www.step.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:20:6b:6d:39:55:41:8a:f0:c2:dd:eb:0c:97:8a:dd:aa was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.step.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:20:6b:6d:39:55:41:8a:f0:c2:dd:eb:0c:97:8a:dd:aa
Serial Number (int): 263081362716839450315163813719967240215978
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:ce:b9:95:6f:e1:ac:5c:ba:2c:4c:04:2d:17:97:28:ba:ba:89:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:7f:55:ae:4e:d9:b2:cc:16:05:5e:5e:c8:e8:e3:7a:65:d3:5c:cb
Fingerprint (sha256): 5e:d9:d3:c8:55:73:fe:b2:12:d4:55:b1:81:73:2f:82:9e:01:49:94:f2:43:f3:78:83:9b:7c:f6:33:04:e4:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.step.id

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.step.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amini.org
aniska.com
appreciate.id
ax.id
bethlehemmortgage.com
birthinjuryalliance.com
boost148.com
bread.capital
btcx.ch
carefully.id
climatehoax.org
detroitstemcell.org
drumbattle.com
durhamsportsmedicine.com
equalifetraining.com
equilifetraining.com
fxcg.ae
georgiastemcellclinic.com
glad.id
hilandterrace.com
immediately.id
inboxie.com
indication.id
intensity.id
internet.coffee
introduce.id
kl.id
loladevine.com
martoic.com
mercadoseguridad.com
murdok.org
nx.id
oe.id
organictamarind.com
participation.id
politician.id
qp.id
rubberducktopia.com
sonofquora.com
step.id
television.id
trimzia.com
variation.id
vineofthewine.com
visitmountisa.com
wrap.id
www.amini.org
www.aniska.com
www.appreciate.id
www.ax.id
www.bethlehemmortgage.com
www.birthinjuryalliance.com
www.boost148.com
www.bread.capital
www.btcx.ch
www.carefully.id
www.climatehoax.org
www.detroitstemcell.org
www.drumbattle.com
www.durhamsportsmedicine.com
www.equalifetraining.com
www.equilifetraining.com
www.fxcg.ae
www.georgiastemcellclinic.com
www.glad.id
www.hilandterrace.com
www.immediately.id
www.inboxie.com
www.indication.id
www.intensity.id
www.internet.coffee
www.introduce.id
www.kl.id
www.loladevine.com
www.martoic.com
www.mercadoseguridad.com
www.murdok.org
www.nx.id
www.oe.id
www.organictamarind.com
www.participation.id
www.politician.id
www.qp.id
www.rubberducktopia.com
www.sonofquora.com
www.step.id
www.television.id
www.trimzia.com
www.variation.id
www.vineofthewine.com
www.visitmountisa.com
www.wrap.id
www.wyomingbitcoinexchange.com
www.xr.id
wyomingbitcoinexchange.com
xr.id

Other certificates including the domain name step.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.step.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwD9FPzk0HSE9VTB0W54
obj+QLYSyBwXb+UvofnSW0qf8FDDYU29EJsHbCkx923lXeNFGNgcqYLFT+NZ2yjX
UuBhZO1OXaM9s+8+mGzu85JibIaZA89NPpABO6DFIjC1OzJJA3e0vKN8D4McRpcq
20bd19rjA2Esm4nzm0XeGHyBn1BuQ02pI9yCNhlNagqv3TRkMJ/o5+7tf5wVh6rC
IJ8hMnZv+pUMFtJg5BrgoW4nU9KKQYwC5g6ZoRtdrA244knqurgK2x8jmA/2gtmg
m4DbYiR9aE8CKyDx/3lxmsW+sP3I5Lgs1E/wnXLy9/qOBD9wEFo91zDjDQxLfWJo
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263081362716839450315163813719967240215978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 20:04:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 20:04:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.step.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21587237646764674922431273978495883708122583116754650221082034180325292197750752568789975183700822763542010656798855178652062432266710788793745907680735609168236467549782479016384791710394578795532338645228475464313270556837720002560933982032564776030806975043995066710256978413035346524205955077096032451665187860075184263727486760709314825762626564804760795327500448917807006813568187251232100358547512580377518590959990329867244087930828067590434885939856855744514364031876494313835527773649052857139206239148551150590470307621115517233190485714193376671950553882939709820552915874407975815614147231091314579892237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aceb9956fe1ac5cba2c4c042d179728baba8978
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1670 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amini.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aniska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appreciate.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethlehemmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthinjuryalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boost148.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bread.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcx.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carefully.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climatehoax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroitstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drumbattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durhamsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifetraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equilifetraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxcg.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiastemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glad.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilandterrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immediately.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indication.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intensity.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introduce.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loladevine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martoic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercadoseguridad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murdok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oe.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organictamarind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'participation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politician.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qp.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubberducktopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonofquora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'step.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'television.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimzia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'variation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vineofthewine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitmountisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrap.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amini.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aniska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appreciate.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ax.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bethlehemmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birthinjuryalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boost148.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bread.capital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btcx.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carefully.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climatehoax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detroitstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drumbattle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durhamsportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifetraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equilifetraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fxcg.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiastemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glad.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hilandterrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immediately.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inboxie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indication.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intensity.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internet.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.introduce.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loladevine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martoic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercadoseguridad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murdok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oe.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organictamarind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.participation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.politician.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qp.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rubberducktopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonofquora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.step.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.television.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trimzia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.variation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vineofthewine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitmountisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrap.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingbitcoinexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xr.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingbitcoinexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xr.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170646a634a000004030047304502203a76867390d864883a956e3d10053511f09de92f1453aa7bfa91bb672f4f6309022100f8ca93257bf1373f690f3109d46be3bdf5f70ac3b7b16c795cbd8b922d52942d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170646a633d000004030048304602210086b066eab7dcb3c03719def4d360ab97e1cffc08d0b74c56c8ef3d9dd3da7f80022100f384d47d97ce1270d65c92b3bf64962c1d062b9086e22361617c52f14e79a6ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00454e9ea6101586014d12a1c0cd5476ec13177c404086c1e3bb3abdd847c72791c5ee9b0bdfbc817dd6b32939531c0b514ca06ca799bf950fc0808a879c74859926972c39742764b379cb0358de05f2fb842516870c139e12c393d29e62c0e66c70e98b83eb0719fcf12bbcbcba68c7d9d01751d077610206d2d5bffec267d3d14498220ea814b09ad93cb3ef581347aee10b30ac47b0eb062fc3a6f518298b3addefb16424b942da163cfd48dfd541194c90cf279a7cbcf5f4acf6ecf5c9e27b0f32094b232411686e0edd9047ddef7544a34351ecdd94c32ef9293d21b4a7f3eca56dcec71c30dc8b2bad64fcd0541606a3555692350589f137c6597210d601