pantaudrakor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pghealthindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plumber-new-jersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runyanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seaheartlaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinpopofairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weijiahealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017f2b465bd30000040300473045022100a034d2788e619375ee4ac3f8e360d0b9b97335db83bfb1f95a5bf464e81014c0022019bcfaee7ea46b465ad8dec52b77ec408d47132e6dd1510cc1f3d28194a7218800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f2b465bfd000004030047304502203c521668aaca3ce8d9b6c6ff12805151498f4c0fae0de6ca18cea0d8e1ac4f5902210084cbfed50722d424136963b026d2437a2648a6a3ec5f7154a90dfd169b9e9494
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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