cambodiavipassanacenter.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:1c:0a:3d:af:8a:7f:90:1d:3f:7b:71:c5:be:dd:6b:f4 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cambodiavipassanacenter.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:1c:0a:3d:af:8a:7f:90:1d:3f:7b:71:c5:be:dd:6b:f4
Serial Number (int): 328069473269770019179653608570224562236404
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:4f:a3:d9:b6:bb:f4:83:e1:60:d6:66:e3:d7:ba:2d:24:ea:aa:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:fd:58:86:cb:b7:28:7c:99:a5:aa:40:92:2b:2f:95:85:eb:ab:2e
Fingerprint (sha256): 26:0d:40:c5:2b:51:89:93:eb:42:6c:8d:23:d3:b2:b8:75:f9:72:f6:bf:b1:56:56:c7:d3:77:6c:9e:d8:5f:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cambodiavipassanacenter.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cambodiavipassanacenter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

angkorwonder.com
angkorwonder.ghosananda.org
cambodiabuddhism.ghosananda.org
cambodiabuddhism.info
cambodiavipassanacenter.com
cambodiavipassanacenter.ghosananda.org
cpanel.angkorwonder.com
cpanel.cambodiabuddhism.info
cpanel.cambodiavipassanacenter.com
mail.angkorwonder.com
mail.cambodiabuddhism.info
mail.cambodiavipassanacenter.com
webdisk.angkorwonder.com
webdisk.cambodiabuddhism.info
webdisk.cambodiavipassanacenter.com
webmail.angkorwonder.com
webmail.cambodiabuddhism.info
webmail.cambodiavipassanacenter.com
www.angkorwonder.com
www.angkorwonder.ghosananda.org
www.cambodiabuddhism.ghosananda.org
www.cambodiabuddhism.info
www.cambodiavipassanacenter.com
www.cambodiavipassanacenter.ghosananda.org

Other certificates including the domain name cambodiavipassanacenter.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cambodiavipassanacenter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII5TCCB82gAwIBAgISA8QcCj2vin+QHT97ccW+3Wv0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDkyMjQ4MTRaFw0x
ODEyMDgyMjQ4MTRaMCYxJDAiBgNVBAMTG2NhbWJvZGlhdmlwYXNzYW5hY2VudGVy
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL66RHS5RRprRsqY
I1DxjLhzVmtgP6lObPoz46Ho27vamBsxrtiSLt6tXFHvoJlqTJCW/NpAOHR52Eey
S0hn0GE5GMhaCbOrmPMfsrHJreAqGAGgLYl7P0OxuMHy97JXoQ8PjR3xPXmD6c5c
XDk5/yr79Jeb0BDEd3czRyXPyIEjRVhFcNjilkuxHc4DMz2ULF5nVqUBD5TaRAAl
p1FZcIAKTUXIwoe/O60o8kr+J85SW5BvL287KWTjjQB0IgSULwo5GbfGdznEPmmO
r3mC2zv1Gzs8WkfaxtbsaGYiwfk1B7lymUu31noh0sUh0MVvbL5G6csvKZexQpR8
OzJ8JGcCAwEAAaOCBecwggXjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU/k+j2ba7
9IPhYNZm49e6LSTqqt0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCAukGA1UdEQSCAuAwggLcghBhbmdrb3J3b25kZXIu
Y29tghthbmdrb3J3b25kZXIuZ2hvc2FuYW5kYS5vcmeCH2NhbWJvZGlhYnVkZGhp
c20uZ2hvc2FuYW5kYS5vcmeCFWNhbWJvZGlhYnVkZGhpc20uaW5mb4IbY2FtYm9k
aWF2aXBhc3NhbmFjZW50ZXIuY29tgiZjYW1ib2RpYXZpcGFzc2FuYWNlbnRlci5n
aG9zYW5hbmRhLm9yZ4IXY3BhbmVsLmFuZ2tvcndvbmRlci5jb22CHGNwYW5lbC5j
YW1ib2RpYWJ1ZGRoaXNtLmluZm+CImNwYW5lbC5jYW1ib2RpYXZpcGFzc2FuYWNl
bnRlci5jb22CFW1haWwuYW5na29yd29uZGVyLmNvbYIabWFpbC5jYW1ib2RpYWJ1
ZGRoaXNtLmluZm+CIG1haWwuY2FtYm9kaWF2aXBhc3NhbmFjZW50ZXIuY29tghh3
ZWJkaXNrLmFuZ2tvcndvbmRlci5jb22CHXdlYmRpc2suY2FtYm9kaWFidWRkaGlz
bS5pbmZvgiN3ZWJkaXNrLmNhbWJvZGlhdmlwYXNzYW5hY2VudGVyLmNvbYIYd2Vi
bWFpbC5hbmdrb3J3b25kZXIuY29tgh13ZWJtYWlsLmNhbWJvZGlhYnVkZGhpc20u
aW5mb4Ijd2VibWFpbC5jYW1ib2RpYXZpcGFzc2FuYWNlbnRlci5jb22CFHd3dy5h
bmdrb3J3b25kZXIuY29tgh93d3cuYW5na29yd29uZGVyLmdob3NhbmFuZGEub3Jn
giN3d3cuY2FtYm9kaWFidWRkaGlzbS5naG9zYW5hbmRhLm9yZ4IZd3d3LmNhbWJv
ZGlhYnVkZGhpc20uaW5mb4Ifd3d3LmNhbWJvZGlhdmlwYXNzYW5hY2VudGVyLmNv
bYIqd3d3LmNhbWJvZGlhdmlwYXNzYW5hY2VudGVyLmdob3NhbmFuZGEub3JnMIH+
BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGe
DIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBS
ZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBD
ZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5v
cmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDbdK/uyyns
sf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWXAvF13AAAEAwBGMEQCIByso+fC
wUc1J2sa8VRzwpJZ9hiUfIuw/Y7BvaucTT3NAiBB3mYsEIFrDk258u81/dhFTBPj
9LxkcmgyBzv7IbzMeQB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4
AAABZcC8X40AAAQDAEcwRQIgJ2yjCm//uRbTcwGNi9YKaSryO3AA14XlnjVVt8oE
Z28CIQClt5pEbLNRfz3ZOMvzoho1zyeQuVhL/Z30sXMt4VgrkTANBgkqhkiG9w0B
AQsFAAOCAQEAQ8wVyPfneh1iEySN83muAG6TwLrTsdzNvRfjmyWh4qJ7My96nLg0
UpQ008CtzvHhSEYmKsZfcBytGkF62wvt4B6eehCvrkdG7wal1DQI+DOuT6TTMWWJ
QclZD/cGNU7yP8O3/Kcgi4yPrBRf5He9zMNDsHI8uBwqKyT80dXj3OhyegvTbAYA
sV4FCQYxiqnqbBZeNsnFdoN6Ldrr6fbgJZemXlSQ3RVHWon+xPnKnwUcPrgHn+fS
a1juzZKKmbtfdco2RJYuMpSdC8YglL9HLPWgaAD4hLL4gp5CIAiye/M7HBi2NpUU
CjlRb7vf8OoRAycizwEAFGT1bVWdJ1CyxQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrpEdLlFGmtGypgjUPGM
uHNWa2A/qU5s+jPjoejbu9qYGzGu2JIu3q1cUe+gmWpMkJb82kA4dHnYR7JLSGfQ
YTkYyFoJs6uY8x+yscmt4CoYAaAtiXs/Q7G4wfL3slehDw+NHfE9eYPpzlxcOTn/
Kvv0l5vQEMR3dzNHJc/IgSNFWEVw2OKWS7EdzgMzPZQsXmdWpQEPlNpEACWnUVlw
gApNRcjCh787rSjySv4nzlJbkG8vbzspZOONAHQiBJQvCjkZt8Z3OcQ+aY6veYLb
O/UbOzxaR9rG1uxoZiLB+TUHuXKZS7fWeiHSxSHQxW9svkbpyy8pl7FClHw7Mnwk
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328069473269770019179653608570224562236404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 22:48:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 22:48:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cambodiavipassanacenter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24077129824847044524885890327332818720129054088774767601143866137341866475728278787929531127205604621061474479766649319481609125708620725540842555152880615874878022357413944711076958363170119256724736687413298093319431355472233076493993753476072477704618144446757312162780625745471944831899138857319138091436019040301842290580290897122313176194839964626679999136714971688355957133089130974714485098692589255527678863627614333449694450508492535859155495745832486979217751479522955400640100513285992980118057893196761651478900803155663028160800349213562045786103436529611953116152374769948491932835939294800030987986023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe4fa3d9b6bbf483e160d666e3d7ba2d24eaaadd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkorwonder.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiabuddhism.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiavipassanacenter.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angkorwonder.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiabuddhism.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiavipassanacenter.ghosananda.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165c0bc5d77000004030046304402201caca3e7c2c14735276b1af15473c29259f618947c8bb0fd8ec1bdab9c4d3dcd022041de662c10816b0e4db9f2ef35fdd8454c13e3f4bc64726832073bfb21bccc79007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165c0bc5f8d00000403004730450220276ca30a6fffb916d373018d8bd60a692af23b7000d785e59e3555b7ca04676f022100a5b79a446cb3517f3dd938cbf3a21a35cf2790b9584bfd9df4b1732de1582b91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043cc15c8f7e77a1d6213248df379ae006e93c0bad3b1dccdbd17e39b25a1e2a27b332f7a9cb834529434d3c0adcef1e14846262ac65f701cad1a417adb0bede01e9e7a10afae4746ef06a5d43408f833ae4fa4d331658941c9590ff706354ef23fc3b7fca7208b8c8fac145fe477bdccc343b0723cb81c2a2b24fcd1d5e3dce8727a0bd36c0600b15e050906318aa9ea6c165e36c9c576837a2ddaebe9f6e02597a65e5490dd15475a89fec4f9ca9f051c3eb8079fe7d26b58eecd928a99bb5f75ca3644962e32949d0bc62094bf472cf5a06800f884b2f8829e422008b27bf33b1c18b63695140a39516fbbdff0ea11032722cf01001464f56d559d2750b2c5