cambodiabuddhism.info

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:69:6a:6b:3b:d0:21:42:f4:1b:0a:86:d2:06:7f:80:f8 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cambodiabuddhism.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:69:6a:6b:3b:d0:21:42:f4:1b:0a:86:d2:06:7f:80:f8
Serial Number (int): 333276558713579878860871624928481029095672
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:f8:e5:b5:a7:ba:5d:e0:d2:40:44:b2:da:71:0a:2b:2c:38:ca:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:cd:88:e9:35:10:e5:5f:0d:47:55:b2:3b:4b:10:00:ce:b1:3e:ef
Fingerprint (sha256): 5e:60:24:ef:c2:18:31:1c:22:5e:40:c7:d0:99:54:82:a6:2d:d5:5b:f6:ed:2c:ae:e0:1c:b1:5b:66:d8:13:ae

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cambodiabuddhism.info

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cambodiabuddhism.info

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

angkorwonder.com
angkorwonder.ghosananda.org
cambodiabuddhism.ghosananda.org
cambodiabuddhism.info
cambodiavipassanacenter.com
cambodiavipassanacenter.ghosananda.org
cpanel.angkorwonder.com
cpanel.cambodiabuddhism.info
cpanel.cambodiavipassanacenter.com
mail.angkorwonder.com
mail.cambodiabuddhism.info
mail.cambodiavipassanacenter.com
webdisk.angkorwonder.com
webdisk.cambodiabuddhism.info
webdisk.cambodiavipassanacenter.com
webmail.angkorwonder.com
webmail.cambodiabuddhism.info
webmail.cambodiavipassanacenter.com
www.angkorwonder.com
www.angkorwonder.ghosananda.org
www.cambodiabuddhism.ghosananda.org
www.cambodiabuddhism.info
www.cambodiavipassanacenter.com
www.cambodiavipassanacenter.ghosananda.org

Other certificates including the domain name cambodiabuddhism.info

(limited to 100 certificates)

Certificate

The complete raw certificate details for cambodiabuddhism.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH2DCCBsCgAwIBAgISA9Npams70CFC9BsKhtIGf4D4MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMjMwNTQ3MzBaFw0x
ODA1MjQwNTQ3MzBaMCAxHjAcBgNVBAMTFWNhbWJvZGlhYnVkZGhpc20uaW5mbzCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMvT7APEycLh0SM7gh5JkfcK
VrUq+TqyaQnTgv9KTEBzNLIWTfSkvDsd+ATG/GHg+Zg125pTljCHIR2rRyJaC8lu
nxd+pq2UuU0I78id0U8do2ESgaIpyVTGscizQv5Lm2S1fx+94Iv2ptdNXDWfAcHz
OYyv1t+UvC+U6PnJUr3aw+VYAnl+gUY3PK4WOmpu8A3ox9gH0vpd8eZ4NaD4s+F5
3wg1G3YUkKGO1BQ53xxuiEiEIQ3vYTB6yzHhOtt9q6kUl+j32esR+UHsqW1IhqJi
+sB0hOJyYB8zQBy/Co76TD9k8qpC0dqwhSVytHqj3j5uCVtvArFpagsqah7bsqkC
AwEAAaOCBOAwggTcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQURfjltae6XeDSQESy
2nEKKyw4yhYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCAukGA1UdEQSCAuAwggLcghBhbmdrb3J3b25kZXIuY29tghth
bmdrb3J3b25kZXIuZ2hvc2FuYW5kYS5vcmeCH2NhbWJvZGlhYnVkZGhpc20uZ2hv
c2FuYW5kYS5vcmeCFWNhbWJvZGlhYnVkZGhpc20uaW5mb4IbY2FtYm9kaWF2aXBh
c3NhbmFjZW50ZXIuY29tgiZjYW1ib2RpYXZpcGFzc2FuYWNlbnRlci5naG9zYW5h
bmRhLm9yZ4IXY3BhbmVsLmFuZ2tvcndvbmRlci5jb22CHGNwYW5lbC5jYW1ib2Rp
YWJ1ZGRoaXNtLmluZm+CImNwYW5lbC5jYW1ib2RpYXZpcGFzc2FuYWNlbnRlci5j
b22CFW1haWwuYW5na29yd29uZGVyLmNvbYIabWFpbC5jYW1ib2RpYWJ1ZGRoaXNt
LmluZm+CIG1haWwuY2FtYm9kaWF2aXBhc3NhbmFjZW50ZXIuY29tghh3ZWJkaXNr
LmFuZ2tvcndvbmRlci5jb22CHXdlYmRpc2suY2FtYm9kaWFidWRkaGlzbS5pbmZv
giN3ZWJkaXNrLmNhbWJvZGlhdmlwYXNzYW5hY2VudGVyLmNvbYIYd2VibWFpbC5h
bmdrb3J3b25kZXIuY29tgh13ZWJtYWlsLmNhbWJvZGlhYnVkZGhpc20uaW5mb4Ij
d2VibWFpbC5jYW1ib2RpYXZpcGFzc2FuYWNlbnRlci5jb22CFHd3dy5hbmdrb3J3
b25kZXIuY29tgh93d3cuYW5na29yd29uZGVyLmdob3NhbmFuZGEub3JngiN3d3cu
Y2FtYm9kaWFidWRkaGlzbS5naG9zYW5hbmRhLm9yZ4IZd3d3LmNhbWJvZGlhYnVk
ZGhpc20uaW5mb4Ifd3d3LmNhbWJvZGlhdmlwYXNzYW5hY2VudGVyLmNvbYIqd3d3
LmNhbWJvZGlhdmlwYXNzYW5hY2VudGVyLmdob3NhbmFuZGEub3JnMIH+BgNVHSAE
gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp
cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n
IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp
Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw
b3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBACLlnX6PvnWPpWp++L1fHdetgj3n
8q/o9qo3WrNftyEn43xLYF1gd6byw9vOKAluWV2iPuDPfwd08WEbma/8mR4TQmq0
zCXejYw2Ht8e3f+vIJ24m0BVuv1iXPIB3HO0mllYW6JTIF7Rf6BEG0J7USnUPyAl
55Ee+tKNm/VP2ZstT3rnRCqAm37v3O0HYERW2IyJHdbkEVxJYKsJ6xfEWKq1X5VV
8Tnpg1eV/oHy7ljrch1QT5YbXteS7/XmO/d53nEyyHXmWFLUIeulLhsi1MyWRL1y
TxEawJXV6bfEc18/O/nF0ecmHIF4RE+rIw9qE+PTA/zCtqaVjlxuTkmKlE8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9PsA8TJwuHRIzuCHkmR
9wpWtSr5OrJpCdOC/0pMQHM0shZN9KS8Ox34BMb8YeD5mDXbmlOWMIchHatHIloL
yW6fF36mrZS5TQjvyJ3RTx2jYRKBoinJVMaxyLNC/kubZLV/H73gi/am101cNZ8B
wfM5jK/W35S8L5To+clSvdrD5VgCeX6BRjc8rhY6am7wDejH2AfS+l3x5ng1oPiz
4XnfCDUbdhSQoY7UFDnfHG6ISIQhDe9hMHrLMeE6232rqRSX6PfZ6xH5QeypbUiG
omL6wHSE4nJgHzNAHL8KjvpMP2TyqkLR2rCFJXK0eqPePm4JW28CsWlqCypqHtuy
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333276558713579878860871624928481029095672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-23 05:47:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-24 05:47:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cambodiabuddhism.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25730878507893769303981028616430848800707384323729195131586412793155215160039785522616190494632188367994808743999123182959587624852018045806346886278758915981600152463644148424949336988649673385368125262239304549853322444906486308131290294420902780415629946531724542403363288208032479517214327865144555986521446295498284586826398569361080979239175789509390392918965342053509957390513238043077030654132116567353592927835384525980026161040725517657022171440092025831158153606599178711453248502776757380893164003568800025381555998664620433934807174992601200319992450291632578449740179475748457205092237610538771163099817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45f8e5b5a7ba5de0d24044b2da710a2b2c38ca16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angkorwonder.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiabuddhism.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiavipassanacenter.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angkorwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.angkorwonder.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiabuddhism.ghosananda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiabuddhism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiavipassanacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiavipassanacenter.ghosananda.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0022e59d7e8fbe758fa56a7ef8bd5f1dd7ad823de7f2afe8f6aa375ab35fb72127e37c4b605d6077a6f2c3dbce28096e595da23ee0cf7f0774f1611b99affc991e13426ab4cc25de8d8c361edf1eddffaf209db89b4055bafd625cf201dc73b49a59585ba253205ed17fa0441b427b5129d43f2025e7911efad28d9bf54fd99b2d4f7ae7442a809b7eefdced07604456d88c891dd6e4115c4960ab09eb17c458aab55f9555f139e9835795fe81f2ee58eb721d504f961b5ed792eff5e63bf779de7132c875e65852d421eba52e1b22d4cc9644bd724f111ac095d5e9b7c4735f3f3bf9c5d1e7261c8178444fab230f6a13e3d303fcc2b6a6958e5c6e4e498a944f