cgiai.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:8b:3b:d7:f5:24:df:95:ba:48:f3:08:be:fe:41:c9:eb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cgiai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:8b:3b:d7:f5:24:df:95:ba:48:f3:08:be:fe:41:c9:eb
Serial Number (int): 296230732638285596433283824190251669244395
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:c7:20:a1:dd:f4:32:1d:6b:d7:3f:54:56:2d:42:c0:e4:5e:af:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:19:14:d8:79:40:19:93:12:18:d0:ba:df:33:45:ff:fe:06:7f:59
Fingerprint (sha256): 3a:aa:bb:82:7b:f9:89:c2:98:0e:af:44:3b:59:48:1a:d8:95:2c:c0:f4:6b:1a:fc:71:5c:69:0a:52:66:12:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cgiai.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cgiai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

africathai.com
ancientshanghai.com
artgalleryshanghai.com
breakfastshanghai.com
bundhotelsshanghai.com
businesshotelsshanghai.com
businesstvshanghai.com
cabletvshanghai.com
cgiai.com
chatshanghai.com
cheapflightsshanghai.com
chessthai.com
editorkai.com
freeviewshanghai.com
galleryshanghai.com
gemsai.com
guideabudhabi.com
industryshanghai.com
iptvshanghai.com
kristianradnai.com
krisztianradnai.com
liveabudhabi.com
longtimeeditorkai.com
luckeesarai.com
mediaabudhabi.com
mediamasai.com
multimediathai.com
naturalchennai.com
radiomaasai.com
radiomasai.com
radiosumai.com
radiotvshanghai.com
radiozhuhai.com
recruitmentshanghai.com
resortshanghai.com
rolandopanerai.com
securityshanghai.com
servicedapartmentshanghai.com
sezai.com
sportshanghai.com
sumai.com
thaimassageabudhabi.com
tvsumai.com
vegetarianchennai.com
wnthai.com
worksai.com
worksshanghai.com
worldtai.com
www.africathai.com
www.ancientshanghai.com
www.artgalleryshanghai.com
www.breakfastshanghai.com
www.bundhotelsshanghai.com
www.businesshotelsshanghai.com
www.businesstvshanghai.com
www.cabletvshanghai.com
www.cgiai.com
www.chatshanghai.com
www.cheapflightsshanghai.com
www.chessthai.com
www.editorkai.com
www.freeviewshanghai.com
www.galleryshanghai.com
www.gemsai.com
www.guideabudhabi.com
www.industryshanghai.com
www.iptvshanghai.com
www.kristianradnai.com
www.krisztianradnai.com
www.liveabudhabi.com
www.longtimeeditorkai.com
www.luckeesarai.com
www.mediaabudhabi.com
www.mediamasai.com
www.multimediathai.com
www.naturalchennai.com
www.radiomaasai.com
www.radiomasai.com
www.radiosumai.com
www.radiotvshanghai.com
www.radiozhuhai.com
www.recruitmentshanghai.com
www.resortshanghai.com
www.rolandopanerai.com
www.securityshanghai.com
www.servicedapartmentshanghai.com
www.sezai.com
www.sportshanghai.com
www.sumai.com
www.thaimassageabudhabi.com
www.tvsumai.com
www.vegetarianchennai.com
www.wnthai.com
www.worksai.com
www.worksshanghai.com
www.worldtai.com
www.yogamassagethai.com
www.yshanghai.com
yogamassagethai.com
yshanghai.com

Other certificates including the domain name cgiai.com

(limited to 100 certificates)
alimentaires.net
cappotto.org
offshoremovies.com
womendesigner.org
bitcoinfinanz.org
cgiai.com
www.eyks.com
cgiai.com
www.videoalarmcall.com
www.hobocleaning.com
rulph.com
anactorprepares.net
www.longtimeeditorkai.com
cgiai.com
southafricablock.com
wellbeingshare.com
rulph.com
offshoremovies.com
bitcoinfinanz.org
cgiai.com
rulph.com
cappotto.org
www.chinesefamilylaw.com
offshoremovies.com
cgiai.com
www.radiotvshanghai.com
www.teenagemillionaires.net
eyks.com
koreanewsagency.com
www.famousfailures.net
cebumarine.org
offshoremovies.com
10000metres.net
bitcoinfinanz.org
www.bundhotelsshanghai.com
cgiai.com
www.malaysiabeachhotel.com
www.tamilshow.org
www.sportshanghai.com
www.bitcoinpvt.com
worldsheikh.com
portteam.com
www.radiotvshanghai.com
koreanewsagency.com
www.boutiquehotelphoenix.com
tamilshow.org
www.alimentaires.net
offshoremovies.com
nairobifilm.com
consciousnesstheultimateintelligence.com
bitcoinfinanz.org
www.krisztianradnai.com
www.advancedsmartphones.net
www.yerres.net
www.10000metres.net
rulph.com
www.privateoccasioncook.com
cappotto.org
radiocontrolledmodels.com
www.anactorprepares.net
boutiqueapartments.org
www.consciousnessultimateintelligence.com
koreanewsagency.com
hashfinance.org
www.leschantres.net
vegetarianchennai.com
bitcoinfinanz.org
rulph.com
consciousnessultimateintelligence.com
www.zinclive.com
www.unitedkingdomfilm.com
boutiquehotelphoenix.com
chelseadelivery.com
tamilshow.org
rulph.com
100metres.net

Certificate

The complete raw certificate details for cgiai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K4i5e8uyooRx2nfU4Be
Xc6tBU74NDcqhZOiNZS8M5zFMTAooCuLi1n4EJVc0hNZD9ZeUelHyfsJ+sO2P/MT
zNJaOemdwFcXkPIozUE/3tDVHByIOnDzAq73BiBmIqm0aoEY7AdQo8j6AJWu/xdz
SNbFsBFxB/qgEve22edTAHnPv44YT1Jk4BP7xKbkpa+alTdYNktBq9G62jXKOh6r
5M2YBTewm+aWa+kchLBXAXUZ+Zrh9huYpHlGaf9T7VlgHGpakY8jvK77nTBSDbi6
yXJR6k8Khfd603hz5TRrGkcwrVqzIBC7/WDd0yyR24pjfCqDvkYuHXLmZv5UhlVa
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296230732638285596433283824190251669244395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-21 13:21:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 13:21:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cgiai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28363250132703680641068847416697882169064586045389167738759315648381469451299636491035766591623570684293775661634739689864467580035464183582079043878469429521992912010917604732517160488347000935131433236315708566618488704244145362973918870611160215657366103149189024309045874945168814250604202688953781269658037356596846641794139675453719910187711664512998959863041506614995913695928002733162709128094338651314129446420373837156279111043088794215847416884754628900631369861863535505484842081893807693234218133492305200165647315414419263935678929280093289679341303542896073061073158632136584736507864224497723900254791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adc720a1ddf4321d6bd73f54562d42c0e45eafdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artgalleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakfastshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundhotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesstvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabletvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflightsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chessthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeviewshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemsai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guideabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kristianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krisztianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longtimeeditorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckeesarai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediamasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiomaasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiomasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiosumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiozhuhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resortshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolandopanerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securityshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedapartmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sezai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaimassageabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvsumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegetarianchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldtai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancientshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artgalleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breakfastshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundhotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesstvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabletvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chatshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflightsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chessthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.editorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeviewshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemsai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guideabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iptvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kristianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krisztianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longtimeeditorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luckeesarai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediamasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multimediathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiomaasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiomasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiosumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiotvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiozhuhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruitmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resortshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rolandopanerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securityshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicedapartmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sezai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thaimassageabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvsumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegetarianchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worksai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worksshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldtai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yogamassagethai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogamassagethai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshanghai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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