cert00070-azurecdn.akamaized.net

Issued by R3

About this certificate

This digital certificate with serial number 04:cc:9c:27:e1:19:a7:dd:bd:98:35:8a:ac:7d:78:82:16:46 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert00070-azurecdn.akamaized.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cc:9c:27:e1:19:a7:dd:bd:98:35:8a:ac:7d:78:82:16:46
Serial Number (int): 418074313211407179816538306251719209784902
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:32:c2:96:23:da:40:3c:a3:59:91:f6:86:8d:17:ac:47:0a:6f:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:d8:ad:b0:1a:a6:f5:7b:a5:13:75:a5:9d:a5:21:09:0a:3c:74:98
Fingerprint (sha256): 5b:13:fe:42:68:35:57:66:7e:64:9d:0d:22:d8:4e:49:36:47:4e:f9:70:66:bc:b5:38:a5:ca:6d:1e:a5:fb:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert00070-azurecdn.akamaized.net

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert00070-azurecdn.akamaized.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agriculture.newholland.com
agriculture2.newholland.com
akeneotest.jabra.com
api.plcnext.help
app-admin.spoto-learning.spoto.cloud
assets.prelist.com.au
assets.rexroth.mam.bosch.tech
badging.cdn.carfaxcanada.com
badgingcdn.carfax.ca
beta-s.tenmax.io
blob-sandbox-cdn.manticoreplatform.com
bomgardian.downloads.restaurant365.com
cdn-bh3-asset.facelift-cloud.com
cdn-planner.facelift-cloud.com
cdn-snap-website.snap-compliance.com
cdn.cherryservers.com
cdn.cookwithbelula.com
cert00070-azurecdn.akamaized.net
checkout-hml.mateusmais.com.br
clientdownloads.boardmakerservices.com
content.landdocker.com
contents.smartcity-poc.com
designercdn--wus.workflowcloud-test.com
developer.api.idemtools.com
dfds-assets.dev.doka.com
dig.fire.ca.gov
dilongrack.com
distributiontest.iqmetrix.net
download-software-installer.dev.doka.com
edge-sitelist.avt.se
egmont.valtech.dk
elearning.plcnext.help
emlfiles.impaxam.com
endpoint-game-proto-dwgus.rmg.designworksgames.com
global-cdn.vpartake.com
highlystarelec.com
hxpipefittings.com
images-bc.camis.com
incheon.wizschool.io
it-assets.conestogac.on.ca
js1.tst.applicationinsights.io
junior.akhlaquna.qa
live-storage.enetlearn.com
managed-akam.cdn.ynishiz.net
media.fillment.co
metalinductionweld.com
mit.uniteframework.io
myinventory.sortimo-test.de
neapco.apacatalog.com
ohrm.daelim.co.kr
ohrm.dlenc.co.kr
parceiros.mobees.com.br
players-cdn-v2.vidmizer.com
pro-1w-static.onelouder.com
qa-docs.insimplify.com.au
rsprodcoupon.pspcdn.com
rtakhuat-dealgroup.rtacdn-os.com
serviceaudev.buildai.com.au
snapshots.playingsurface.net
snd10-icontents.777cache.com
software-installer-assets.dev.doka.com
stg-cdn.vefy01.sukurire.jp
testcli.buddybet.com
thirdpartylibs.mentice.com
tommy.visulon.com
tr.heygets.com
uatapi.wimpy.me
vaascdntestendpoint1.sturdyfish.com
weijiahealth.com
wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net
wms-staging.paragonbox.com
www-cdn.igrad.com
www.axellelemaire.eu
www.bds-deutschland.de
www.bepeople.tech
www.blind-photo.com
www.dextermorrill.com
www.dilongrack.com
www.edengreave.co.uk
www.flyaerobatics.com
www.hftubemills.com
www.highlystarelec.com
www.hxpipefittings.com
www.metalinductionweld.com
www.mkwi2012.de
www.moap.vn
www.neomi.immo
www.pantaudrakor.com
www.pghealthindia.com
www.plumber-new-jersey.com
www.relogiodegrife.com.br
www.runyanpipeline.com
www.sinpopofairs.com
www.springleafstrategies.com
www.weijiahealth.com

Other certificates including the domain name cert00070-azurecdn.akamaized.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for cert00070-azurecdn.akamaized.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO7DCCDdSgAwIBAgISBMycJ+EZp929mDWKrH14ghZGMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAyMTcwNTIxMDlaFw0yMjA1MTgwNTIxMDhaMCsxKTAnBgNVBAMT
IGNlcnQwMDA3MC1henVyZWNkbi5ha2FtYWl6ZWQubmV0MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA5uNTXF9nghcZDE6olxtXVWFXw8yyLp5x8+fRdpVK
Em6hL9zqc4HkFQBhHAO77eibSwypEmvqr9JQauVMCF//3kD0m9fsVLZ4uk6Vt0U1
cB8rYFgB/cDGedBdWtVozACNRiOquhR0eS0B2MA8C4PleoRXLJtAMd4uuvtGRDuW
pkFAWgbcaaYSqUTvmHWg4iXUaB6fikFniiBEr77RzzVZ4iK8Q0KBFcuRKhhAO7rB
dpSRqeEpUT8w2nj6k/LVGJcWKG+SIseRl4C5M3aYjHaubgOF+ufxkImR+nI2kWbH
Teew8r+G+6bEpgBO1nOsLBvOtQZJgX5s3oLEe5I2H0REYwIDAQABo4IMATCCC/0w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRpMsKWI9pAPKNZkfaGjResRwpvAjAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCCc8GA1UdEQSCCcYwggnCghphZ3JpY3VsdHVy
ZS5uZXdob2xsYW5kLmNvbYIbYWdyaWN1bHR1cmUyLm5ld2hvbGxhbmQuY29tghRh
a2VuZW90ZXN0LmphYnJhLmNvbYIQYXBpLnBsY25leHQuaGVscIIkYXBwLWFkbWlu
LnNwb3RvLWxlYXJuaW5nLnNwb3RvLmNsb3VkghVhc3NldHMucHJlbGlzdC5jb20u
YXWCHWFzc2V0cy5yZXhyb3RoLm1hbS5ib3NjaC50ZWNoghxiYWRnaW5nLmNkbi5j
YXJmYXhjYW5hZGEuY29tghRiYWRnaW5nY2RuLmNhcmZheC5jYYIQYmV0YS1zLnRl
bm1heC5pb4ImYmxvYi1zYW5kYm94LWNkbi5tYW50aWNvcmVwbGF0Zm9ybS5jb22C
JmJvbWdhcmRpYW4uZG93bmxvYWRzLnJlc3RhdXJhbnQzNjUuY29tgiBjZG4tYmgz
LWFzc2V0LmZhY2VsaWZ0LWNsb3VkLmNvbYIeY2RuLXBsYW5uZXIuZmFjZWxpZnQt
Y2xvdWQuY29tgiRjZG4tc25hcC13ZWJzaXRlLnNuYXAtY29tcGxpYW5jZS5jb22C
FWNkbi5jaGVycnlzZXJ2ZXJzLmNvbYIWY2RuLmNvb2t3aXRoYmVsdWxhLmNvbYIg
Y2VydDAwMDcwLWF6dXJlY2RuLmFrYW1haXplZC5uZXSCHmNoZWNrb3V0LWhtbC5t
YXRldXNtYWlzLmNvbS5icoImY2xpZW50ZG93bmxvYWRzLmJvYXJkbWFrZXJzZXJ2
aWNlcy5jb22CFmNvbnRlbnQubGFuZGRvY2tlci5jb22CGmNvbnRlbnRzLnNtYXJ0
Y2l0eS1wb2MuY29tgidkZXNpZ25lcmNkbi0td3VzLndvcmtmbG93Y2xvdWQtdGVz
dC5jb22CG2RldmVsb3Blci5hcGkuaWRlbXRvb2xzLmNvbYIYZGZkcy1hc3NldHMu
ZGV2LmRva2EuY29tgg9kaWcuZmlyZS5jYS5nb3aCDmRpbG9uZ3JhY2suY29tgh1k
aXN0cmlidXRpb250ZXN0LmlxbWV0cml4Lm5ldIIoZG93bmxvYWQtc29mdHdhcmUt
aW5zdGFsbGVyLmRldi5kb2thLmNvbYIUZWRnZS1zaXRlbGlzdC5hdnQuc2WCEWVn
bW9udC52YWx0ZWNoLmRrghZlbGVhcm5pbmcucGxjbmV4dC5oZWxwghRlbWxmaWxl
cy5pbXBheGFtLmNvbYIyZW5kcG9pbnQtZ2FtZS1wcm90by1kd2d1cy5ybWcuZGVz
aWdud29ya3NnYW1lcy5jb22CF2dsb2JhbC1jZG4udnBhcnRha2UuY29tghJoaWdo
bHlzdGFyZWxlYy5jb22CEmh4cGlwZWZpdHRpbmdzLmNvbYITaW1hZ2VzLWJjLmNh
bWlzLmNvbYIUaW5jaGVvbi53aXpzY2hvb2wuaW+CGml0LWFzc2V0cy5jb25lc3Rv
Z2FjLm9uLmNhgh5qczEudHN0LmFwcGxpY2F0aW9uaW5zaWdodHMuaW+CE2p1bmlv
ci5ha2hsYXF1bmEucWGCGmxpdmUtc3RvcmFnZS5lbmV0bGVhcm4uY29tghxtYW5h
Z2VkLWFrYW0uY2RuLnluaXNoaXoubmV0ghFtZWRpYS5maWxsbWVudC5jb4IWbWV0
YWxpbmR1Y3Rpb253ZWxkLmNvbYIVbWl0LnVuaXRlZnJhbWV3b3JrLmlvghtteWlu
dmVudG9yeS5zb3J0aW1vLXRlc3QuZGWCFW5lYXBjby5hcGFjYXRhbG9nLmNvbYIR
b2hybS5kYWVsaW0uY28ua3KCEG9ocm0uZGxlbmMuY28ua3KCF3BhcmNlaXJvcy5t
b2JlZXMuY29tLmJyghtwbGF5ZXJzLWNkbi12Mi52aWRtaXplci5jb22CG3Byby0x
dy1zdGF0aWMub25lbG91ZGVyLmNvbYIZcWEtZG9jcy5pbnNpbXBsaWZ5LmNvbS5h
dYIXcnNwcm9kY291cG9uLnBzcGNkbi5jb22CIHJ0YWtodWF0LWRlYWxncm91cC5y
dGFjZG4tb3MuY29tghtzZXJ2aWNlYXVkZXYuYnVpbGRhaS5jb20uYXWCHHNuYXBz
aG90cy5wbGF5aW5nc3VyZmFjZS5uZXSCHHNuZDEwLWljb250ZW50cy43NzdjYWNo
ZS5jb22CJnNvZnR3YXJlLWluc3RhbGxlci1hc3NldHMuZGV2LmRva2EuY29tghpz
dGctY2RuLnZlZnkwMS5zdWt1cmlyZS5qcIIUdGVzdGNsaS5idWRkeWJldC5jb22C
GnRoaXJkcGFydHlsaWJzLm1lbnRpY2UuY29tghF0b21teS52aXN1bG9uLmNvbYIO
dHIuaGV5Z2V0cy5jb22CD3VhdGFwaS53aW1weS5tZYIjdmFhc2NkbnRlc3RlbmRw
b2ludDEuc3R1cmR5ZmlzaC5jb22CEHdlaWppYWhlYWx0aC5jb22CPHdlbS1zeXN0
ZW10ZXN0LXdlYmNvbnNvbGUtdXMtYS5zeXN0ZW10ZXN0LndlbWRldmVsb3BtZW50
Lm5ldIIad21zLXN0YWdpbmcucGFyYWdvbmJveC5jb22CEXd3dy1jZG4uaWdyYWQu
Y29tghR3d3cuYXhlbGxlbGVtYWlyZS5ldYIWd3d3LmJkcy1kZXV0c2NobGFuZC5k
ZYIRd3d3LmJlcGVvcGxlLnRlY2iCE3d3dy5ibGluZC1waG90by5jb22CFXd3dy5k
ZXh0ZXJtb3JyaWxsLmNvbYISd3d3LmRpbG9uZ3JhY2suY29tghR3d3cuZWRlbmdy
ZWF2ZS5jby51a4IVd3d3LmZseWFlcm9iYXRpY3MuY29tghN3d3cuaGZ0dWJlbWls
bHMuY29tghZ3d3cuaGlnaGx5c3RhcmVsZWMuY29tghZ3d3cuaHhwaXBlZml0dGlu
Z3MuY29tghp3d3cubWV0YWxpbmR1Y3Rpb253ZWxkLmNvbYIPd3d3Lm1rd2kyMDEy
LmRlggt3d3cubW9hcC52boIOd3d3Lm5lb21pLmltbW+CFHd3dy5wYW50YXVkcmFr
b3IuY29tghV3d3cucGdoZWFsdGhpbmRpYS5jb22CGnd3dy5wbHVtYmVyLW5ldy1q
ZXJzZXkuY29tghl3d3cucmVsb2dpb2RlZ3JpZmUuY29tLmJyghZ3d3cucnVueWFu
cGlwZWxpbmUuY29tghR3d3cuc2lucG9wb2ZhaXJzLmNvbYIcd3d3LnNwcmluZ2xl
YWZzdHJhdGVnaWVzLmNvbYIUd3d3LndlaWppYWhlYWx0aC5jb20wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDf
pV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAX8GV3VhAAAEAwBHMEUC
IQD2gMf6QK3rgs203w38mR+4QT8VmLeO0Kj92pJYcaKCgQIgZfXcuz9Kh4wY3z+/
C69csOHqf8DFzEgZ/xKtCAv3ppMAdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiF
q/L8cP5tRwAAAX8GV3WUAAAEAwBHMEUCIQC7kMUoYBxcJKEFmj0e0U1gKySU+4RA
rqi+ZwS1d3XLTgIgGPBLeCUk5R5XAlkiwXCSJKbT8QUdguKQmyANlY1AUUUwDQYJ
KoZIhvcNAQELBQADggEBADtX2vZ+zUiqdG/pCN4h7/rkHWNg+W+csj+DSJe8/3am
W0rNfQ/nvuFwDZFHOLfsCyMjuq15liUnI65vraj58WMwElN3PTHgQ7JXDd+gJqJp
ki1fACwZXl9RMTO1Ix8Lp/grBFb24x1vsrMiv+QBpXnz5Dphdl3wYpaHwzzQKMoU
PqV50W1EvDfwKkYzY/qcpgA9kAVxvFd2nPhbmm1EnDrsE78YUigVg4xedbh3fLph
M6/ywoNmFg1Qsvk001txAr9+Jw2tpYrhUqO/3R7ostn8S7CSbCnbfctJj/T0wyYj
cQDor9BaXZ2CIFihZRgd0/BfluHVgcOFzO/8BQJJRx4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uNTXF9nghcZDE6olxtX
VWFXw8yyLp5x8+fRdpVKEm6hL9zqc4HkFQBhHAO77eibSwypEmvqr9JQauVMCF//
3kD0m9fsVLZ4uk6Vt0U1cB8rYFgB/cDGedBdWtVozACNRiOquhR0eS0B2MA8C4Pl
eoRXLJtAMd4uuvtGRDuWpkFAWgbcaaYSqUTvmHWg4iXUaB6fikFniiBEr77RzzVZ
4iK8Q0KBFcuRKhhAO7rBdpSRqeEpUT8w2nj6k/LVGJcWKG+SIseRl4C5M3aYjHau
bgOF+ufxkImR+nI2kWbHTeew8r+G+6bEpgBO1nOsLBvOtQZJgX5s3oLEe5I2H0RE
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418074313211407179816538306251719209784902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-17 05:21:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-18 05:21:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29146908587447429239970047048903940441071766980196420086998755084655565943942261716380966448176184624215211863779907561412486719848411649372097009037828351594484710325783416893099827021986031639484878897534628240233691134863277961036858277220363614907197348298051068847801675968931334003257604191130487918224560260825852145144858089830464617846861375331341172625677667285435942616561479982652732232170846196420937545008829014117193261390130623224414043840429297989728203462707660092519442116012096055975069656848568903486840016246849585073489154215988618623881427281136669898694361721682424684482432756946597757338723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6932c29623da403ca35991f6868d17ac470a6f02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculture2.newholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akeneotest.jabra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-admin.spoto-learning.spoto.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.prelist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.rexroth.mam.bosch.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badging.cdn.carfaxcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badgingcdn.carfax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-s.tenmax.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blob-sandbox-cdn.manticoreplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bomgardian.downloads.restaurant365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bh3-asset.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-planner.facelift-cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-snap-website.snap-compliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cherryservers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cookwithbelula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert00070-azurecdn.akamaized.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout-hml.mateusmais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientdownloads.boardmakerservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.landdocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contents.smartcity-poc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designercdn--wus.workflowcloud-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.api.idemtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfds-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dig.fire.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilongrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distributiontest.iqmetrix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-software-installer.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-sitelist.avt.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egmont.valtech.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.plcnext.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emlfiles.impaxam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endpoint-game-proto-dwgus.rmg.designworksgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-cdn.vpartake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-bc.camis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incheon.wizschool.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-assets.conestogac.on.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js1.tst.applicationinsights.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junior.akhlaquna.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-storage.enetlearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managed-akam.cdn.ynishiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.fillment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mit.uniteframework.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinventory.sortimo-test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neapco.apacatalog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohrm.daelim.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohrm.dlenc.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parceiros.mobees.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'players-cdn-v2.vidmizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-1w-static.onelouder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-docs.insimplify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsprodcoupon.pspcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtakhuat-dealgroup.rtacdn-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceaudev.buildai.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapshots.playingsurface.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snd10-icontents.777cache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-installer-assets.dev.doka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cdn.vefy01.sukurire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcli.buddybet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdpartylibs.mentice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommy.visulon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.heygets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatapi.wimpy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaascdntestendpoint1.sturdyfish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weijiahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wem-systemtest-webconsole-us-a.systemtest.wemdevelopment.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms-staging.paragonbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cdn.igrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.axellelemaire.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bds-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepeople.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blind-photo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dextermorrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dilongrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edengreave.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyaerobatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hftubemills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlystarelec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hxpipefittings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metalinductionweld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mkwi2012.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moap.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neomi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pantaudrakor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pghealthindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plumber-new-jersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.relogiodegrife.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runyanpipeline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinpopofairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springleafstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weijiahealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017f065775610000040300473045022100f680c7fa40adeb82cdb4df0dfc991fb8413f1598b78ed0a8fdda925871a28281022065f5dcbb3f4a878c18df3fbf0baf5cb0e1ea7fc0c5cc4819ff12ad080bf7a69300760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f065775940000040300473045022100bb90c528601c5c24a1059a3d1ed14d602b2494fb8440aea8be6704b57775cb4e022018f04b782524e51e57025922c1709224a6d3f1051d82e2909b200d958d405145
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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