social.mgi.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:7a:85:00:f3:2c:38:2c:b4:1f:d3:a9:4f:d7:7b:01:1b was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=social.mgi.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:7a:85:00:f3:2c:38:2c:b4:1f:d3:a9:4f:d7:7b:01:1b
Serial Number (int): 271367902846222028991229525320301859766555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:f5:b4:3c:fb:ca:56:87:f9:eb:c4:cf:af:c9:91:4c:a1:88:5a:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 71:a6:b8:c8:79:15:39:24:4f:31:82:74:55:d2:6b:a8:a3:9a:82:3c
Fingerprint (sha256): 2a:6c:59:3e:29:c0:06:d8:ea:4c:19:6e:20:83:31:bd:8b:7d:b5:8d:09:13:85:ef:ed:69:18:42:4e:95:fe:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate social.mgi.vn

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for social.mgi.vn

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brandconnect.qiigo.com
bridge.exeterpremedia.com
community.trendspire.com
comunidad.gexflow.com
connect.3-ve.com
connect.adelholding.com
connect.alnafitha.com
connect.amsa-consulting.com
connect.atcgrpme.com
connect.aviyoggroup.in
connect.bomisco.com
connect.centrax.co.za
connect.cicopci.com
connect.coachcurl.net
connect.complexglobal.co
connect.coreplus.net
connect.diverseadministrativesolutions.com
connect.emerald-associates.com
connect.enroutech.com
connect.especialneeds.com
connect.evolutiontrustees.com.au
connect.g-logistica.com
connect.honki.co.jp
connect.hrplus.net
connect.idayit.com
connect.ikeva.com
connect.kestio.com
connect.kindtyme.com
connect.littlebrowndog.ca
connect.mhmglobal.com
connect.miketib.com
connect.montgomerybusinesssolutions.com
connect.mortgageshots.com
connect.mortgageshotskills.com
connect.mybati.co.id
connect.orkestra.com.au
connect.piggybankmarketing.com
connect.romanaspilates.com
connect.ryax-technologies.com
connect.sabrina-style.com
connect.sandrotalamini.it
connect.sensormedica.com
connect.servicebrands.com.au
connect.sinfopac.com
connect.siredsociety.com
connect.skynurses.com
connect.sterlingholidays.com
connect.teamnhw.com
connect.techno-set.com
connect.timberagebuilders.com
connect.usatel.net
connect.wicklowmusicdrama.com
hubble.vitalaxis.com
internalnetwork.gbsexpedite.com
intranet.bostonmit.com
intranet.cieloconnects.com
intranet.experiencejordan.com
intranet.korebg.co
intranet.verticalidentity.com
kaoc.meni-one.com
members.wgicouncil.org
network.magedirect.co
office.ivanrakovar.ru
sharestar.globalstartravel.com
sns.lifemusic.co.jp
social.mgi.vn
team.labspot.com
team.nizek.com

Other certificates including the domain name mgi.vn

(limited to 100 certificates)
social.mgi.vn
social.mgi.vn
social.mgi.vn
2019sjmeetup.culytics.com
backstage.alpt.co.in
social.mgi.vn
www.vsmcamp.com
connect.stella-group.com
social.mgi.vn
social.mgi.vn
events.imakeo.com
www.zohomeetups.com
social.mgi.vn
social.mgi.vn
*.mgi.vn
connect.digerati-experts.com
social.mgi.vn
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
events.grayorbit.com
social.mgi.vn
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
social.mgi.vn
www.lglocalevents.com
connect.wicklowmusicdrama.com
social.mgi.vn
connect.fuvana.com
*.mgi.vn
connect.amsa-consulting.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
www.earthwiderecords.com
connect.sandrotalamini.it
www.carpentercpas.events
support.comunitech.co.za
social.mgi.vn
www.zohomeetups.com
connect.miningleaders.com.au
events.theroebuck-laughton.com
kaoc.meni-one.com
events.lebertech.com
social.mgi.vn
www.vsmcamp.com
social.mgi.vn
connect.adelholding.com
social.mgi.vn
www.vsmcamp.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
intranet.korebg.co
social.mgi.vn
crm-event.viami.vn
www.zohomeetups.com
social.mgi.vn
events.defenage.com
social.mgi.vn
www.tbm.ooo
events.presumenothing.com
social.mgi.vn
events.ihtbio.com
www.zohomeetups.com
events.flexableit.com
eventos.exitoenusa.com
events.robustwealth.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
backstage.siliconsecurity.net
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
social.mgi.vn
events.hopzero.com
www.zohomeetups.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
events.siredsociety.com
social.mgi.vn
social.mgi.vn
connect.happybrands.co
social.mgi.vn
www.zohomeetups.com
2019sjmeetup.culytics.com
connect.alveoo.fr
2019sjmeetup.culytics.com
www.mgi.vn

Certificate

The complete raw certificate details for social.mgi.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEw+Fq3Uhx31raY8+fg5zaqvHdbYmI
AJqtTJhJ0j+p8/HMA66e3jp2WjtKI3HqljQiZ5VxBImAil9BWGp/mxDq+w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271367902846222028991229525320301859766555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 17:02:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 17:02:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'social.mgi.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c3e16add4871df5ada63cf9f839cdaaaf1dd6d8988009aad4c9849d23fa9f3f1cc03ae9ede3a765a3b4a2371ea9634226795710489808a5f41586a7f9b10eafb
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0df5b43cfbca5687f9ebc4cfafc9914ca1885a6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1715 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandconnect.qiigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.exeterpremedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.trendspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunidad.gexflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.3-ve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.adelholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.alnafitha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.amsa-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.atcgrpme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.aviyoggroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.bomisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.centrax.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cicopci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.coachcurl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.complexglobal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.coreplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.diverseadministrativesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.emerald-associates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.enroutech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.especialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.evolutiontrustees.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.g-logistica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.honki.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.hrplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.idayit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ikeva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.kestio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.kindtyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.littlebrowndog.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mhmglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.miketib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.montgomerybusinesssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mortgageshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mortgageshotskills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mybati.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.orkestra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.piggybankmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.romanaspilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ryax-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sabrina-style.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sandrotalamini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sensormedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.servicebrands.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sinfopac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.siredsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.skynurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sterlingholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.teamnhw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.techno-set.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.timberagebuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.usatel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.wicklowmusicdrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubble.vitalaxis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalnetwork.gbsexpedite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.bostonmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cieloconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.experiencejordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.korebg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.verticalidentity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaoc.meni-one.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.wgicouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'network.magedirect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.ivanrakovar.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharestar.globalstartravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sns.lifemusic.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.mgi.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.labspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.nizek.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183f16934260000040300463044022024663823b19b9a0448baf7dece8922229694ee7e11cbce6148df8506f08f1c9c022056cab8b10d2750ee75e8b9b18f33fdb7105216df6a98d6d1b4bc4aa2a6cfeaaa007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183f169341a0000040300483046022100ccecf2c7d022880078ca2b098f15674a3e25245c5e58efb43700c732f68847830221009a9751fe48639bd65262c8c6bb2093a9e3f4d9a30b6e69c9ba66fdc31d31a22b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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