tj.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:81:bf:80:48:08:cd:9a:29:13:ef:26:99:5a:8f:a4:c0 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tj.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:81:bf:80:48:08:cd:9a:29:13:ef:26:99:5a:8f:a4:c0
Serial Number (int): 262189887271134432572794717767744210576576
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:59:85:4d:8b:00:da:61:ce:0d:61:e5:e7:81:d3:5e:60:7a:e7:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 67:fb:65:5d:2f:2a:49:42:7f:d2:07:62:9e:a3:da:20:a1:35:1e:6c
Fingerprint (sha256): 68:83:b5:f3:3f:45:48:64:03:ed:c1:39:e0:46:07:46:a4:da:3a:80:aa:af:75:3f:6c:ff:62:ae:e9:66:6c:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tj.id

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tj.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ago.id
arkansassportsmedicine.org
badrachel.org
bw.id
cm.id
cold.id
cosmeticdentistdallas.org
cow.id
due.id
equalifeapps.org
equalifefilms.org
equalifefitness.org
equalifepets.org
equalifeweightloss.org
evidenceroomedibles.org
feel.id
fishingreels.org
gene.id
ie.id
jesusthekingdombuilder.org
lovesavedus.org
medicareseniorsforall.org
mess.id
mocendo.org
movierental.org
na.id
none.id
organization.id
peak.id
penis-size.org
practical.id
reflection.id
significance.id
sportsmedicinehouston.org
springtideinstitute.org
tbd.cc
tj.id
uikileaks.org
uncommoncounts2.org
wecollab.de
wiiileaks.org
wikineaks.org
wl.id
wrenew.life
www.ago.id
www.arkansassportsmedicine.org
www.badrachel.org
www.bw.id
www.cm.id
www.cold.id
www.cosmeticdentistdallas.org
www.cow.id
www.due.id
www.equalifeapps.org
www.equalifefilms.org
www.equalifefitness.org
www.equalifepets.org
www.equalifeweightloss.org
www.evidenceroomedibles.org
www.feel.id
www.fishingreels.org
www.gene.id
www.ie.id
www.jesusthekingdombuilder.org
www.lovesavedus.org
www.medicareseniorsforall.org
www.mess.id
www.mocendo.org
www.movierental.org
www.na.id
www.none.id
www.organization.id
www.peak.id
www.penis-size.org
www.practical.id
www.reflection.id
www.significance.id
www.sportsmedicinehouston.org
www.springtideinstitute.org
www.tbd.cc
www.tj.id
www.uikileaks.org
www.uncommoncounts2.org
www.wecollab.de
www.wiiileaks.org
www.wikineaks.org
www.wl.id
www.wrenew.life
www.xb.id
www.xu.id
www.yb.id
www.zw.id
xb.id
xu.id
yb.id
zw.id

Other certificates including the domain name tj.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for tj.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbYyXFQsv+kKHey7tYOG
lCWVfvD1Y9kC/GzGgJTstZHmCArOVTCc0jCAi9yLozcYqN3acVwzAgicgAGbCgZ/
VKrNXG+PLig8oj2auSXYEVJudgS1ogLvKFFnwv9HGuWfUA2wuP0QHbtTPc49+9+o
MhX4Grc27hiq/ieqTV3xluv4dljZgrIvWh64fE7BghH8b5Wl5J6dNOIx5usQRcpy
cdKgAOPBvCUr1Wu06x1A5k4UpGUBTgjv9dbSl4yvhrdUOzB2swrwtyfCGsM4kffY
PRikNyX4yywtsYFciyQk7MvlcmI+vDHcwNQb4y3Mkj9rQ3RQ1XBUEyNyxuzxf44p
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262189887271134432572794717767744210576576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 14:30:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 14:30:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tj.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22938977750694668114384537443466924965291000463536058607888897589218256549928355607707636027686155012127406409609804205046542484466358936718281116433092977127678093600952807349608739490851472671025870712894618214336630344344072629358827820317249041376653617347289016629431893986098943362512074989958070025545305615812415946659302046136045299287086958854514743210955412779499182794970815654750871631743678652994780804166058621246193714812099855320483399542087715726942790106793573211216888750404908077483395523185207464656337368879314524448161676257120281214632747984005217110517284581719186358156342537796360422173129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f659854d8b00da61ce0d61e5e781d35e607ae734
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ago.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansassportsmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badrachel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bw.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cold.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmeticdentistdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cow.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'due.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifeapps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifefilms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifefitness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifepets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equalifeweightloss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evidenceroomedibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feel.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingreels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gene.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusthekingdombuilder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovesavedus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicareseniorsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mess.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mocendo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movierental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'none.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organization.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peak.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penis-size.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practical.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflection.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'significance.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springtideinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tj.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uikileaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncommoncounts2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wecollab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiiileaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikineaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrenew.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ago.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansassportsmedicine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badrachel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bw.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cold.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosmeticdentistdallas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cow.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.due.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifeapps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifefilms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifefitness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifepets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equalifeweightloss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evidenceroomedibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feel.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fishingreels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gene.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jesusthekingdombuilder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovesavedus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicareseniorsforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mess.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mocendo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.movierental.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.na.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.none.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organization.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peak.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penis-size.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practical.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflection.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.significance.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinehouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.springtideinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tj.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uikileaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uncommoncounts2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wecollab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiiileaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wikineaks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wl.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wrenew.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xb.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xu.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yb.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zw.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xb.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xu.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yb.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zw.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000171125095cd0000040300473045022100c16a85c79f69cc6a1f930debf2405c62e4204c1c7ddaeef61c511172e8ea7ed60220648a490a281ef9ab0981e0458e1360c4a3cca3667383c5d33382011da285279d00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171125095fe00000403004730450221008e422299b402db06fc163a4033d08f9fde6af1dba0613db1a2db6e6fec07c93302206c7c9b4a7dc9106daf41ebcb9c2c370678633a820af4805d2325063e84726094
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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