cert00028-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 03:40:4c:4f:29:53:d1:8d:15:eb:2c:bc:2b:e6:ff:41:38:0f was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00028-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:4c:4f:29:53:d1:8d:15:eb:2c:bc:2b:e6:ff:41:38:0f
Serial Number (int): 283216361635571863626754575310489739409423
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:31:ad:85:02:44:4d:9c:4a:7b:fe:06:d8:04:1b:29:6e:5c:d9:cd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:7c:ed:4a:6d:81:0a:0e:98:fb:4e:b8:36:d7:03:1c:54:37:4f:bd
Fingerprint (sha256): 23:67:cc:d8:54:ce:39:fb:b4:af:17:8e:20:46:2f:02:22:46:4b:8c:25:c8:e5:38:7b:29:12:30:0e:68:47:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00028-azurecdn.akamaized.net

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00028-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

20.saiakmtest.azfdtest.xyz
arenapoa.sirros.io
assets.allab.com
assets.d2cmanage.com
azgameakamai.matchroom.net
barracuda.zoovu.com
bdhaccount.tax.deloitte.com.hk
btemptd.wacoal-america.com
cdn-data.hotelgyms.com
cdn.actorsequity.net
cdn.exmed.net
cdn.lifegunk.com
cdn.lnovel.kr
cdn.picknwatch.com
cdn.services-tst.fmi.com
cdn.vindicatesociety.com
cdn01.ideaelearning.net
cdntest.ayahealthcare.com
cert00028-azurecdn.akamaized.net
charity.inca.csas.cz
creativesolutionsportal.shell.com
csportal.shell.com
download.dentalxchange.com
download.perfectgymcdn.com
findstaging.kpmg.com
french.bestsorttechnology.com
go.ppxwo.cf
godrive.gopuff.com
hbcuria-biology.com
health.claypoole.net
image.fthis.gr
infura.xyd4.com
krcon.krs.co.kr
lottery-cdn-production-second.spinolagaming.com
lottery-cdn-production.spinolagaming.com
lpqapoc.statdoctorsapp.com
media.jlgarchitects.com
media.nabla-stg.ibhplus.ch
murakami-test-mk22-asset.ves.cloud-config.jp
origin-gms.dogdigital.net
outlet.centralar.com.br
pilot-kms-admin.eni.com
portal.uat.r3ms.io
pre.patterson.travel
prodlive.wacoal-america.com
qawwwtenanetat7.scahygiene.com
russian.sls-pump.com
sg001-cdn.sliq.net
sg003-cdn.sliq.net
simplypay.app
smartcare.tena.pt
spanish.td-pumpgroup.com
storage.thenemesis.io
tenmax-static.cacafly.net
test-cdn.hwrescdn.com
testcdn.ayahealthcare.com
www-cdn-akm.headandshoulders.co.id
www.betbeer.com.es
www.betbeer.com.pt
www.betbeer.es
www.cdn.leaguelight.com
www.comebooknow.com
www.guidemesingapore.com
www.hbcuria-biology.com
www.jlg.media
www.kingscommunity.care
www.lotusbaby.fr
www.mediaedscotland.org.uk
www.simplypay.app
www.tenanet.it
www.y-ironwire.com

Other certificates including the domain name cert00028-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00028-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL2DCCCsCgAwIBAgISA0BMTylT0Y0V6yy8K+b/QTgPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA0MTMwODA4MzdaFw0yMTA3MTIwODA4MzdaMCsxKTAnBgNVBAMT
IGNlcnQwMDAyOC1henVyZWNkbi5ha2FtYWl6ZWQubmV0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAtPf+6BPqwXET36J0d/TL3KKt+bcfyf9p+kqSWW8T
Ea+/9U9ET8cL/Lkx102JtBJMdSGwCaY3DY+3/c40n+0mdMZocH769DM80xTivC4w
7zLY3vDXxBIWaKyJlp06sj8fbCMyD0IPdjaoTS6DBQJbyZndMyC4Rki3lT/o2Nie
Wg3hgi6kE9l5msMcxk17WOTThEiKpN07RtzuMEK2CsRiuncEnNV3gWLLCe88E10i
JPDJ0p7dwtMmdqdoYHmdGY/x6XH+9RVYW7czsglR9g+YmsGIFQh1rtmECzGpsTEy
ngdH0aY4HterQh8onmmL96YObzlOBAk1zA2XX/z3qfprwQIDAQABo4II7TCCCOkw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS4Ma2FAkRNnEp7/gbYBBspblzZzTAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCBrwGA1UdEQSCBrMwggavghoyMC5zYWlha210
ZXN0LmF6ZmR0ZXN0Lnh5eoISYXJlbmFwb2Euc2lycm9zLmlvghBhc3NldHMuYWxs
YWIuY29tghRhc3NldHMuZDJjbWFuYWdlLmNvbYIaYXpnYW1lYWthbWFpLm1hdGNo
cm9vbS5uZXSCE2JhcnJhY3VkYS56b292dS5jb22CHmJkaGFjY291bnQudGF4LmRl
bG9pdHRlLmNvbS5oa4IaYnRlbXB0ZC53YWNvYWwtYW1lcmljYS5jb22CFmNkbi1k
YXRhLmhvdGVsZ3ltcy5jb22CFGNkbi5hY3RvcnNlcXVpdHkubmV0gg1jZG4uZXht
ZWQubmV0ghBjZG4ubGlmZWd1bmsuY29tgg1jZG4ubG5vdmVsLmtyghJjZG4ucGlj
a253YXRjaC5jb22CGGNkbi5zZXJ2aWNlcy10c3QuZm1pLmNvbYIYY2RuLnZpbmRp
Y2F0ZXNvY2lldHkuY29tghdjZG4wMS5pZGVhZWxlYXJuaW5nLm5ldIIZY2RudGVz
dC5heWFoZWFsdGhjYXJlLmNvbYIgY2VydDAwMDI4LWF6dXJlY2RuLmFrYW1haXpl
ZC5uZXSCFGNoYXJpdHkuaW5jYS5jc2FzLmN6giFjcmVhdGl2ZXNvbHV0aW9uc3Bv
cnRhbC5zaGVsbC5jb22CEmNzcG9ydGFsLnNoZWxsLmNvbYIaZG93bmxvYWQuZGVu
dGFseGNoYW5nZS5jb22CGmRvd25sb2FkLnBlcmZlY3RneW1jZG4uY29tghRmaW5k
c3RhZ2luZy5rcG1nLmNvbYIdZnJlbmNoLmJlc3Rzb3J0dGVjaG5vbG9neS5jb22C
C2dvLnBweHdvLmNmghJnb2RyaXZlLmdvcHVmZi5jb22CE2hiY3VyaWEtYmlvbG9n
eS5jb22CFGhlYWx0aC5jbGF5cG9vbGUubmV0gg5pbWFnZS5mdGhpcy5ncoIPaW5m
dXJhLnh5ZDQuY29tgg9rcmNvbi5rcnMuY28ua3KCL2xvdHRlcnktY2RuLXByb2R1
Y3Rpb24tc2Vjb25kLnNwaW5vbGFnYW1pbmcuY29tgihsb3R0ZXJ5LWNkbi1wcm9k
dWN0aW9uLnNwaW5vbGFnYW1pbmcuY29tghpscHFhcG9jLnN0YXRkb2N0b3JzYXBw
LmNvbYIXbWVkaWEuamxnYXJjaGl0ZWN0cy5jb22CGm1lZGlhLm5hYmxhLXN0Zy5p
YmhwbHVzLmNogixtdXJha2FtaS10ZXN0LW1rMjItYXNzZXQudmVzLmNsb3VkLWNv
bmZpZy5qcIIZb3JpZ2luLWdtcy5kb2dkaWdpdGFsLm5ldIIXb3V0bGV0LmNlbnRy
YWxhci5jb20uYnKCF3BpbG90LWttcy1hZG1pbi5lbmkuY29tghJwb3J0YWwudWF0
LnIzbXMuaW+CFHByZS5wYXR0ZXJzb24udHJhdmVsghtwcm9kbGl2ZS53YWNvYWwt
YW1lcmljYS5jb22CHnFhd3d3dGVuYW5ldGF0Ny5zY2FoeWdpZW5lLmNvbYIUcnVz
c2lhbi5zbHMtcHVtcC5jb22CEnNnMDAxLWNkbi5zbGlxLm5ldIISc2cwMDMtY2Ru
LnNsaXEubmV0gg1zaW1wbHlwYXkuYXBwghFzbWFydGNhcmUudGVuYS5wdIIYc3Bh
bmlzaC50ZC1wdW1wZ3JvdXAuY29tghVzdG9yYWdlLnRoZW5lbWVzaXMuaW+CGXRl
bm1heC1zdGF0aWMuY2FjYWZseS5uZXSCFXRlc3QtY2RuLmh3cmVzY2RuLmNvbYIZ
dGVzdGNkbi5heWFoZWFsdGhjYXJlLmNvbYIid3d3LWNkbi1ha20uaGVhZGFuZHNo
b3VsZGVycy5jby5pZIISd3d3LmJldGJlZXIuY29tLmVzghJ3d3cuYmV0YmVlci5j
b20ucHSCDnd3dy5iZXRiZWVyLmVzghd3d3cuY2RuLmxlYWd1ZWxpZ2h0LmNvbYIT
d3d3LmNvbWVib29rbm93LmNvbYIYd3d3Lmd1aWRlbWVzaW5nYXBvcmUuY29tghd3
d3cuaGJjdXJpYS1iaW9sb2d5LmNvbYINd3d3LmpsZy5tZWRpYYIXd3d3Lmtpbmdz
Y29tbXVuaXR5LmNhcmWCEHd3dy5sb3R1c2JhYnkuZnKCGnd3dy5tZWRpYWVkc2Nv
dGxhbmQub3JnLnVrghF3d3cuc2ltcGx5cGF5LmFwcIIOd3d3LnRlbmFuZXQuaXSC
End3dy55LWlyb253aXJlLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AFzcQ5L+5qtFRLFemtRW5hA3+9X6
R9yhc5SyXub2xw7KAAABeMp9YKsAAAQDAEcwRQIhAIu/NhvKmfdYvPYGh5OWmVzt
fsz5cg344KKVrEz/LqovAiBQcInETPJDOuDIwTEzvFhMGGY+SOGRDuiOx2Jvq3wp
wwB1AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqXaJl+IvDXAAABeMp9YPYAAAQD
AEYwRAIgeii6VuTXfssYuqDabrlNIlplZpnrZqeYHMgjjJqSw5cCIC2DkZw3I+Rt
SclzZHV0WztL9gQ0mEgoW1LuIVqlYhqZMA0GCSqGSIb3DQEBCwUAA4IBAQARn/k1
dT8maOFw3X/51MuPhNf1BL60r7aQtHZxjsHWlj5vV0BsNrDrsR7BR4xCjgvV+M0f
F1WqWDdJb9QFlLy3tMByG890gEMzGox3TA6RBIEVi+K7auL7IaEe2vEUikfiYwvZ
0IZWdN2YhLSY33oVD2b7BeMmUyv3l6QxvziRHncEE7TmbxvCwxC2idk3cyLpzNgE
E+MIcJbH7xq8ICvNAsmTnPRE8h7UojMbksq5LVwvuKk59sV3M+3n/vlTueyCfG9p
zsbtOzKO1RrmnTqivb5RmtZgrgf+8/osWcm0ev7+s1tzAkFg9D5UIHdeNfhuXe2W
wcgcVefmK98NbAUG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPf+6BPqwXET36J0d/TL
3KKt+bcfyf9p+kqSWW8TEa+/9U9ET8cL/Lkx102JtBJMdSGwCaY3DY+3/c40n+0m
dMZocH769DM80xTivC4w7zLY3vDXxBIWaKyJlp06sj8fbCMyD0IPdjaoTS6DBQJb
yZndMyC4Rki3lT/o2NieWg3hgi6kE9l5msMcxk17WOTThEiKpN07RtzuMEK2CsRi
uncEnNV3gWLLCe88E10iJPDJ0p7dwtMmdqdoYHmdGY/x6XH+9RVYW7czsglR9g+Y
msGIFQh1rtmECzGpsTEyngdH0aY4HterQh8onmmL96YObzlOBAk1zA2XX/z3qfpr
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283216361635571863626754575310489739409423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-13 08:08:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-12 08:08:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00028-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22845186145582814209661597405935076131041176295362973322745616531240566068016836525951380879571081629734075841003919528393307443703071101487273350164344219698518257698658662330818219558681351057137882263200698001071833957794854225290629315634768412964180692622628777168990694077713692070183782622879042518250601325473669703173025955516174457303703829042886620263644615877924217114351431668773976825686542629764531760765622768429598503257434811647232091161394555093573551763667769314966667499575614070131512784601975614753157308871769313979065831336891626610094413741449384860812553437880105647895069508217755676601281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b831ad8502444d9c4a7bfe06d8041b296e5cd9cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1715 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20.saiakmtest.azfdtest.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapoa.sirros.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.allab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.d2cmanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azgameakamai.matchroom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barracuda.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdhaccount.tax.deloitte.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btemptd.wacoal-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-data.hotelgyms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.actorsequity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.exmed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lifegunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lnovel.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.picknwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.services-tst.fmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vindicatesociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn01.ideaelearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest.ayahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00028-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charity.inca.csas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativesolutionsportal.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csportal.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.dentalxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.perfectgymcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findstaging.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.bestsorttechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ppxwo.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godrive.gopuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcuria-biology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.claypoole.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fthis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infura.xyd4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krcon.krs.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-production-second.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-production.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpqapoc.statdoctorsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.jlgarchitects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nabla-stg.ibhplus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murakami-test-mk22-asset.ves.cloud-config.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-gms.dogdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlet.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-kms-admin.eni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.uat.r3ms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodlive.wacoal-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qawwwtenanetat7.scahygiene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russian.sls-pump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg001-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg003-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplypay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcare.tena.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.td-pumpgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.thenemesis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenmax-static.cacafly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cdn.hwrescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcdn.ayahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.headandshoulders.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.leaguelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comebooknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidemesingapore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcuria-biology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlg.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingscommunity.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotusbaby.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaedscotland.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplypay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenanet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.y-ironwire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000178ca7d60ab00000403004730450221008bbf361bca99f758bcf606879396995ced7eccf9720df8e0a295ac4cff2eaa2f0220507089c44cf2433ae0c8c13133bc584c18663e48e1910ee88ec7626fab7c29c30075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178ca7d60f6000004030046304402207a28ba56e4d77ecb18baa0da6eb94d225a656699eb66a7981cc8238c9a92c39702202d83919c3723e46d49c9736475745b3b4bf604349848285b52ee215aa5621a99
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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