www.iy.id

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8a:c5:02:4f:45:c9:5a:b3:7a:c3:5d:df:68:7c:3c:59:b2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.iy.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8a:c5:02:4f:45:c9:5a:b3:7a:c3:5d:df:68:7c:3c:59:b2
Serial Number (int): 395669980269733258080890840213118479260082
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0c:ee:1c:39:10:ab:6a:02:85:1b:40:b5:7b:49:93:7c:e5:33:b1:e6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:06:94:df:36:dc:0b:7b:b6:cc:c2:4d:a9:a5:fc:67:6e:af:f3:f7
Fingerprint (sha256): 80:2e:2f:62:46:52:fd:59:70:01:2a:56:af:c4:6c:69:8c:18:e6:78:b9:66:4a:20:03:b0:31:91:57:2f:0d:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.iy.id

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.iy.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

add.id
arkacia.vc
bed.id
bind.id
capacity.id
cc.id
chiarulli.org
consideration.id
da.id
decrease.id
deepergrace.church
democrat.id
dn.id
em.id
ff.id
gm.id
governor.id
guarantee.id
gun.id
helicopter.id
intellectual.id
isprs2013-ssg.org
iy.id
jacksonvillestemcell.org
keytouch.tech
less.id
lightthefire.church
limitation.id
literature.id
mh.id
nt.id
nz.id
qy.id
restriction.id
rg.id
rr.id
salesen.marketing
sepehr.ai
shot.id
snow.id
strength.id
teenager.id
tm.id
wide.id
wk.id
wq.id
writerlydone.org
www.add.id
www.arkacia.vc
www.bed.id
www.bind.id
www.capacity.id
www.cc.id
www.chiarulli.org
www.consideration.id
www.da.id
www.decrease.id
www.deepergrace.church
www.democrat.id
www.dn.id
www.em.id
www.ff.id
www.gm.id
www.governor.id
www.guarantee.id
www.gun.id
www.helicopter.id
www.intellectual.id
www.isprs2013-ssg.org
www.iy.id
www.jacksonvillestemcell.org
www.keytouch.tech
www.less.id
www.lightthefire.church
www.limitation.id
www.literature.id
www.mh.id
www.nt.id
www.nz.id
www.qy.id
www.restriction.id
www.rg.id
www.rr.id
www.salesen.marketing
www.sepehr.ai
www.shot.id
www.snow.id
www.strength.id
www.teenager.id
www.tm.id
www.wide.id
www.wk.id
www.wq.id
www.writerlydone.org
www.xh.id
www.yj.id
www.yu.id
xh.id
yj.id
yu.id

Other certificates including the domain name iy.id

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.iy.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rtz+kom7UzjVvTsp3Qd
F1mQkgnYBu28Kay6ff4wDooA6vj3MMqh2g4yRSGEgqW8ndRVTLNdCOFjatMqk6Wv
rapWeJkIarpuifNSRV+78lj0Tu6Q2ZKC+e3njf+/faS4jsc89dWEsWoRSY/ilv9I
n3taW5hSqoJQrEZcytCPoT5OdxLjUB9pK/HQdkZGrD2qCM8ZFqugz3Q3cROCGU1V
HZiwxYUYbqZoxgtfWNxUz1rTOssOSoxQnQ9oQ7CZvxfbtAE92I4zH+GCf+Y9SC8o
t/z2MSrmvGAy3sC0oPoNhpMSm8c7o41iHzbnN/PB8JRDjuMwiZsTX55SMx5ogL8i
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395669980269733258080890840213118479260082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 01:33:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 01:33:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.iy.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27612387020729989271341193193637675646515773354546555677227312564431695707481874131898449078590826223717730600229311540489299295213001727755974178912778785502347877842134644097434014435188147944058204906039715004611007384800609671168992540989025212291068688802698604902893925495324938294426602713094226258577019708541622776014190487315122138462636777642993959039580192309634405553750619403985866782355657692804398048282357432310153374855910004648324874567287621720433265319101630083092263659789884599960955836574407224252095166001613355010207466819438615206495568002779595425044120637396998591158018360463768401420879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cee1c3910ab6a02851b40b57b49937ce533b1e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'add.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkacia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bed.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bind.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capacity.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiarulli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consideration.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decrease.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepergrace.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democrat.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'em.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governor.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guarantee.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gun.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helicopter.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellectual.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isprs2013-ssg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacksonvillestemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keytouch.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'less.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightthefire.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limitation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literature.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mh.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nt.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restriction.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rg.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rr.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesen.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepehr.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shot.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snow.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strength.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenager.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wide.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wq.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writerlydone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.add.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkacia.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bed.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bind.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capacity.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiarulli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consideration.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.da.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decrease.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deepergrace.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.democrat.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dn.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.em.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ff.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.governor.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guarantee.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gun.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helicopter.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intellectual.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isprs2013-ssg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacksonvillestemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keytouch.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.less.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightthefire.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limitation.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literature.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mh.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nt.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nz.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restriction.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rg.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rr.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salesen.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sepehr.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shot.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snow.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.strength.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teenager.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tm.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wide.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wk.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wq.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writerlydone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xh.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yj.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yu.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xh.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yj.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yu.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017027cb17a90000040300483046022100cb5b6692d99774929eab790e20c9609e4efbdcae7268668609d4a463d71127bd022100b87edabd06bf29dd10cc62ded047682b8a173d662c5b1400b6791116371f88e200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017027cb17e10000040300473045022100e012e08fb1e817d3737db5d5d6ec0ed2e663518d2a670b148d5422e7d550abb802200299bca256e808e2c8e26577dc6fa517fd365a881099707855ac110908cdc88d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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