cgiai.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8a:ca:3f:eb:f2:92:67:39:ef:ac:bb:95:5b:60:aa:b2:86 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cgiai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:ca:3f:eb:f2:92:67:39:ef:ac:bb:95:5b:60:aa:b2:86
Serial Number (int): 308564660385805670389268524856109095891590
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:4a:9b:4d:a4:da:f2:58:7d:00:80:6d:ba:2f:6c:8d:e3:a2:6c:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d9:b4:90:35:d2:5b:14:40:5a:5b:b1:66:0a:7d:28:af:e3:77:1e:74
Fingerprint (sha256): 7a:b5:ff:2a:a7:82:ec:37:2a:68:10:d9:d0:43:db:34:72:8f:80:54:d0:35:b5:c1:e7:e9:bd:7c:5f:28:79:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cgiai.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cgiai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

africathai.com
ancientshanghai.com
artgalleryshanghai.com
bundhotelsshanghai.com
businesshotelsshanghai.com
businesstvshanghai.com
cabletvshanghai.com
cgiai.com
chatshanghai.com
cheapflightsshanghai.com
chessthai.com
editorkai.com
freeviewshanghai.com
gemsai.com
guideabudhabi.com
iptvshanghai.com
kristianradnai.com
krisztianradnai.com
liveabudhabi.com
longtimeeditorkai.com
luckeesarai.com
mediaabudhabi.com
mediamasai.com
multimediathai.com
naturalchennai.com
radiomaasai.com
radiomasai.com
radiosumai.com
radiotvshanghai.com
radiozhuhai.com
recruitmentshanghai.com
servicedapartmentshanghai.com
sezai.com
sportshanghai.com
sumai.com
thaimassageabudhabi.com
tvsumai.com
vegetarianchennai.com
wnthai.com
worksai.com
www.africathai.com
www.ancientshanghai.com
www.artgalleryshanghai.com
www.bundhotelsshanghai.com
www.businesshotelsshanghai.com
www.businesstvshanghai.com
www.cabletvshanghai.com
www.cgiai.com
www.chatshanghai.com
www.cheapflightsshanghai.com
www.chessthai.com
www.editorkai.com
www.freeviewshanghai.com
www.gemsai.com
www.guideabudhabi.com
www.iptvshanghai.com
www.kristianradnai.com
www.krisztianradnai.com
www.liveabudhabi.com
www.longtimeeditorkai.com
www.luckeesarai.com
www.mediaabudhabi.com
www.mediamasai.com
www.multimediathai.com
www.naturalchennai.com
www.radiomaasai.com
www.radiomasai.com
www.radiosumai.com
www.radiotvshanghai.com
www.radiozhuhai.com
www.recruitmentshanghai.com
www.servicedapartmentshanghai.com
www.sezai.com
www.sportshanghai.com
www.sumai.com
www.thaimassageabudhabi.com
www.tvsumai.com
www.vegetarianchennai.com
www.wnthai.com
www.worksai.com
www.yshanghai.com
yshanghai.com

Other certificates including the domain name cgiai.com

(limited to 100 certificates)
alimentaires.net
cappotto.org
offshoremovies.com
womendesigner.org
bitcoinfinanz.org
cgiai.com
www.eyks.com
cgiai.com
www.videoalarmcall.com
www.hobocleaning.com
rulph.com
anactorprepares.net
www.longtimeeditorkai.com
cgiai.com
southafricablock.com
wellbeingshare.com
rulph.com
offshoremovies.com
bitcoinfinanz.org
cgiai.com
rulph.com
cappotto.org
www.chinesefamilylaw.com
offshoremovies.com
cgiai.com
www.radiotvshanghai.com
www.teenagemillionaires.net
eyks.com
koreanewsagency.com
www.famousfailures.net
cebumarine.org
offshoremovies.com
10000metres.net
bitcoinfinanz.org
www.bundhotelsshanghai.com
cgiai.com
www.malaysiabeachhotel.com
www.tamilshow.org
www.sportshanghai.com
www.bitcoinpvt.com
worldsheikh.com
portteam.com
www.radiotvshanghai.com
koreanewsagency.com
www.boutiquehotelphoenix.com
tamilshow.org
www.alimentaires.net
offshoremovies.com
nairobifilm.com
consciousnesstheultimateintelligence.com
bitcoinfinanz.org
www.krisztianradnai.com
www.advancedsmartphones.net
www.yerres.net
www.10000metres.net
rulph.com
www.privateoccasioncook.com
cappotto.org
radiocontrolledmodels.com
www.anactorprepares.net
boutiqueapartments.org
www.consciousnessultimateintelligence.com
koreanewsagency.com
hashfinance.org
www.leschantres.net
vegetarianchennai.com
bitcoinfinanz.org
rulph.com
consciousnessultimateintelligence.com
www.zinclive.com
www.unitedkingdomfilm.com
boutiquehotelphoenix.com
chelseadelivery.com
tamilshow.org
rulph.com
100metres.net

Certificate

The complete raw certificate details for cgiai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlRdu23d1XOBrEnFmf1U
j7unjQP6RkiXFkS00FLjlozYPrGrQJS5Nc+qrLg/pa6M9d2b8CoY8gcQOl31Sl3a
oB8qjDsbhY81sXwcKxjFuGoRZLSazGyEKUdDQ0PkfBNsDVzXH3raAwA98m2JdG5K
SIAduuuWwdLYzn4UaE555FaVunPMDWMJSMfYSlJnsnOXJhv1TNVoKLe/xXFOlVPZ
frRjOkFvKiLdOXfAIuZPLlcD6065kH3x9IdCjoxgC7wYlI7QlgMYpoi3INUt1mPI
wpVsYruWnNkjU97lcx2eJZCftm7fZUFHIdzlP9dhZWEXpKXHUkuESlY65iRNCBpn
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308564660385805670389268524856109095891590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-09 10:53:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 10:53:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cgiai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24026880438319182089068641466776149135872428738136276661083600359784941251070536259790234656566318176107218934105016491959421466468008758223102371894766822949987389690430417171363472521593432882864900818523946361217385002009511940644358033542557160406832428616729325619175232120311558561278801257702579963495431088540048205398265569628100194397670741892302177671225366503639264640094472777277353348085438457228418190911267003574652904198209944570223065755599951312181249378099962867721871185703742671094846605918013464049720811099290343660453338516771639110953618644997649790312104634272074687781577730057314535892901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c4a9b4da4daf2587d00806dba2f6c8de3a26c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artgalleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundhotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesstvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabletvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflightsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chessthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeviewshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemsai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guideabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kristianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krisztianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longtimeeditorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckeesarai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediamasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimediathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiomaasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiomasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiosumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiotvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiozhuhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedapartmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sezai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaimassageabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvsumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegetarianchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wnthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worksai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancientshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artgalleryshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bundhotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshotelsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesstvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabletvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgiai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chatshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapflightsshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chessthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.editorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeviewshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemsai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guideabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iptvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kristianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krisztianradnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liveabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longtimeeditorkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luckeesarai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediaabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediamasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.multimediathai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturalchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiomaasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiomasai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiosumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiotvshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiozhuhai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recruitmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicedapartmentshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sezai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thaimassageabudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvsumai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegetarianchennai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wnthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worksai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yshanghai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yshanghai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165be2dba890000040300473045022100ecd9c462234fa5c8b731dd985639603259c28260352f46ae68a5f84894df4ae20220133c42a0bfc30a42ae1278da78b7a0100596128ae0063abb88c0ce6643513aa1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165be2dbdd10000040300473045022022eb70e24bb6d913bea5758197318f91c05b3c0fa7f929f44ca6f2897c118946022100c47ad44879941b112cb3906c2305b320cc32c44fc7ba12879d83155e5b32b1a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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