cert00028-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:41:aa:d1:15:68:b2:64:a5:3a:d3:16:25:2c:b6:b3:67:b8 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00028-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:aa:d1:15:68:b2:64:a5:3a:d3:16:25:2c:b6:b3:67:b8
Serial Number (int): 370794551960454396771757279680379456022456
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:a0:31:03:cf:2c:ee:05:0f:c8:a9:49:44:20:68:c7:2f:67:7a:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:49:4c:00:ca:db:4f:b6:7f:88:fd:75:c9:9b:4a:a1:9a:90:62:36
Fingerprint (sha256): 2b:5f:c9:89:3a:39:54:fe:41:fe:35:89:55:d5:ab:eb:5f:fc:97:e0:27:e6:16:ba:4b:5c:54:88:7b:37:3b:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00028-azurecdn.akamaized.net

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00028-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

20.saiakmtest.azfdtest.xyz
arenapoa.sirros.io
assets.allab.com
assets.d2cmanage.com
azgameakamai.matchroom.net
barracuda.zoovu.com
bdhaccount.tax.deloitte.com.hk
btemptd.wacoal-america.com
cdn.actorsequity.net
cdn.exmed.net
cdn.lifegunk.com
cdn.lnovel.kr
cdn.picknwatch.com
cdn.services-tst.fmi.com
cdn.vindicatesociety.com
cdn01.ideaelearning.net
cdntest.ayahealthcare.com
cert00028-azurecdn.akamaized.net
charity.inca.csas.cz
creativesolutionsportal.shell.com
csportal.shell.com
dispatcher.roadlords.com
download.dentalxchange.com
download.perfectgymcdn.com
findstaging.kpmg.com
french.bestsorttechnology.com
go.ppxwo.cf
godrive.gopuff.com
hbcuria-biology.com
health.claypoole.net
image.fthis.gr
infura.xyd4.com
krcon.krs.co.kr
la-api.portal.oriflame.com
lottery-cdn-production-second.spinolagaming.com
lottery-cdn-production.spinolagaming.com
lpqapoc.statdoctorsapp.com
media.jlgarchitects.com
media.nabla-stg.ibhplus.ch
murakami-test-mk43-mediadata.ves.cloud-config.jp
murakami-test-mk44-mediadata.ves.cloud-config.jp
origin-gms.dogdigital.net
outlet.centralar.com.br
pilot-kms-admin.eni.com
pre.patterson.travel
prodlive.wacoal-america.com
qawwwtenanetat7.scahygiene.com
russian.sls-pump.com
sg001-cdn.sliq.net
sg003-cdn.sliq.net
simplypay.app
smartcare.tena.pt
spanish.td-pumpgroup.com
storage.thenemesis.io
tenmax-static.cacafly.net
test-cdn.hwrescdn.com
testcdn.ayahealthcare.com
www-cdn-akm.headandshoulders.co.id
www.5bucksessay.com
www.betbeer.com.es
www.betbeer.com.pt
www.betbeer.es
www.comebooknow.com
www.guidemesingapore.com
www.hbcuria-biology.com
www.jlg.media
www.kingscommunity.care
www.lotusbaby.fr
www.mediaedscotland.org.uk
www.simplypay.app
www.tenanet.it
www.y-ironwire.com

Other certificates including the domain name cert00028-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00028-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFKjUTjmmcHh4MRLdXqc
UwxBmfxdFKnw+VZ/111Y7bKfcjFFTurqDEV+OEg9L0fISkGx3vgK2TOhXRktorw8
Xr+bU2/Sd8ggWxIWy4bFI07jh317rOCl9i3tHIlnnntHd5toFRjS6LIdR8Jlc/0D
YawpsyPS0b7sUSCgq2PG3xcrlhqbnjEtqBXVp1/0qveePTnYUvTeStXwjI0Iu7Tk
laShXlNXFr2TXigzmpLlzSPQ+kKEOJWFHOo1BYyF9NZlK8iuiqUZXEju1XjX/E+J
1UOR3cZ56XIlv6MOd/FNwfDBFrZUUjiGG4B+uooBadG3Q4B+p0qDEkoBI+7wVm1v
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370794551960454396771757279680379456022456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-21 21:34:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-20 21:34:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00028-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21753738750087229895722519462861311450545187621767936203317282847087513355632644959426465646576037137321422244555437967829622795941612783551355316014882744067916851885060549125040226998301615284979988953530009151770604045697990045128412804520163760017952540587939685555484389587423613878318013851641123255141631354956743988027354088940633970916751780129231270487546906423631569748008241642067198219082501325731788380822782812581168739043418453121991215155223820952685188327446201420966383758130231635086804611957358783520236655038180552818867403813968268188897817905190833244374923301265631868002052197431755078987609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eda03103cf2cee050fc8a949442068c72f677acb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1775 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20.saiakmtest.azfdtest.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arenapoa.sirros.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.allab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.d2cmanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azgameakamai.matchroom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barracuda.zoovu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdhaccount.tax.deloitte.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btemptd.wacoal-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.actorsequity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.exmed.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lifegunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lnovel.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.picknwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.services-tst.fmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vindicatesociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn01.ideaelearning.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest.ayahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00028-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charity.inca.csas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativesolutionsportal.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csportal.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispatcher.roadlords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.dentalxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.perfectgymcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findstaging.kpmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.bestsorttechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ppxwo.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godrive.gopuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcuria-biology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.claypoole.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fthis.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infura.xyd4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krcon.krs.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'la-api.portal.oriflame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-production-second.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottery-cdn-production.spinolagaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpqapoc.statdoctorsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.jlgarchitects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.nabla-stg.ibhplus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murakami-test-mk43-mediadata.ves.cloud-config.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murakami-test-mk44-mediadata.ves.cloud-config.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-gms.dogdigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlet.centralar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-kms-admin.eni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre.patterson.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodlive.wacoal-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qawwwtenanetat7.scahygiene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russian.sls-pump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg001-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg003-cdn.sliq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplypay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcare.tena.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanish.td-pumpgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage.thenemesis.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenmax-static.cacafly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cdn.hwrescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcdn.ayahealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn-akm.headandshoulders.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5bucksessay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betbeer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comebooknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidemesingapore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcuria-biology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlg.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingscommunity.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotusbaby.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaedscotland.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplypay.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenanet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.y-ironwire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178f691ec9c0000040300473045022100da6f37e28147f1de5e82a2f8191bd4fa655fff228a04f99402f0407abeaca692022018814f969044673ce3d5f3eb103600e7b67747dbd0b8ddce2def95a4d29cc0760075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000178f691ed22000004030046304402205f323d49f4ab4b20937ecdd1429b414ae8cc342056bd3ac135a4b62cc08d58f702201652758a033de950aaaaa4997aa67c5249f6a39f35c177c77343102879131fbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062f71da8cca98c3b45e0b939c92caee0359c37f5064ea3f3a789b6704c90c6acd4d1f55df00d548fd38e67e950c82dc5597b3e6d307582d306c16e6293910c6c05b27d18680524a749ea78e9d9e3eb1b6bf1c0ec15a77f2c18ba90f83dc6b0ad302e2c1d55f08559e5a71f64ecec5d004e1b32ebce4f7e5ef404febe002f4ced8b66efb8f0794727a81d1594bf1e9c7bbe4c88f00a4e858e802cde7532efd196c313d167abefd0e591238d637670f42d47941ffeb1b4c00946feb3a8187120c1b8a130b12516d3f887ebc483e471ad1cb667a7edbfb993bc8fda22f512048ad2cf693f9427b9b98eddf9eefe10ad827b24c2d045fef0ce2dc31955b5eeb0fc22