social.mgi.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:31:e9:2d:a6:95:6e:25:ba:5a:aa:ad:07:79:6c:ee:7b was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=social.mgi.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:31:e9:2d:a6:95:6e:25:ba:5a:aa:ad:07:79:6c:ee:7b
Serial Number (int): 321633179643154901033660512805567136067195
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:ff:dc:7f:f1:df:8c:4d:a5:f2:38:eb:c6:56:c9:17:0f:d4:8a:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:a6:ba:ce:60:43:f2:72:38:ed:ab:3f:22:4e:b7:35:d7:3f:49:56
Fingerprint (sha256): 8e:38:d6:24:01:f1:dc:09:92:0d:37:b2:82:7c:e0:cd:d9:6f:ef:c4:88:bc:19:57:c9:f3:20:47:d7:24:f5:5d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate social.mgi.vn

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for social.mgi.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

board.clemsoncf.org
brandconnect.qiigo.com
bridge.exeterpremedia.com
comunidad.gexflow.com
connect.3-ve.com
connect.adelholding.com
connect.alpt.co.in
connect.alveoo.fr
connect.aplimited.in
connect.betcartclub.com
connect.bomisco.com
connect.ccvgroup.vn
connect.chenzconsulting.com
connect.cicopci.com
connect.completetruckbody.com
connect.complexglobal.co
connect.coreplus.net
connect.diverseadministrativesolutions.com
connect.eaeetaxi.co
connect.emerald-associates.com
connect.enroutech.com
connect.especialneeds.com
connect.fuvana.com
connect.g-logistica.com
connect.ghbsonline.com
connect.honki.co.jp
connect.hrplus.net
connect.idayit.com
connect.k.care
connect.kestio.com
connect.kindtyme.com
connect.klein.consulting
connect.littlebrowndog.ca
connect.llportal.org
connect.luxuryportal.org
connect.medify.eu
connect.mhmglobal.com
connect.miketib.com
connect.modalityview.com
connect.mortgageshots.com
connect.mortgageshotskills.com
connect.mybati.co.id
connect.newww.io
connect.normandgroup.ca
connect.obscuretech.net
connect.orkestra.com.au
connect.oxley.university
connect.romanaspilates.com
connect.ryax-technologies.com
connect.sabrina-style.com
connect.sensormedica.com
connect.sinfopac.com
connect.siredsociety.com
connect.teamnhw.com
connect.timberagebuilders.com
connect.unplug.studio
connect.upgradecfo.net
connect.usatel.net
connect.vasili.club
connect.vet-tech.jp
connect.webpodium.com
connect.worcbox.com
connect.zclouding.com
covalent.totemicbrands.com
internalnetwork.gbsexpedite.com
intranet.bostonmit.com
intranet.cieloconnects.com
intranet.esoteric.education
intranet.korebg.co
intranet.libcake.com
intranet.verticalidentity.com
members.wgicouncil.org
network.chenzconsulting.com
network.magedirect.co
sharestar.globalstartravel.com
sns.lifemusic.co.jp
social.mgi.vn
team.nizek.com
win.wiforum.org

Other certificates including the domain name mgi.vn

(limited to 100 certificates)
social.mgi.vn
social.mgi.vn
social.mgi.vn
2019sjmeetup.culytics.com
backstage.alpt.co.in
social.mgi.vn
www.vsmcamp.com
connect.stella-group.com
social.mgi.vn
social.mgi.vn
events.imakeo.com
www.zohomeetups.com
social.mgi.vn
social.mgi.vn
*.mgi.vn
connect.digerati-experts.com
social.mgi.vn
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
events.grayorbit.com
social.mgi.vn
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
social.mgi.vn
www.lglocalevents.com
connect.wicklowmusicdrama.com
social.mgi.vn
connect.fuvana.com
*.mgi.vn
connect.amsa-consulting.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
www.earthwiderecords.com
connect.sandrotalamini.it
www.carpentercpas.events
support.comunitech.co.za
social.mgi.vn
www.zohomeetups.com
connect.miningleaders.com.au
events.theroebuck-laughton.com
kaoc.meni-one.com
events.lebertech.com
social.mgi.vn
www.vsmcamp.com
social.mgi.vn
connect.adelholding.com
social.mgi.vn
www.vsmcamp.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
intranet.korebg.co
social.mgi.vn
crm-event.viami.vn
www.zohomeetups.com
social.mgi.vn
events.defenage.com
social.mgi.vn
www.tbm.ooo
events.presumenothing.com
social.mgi.vn
events.ihtbio.com
www.zohomeetups.com
events.flexableit.com
eventos.exitoenusa.com
events.robustwealth.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
backstage.siliconsecurity.net
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
social.mgi.vn
events.hopzero.com
www.zohomeetups.com
social.mgi.vn
social.mgi.vn
social.mgi.vn
social.mgi.vn
www.zohomeetups.com
www.zohomeetups.com
events.siredsociety.com
social.mgi.vn
social.mgi.vn
connect.happybrands.co
social.mgi.vn
www.zohomeetups.com
2019sjmeetup.culytics.com
connect.alveoo.fr
2019sjmeetup.culytics.com
www.mgi.vn

Certificate

The complete raw certificate details for social.mgi.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO9dbVTvjAd2kw/tXJaE
EeJaV0OfxC3ZdsGnYmIBMCPyF4Yc5DgWhlk6t80vBWE4vfjt0pmVEmD7kHwVM+Vn
5tWteCAIvBzelKhZWSb1oUCmqDNfjclAQu+rdKks5iOUWSogi2DnOyAE+VNdctfp
dqUD/Lj7jwaCk+GtWmEOVc7njCtrS2M7b901Ddob5liiHtqaCL5KtPJpv3gMo7BP
rUo079kzd0BR8M3ipbXQ2X+4qphFz4/kMiJq6gT1/hoekmdDf6NUuKzEDY7Na5q1
yCJ4D+88w1bmRKwkbeKyUU9FIQZHzIyJ/EAORm34TbpHg7wRaMW5IUM0cUm3PDQW
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321633179643154901033660512805567136067195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-20 00:32:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-20 00:32:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'social.mgi.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21326070490140673452094943998721090851352742684329402613826232200964086406424840980350150463874386685125071884401375990010489835086596050384225080979972757387363729287967667234571883924057880188569772077571058496446236935872362669277732630495812836102737877892414797506824100486747067002388885600822896095229439948201885678925732579637843810236042104457414935765531993415113341320211698657786170026946156703383378746698079870506550742510768978872332484080544638729471109934472660321630874043478119399510659223021412277259629388528110064861188784708156186363999043807094781970078369163043727064256950376760868817081903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3cffdc7ff1df8c4da5f238ebc656c9170fd48add
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1904 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'board.clemsoncf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandconnect.qiigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.exeterpremedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comunidad.gexflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.3-ve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.adelholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.alpt.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.alveoo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.aplimited.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.betcartclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.bomisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ccvgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.chenzconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cicopci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.completetruckbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.complexglobal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.coreplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.diverseadministrativesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.eaeetaxi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.emerald-associates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.enroutech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.especialneeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fuvana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.g-logistica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ghbsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.honki.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.hrplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.idayit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.k.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.kestio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.kindtyme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.klein.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.littlebrowndog.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.llportal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.luxuryportal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.medify.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mhmglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.miketib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.modalityview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mortgageshots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mortgageshotskills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mybati.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.newww.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.normandgroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.obscuretech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.orkestra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.oxley.university'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.romanaspilates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ryax-technologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sabrina-style.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sensormedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sinfopac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.siredsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.teamnhw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.timberagebuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.unplug.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.upgradecfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.usatel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.vasili.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.vet-tech.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.webpodium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.worcbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.zclouding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covalent.totemicbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalnetwork.gbsexpedite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.bostonmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.cieloconnects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.esoteric.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.korebg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.libcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.verticalidentity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.wgicouncil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'network.chenzconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'network.magedirect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharestar.globalstartravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sns.lifemusic.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.mgi.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.nizek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'win.wiforum.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016868e2d3950000040300463044022022a417ac88e39479d927d96c209960a740327f5ce4fd69f1b7c83c2739243680022016cdce1cb9d4b63e201888750a307f4f0406a9574de163c6ef5df2d6ca0ce2e3007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016868e2d39c00000403004630440220334dde7616f4aa23d29d00d20d9dc1cf8978cfc021d65c9f8799201ac0e9cad3022040d1b4fffc35a51fd1de24acb253257336df142731f3d09caef676746a9ab57e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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